$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E75DD6B0839711EEA997E519C4F9AE02.roa File: E75DD6B0839711EEA997E519C4F9AE02.roa (raw, json) Hash identifier: Vq7AbXY2q14MdTaziVw3ifm1xtZD1aB1oHfRJ5UHtvk= Subject key identifier: 1B:45:4D:15:E3:F7:1A:6D:51:C9:BE:13:43:51:69:39:D8:74:46:B4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7DD5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E75DD6B0839711EEA997E519C4F9AE02.roa Signing time: Thu 16 Nov 2023 09:56:35 +0000 ROA not before: Thu 16 Nov 2023 09:56:35 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146856 IP address blocks: 103.79.248.0/22 maxlen: 24 103.172.56.0/23 maxlen: 24 2001:df7:6480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32213 (0x7dd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 16 09:56:35 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6555e753-e35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:bf:64:78:32:2b:c5:a5:4a:f3:89:9a:3d: 84:c2:ed:6b:1d:b8:46:97:bf:9f:6f:01:9e:52:cd: 73:b6:c4:77:3e:0f:f9:6e:11:05:5a:8f:1d:26:e4: 67:80:b1:0c:90:96:83:73:8e:21:ce:dd:16:ee:36: 51:b7:e2:85:57:81:85:9f:a0:64:72:f0:9e:c2:2e: 74:31:ee:92:d5:0c:59:d2:73:7a:ab:c2:c5:c8:5a: a8:72:54:30:c7:2b:43:c3:f2:f7:fb:b0:d9:fa:00: a0:6b:46:b9:ac:c5:8b:67:1a:27:80:38:dd:9c:e3: 9d:2b:1b:d1:5e:c7:5d:51:2a:44:46:7e:68:ae:da: 95:81:2f:11:ec:7c:b2:ec:c2:8a:f2:84:5c:36:e5: fc:db:5f:13:85:5c:5f:e3:91:41:71:8a:92:f5:16: 8a:98:e7:83:bb:cc:5b:fb:9e:02:21:fd:e3:3a:b9: 5d:7c:d3:4e:c3:5c:b8:8e:82:b1:b7:94:b3:af:92: 20:3a:c9:de:1e:ae:93:7e:70:88:ba:66:15:88:c1: 62:25:ea:17:20:be:4c:ed:1d:49:56:a1:3c:23:c2: 38:36:1a:8e:f9:b7:de:16:44:ca:47:2b:0e:cd:cd: 17:6d:b5:73:67:a5:a4:72:03:9c:13:f2:99:7c:4f: f3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:45:4D:15:E3:F7:1A:6D:51:C9:BE:13:43:51:69:39:D8:74:46:B4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E75DD6B0839711EEA997E519C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.248.0/22 103.172.56.0/23 IPv6: 2001:df7:6480::/48 Signature Algorithm: sha256WithRSAEncryption 1c:30:39:8e:04:91:5b:80:38:a9:94:b6:5f:77:cc:67:5f:24: e6:92:1e:d6:ea:28:41:4f:06:16:60:1a:63:84:13:05:95:f5: c2:5c:d5:43:4e:25:74:63:aa:44:5b:ce:0a:f9:28:d6:2e:b2: 7f:e8:94:a0:90:2f:73:08:85:b8:a4:14:94:3c:8a:81:e3:41: ed:71:66:17:a6:40:8e:b7:3a:82:50:bc:25:22:57:1d:4f:f6: aa:f6:e3:66:10:63:9e:46:60:74:13:0a:e0:4f:96:5c:95:fa: 2c:2b:36:2a:09:23:9a:9d:29:3a:a2:ed:6f:b3:0a:9c:f7:e6: 35:0d:0c:36:8e:d7:01:5b:72:32:1d:07:da:bf:78:aa:19:cd: e1:a1:c3:f8:ea:b6:66:58:ca:64:b8:dc:90:28:26:5c:dc:fe: 4e:21:0f:a4:ad:ec:0f:e0:d9:7b:46:78:fa:7c:20:73:6e:4d: 48:18:70:94:19:a0:99:37:53:b8:52:56:44:4a:bf:75:67:73: c5:2c:42:af:dd:e6:a4:40:78:b5:06:77:26:71:d4:7f:07:8f: 2e:25:3e:76:ad:44:8a:a6:16:4b:82:b4:f6:86:c1:2a:ed:1d: e7:0b:3a:cd:eb:3f:4d:89:7a:3c:1b:3b:b0:08:8c:43:77:5f: f2:ea:85:48 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICfdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTE2MDk1NjM1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU1ZTc1My1lMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzu/ZHgyK8WlSvOJmj2Ewu1rHbhGl7+fbwGeUs1ztsR3Pg/5bhEFWo8dJuRn gLEMkJaDc44hzt0W7jZRt+KFV4GFn6BkcvCewi50Me6S1QxZ0nN6q8LFyFqoclQw xytDw/L3+7DZ+gCga0a5rMWLZxongDjdnOOdKxvRXsddUSpERn5ortqVgS8R7Hyy 7MKK8oRcNuX8218ThVxf45FBcYqS9RaKmOeDu8xb+54CIf3jOrldfNNOw1y4joKx t5Szr5IgOsneHq6TfnCIumYViMFiJeoXIL5M7R1JVqE8I8I4NhqO+bfeFkTKRysO zc0XbbVzZ6WkcgOcE/KZfE/zfQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFBtFTRXj 9xptUcm+E0NRaTnYdEa0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTc1REQ2QjA4 Mzk3MTFFRUE5OTdFNTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnT/gDBAFnrDgwDwQCAAIwCQMHACABDfdkgDANBgkqhkiG 9w0BAQsFAAOCAQEAHDA5jgSRW4A4qZS2X3fMZ18k5pIe1uooQU8GFmAaY4QTBZX1 wlzVQ04ldGOqRFvOCvko1i6yf+iUoJAvcwiFuKQUlDyKgeNB7XFmF6ZAjrc6glC8 JSJXHU/2qvbjZhBjnkZgdBMK4E+WXJX6LCs2Kgkjmp0pOqLtb7MKnPfmNQ0MNo7X AVtyMh0H2r94qhnN4aHD+Oq2ZljKZLjckCgmXNz+TiEPpK3sD+DZe0Z4+nwgc25N SBhwlBmgmTdTuFJWREq/dWdzxSxCr93mpEB4tQZ3JnHUfwePLiU+dq1EiqYWS4K0 9obBKu0d5ws6zes/TYl6PBs7sAiMQ3df8uqFSA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org