$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED3B2A04543411EC9AFAE730C4F9AE02.roa File: ED3B2A04543411EC9AFAE730C4F9AE02.roa (raw, json) Hash identifier: iu5tz4dFzpKk4Xx1Jr8i5dlm+fu+iHNrT5Hil79jjkg= Subject key identifier: 5F:77:5C:BA:35:CA:69:A8:BA:FF:25:3E:26:D4:4C:46:A1:25:61:C8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7743 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED3B2A04543411EC9AFAE730C4F9AE02.roa Signing time: Thu 10 Aug 2023 07:31:16 +0000 ROA not before: Thu 10 Aug 2023 07:31:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147234 IP address blocks: 103.168.232.0/23 maxlen: 24 103.176.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30531 (0x7743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 10 07:31:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64d49244-d842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:63:7c:7b:91:52:1a:f5:d5:c4:d8:9a:26: ca:ce:dc:8c:5f:89:46:8d:ce:4f:5f:8c:d8:27:8e: a3:d4:fa:e6:be:d2:ff:b1:a4:53:43:6c:8d:94:34: 97:0c:f6:4f:b6:e3:8a:72:5c:f6:bc:71:81:bf:16: 0e:e7:ad:7e:e7:81:d9:9a:71:ea:71:57:48:87:bc: 31:c0:d9:c9:7a:4b:a8:e5:4c:1f:a6:97:00:a2:0b: 16:e7:fc:2f:b0:b3:8d:99:82:95:e2:ab:58:3a:3d: 4a:d1:42:68:ca:f9:b0:7a:7e:bc:ec:3d:06:67:28: d7:de:92:22:06:e4:d6:c2:8d:6a:08:47:18:34:79: 47:a1:7e:56:29:81:e8:ff:a8:e8:b1:4f:f1:34:be: d3:73:be:b7:02:f3:0a:41:48:8a:36:de:c5:22:d3: e1:8f:00:7f:32:ea:0e:06:16:68:61:24:b0:75:b5: 1e:fb:23:f4:45:ff:45:dc:8a:30:69:c9:f6:7e:b3: 88:50:83:1f:58:ab:61:75:77:30:8f:c1:a8:74:39: 4f:48:98:4a:74:9f:95:03:8f:78:72:a7:86:06:dc: 51:25:16:42:85:3e:e8:ae:d3:e8:55:36:ee:24:20: 81:3d:41:aa:3a:94:79:58:af:18:09:fd:30:b9:f5: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:77:5C:BA:35:CA:69:A8:BA:FF:25:3E:26:D4:4C:46:A1:25:61:C8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED3B2A04543411EC9AFAE730C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.232.0/23 103.176.194.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:22:eb:56:c2:4d:6e:14:c7:c7:c2:82:a1:90:9e:3f:58:11: d5:a7:90:d5:0e:59:ec:d1:01:82:7e:3c:66:1b:e4:ba:f6:65: 18:d7:0a:5b:03:50:39:ca:6d:1d:16:bb:03:f4:1b:9c:bf:86: bf:e3:41:3d:e3:89:4c:77:29:83:09:7c:24:97:16:46:a2:f7: 9a:f4:40:0d:5e:2d:65:3d:57:5c:57:7f:8d:9d:b0:a6:79:7d: 06:f6:71:89:6c:e2:06:94:93:12:a3:d8:83:78:bb:4b:99:87: ae:73:89:b7:6f:1d:04:a2:04:08:92:10:ae:39:f9:db:cf:43: 52:34:96:f5:2b:d0:8d:6d:66:bc:36:0d:dc:09:63:f0:38:27: c9:24:ec:19:8e:a9:3e:9d:57:a0:7a:8b:0b:bf:24:35:6c:b8: 45:be:1b:44:03:3c:72:a4:18:ef:45:a8:ca:ef:e0:8b:d9:ae: 19:1d:94:a3:f4:26:be:82:0d:c8:e9:b4:6c:eb:89:7c:df:f4: bc:01:f3:82:14:64:2f:66:c3:58:c2:19:f2:6a:94:b8:0a:d4: 2d:e6:1c:6d:43:ac:49:3b:e3:0d:68:a1:ac:ae:ac:a5:6d:23: 1e:c9:6a:d3:cd:23:93:b5:e6:71:31:bf:f4:9e:78:48:17:4f: a1:38:27:88 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICd0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODEwMDczMTE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQ0OTI0NC1kODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMtjfHuRUhr11cTYmibKztyMX4lGjc5PX4zYJ46j1PrmvtL/saRTQ2yNlDSX DPZPtuOKclz2vHGBvxYO561+54HZmnHqcVdIh7wxwNnJekuo5UwfppcAogsW5/wv sLONmYKV4qtYOj1K0UJoyvmwen687D0GZyjX3pIiBuTWwo1qCEcYNHlHoX5WKYHo /6josU/xNL7Tc763AvMKQUiKNt7FItPhjwB/MuoOBhZoYSSwdbUe+yP0Rf9F3Iow acn2frOIUIMfWKthdXcwj8GodDlPSJhKdJ+VA494cqeGBtxRJRZChT7ortPoVTbu JCCBPUGqOpR5WK8YCf0wufVM4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF93XLo1 ymmouv8lPibUTEahJWHIMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUQzQjJBMDQ1 NDM0MTFFQzlBRkFFNzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnqOgDBAFnsMIwDQYJKoZIhvcNAQELBQADggEBAGsi61bC TW4Ux8fCgqGQnj9YEdWnkNUOWezRAYJ+PGYb5Lr2ZRjXClsDUDnKbR0WuwP0G5y/ hr/jQT3jiUx3KYMJfCSXFkai95r0QA1eLWU9V1xXf42dsKZ5fQb2cYls4gaUkxKj 2IN4u0uZh65zibdvHQSiBAiSEK45+dvPQ1I0lvUr0I1tZrw2DdwJY/A4J8kk7BmO qT6dV6B6iwu/JDVsuEW+G0QDPHKkGO9FqMrv4IvZrhkdlKP0Jr6CDcjptGzriXzf 9LwB84IUZC9mw1jCGfJqlLgK1C3mHG1DrEk74w1ooayurKVtIx7JatPNI5O15nEx v/SeeEgXT6E4J4g= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:49 2024 by rpki-client on console-ams.rpki-client.org