$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8ED86ACBD611EA85A5A24AC4F9AE02.roa File: EF8ED86ACBD611EA85A5A24AC4F9AE02.roa (raw, json) Hash identifier: 6KUkYtFHQ3JOf5/zYtnkTNRIOYqcu2iA+JDKVSi4SlQ= Subject key identifier: 89:2E:79:5B:05:A5:82:19:DC:58:B4:5E:A8:41:D4:AF:74:4B:84:7D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DC2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8ED86ACBD611EA85A5A24AC4F9AE02.roa Signing time: Wed 10 May 2023 16:30:54 +0000 ROA not before: Wed 10 May 2023 16:30:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138792 IP address blocks: 103.141.87.0/24 maxlen: 24 103.153.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28098 (0x6dc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:30:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc6be-b4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:f5:65:b4:2c:f2:a1:11:cc:2e:0a:1c:1a: 29:46:e5:8d:f5:5c:61:df:09:7b:d2:a8:f2:e4:b4: 79:34:66:e9:00:2e:ad:de:53:80:52:23:2c:27:3e: 4b:92:cd:1a:0f:e2:19:38:9c:d4:11:03:bd:36:4f: b7:93:89:47:1a:ab:58:21:e1:20:cb:d5:88:6a:75: 39:62:e7:40:86:af:4b:b0:aa:9c:51:a1:f4:e4:c1: 70:8f:c6:a8:ec:c0:1d:35:67:08:db:e3:59:82:3c: be:c4:8c:d9:6e:16:d5:34:9d:ca:5a:3f:87:f3:1b: 68:23:f8:22:18:04:29:3e:b0:49:be:07:03:f8:f4: af:4e:f0:a8:cf:b9:b3:65:3c:83:b2:61:a5:90:05: 6b:b1:b9:7b:f5:30:7b:80:37:b4:a2:5c:8c:58:e7: 3c:49:34:82:e1:98:24:99:45:40:3c:d0:35:03:60: fa:c0:a8:eb:d2:bd:43:58:81:98:21:09:47:71:0c: 1e:9a:dc:a6:68:14:09:6c:7e:4d:ea:71:5d:d9:9f: 5e:42:13:32:58:6b:57:b5:1b:c5:62:49:bb:35:df: 4c:48:58:c2:40:67:83:0b:3f:1b:37:b6:f6:27:e2: 24:e4:42:48:18:92:f7:30:b0:72:a1:55:a8:0b:10: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:79:5B:05:A5:82:19:DC:58:B4:5E:A8:41:D4:AF:74:4B:84:7D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8ED86ACBD611EA85A5A24AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.87.0/24 103.153.142.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:8b:f7:7c:da:ff:7b:2b:89:8c:37:f4:0d:bb:d5:45:d0:88: bd:4c:f3:25:63:eb:1a:9e:95:fb:9c:8c:21:5e:3d:8d:bf:3b: e5:cd:a9:a6:3b:d7:97:52:1f:88:30:9e:0e:2a:04:0a:f3:54: 90:f2:da:70:89:ef:4e:96:af:87:a6:d7:b2:ba:fc:6e:1d:d9: 92:d6:36:60:24:6d:21:ca:08:d5:26:89:a7:02:f8:e7:ce:60: f2:58:ae:e8:16:e9:d1:7f:7d:31:b5:cd:6a:74:99:f3:c0:ba: ba:36:4d:a9:a5:13:07:47:c8:6c:62:54:87:59:91:ac:ab:cd: 38:2a:78:82:49:2b:28:0e:6d:59:86:aa:7c:d4:d3:b6:73:08: 1f:80:e8:f3:15:6b:23:16:94:94:0e:0a:1e:36:f3:f7:e5:bc: 76:7f:95:0f:66:51:6c:82:ea:16:7a:a3:88:7e:69:b4:68:4d: 6f:be:97:44:1f:6f:28:21:c8:b5:b6:5f:6f:4c:cc:59:3b:ba: 8f:dd:68:fa:ba:ef:aa:a6:fd:6a:36:d4:3c:8f:a4:99:e5:7a: d4:50:f3:74:69:a1:f4:1a:d1:03:34:b6:0a:ec:32:43:9a:60: a1:79:dc:e4:c8:3a:05:60:68:a4:81:60:fe:24:74:45:40:69: b4:15:fe:e5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMDU0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzZiZS1iNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+j1ZbQs8qERzC4KHBopRuWN9Vxh3wl70qjy5LR5NGbpAC6t3lOAUiMsJz5L ks0aD+IZOJzUEQO9Nk+3k4lHGqtYIeEgy9WIanU5YudAhq9LsKqcUaH05MFwj8ao 7MAdNWcI2+NZgjy+xIzZbhbVNJ3KWj+H8xtoI/giGAQpPrBJvgcD+PSvTvCoz7mz ZTyDsmGlkAVrsbl79TB7gDe0olyMWOc8STSC4ZgkmUVAPNA1A2D6wKjr0r1DWIGY IQlHcQwemtymaBQJbH5N6nFd2Z9eQhMyWGtXtRvFYkm7Nd9MSFjCQGeDCz8bN7b2 J+Ik5EJIGJL3MLByoVWoCxBvZQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIkueVsF pYIZ3Fi0XqhB1K90S4R9MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUY4RUQ4NkFD QkQ2MTFFQTg1QTVBMjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnjVcDBAFnmY4wDQYJKoZIhvcNAQELBQADggEBAAqL93za /3sriYw39A271UXQiL1M8yVj6xqelfucjCFePY2/O+XNqaY715dSH4gwng4qBArz VJDy2nCJ706Wr4em17K6/G4d2ZLWNmAkbSHKCNUmiacC+OfOYPJYrugW6dF/fTG1 zWp0mfPAuro2TamlEwdHyGxiVIdZkayrzTgqeIJJKygObVmGqnzU07ZzCB+A6PMV ayMWlJQOCh428/flvHZ/lQ9mUWyC6hZ6o4h+abRoTW++l0QfbyghyLW2X29MzFk7 uo/daPq676qm/Wo21DyPpJnletRQ83RpofQa0QM0tgrsMkOaYKF53OTIOgVgaKSB YP4kdEVAabQV/uU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org