$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9A6F9106FA211EDADF34860C4F9AE02.roa File: E9A6F9106FA211EDADF34860C4F9AE02.roa (raw, json) Hash identifier: wvP7JIvRZ7w/iAA2q7HnhIhmVXMIP2maUjUtD+Fa2NQ= Subject key identifier: F3:E3:BE:A6:34:AD:F0:18:18:F6:75:25:57:D1:D0:E8:2A:FD:24:15 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FFC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9A6F9106FA211EDADF34860C4F9AE02.roa Signing time: Wed 10 May 2023 16:41:25 +0000 ROA not before: Wed 10 May 2023 16:41:25 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147252 IP address blocks: 103.42.164.0/23 maxlen: 24 2001:df1:9440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28668 (0x6ffc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:41:25 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc935-ff01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:d5:ca:fd:23:f1:24:b3:79:3c:a4:5c:ed: ee:4d:6f:4b:03:0a:3f:88:72:8c:4d:de:b3:f0:0f: 40:ce:63:ae:08:e0:d2:cb:af:94:bb:2e:4b:e3:53: bf:1f:0f:6d:aa:34:18:5f:2c:68:94:91:f9:ce:4b: bf:e2:65:17:66:8e:29:44:ab:37:3b:3d:18:80:df: ef:36:ed:98:52:82:05:ac:02:d7:07:d2:a4:2d:4b: e7:10:63:35:2e:a4:5c:78:75:37:f1:aa:65:39:67: d4:d8:ec:9c:8b:50:90:3d:a4:7a:dd:2e:80:68:a6: 55:ce:f5:49:27:28:af:3d:cc:51:f6:a6:97:31:a8: cc:79:d8:11:8a:42:54:49:3e:6a:7c:f6:fa:ec:8a: ef:f9:92:6b:17:81:f3:4e:e3:e6:88:86:8d:f0:11: 3e:0c:76:ad:61:9e:9b:61:e8:8b:ec:d3:27:36:89: ad:9c:5f:bb:87:ce:5b:0b:84:6b:87:2c:83:32:6a: 0f:5d:ac:2c:43:76:88:ed:31:72:4c:55:1b:eb:ab: e1:51:05:69:93:22:a0:d9:1b:08:bb:84:b2:c0:51: c2:f8:c1:71:e7:3b:93:2c:7d:f3:a8:94:b5:ce:79: 21:c0:cf:d8:71:1e:29:60:2f:f0:88:74:eb:d9:ba: ef:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E3:BE:A6:34:AD:F0:18:18:F6:75:25:57:D1:D0:E8:2A:FD:24:15 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9A6F9106FA211EDADF34860C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.164.0/23 IPv6: 2001:df1:9440::/48 Signature Algorithm: sha256WithRSAEncryption 6e:31:5b:d0:53:b0:6f:41:22:34:d2:7f:2f:fb:4d:0c:24:63: f1:01:cf:a9:1a:33:79:a0:64:14:95:02:58:2b:18:89:ba:64: 9f:ba:b6:3e:ed:c3:5e:47:1f:d0:5b:e4:63:13:f2:7b:45:79: 88:b4:8f:2e:c1:ba:a0:39:53:cc:04:55:c3:db:1e:5b:f8:f4: 2e:5c:34:0a:f4:a4:c2:7f:b9:0a:e3:4b:7e:e6:1d:0d:6a:bd: f8:71:60:1c:51:87:15:fb:0f:94:e6:43:e4:29:e8:99:79:cf: 5a:2b:4c:81:6a:c2:34:e3:59:5d:cb:aa:f3:72:62:e3:66:7e: d1:c0:49:e9:c1:84:8c:2a:a2:25:ff:9d:15:01:ed:25:fa:d7: 0d:a1:43:38:32:c6:bf:e5:2b:94:eb:4c:db:a7:89:63:0a:ad: c7:09:b0:da:b6:b5:1d:1f:b1:ba:54:f1:28:d0:4c:8f:91:d6: 55:53:e2:0b:22:53:26:b9:fc:5d:27:1c:98:b6:e4:03:ab:6f: e3:c0:4e:a8:34:19:0b:3d:99:47:85:1c:dd:7e:b1:76:a9:a3: 75:81:60:d8:d7:e6:ac:bc:ea:00:2c:87:56:be:29:24:8e:cf: 07:e4:27:5d:5d:a9:c5:b1:85:b8:a3:05:5e:af:f4:64:69:aa: 28:96:08:52 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MTI1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzkzNS1mZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMvVyv0j8SSzeTykXO3uTW9LAwo/iHKMTd6z8A9AzmOuCODSy6+Uuy5L41O/ Hw9tqjQYXyxolJH5zku/4mUXZo4pRKs3Oz0YgN/vNu2YUoIFrALXB9KkLUvnEGM1 LqRceHU38aplOWfU2Oyci1CQPaR63S6AaKZVzvVJJyivPcxR9qaXMajMedgRikJU ST5qfPb67Irv+ZJrF4HzTuPmiIaN8BE+DHatYZ6bYeiL7NMnNomtnF+7h85bC4Rr hyyDMmoPXawsQ3aI7TFyTFUb66vhUQVpkyKg2RsIu4SywFHC+MFx5zuTLH3zqJS1 znkhwM/YcR4pYC/wiHTr2brvcwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPPjvqY0 rfAYGPZ1JVfR0Ogq/SQVMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTlBNkY5MTA2 RkEyMTFFREFERjM0ODYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnKqQwDwQCAAIwCQMHACABDfGUQDANBgkqhkiG9w0BAQsF AAOCAQEAbjFb0FOwb0EiNNJ/L/tNDCRj8QHPqRozeaBkFJUCWCsYibpkn7q2Pu3D Xkcf0FvkYxPye0V5iLSPLsG6oDlTzARVw9seW/j0Llw0CvSkwn+5CuNLfuYdDWq9 +HFgHFGHFfsPlOZD5CnomXnPWitMgWrCNONZXcuq83Ji42Z+0cBJ6cGEjCqiJf+d FQHtJfrXDaFDODLGv+UrlOtM26eJYwqtxwmw2ra1HR+xulTxKNBMj5HWVVPiCyJT Jrn8XSccmLbkA6tv48BOqDQZCz2ZR4Uc3X6xdqmjdYFg2NfmrLzqACyHVr4pJI7P B+QnXV2pxbGFuKMFXq/0ZGmqKJYIUg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org