$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EFD67E92786211EC8624EB12C4F9AE02.roa File: EFD67E92786211EC8624EB12C4F9AE02.roa (raw, json) Hash identifier: CP9jwyP+4fkZUcbz6eVkfQTFbqeJjLDewguSdZhSyog= Subject key identifier: 70:B0:B0:E3:05:78:EC:F5:62:F1:5C:9D:1A:56:79:75:15:E5:94:7C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BA3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EFD67E92786211EC8624EB12C4F9AE02.roa Signing time: Wed 10 May 2023 16:20:39 +0000 ROA not before: Wed 10 May 2023 16:20:39 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135224 IP address blocks: 103.212.128.0/24 maxlen: 24 103.212.129.0/24 maxlen: 24 139.5.220.0/24 maxlen: 24 139.5.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27555 (0x6ba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:20:39 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc456-c415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:4a:d5:84:5f:01:c3:40:83:51:7b:82:2a: 42:c3:fd:cd:ea:2d:7a:b8:d2:af:6f:47:88:0a:54: ce:79:05:80:b1:ab:61:55:ba:b1:e1:b6:f0:3f:be: d9:68:f8:bf:b6:4f:d4:62:7a:cf:fc:c7:13:24:e5: fc:8a:ba:31:53:4a:2b:ac:a0:1a:35:ad:5d:63:2c: 64:f4:e6:f5:20:69:cd:84:a7:69:e5:71:74:b8:46: 7b:b1:2d:a6:3c:d1:45:70:32:fc:b9:27:71:55:83: 49:cd:f0:6d:d6:c5:27:79:87:87:6d:97:fb:a4:13: 2c:fe:3e:41:e8:67:f4:a0:6e:63:68:75:72:a9:cf: 53:91:63:20:e7:8b:de:42:ff:d3:22:e0:46:16:36: 9d:2c:d1:f5:2e:3a:ca:e5:b2:fc:26:52:1b:9a:94: d7:c4:b1:60:11:07:3e:fb:d9:65:ce:ea:06:98:82: 54:36:c5:3e:44:d5:10:cf:97:13:59:6d:b5:3f:a8: 7b:bf:48:69:16:2e:18:d1:c9:c1:94:ef:17:cb:64: 56:43:cb:fe:cb:f5:0a:3d:0c:5d:7f:42:ba:4d:a9: 99:0d:8a:14:80:58:99:4c:6b:27:f1:19:27:b0:72: 18:35:a6:f8:8a:c8:79:70:13:30:0f:db:6a:e1:a7: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:B0:E3:05:78:EC:F5:62:F1:5C:9D:1A:56:79:75:15:E5:94:7C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EFD67E92786211EC8624EB12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.128.0/23 139.5.220.0/23 Signature Algorithm: sha256WithRSAEncryption 76:1a:1e:dc:ee:54:95:0f:2d:aa:a4:39:92:57:e7:47:a9:9d: 12:22:13:ab:06:44:62:9a:a0:dc:1f:32:69:52:06:34:00:69: 2c:bd:cf:16:2b:00:bc:06:55:4b:f4:f7:c4:a7:84:35:3e:38: ee:4a:bc:42:b3:d6:f8:f6:e1:50:cf:ff:2a:1f:10:66:e2:69: d7:03:ae:ba:8b:21:b4:9f:84:47:e1:60:02:c6:48:62:48:db: e1:3e:3a:1b:16:c4:d2:7f:3e:a0:b8:fa:4a:f5:22:ad:44:e9: 14:d9:c1:59:ec:6b:59:5a:9c:ae:4c:35:7c:86:e2:3b:1a:c8: 60:a3:7f:bf:7a:b1:6a:61:d8:1e:f6:32:21:f4:df:45:f9:7c: ef:40:2e:d1:ae:1d:ae:02:b6:3d:9d:a0:4b:6f:bb:80:74:b4: eb:b8:08:ec:10:d8:9e:02:81:f9:e7:3b:d2:f2:ef:1a:d5:89: 6b:d3:5c:72:90:5c:2f:67:72:ea:89:dc:5e:e2:83:ec:c2:a7: ba:7f:9d:1b:98:e6:66:e0:18:ea:e0:ed:5d:74:97:33:04:15: f3:7e:95:31:c9:61:49:23:a0:bd:15:d5:09:be:8f:c8:0e:61: 94:73:49:28:d9:ac:e5:d6:08:f5:8e:5a:1f:73:29:cd:bb:57: e0:bb:85:14 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICa6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMDM5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ1Ni1jNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7etK1YRfAcNAg1F7gipCw/3N6i16uNKvb0eIClTOeQWAsathVbqx4bbwP77Z aPi/tk/UYnrP/McTJOX8iroxU0orrKAaNa1dYyxk9Ob1IGnNhKdp5XF0uEZ7sS2m PNFFcDL8uSdxVYNJzfBt1sUneYeHbZf7pBMs/j5B6Gf0oG5jaHVyqc9TkWMg54ve Qv/TIuBGFjadLNH1LjrK5bL8JlIbmpTXxLFgEQc++9llzuoGmIJUNsU+RNUQz5cT WW21P6h7v0hpFi4Y0cnBlO8Xy2RWQ8v+y/UKPQxdf0K6TamZDYoUgFiZTGsn8Rkn sHIYNab4ish5cBMwD9tq4acDgQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHCwsOMF eOz1YvFcnRpWeXUV5ZR8MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUZENjdFOTI3 ODYyMTFFQzg2MjRFQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFn1IADBAGLBdwwDQYJKoZIhvcNAQELBQADggEBAHYaHtzu VJUPLaqkOZJX50epnRIiE6sGRGKaoNwfMmlSBjQAaSy9zxYrALwGVUv098SnhDU+ OO5KvEKz1vj24VDP/yofEGbiadcDrrqLIbSfhEfhYALGSGJI2+E+OhsWxNJ/PqC4 +kr1Iq1E6RTZwVnsa1lanK5MNXyG4jsayGCjf796sWph2B72MiH030X5fO9ALtGu Ha4Ctj2doEtvu4B0tOu4COwQ2J4CgfnnO9Ly7xrViWvTXHKQXC9ncuqJ3F7ig+zC p7p/nRuY5mbgGOrg7V10lzMEFfN+lTHJYUkjoL0V1Qm+j8gOYZRzSSjZrOXWCPWO Wh9zKc27V+C7hRQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org