$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa File: EF8735005E5211EC95FF2E63C4F9AE02.roa (raw, json) Hash identifier: kOfSxRuIRhcUDfEfAKmd+Tv05+KUpgXoxWuoMFp9GRI= Subject key identifier: 97:28:A5:E0:8F:16:5B:2D:29:CB:CF:7A:C3:7C:3A:04:7E:05:21:03 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7D35 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa Signing time: Tue 07 Nov 2023 04:43:23 +0000 ROA not before: Tue 07 Nov 2023 04:43:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136713 IP address blocks: 103.103.92.0/22 maxlen: 24 2401:2c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32053 (0x7d35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 7 04:43:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6549c06a-6f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:18:a3:80:38:54:9e:fd:47:ee:dd:77:8d: 7a:55:e7:12:4b:fd:12:11:e2:9e:00:47:92:76:ed: 20:31:f1:96:0d:d7:a0:b9:57:65:86:c6:15:b1:f2: 2a:77:22:65:9f:d2:f4:ba:7e:97:2c:9e:dc:53:b3: 92:fa:29:6f:5e:10:eb:f3:f8:42:65:7f:0e:8d:9e: f4:60:2c:21:8f:95:c7:cc:43:f5:51:4a:ef:c6:46: 72:1c:35:37:4f:4e:4e:76:83:fa:6e:ff:87:20:85: 78:07:37:a3:83:81:9d:7f:fd:4c:a7:a2:4d:ed:18: 21:00:fb:85:f0:f5:7b:8b:f6:cb:8e:a9:e7:03:4e: c4:68:bd:2a:63:e3:a0:eb:87:25:6a:6d:c7:e4:b4: 46:47:f7:8b:c0:14:38:c0:36:82:e3:ff:62:94:5f: f8:cf:35:ba:d0:74:3f:09:0c:89:de:f6:7c:a5:82: 2d:20:f9:7d:ee:9d:00:54:45:34:23:db:bf:39:ae: 15:c5:ad:7c:21:65:3b:b9:73:99:48:94:31:e9:0a: c2:24:0b:d3:e2:c1:10:eb:c6:3f:0f:f1:0f:ce:53: 8d:77:b2:97:27:a5:71:0d:e2:af:e1:d2:0f:6d:5c: bc:29:43:57:98:1c:95:ae:df:df:3c:5c:7e:d1:43: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:28:A5:E0:8F:16:5B:2D:29:CB:CF:7A:C3:7C:3A:04:7E:05:21:03 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.92.0/22 IPv6: 2401:2c60::/32 Signature Algorithm: sha256WithRSAEncryption 4f:13:77:5f:6b:b5:79:1d:cc:a5:53:00:3d:fb:82:b3:20:47: 90:92:24:10:7a:b4:36:d8:7b:02:68:65:d3:fb:72:15:9f:01: 1a:6d:87:13:b0:43:12:f1:d7:de:d8:c8:0c:02:26:5a:d9:34: 39:2c:57:64:d2:15:00:7f:ca:14:31:e6:95:00:41:90:83:ff: b1:2a:90:84:c5:2f:c4:f3:42:5b:da:75:e4:c1:b6:73:5e:92: 95:82:5c:c1:94:86:3e:bf:2d:2c:31:d6:ae:0f:bc:0d:24:9b: ee:fe:76:3b:01:c1:ba:4d:74:72:5d:21:a8:b6:90:ef:f7:32: 02:f3:d4:9f:13:ad:d3:0e:a8:77:22:27:ef:b8:e4:43:4f:64: 93:1b:b1:03:3b:73:c3:0a:7d:59:61:24:46:0a:7d:a4:ac:a0: 49:ec:de:f8:09:e3:97:56:a4:4c:f0:89:da:a5:39:cc:81:10: d6:64:b8:8d:b1:bd:b1:b6:ca:39:bf:a9:d7:31:5c:92:71:fb: 19:97:5f:ee:8f:a1:28:f8:b1:1f:be:14:c7:6c:ed:8a:c8:bd: 60:6f:8e:75:ec:26:f4:2c:de:93:90:18:d2:4f:39:09:2b:fe: 44:9a:86:aa:5f:38:30:0f:5a:56:e3:a6:78:91:96:c9:0a:a3: 12:42:8a:42 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICfTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTA3MDQ0MzIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ5YzA2YS02ZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1wYo4A4VJ79R+7dd416VecSS/0SEeKeAEeSdu0gMfGWDdeguVdlhsYVsfIq dyJln9L0un6XLJ7cU7OS+ilvXhDr8/hCZX8OjZ70YCwhj5XHzEP1UUrvxkZyHDU3 T05OdoP6bv+HIIV4Bzejg4Gdf/1Mp6JN7RghAPuF8PV7i/bLjqnnA07EaL0qY+Og 64clam3H5LRGR/eLwBQ4wDaC4/9ilF/4zzW60HQ/CQyJ3vZ8pYItIPl97p0AVEU0 I9u/Oa4Vxa18IWU7uXOZSJQx6QrCJAvT4sEQ68Y/D/EPzlONd7KXJ6VxDeKv4dIP bVy8KUNXmByVrt/fPFx+0UP1zQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJcopeCP FlstKcvPesN8OgR+BSEDMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUY4NzM1MDA1 RTUyMTFFQzk1RkYyRTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnZ1wwDQQCAAIwBwMFACQBLGAwDQYJKoZIhvcNAQELBQAD ggEBAE8Td19rtXkdzKVTAD37grMgR5CSJBB6tDbYewJoZdP7chWfARpthxOwQxLx 197YyAwCJlrZNDksV2TSFQB/yhQx5pUAQZCD/7EqkITFL8TzQlvadeTBtnNekpWC XMGUhj6/LSwx1q4PvA0km+7+djsBwbpNdHJdIai2kO/3MgLz1J8TrdMOqHciJ++4 5ENPZJMbsQM7c8MKfVlhJEYKfaSsoEns3vgJ45dWpEzwidqlOcyBENZkuI2xvbG2 yjm/qdcxXJJx+xmXX+6PoSj4sR++FMds7YrIvWBvjnXsJvQs3pOQGNJPOQkr/kSa hqpfODAPWlbjpniRlskKoxJCikI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org