$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDC9C1A2BCF911EA83F88D29C4F9AE02.roa File: EDC9C1A2BCF911EA83F88D29C4F9AE02.roa (raw, json) Hash identifier: +4A/6rG3duaIOjFkXdKAWPHvfuqDsm4qAnRhAYnKoAM= Subject key identifier: AF:A0:3E:A3:77:BD:06:43:BF:53:08:87:38:91:48:27:58:3B:F2:3A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DE7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDC9C1A2BCF911EA83F88D29C4F9AE02.roa Signing time: Wed 10 May 2023 16:31:34 +0000 ROA not before: Wed 10 May 2023 16:31:34 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139523 IP address blocks: 103.142.164.0/23 maxlen: 24 2405:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28135 (0x6de7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:31:34 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc6e6-7fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:cc:70:9c:5a:ff:98:82:e5:15:59:f4:f5: ca:6a:34:f9:08:94:8e:2c:8a:75:94:95:f9:37:d0: 64:e1:24:98:32:84:ec:18:b3:0b:01:64:6f:54:cf: a9:4a:c4:ee:cd:cb:21:5b:ea:33:4f:bc:d3:69:22: 5f:a1:76:71:30:c6:bb:8c:9d:7c:80:0e:8e:8b:b6: d8:9a:06:d6:36:35:b1:e9:35:64:03:e9:0c:28:95: 72:79:8c:4e:6c:63:58:22:17:20:19:8c:59:8a:28: ce:c3:85:86:87:b4:48:f0:b1:ab:d3:6c:52:99:bc: 33:2e:42:56:21:4b:4a:fb:00:fb:7f:7d:6a:df:ba: 98:4c:0b:83:7f:8e:6e:30:8d:f3:69:ba:98:c5:16: 83:32:2e:3b:c1:bc:5f:c0:45:9c:55:7d:2c:46:30: c7:d7:51:5b:97:7b:25:58:fa:a3:0f:ee:31:cd:aa: 8a:41:5f:e3:60:6c:b7:e5:4f:b7:fc:9a:fc:eb:b5: ee:9f:1e:81:43:1f:cf:21:a4:80:f5:0d:73:67:e4: 52:77:53:49:be:34:3f:16:5c:1e:20:75:48:93:ab: 5f:86:72:8d:17:4c:11:50:4c:d8:60:0a:a7:2b:b3: f7:ec:89:d4:e3:b6:70:ff:88:77:ca:ea:f7:a3:ec: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A0:3E:A3:77:BD:06:43:BF:53:08:87:38:91:48:27:58:3B:F2:3A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDC9C1A2BCF911EA83F88D29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.164.0/23 IPv6: 2405:3d40::/32 Signature Algorithm: sha256WithRSAEncryption 2c:90:9c:8a:ef:61:12:8a:c2:cc:16:8e:b3:15:49:17:0e:21: 73:5e:0f:9b:6c:1e:1f:e3:49:43:95:8b:a1:b2:de:5a:bb:37: 95:f7:2f:99:42:fb:3d:53:00:95:bb:ad:56:76:7d:d1:59:f7: 98:67:9b:47:b9:74:39:09:9d:d0:5e:80:dc:4e:02:39:4e:24: 36:39:ec:67:e7:45:d7:b6:8e:a6:be:f1:78:4c:dd:cc:7d:62: 98:91:77:17:94:bc:22:73:c0:05:bb:e7:6f:1d:b4:c6:11:5f: e4:66:6b:dc:c8:f5:69:5e:bf:ea:b3:75:b4:1a:76:3c:2f:45: 8b:4c:cd:fb:b6:d3:a7:d6:cc:b2:f2:10:7e:1c:11:d1:5f:fe: 76:be:41:0f:8b:2a:2a:68:ea:e4:e6:17:53:58:90:b6:1e:03: 89:2c:44:0a:f9:00:24:31:33:6f:68:8e:5a:75:c1:bf:a8:64: ba:ff:80:46:51:43:dd:28:8e:cb:e6:11:b3:ae:e9:b6:a9:ab: 53:6f:e4:70:3b:80:a1:92:f0:03:bf:eb:91:2c:ee:cc:24:25: 97:45:ee:00:10:0e:80:4b:53:46:71:a2:08:d1:8d:60:03:a3: 75:fa:42:5c:2e:2f:1d:5a:a2:5c:4c:47:1a:01:58:d3:e3:5f: 05:12:47:c4 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICbecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMTM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzZlNi03ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6zMcJxa/5iC5RVZ9PXKajT5CJSOLIp1lJX5N9Bk4SSYMoTsGLMLAWRvVM+p SsTuzcshW+ozT7zTaSJfoXZxMMa7jJ18gA6Oi7bYmgbWNjWx6TVkA+kMKJVyeYxO bGNYIhcgGYxZiijOw4WGh7RI8LGr02xSmbwzLkJWIUtK+wD7f31q37qYTAuDf45u MI3zabqYxRaDMi47wbxfwEWcVX0sRjDH11Fbl3slWPqjD+4xzaqKQV/jYGy35U+3 /Jr867Xunx6BQx/PIaSA9Q1zZ+RSd1NJvjQ/FlweIHVIk6tfhnKNF0wRUEzYYAqn K7P37InU47Zw/4h3yur3o+xFAwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK+gPqN3 vQZDv1MIhziRSCdYO/I6MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRURDOUMxQTJC Q0Y5MTFFQTgzRjg4RDI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnjqQwDQQCAAIwBwMFACQFPUAwDQYJKoZIhvcNAQELBQAD ggEBACyQnIrvYRKKwswWjrMVSRcOIXNeD5tsHh/jSUOVi6Gy3lq7N5X3L5lC+z1T AJW7rVZ2fdFZ95hnm0e5dDkJndBegNxOAjlOJDY57GfnRde2jqa+8XhM3cx9YpiR dxeUvCJzwAW7528dtMYRX+Rma9zI9Wlev+qzdbQadjwvRYtMzfu206fWzLLyEH4c EdFf/na+QQ+LKipo6uTmF1NYkLYeA4ksRAr5ACQxM29ojlp1wb+oZLr/gEZRQ90o jsvmEbOu6bapq1Nv5HA7gKGS8AO/65Es7swkJZdF7gAQDoBLU0ZxogjRjWADo3X6 QlwuLx1aolxMRxoBWNPjXwUSR8Q= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:49 2024 by rpki-client on console-ams.rpki-client.org