$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AC0D30434A11EBA5C40A68C4F9AE02.roa File: F0AC0D30434A11EBA5C40A68C4F9AE02.roa (raw, json) Hash identifier: ejdg22SnVXZcZsN7o0p0sKrCFCfNGkQI4UP9bzLIMFY= Subject key identifier: C4:58:AE:8D:BE:FD:03:D0:96:23:64:2C:FA:C0:48:DD:C8:FB:F4:FD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D89 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AC0D30434A11EBA5C40A68C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:50 +0000 ROA not before: Wed 10 May 2023 16:29:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138709 IP address blocks: 103.136.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28041 (0x6d89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc67e-7e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:e2:e2:e2:8f:2d:84:cf:5e:6e:3c:ab:30: 18:77:e2:90:31:a8:bf:d6:f0:53:f2:ee:58:85:16: ce:4c:13:58:d1:af:be:ed:6f:77:8c:27:86:fc:22: a3:76:e0:15:1d:84:a7:18:8a:b9:ba:d9:de:0e:50: 75:ad:1e:8b:c6:4f:44:68:ee:df:29:56:af:7e:ce: 54:f1:56:f5:56:3b:1b:51:76:0d:d1:6a:90:9e:13: e0:67:eb:b5:1f:aa:73:8e:f3:50:80:2a:62:da:32: f6:53:e9:54:ce:fe:6f:67:ad:08:73:41:e6:68:38: 58:d3:06:d9:ed:ec:e5:9b:fc:1e:9a:81:fb:f9:70: b6:53:aa:b3:99:2c:c2:9e:ee:d6:ee:65:e2:d6:ea: 03:0f:5c:d1:e7:68:6c:63:19:fc:43:da:67:1c:71: 01:bf:d6:2f:67:54:68:43:8a:8f:96:1b:7c:ed:00: 5b:91:6d:1e:cc:30:dd:58:ac:83:2b:ce:dc:ec:bf: 93:8c:66:d4:c4:45:46:23:21:59:3f:0c:d4:1a:1c: 4c:08:16:c5:4a:48:f4:75:8f:cc:26:30:b0:99:32: eb:b1:dd:d3:13:5f:d0:cf:db:83:8a:d0:97:45:ec: 48:8a:9e:ad:e9:d1:aa:78:c9:fd:21:a3:74:99:2a: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:58:AE:8D:BE:FD:03:D0:96:23:64:2C:FA:C0:48:DD:C8:FB:F4:FD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AC0D30434A11EBA5C40A68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.172.0/22 Signature Algorithm: sha256WithRSAEncryption 11:28:8c:30:f2:32:0a:6a:1a:9f:ef:a4:02:60:df:09:c9:c0: 8b:f0:6b:84:18:35:2a:2b:10:1c:be:4e:e0:ff:bb:21:f8:6c: 4f:b4:e5:95:bf:91:23:cd:31:32:b4:46:37:7f:f3:66:9c:e8: b2:3d:b2:d9:3b:0b:2c:35:23:de:d1:0b:b9:b2:e6:00:ed:1d: b8:db:12:7e:07:a4:25:c1:8b:8b:26:a4:c1:b9:8b:93:7e:cc: d1:59:f8:ff:0c:fd:28:48:ea:fc:f0:c9:1f:7d:79:7b:ad:04: 8b:c3:df:10:60:a8:54:4a:eb:dc:16:b4:5a:54:a0:2b:a7:e2: fa:6f:43:5a:48:2d:5c:cf:e0:2c:4d:df:32:4e:f2:fa:b2:7a: 74:cf:c9:8b:b7:14:fc:b0:53:dc:75:eb:3f:56:2b:17:51:65: 12:4c:69:a5:29:f6:94:3f:de:bf:2f:1b:de:63:41:d6:25:ce: 5a:72:8c:c0:7f:5c:58:37:f5:4e:6b:69:23:fa:8c:74:10:8a: 3d:43:dc:a0:06:77:ec:eb:f7:a4:f2:b0:a6:6b:ad:dd:19:6f: 68:fd:85:54:4d:5e:7e:a1:db:b1:99:af:fb:ae:74:59:71:e1: e3:11:41:62:a0:3f:b9:f6:5d:65:28:36:ab:88:b3:14:2f:50: 6a:59:5a:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTUwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY3ZS03ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCLi4uKPLYTPXm48qzAYd+KQMai/1vBT8u5YhRbOTBNY0a++7W93jCeG/CKj duAVHYSnGIq5utneDlB1rR6Lxk9EaO7fKVavfs5U8Vb1VjsbUXYN0WqQnhPgZ+u1 H6pzjvNQgCpi2jL2U+lUzv5vZ60Ic0HmaDhY0wbZ7ezlm/wemoH7+XC2U6qzmSzC nu7W7mXi1uoDD1zR52hsYxn8Q9pnHHEBv9YvZ1RoQ4qPlht87QBbkW0ezDDdWKyD K87c7L+TjGbUxEVGIyFZPwzUGhxMCBbFSkj0dY/MJjCwmTLrsd3TE1/Qz9uDitCX RexIip6t6dGqeMn9IaN0mSr5PwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMRYro2+ /QPQliNkLPrASN3I+/T9MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjBBQzBEMzA0 MzRBMTFFQkE1QzQwQTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJniKwwDQYJKoZIhvcNAQELBQADggEBABEojDDyMgpqGp/v pAJg3wnJwIvwa4QYNSorEBy+TuD/uyH4bE+05ZW/kSPNMTK0Rjd/82ac6LI9stk7 Cyw1I97RC7my5gDtHbjbEn4HpCXBi4smpMG5i5N+zNFZ+P8M/ShI6vzwyR99eXut BIvD3xBgqFRK69wWtFpUoCun4vpvQ1pILVzP4CxN3zJO8vqyenTPyYu3FPywU9x1 6z9WKxdRZRJMaaUp9pQ/3r8vG95jQdYlzlpyjMB/XFg39U5raSP6jHQQij1D3KAG d+zr96TysKZrrd0Zb2j9hVRNXn6h27GZr/uudFlx4eMRQWKgP7n2XWUoNquIsxQv UGpZWmM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org