$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5EB1DD06EB111EC8C087034C4F9AE02.roa File: E5EB1DD06EB111EC8C087034C4F9AE02.roa (raw, json) Hash identifier: I4e+LBu+in7/2T/FmbRHiVYdEKpxjXQE3RuN2142suQ= Subject key identifier: 1C:EE:16:1D:FD:D1:C9:AF:33:F4:6D:06:77:38:0E:18:45:63:BC:10 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7154 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5EB1DD06EB111EC8C087034C4F9AE02.roa Signing time: Wed 10 May 2023 16:47:42 +0000 ROA not before: Wed 10 May 2023 16:47:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 17917 IP address blocks: 27.255.128.0/17 maxlen: 24 49.156.64.0/18 maxlen: 24 103.3.32.0/22 maxlen: 24 103.16.164.0/22 maxlen: 24 112.196.0.0/17 maxlen: 24 124.253.0.0/16 maxlen: 24 125.62.96.0/19 maxlen: 24 150.129.196.0/22 maxlen: 24 180.214.128.0/19 maxlen: 24 202.164.32.0/20 maxlen: 24 203.134.192.0/19 maxlen: 24 210.56.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29012 (0x7154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:47:42 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcaae-d15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:2e:ca:56:4a:84:f9:aa:3f:74:1b:27:15: 5d:ca:71:bb:44:97:04:67:15:79:1c:6b:18:96:8b: 3f:f7:37:fa:09:75:62:b1:23:37:52:5f:ae:a4:26: b3:2a:79:61:44:07:95:4e:a2:6e:94:ea:d3:fd:d9: 76:23:97:3b:24:04:36:bf:c3:47:8d:66:6b:b3:5d: 3a:c1:b4:0f:e5:af:de:5f:4a:7b:ba:e9:10:4b:68: ab:48:c8:bb:46:76:20:61:48:d0:17:af:59:b3:83: 87:64:b3:3f:17:b8:b3:50:51:89:42:e3:d4:81:99: e5:c5:fc:ea:87:cf:35:b2:02:2f:7c:11:8c:83:2a: 28:38:29:87:73:3e:a4:cd:e2:02:ce:ec:69:7e:0b: 50:57:e1:78:8a:a2:af:8c:3c:59:9a:da:21:79:4e: 3e:6c:c2:30:29:20:bb:6b:82:dc:05:08:a2:9b:92: 72:38:ed:c8:e9:05:21:36:88:e5:09:c7:29:6d:4c: 87:12:95:0c:84:4d:78:71:93:da:b6:3b:ed:14:be: c4:bd:f1:de:c1:7c:84:13:81:63:91:ad:fe:80:9d: a6:79:44:81:2e:6b:bf:76:51:2a:b2:80:31:78:f3: a6:3b:2a:7e:66:b5:54:f8:47:2c:85:0c:bb:c9:57: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:16:1D:FD:D1:C9:AF:33:F4:6D:06:77:38:0E:18:45:63:BC:10 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5EB1DD06EB111EC8C087034C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.255.128.0/17 49.156.64.0/18 103.3.32.0/22 103.16.164.0/22 112.196.0.0/17 124.253.0.0/16 125.62.96.0/19 150.129.196.0/22 180.214.128.0/19 202.164.32.0/20 203.134.192.0/19 210.56.96.0/19 Signature Algorithm: sha256WithRSAEncryption 76:e5:be:59:a5:6d:70:02:93:37:6e:ba:d7:10:48:a2:cb:98: 76:96:41:69:be:6e:c4:6c:03:2b:be:d1:bd:1e:b9:6e:b7:74: b4:8d:4e:f5:bc:22:fb:aa:51:93:91:c1:27:9f:e9:f8:6c:12: 55:e1:d1:cd:da:e9:6d:dc:c0:71:02:da:8c:8c:8a:16:f1:4c: 9e:a3:21:3c:c9:14:fe:fd:a1:3f:57:e9:4d:45:5f:56:61:0d: e9:92:8c:21:e9:fc:12:90:ce:60:a3:5a:aa:94:e7:5b:b3:83: 46:0b:39:98:25:f5:47:27:71:bb:0e:01:00:f5:8f:d8:6c:84: aa:00:7b:60:ff:10:9d:89:06:60:d8:75:f6:d9:39:42:44:d9: 3c:05:1b:0e:2e:3b:9b:24:80:a8:6b:2e:e8:98:7c:d3:87:41: 31:ba:82:9d:46:e6:73:c6:19:50:02:21:8a:cd:98:d4:45:00: c7:ad:1f:73:96:db:b7:1b:c7:e9:7a:af:0c:44:1d:24:65:8e: 66:1d:c8:c5:56:fb:c9:17:7e:de:2f:b8:cb:06:fb:d1:e6:68: 8f:9f:13:1f:3d:a0:88:99:ee:b2:8c:a8:1e:7a:f0:d8:c5:77: 2c:3e:1a:c1:c5:fd:de:6e:92:e1:70:27:14:fa:76:34:27:22: 25:c4:0d:48 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgICcVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NzQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FhZS1kMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOAuylZKhPmqP3QbJxVdynG7RJcEZxV5HGsYlos/9zf6CXVisSM3Ul+upCaz KnlhRAeVTqJulOrT/dl2I5c7JAQ2v8NHjWZrs106wbQP5a/eX0p7uukQS2irSMi7 RnYgYUjQF69Zs4OHZLM/F7izUFGJQuPUgZnlxfzqh881sgIvfBGMgyooOCmHcz6k zeICzuxpfgtQV+F4iqKvjDxZmtoheU4+bMIwKSC7a4LcBQiim5JyOO3I6QUhNojl CccpbUyHEpUMhE14cZPatjvtFL7EvfHewXyEE4Fjka3+gJ2meUSBLmu/dlEqsoAx ePOmOyp+ZrVU+EcshQy7yVfS8wIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFBzuFh39 0cmvM/RtBnc4DhhFY7wQMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTVFQjFERDA2 RUIxMTFFQzhDMDg3MDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYAYIKwYBBQUHAQcBAf8E UTBPME0EAgABMEcDBAcb/4ADBAYxnEADBAJnAyADBAJnEKQDBAdwxAADAwB8/QME BX0+YAMEApaBxAMEBbTWgAMEBMqkIAMEBcuGwAMEBdI4YDANBgkqhkiG9w0BAQsF AAOCAQEAduW+WaVtcAKTN2661xBIosuYdpZBab5uxGwDK77RvR65brd0tI1O9bwi +6pRk5HBJ5/p+GwSVeHRzdrpbdzAcQLajIyKFvFMnqMhPMkU/v2hP1fpTUVfVmEN 6ZKMIen8EpDOYKNaqpTnW7ODRgs5mCX1Rydxuw4BAPWP2GyEqgB7YP8QnYkGYNh1 9tk5QkTZPAUbDi47mySAqGsu6Jh804dBMbqCnUbmc8YZUAIhis2Y1EUAx60fc5bb txvH6XqvDEQdJGWOZh3IxVb7yRd+3i+4ywb70eZoj58THz2giJnusoyoHnrw2MV3 LD4awcX93m6S4XAnFPp2NCciJcQNSA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org