$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC06F960824D11EB84127F62C4F9AE02.roa File: EC06F960824D11EB84127F62C4F9AE02.roa (raw, json) Hash identifier: GLfnIOtpWMjW7DZV8jjWg86BfVe8h4bsd1dgLnodWrE= Subject key identifier: 2C:0F:C5:58:D1:10:30:9A:3D:F9:50:83:09:0A:BA:1D:DC:DB:90:CC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BDD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC06F960824D11EB84127F62C4F9AE02.roa Signing time: Wed 10 May 2023 16:21:45 +0000 ROA not before: Wed 10 May 2023 16:21:45 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135722 IP address blocks: 103.127.60.0/23 maxlen: 24 202.71.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27613 (0x6bdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:21:45 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc499-a805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:46:1a:31:ae:1c:43:0c:7b:fd:22:11:f9: bb:67:0c:2b:ab:c6:db:ed:95:8a:99:04:a9:8d:55: 73:57:9e:5c:db:9e:88:bc:29:d1:a3:b2:9b:9a:47: 7b:89:d9:e6:f5:83:bd:da:68:ba:ae:40:2b:b7:42: 65:bc:7f:e2:5c:57:d3:9a:01:65:2d:42:71:15:db: 16:98:03:30:58:2d:a5:bc:d3:5a:79:5b:4a:6b:58: cb:57:dd:51:11:33:07:ae:ff:ec:77:c8:24:3e:b3: f8:ca:25:d8:f6:b7:b7:ac:92:26:58:91:48:24:1e: 46:54:37:15:71:b8:ae:d4:4b:76:9f:1c:2f:75:14: 3a:29:e6:bc:e0:74:c4:1b:fe:a7:57:21:56:4f:d6: da:15:1b:13:3c:41:cc:16:6d:83:5d:82:70:8c:b7: fb:bc:6f:04:98:02:bd:7d:ab:46:44:9b:a6:4b:9d: a8:85:57:ec:43:af:a0:9e:20:a3:51:74:89:d2:51: 0c:8a:f2:f9:be:f4:74:3d:b2:f2:10:4b:de:cd:9b: 7b:e4:f7:a3:e7:c7:28:fc:ef:01:5a:2c:8f:e7:08: 92:d3:36:07:e6:b8:46:97:e4:f3:4a:b4:13:05:64: 3b:a5:0f:95:9c:b4:b9:98:26:2a:55:59:70:e8:85: e8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0F:C5:58:D1:10:30:9A:3D:F9:50:83:09:0A:BA:1D:DC:DB:90:CC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC06F960824D11EB84127F62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.60.0/23 202.71.156.0/22 Signature Algorithm: sha256WithRSAEncryption 45:5b:1c:76:c1:a5:83:02:fc:6d:47:b7:d7:e8:35:15:34:21: 7c:75:f3:59:b6:c3:10:25:cd:5e:f3:67:0a:e2:d0:ff:7b:64: 47:38:9d:04:6b:f6:03:6f:df:8a:0a:45:c9:e3:55:b5:37:7b: 22:99:ee:cb:0c:88:36:09:49:73:53:af:94:eb:48:6d:9f:58: d2:33:1d:cf:53:3d:80:4c:26:9f:65:5e:2d:cf:a4:8d:5c:90: 47:57:b9:fd:74:ce:06:54:d1:2b:ee:60:04:70:16:3d:7b:2b: e7:62:3c:34:0a:65:10:41:30:8c:9d:95:32:69:81:6e:fb:f7: 88:de:19:c8:94:f5:87:f3:b8:31:d0:1c:44:2a:2b:3c:d5:2b: fc:65:01:2a:9d:12:99:8e:51:31:67:9d:e5:2b:b8:d2:01:22: 34:ae:be:92:4c:5b:aa:73:74:6c:06:93:92:44:55:ec:b3:17: 3f:0c:a1:f2:1b:b9:21:35:fd:71:b6:f6:1c:d4:1f:6c:f0:bc: 0d:29:90:af:d7:b8:2f:66:42:e4:f1:1c:26:51:9e:f9:ac:40: 2e:5d:cf:f4:a9:e1:29:f1:7b:51:3a:c4:ee:6c:bc:d2:4b:d7: 49:0d:12:a8:b3:ec:7b:f8:0d:98:18:60:1b:41:b4:bd:f6:bb: 1a:50:f0:0d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICa90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMTQ1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ5OS1hODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLlGGjGuHEMMe/0iEfm7Zwwrq8bb7ZWKmQSpjVVzV55c256IvCnRo7Kbmkd7 idnm9YO92mi6rkArt0JlvH/iXFfTmgFlLUJxFdsWmAMwWC2lvNNaeVtKa1jLV91R ETMHrv/sd8gkPrP4yiXY9re3rJImWJFIJB5GVDcVcbiu1Et2nxwvdRQ6Kea84HTE G/6nVyFWT9baFRsTPEHMFm2DXYJwjLf7vG8EmAK9fatGRJumS52ohVfsQ6+gniCj UXSJ0lEMivL5vvR0PbLyEEvezZt75Pej58co/O8BWiyP5wiS0zYH5rhGl+TzSrQT BWQ7pQ+VnLS5mCYqVVlw6IXo9QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCwPxVjR EDCaPflQgwkKuh3c25DMMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUMwNkY5NjA4 MjREMTFFQjg0MTI3RjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnfzwDBALKR5wwDQYJKoZIhvcNAQELBQADggEBAEVbHHbB pYMC/G1Ht9foNRU0IXx181m2wxAlzV7zZwri0P97ZEc4nQRr9gNv34oKRcnjVbU3 eyKZ7ssMiDYJSXNTr5TrSG2fWNIzHc9TPYBMJp9lXi3PpI1ckEdXuf10zgZU0Svu YARwFj17K+diPDQKZRBBMIydlTJpgW7794jeGciU9YfzuDHQHEQqKzzVK/xlASqd EpmOUTFnneUruNIBIjSuvpJMW6pzdGwGk5JEVeyzFz8MofIbuSE1/XG29hzUH2zw vA0pkK/XuC9mQuTxHCZRnvmsQC5dz/Sp4Snxe1E6xO5svNJL10kNEqiz7Hv4DZgY YBtBtL32uxpQ8A0= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:42 2024 by rpki-client on console-fra.rpki-client.org