$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0F7F310D9F911ED90712E4FC4F9AE02.roa File: F0F7F310D9F911ED90712E4FC4F9AE02.roa (raw, json) Hash identifier: xJpyy+Zn4xVCwdj0q+z+9gM841ks5xpnFM5rlicRWfQ= Subject key identifier: 1C:04:15:69:5C:01:33:46:18:1F:81:1F:A7:6C:F4:65:33:31:AA:EA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E07 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0F7F310D9F911ED90712E4FC4F9AE02.roa Signing time: Wed 10 May 2023 16:32:11 +0000 ROA not before: Wed 10 May 2023 16:32:11 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139565 IP address blocks: 103.147.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28167 (0x6e07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:32:11 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc70b-1922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:35:d0:d7:79:b0:58:27:59:d0:d7:57:bd: ea:f4:c4:bd:19:22:42:21:48:21:20:e7:b1:92:a0: c2:29:e2:29:f7:06:b1:f8:a3:95:ab:1c:99:17:d7: 94:0d:2e:ab:98:a0:16:88:92:49:7f:13:c0:0a:73: 5d:2d:c1:47:4e:ef:28:fa:a2:74:a6:1c:54:83:5f: c2:d2:bc:24:31:1e:46:3b:b6:d6:5d:ef:55:ed:9e: f0:21:f2:33:7f:75:10:2e:d9:78:fe:9e:8f:b0:98: 4e:2e:db:9f:5b:96:3c:03:f3:f4:a0:b5:b7:b6:d8: 86:d6:ff:a9:d7:cf:be:5d:3a:1a:06:d5:df:a9:7a: f1:45:09:ae:7e:56:df:c2:8e:f5:57:71:91:2d:f9: 69:65:4c:ca:aa:c4:91:e2:0c:be:71:bb:79:bc:79: 70:fe:70:92:49:ab:ad:61:f8:28:99:c7:74:46:6d: 31:15:d5:92:49:90:7c:3f:d7:60:9a:a8:d7:3f:12: ae:8a:cd:94:ed:25:84:71:39:d8:e2:ed:85:e5:b4: 3e:43:4c:c9:c1:81:0b:58:e3:a2:18:f9:a8:07:bc: 0a:3a:3e:e1:c7:4b:77:18:6f:5f:85:e7:24:fd:2a: c1:9f:f3:ef:74:57:5c:0d:23:39:55:e3:c0:4b:fb: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:04:15:69:5C:01:33:46:18:1F:81:1F:A7:6C:F4:65:33:31:AA:EA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0F7F310D9F911ED90712E4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.112.0/23 Signature Algorithm: sha256WithRSAEncryption a2:8a:e7:d4:19:0b:eb:96:2c:42:00:85:6d:0a:f8:51:16:a9: f7:38:38:29:7c:1b:97:15:d6:e1:9e:94:11:af:ed:e9:a1:f8: f3:bf:16:3c:b0:be:18:11:b9:a2:dd:7f:85:8d:dd:7c:11:00: af:9a:9c:e1:2a:53:d0:d0:c3:37:aa:b6:8f:96:f6:51:60:14: 59:f6:ac:fd:ed:c5:b3:15:d3:98:ce:c6:8d:ab:fd:9a:66:e2: 26:66:62:f7:51:f0:89:b5:14:71:7b:3e:fc:74:44:c5:41:d8: 56:50:9a:a3:0d:1c:85:d6:f3:d8:00:8a:87:37:95:04:5e:41: 47:ae:1a:09:67:55:01:c4:fd:ff:17:cb:5d:5b:b2:06:51:2d: 98:c9:01:7f:ca:86:8d:32:04:94:c7:e6:ee:9e:a4:a8:b5:e5: f1:e5:87:ff:4c:54:e0:0d:86:16:4a:71:a8:d0:3f:0f:70:63: 13:05:09:81:1f:e7:b1:5c:0f:38:ba:64:33:84:c2:8f:a3:b2: 54:0c:85:7d:74:7e:f6:d3:68:77:4a:78:13:51:44:e8:2c:c5: 80:5b:35:c2:66:11:44:13:0d:05:e1:fc:63:c8:c3:80:53:a9: ab:5a:2a:9e:56:03:0b:b1:03:78:c5:10:3d:14:f6:90:3c:35: 63:29:e8:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMjExWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzcwYi0xOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQU10Nd5sFgnWdDXV73q9MS9GSJCIUghIOexkqDCKeIp9wax+KOVqxyZF9eU DS6rmKAWiJJJfxPACnNdLcFHTu8o+qJ0phxUg1/C0rwkMR5GO7bWXe9V7Z7wIfIz f3UQLtl4/p6PsJhOLtufW5Y8A/P0oLW3ttiG1v+p18++XToaBtXfqXrxRQmuflbf wo71V3GRLflpZUzKqsSR4gy+cbt5vHlw/nCSSautYfgomcd0Rm0xFdWSSZB8P9dg mqjXPxKuis2U7SWEcTnY4u2F5bQ+Q0zJwYELWOOiGPmoB7wKOj7hx0t3GG9fheck /SrBn/PvdFdcDSM5VePAS/vrQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBwEFWlc ATNGGB+BH6ds9GUzMarqMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjBGN0YzMTBE OUY5MTFFRDkwNzEyRTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnk3AwDQYJKoZIhvcNAQELBQADggEBAKKK59QZC+uWLEIA hW0K+FEWqfc4OCl8G5cV1uGelBGv7emh+PO/FjywvhgRuaLdf4WN3XwRAK+anOEq U9DQwzeqto+W9lFgFFn2rP3txbMV05jOxo2r/Zpm4iZmYvdR8Im1FHF7Pvx0RMVB 2FZQmqMNHIXW89gAioc3lQReQUeuGglnVQHE/f8Xy11bsgZRLZjJAX/Kho0yBJTH 5u6epKi15fHlh/9MVOANhhZKcajQPw9wYxMFCYEf57FcDzi6ZDOEwo+jslQMhX10 fvbTaHdKeBNRROgsxYBbNcJmEUQTDQXh/GPIw4BTqataKp5WAwuxA3jFED0U9pA8 NWMp6IU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org