$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa File: E59FBE328DB211ED91240187C4F9AE02.roa (raw, json) Hash identifier: RIEyHDQTUs9PjWL/IzvuIV1EUAg8o0rXvZuh25mARZs= Subject key identifier: E8:E4:DB:C5:69:87:DC:1D:9C:22:87:08:8E:A2:92:24:60:60:8E:ED Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 706A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa Signing time: Wed 10 May 2023 16:43:29 +0000 ROA not before: Wed 10 May 2023 16:43:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149541 IP address blocks: 103.181.148.0/23 maxlen: 24 2001:df1:d840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28778 (0x706a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:43:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9b0-72ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:98:d1:7a:23:15:5f:d1:ba:74:e8:cb:99: df:32:96:40:49:0d:d3:bb:7b:12:d8:21:48:a9:86: 30:71:f1:cd:57:d9:58:d3:fb:a5:25:54:61:30:e2: d0:93:cd:35:5d:92:e1:09:25:9f:ea:1a:d9:14:36: f7:12:e2:5e:a6:ed:4b:fa:d3:ac:6d:04:0c:cc:69: df:16:61:96:64:b5:2c:1e:bf:40:c3:47:d0:e8:1e: 6a:be:19:74:6d:a7:1e:8f:0a:a4:08:5a:d4:be:aa: fb:6e:75:07:42:71:65:d8:b0:8d:0d:4f:c4:66:e4: df:df:9d:8d:23:03:fc:8f:84:5d:34:85:e4:3d:aa: 11:1c:b8:86:88:9b:38:c1:81:f4:82:e4:ac:95:bd: 2f:5e:2a:7d:c4:d3:5e:61:75:5c:69:f0:1f:b9:c7: 06:a0:bc:ca:6e:3d:4d:a2:7e:5e:32:84:41:a1:cc: bc:89:79:6a:0f:39:0d:0c:d5:2c:c5:bc:8f:2c:81: cd:1a:a8:90:15:cc:f0:32:49:9b:44:94:c6:98:a4: b1:6e:75:2a:e5:f9:8f:9a:97:ce:53:66:f6:28:1d: 95:00:f0:ae:e6:5a:69:7f:cc:d0:a7:61:b8:35:42: 34:23:37:1d:c4:5a:7e:f5:3e:e8:5e:46:9e:2d:fb: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E4:DB:C5:69:87:DC:1D:9C:22:87:08:8E:A2:92:24:60:60:8E:ED X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.148.0/23 IPv6: 2001:df1:d840::/48 Signature Algorithm: sha256WithRSAEncryption 77:d0:fa:71:a7:49:80:0d:79:82:c2:61:19:10:39:c0:9a:3a: 7c:56:a6:e4:df:f8:4e:31:ca:af:1c:10:e6:b0:31:bb:e2:47: bf:37:f9:04:52:36:b6:a8:95:26:26:59:c0:f3:65:07:79:6d: b2:d5:6c:ab:57:d3:0a:fa:68:17:6e:ae:64:d0:25:11:63:72: eb:2a:18:de:d1:5b:1f:a2:63:cf:65:16:a7:8a:74:b0:36:e6: 44:07:cd:f9:a4:e0:f7:63:d9:a9:d6:da:3e:3a:2d:31:6c:1b: 33:b3:f3:76:8c:31:20:de:ec:14:80:77:76:3d:ff:70:b2:c6: 6d:0d:e9:0a:5c:7c:55:5b:cf:a0:b2:8f:00:96:b2:63:e6:ae: 0f:4e:7d:76:62:e5:63:6b:b3:4d:d3:d5:5e:7a:00:e0:82:d1: 90:b0:55:48:4c:62:fb:bd:09:34:fc:37:6d:bb:69:6e:db:3b: f3:1b:a7:53:36:0c:a9:81:b0:08:08:6d:e3:60:25:bb:e2:97: 88:59:60:57:eb:cf:bd:1f:2b:39:c7:02:62:7c:07:a8:df:8a: 04:ac:cb:36:bc:11:13:86:f1:e5:ab:d4:a8:90:c7:70:92:e4: 80:7f:b8:ab:78:3d:96:df:19:9e:87:e3:4a:f6:6a:6b:12:80: 72:91:91:06 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MzI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzliMC03MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSuY0XojFV/RunToy5nfMpZASQ3Tu3sS2CFIqYYwcfHNV9lY0/ulJVRhMOLQ k801XZLhCSWf6hrZFDb3EuJepu1L+tOsbQQMzGnfFmGWZLUsHr9Aw0fQ6B5qvhl0 bacejwqkCFrUvqr7bnUHQnFl2LCNDU/EZuTf352NIwP8j4RdNIXkPaoRHLiGiJs4 wYH0guSslb0vXip9xNNeYXVcafAfuccGoLzKbj1Non5eMoRBocy8iXlqDzkNDNUs xbyPLIHNGqiQFczwMkmbRJTGmKSxbnUq5fmPmpfOU2b2KB2VAPCu5lppf8zQp2G4 NUI0IzcdxFp+9T7oXkaeLfu+8QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOjk28Vp h9wdnCKHCI6ikiRgYI7tMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTU5RkJFMzI4 REIyMTFFRDkxMjQwMTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntZQwDwQCAAIwCQMHACABDfHYQDANBgkqhkiG9w0BAQsF AAOCAQEAd9D6cadJgA15gsJhGRA5wJo6fFam5N/4TjHKrxwQ5rAxu+JHvzf5BFI2 tqiVJiZZwPNlB3ltstVsq1fTCvpoF26uZNAlEWNy6yoY3tFbH6Jjz2UWp4p0sDbm RAfN+aTg92PZqdbaPjotMWwbM7PzdowxIN7sFIB3dj3/cLLGbQ3pClx8VVvPoLKP AJayY+auD059dmLlY2uzTdPVXnoA4ILRkLBVSExi+70JNPw3bbtpbts78xunUzYM qYGwCAht42Alu+KXiFlgV+vPvR8rOccCYnwHqN+KBKzLNrwRE4bx5avUqJDHcJLk gH+4q3g9lt8ZnofjSvZqaxKAcpGRBg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org