$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa File: E8195170EE1E11EC8758DF47C4F9AE02.roa (raw, json) Hash identifier: SJAZZgF7Spf2xJD36rK/trVU5YcH/GMsv3wG/T3P+ow= Subject key identifier: 03:B1:47:4A:D5:5E:F6:22:48:C7:6C:4E:19:B4:69:8B:4A:2A:12:AF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 708A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa Signing time: Wed 10 May 2023 16:44:03 +0000 ROA not before: Wed 10 May 2023 16:44:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149586 IP address blocks: 103.186.236.0/23 maxlen: 24 2001:df1:27c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28810 (0x708a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:03 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9d3-a947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:68:a4:e2:85:ab:bc:2c:03:63:9d:84:d2: b2:2c:1c:f1:03:82:72:20:8f:a6:1e:c2:76:6f:1e: 14:85:5a:a4:01:b3:1b:35:9e:91:a8:00:f2:a7:3e: 64:32:38:34:2f:c9:15:f1:9e:fe:d5:d0:1b:e0:77: 4e:3a:d7:91:6f:e6:c7:08:f5:46:b1:8b:7d:36:59: ef:e3:21:73:02:00:be:ae:39:3d:cb:6f:a8:e5:e9: 67:28:16:89:b3:cc:e0:a1:f3:d6:ee:a6:1d:a6:ef: 65:c8:af:05:79:04:3b:1b:a2:dd:9a:57:95:f3:2d: ba:d4:2b:16:fa:ac:39:6e:20:e2:fe:8d:1d:91:ee: c6:67:30:d5:58:73:6e:c7:4c:ab:2c:da:99:25:39: 56:09:d5:00:5f:5e:39:9e:f5:da:1d:af:6f:3f:10: 61:bf:24:fe:45:56:fa:7f:32:86:71:36:16:ad:55: 3b:80:26:72:58:40:80:8e:fe:43:eb:61:bc:d7:fd: 82:18:c1:6e:af:a9:55:6b:ee:e0:e9:3a:c6:5f:fc: 31:54:96:22:26:37:d6:2e:a9:4b:d4:72:75:a2:e2: 0c:a1:34:65:e0:88:97:7d:2e:77:2d:b7:da:4f:09: 89:55:c1:20:03:90:81:92:a3:ae:fb:06:12:f9:62: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B1:47:4A:D5:5E:F6:22:48:C7:6C:4E:19:B4:69:8B:4A:2A:12:AF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.236.0/23 IPv6: 2001:df1:27c0::/48 Signature Algorithm: sha256WithRSAEncryption 2a:3d:e6:ce:26:58:98:a2:24:dc:a8:f9:7b:2d:76:49:5a:b7: 65:91:ac:ee:5d:0a:33:f2:83:92:bd:b9:f1:6f:56:ca:e3:48: 0f:59:4c:db:62:82:54:4c:09:2e:eb:8b:05:1a:b5:f1:af:e9: 7f:d4:e4:ad:12:12:24:f6:aa:d2:56:c0:35:a5:ab:14:da:92: a5:a7:70:4c:58:9e:69:d0:6d:c1:81:39:87:f7:7f:d1:06:04: d7:f6:67:cc:75:1a:3c:a0:5f:2e:c9:49:55:92:68:15:32:59: 6c:37:81:9b:e4:50:5c:7f:63:43:b1:23:de:86:27:de:69:2a: 9a:fe:5f:9c:be:7d:d3:15:ca:6d:97:c1:02:1b:f5:cc:48:93: cb:3d:26:1a:10:39:5a:b5:6a:04:f3:dc:c1:a9:34:f1:c5:2a: ff:2e:c2:81:a4:6e:58:97:58:f4:46:be:16:df:02:82:4c:fe: ec:64:41:62:2c:bb:35:bb:92:bc:d2:d0:db:24:f5:3b:cb:8e: 12:01:ca:1c:c8:50:ad:99:cd:5f:bb:75:c9:dc:64:b8:8d:c3: 5e:41:9c:57:60:18:ad:aa:41:db:75:96:c7:32:7d:4d:c7:6f: e4:44:4d:80:56:1c:0d:b6:9d:3e:a1:a9:68:4f:81:31:37:4b: e8:83:1a:dd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlkMy1hOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsBopOKFq7wsA2OdhNKyLBzxA4JyII+mHsJ2bx4UhVqkAbMbNZ6RqADypz5k Mjg0L8kV8Z7+1dAb4HdOOteRb+bHCPVGsYt9Nlnv4yFzAgC+rjk9y2+o5elnKBaJ s8zgofPW7qYdpu9lyK8FeQQ7G6LdmleV8y261CsW+qw5biDi/o0dke7GZzDVWHNu x0yrLNqZJTlWCdUAX145nvXaHa9vPxBhvyT+RVb6fzKGcTYWrVU7gCZyWECAjv5D 62G81/2CGMFur6lVa+7g6TrGX/wxVJYiJjfWLqlL1HJ1ouIMoTRl4IiXfS53Lbfa TwmJVcEgA5CBkqOu+wYS+WJkDQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAOxR0rV XvYiSMdsThm0aYtKKhKvMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTgxOTUxNzBF RTFFMTFFQzg3NThERjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnuuwwDwQCAAIwCQMHACABDfEnwDANBgkqhkiG9w0BAQsF AAOCAQEAKj3mziZYmKIk3Kj5ey12SVq3ZZGs7l0KM/KDkr258W9WyuNID1lM22KC VEwJLuuLBRq18a/pf9TkrRISJPaq0lbANaWrFNqSpadwTFieadBtwYE5h/d/0QYE 1/ZnzHUaPKBfLslJVZJoFTJZbDeBm+RQXH9jQ7Ej3oYn3mkqmv5fnL590xXKbZfB Ahv1zEiTyz0mGhA5WrVqBPPcwak08cUq/y7CgaRuWJdY9Ea+Ft8Cgkz+7GRBYiy7 NbuSvNLQ2yT1O8uOEgHKHMhQrZnNX7t1ydxkuI3DXkGcV2AYrapB23WWxzJ9Tcdv 5ERNgFYcDbadPqGpaE+BMTdL6IMa3Q== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org