$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F341CE2A430E11ED8A923F1CC4F9AE02.roa File: F341CE2A430E11ED8A923F1CC4F9AE02.roa (raw, json) Hash identifier: sFeI2pPBalONlhYBtvTkoYWmxsh6qY5xXuwxWHwIIk0= Subject key identifier: 8B:1D:39:A1:AD:B1:03:0D:7D:A3:DF:D4:B6:AA:C1:96:8D:F2:63:D8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8241 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F341CE2A430E11ED8A923F1CC4F9AE02.roa Signing time: Wed 31 Jan 2024 06:53:02 +0000 ROA not before: Wed 31 Jan 2024 06:53:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137665 IP address blocks: 103.117.176.0/24 maxlen: 24 103.117.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33345 (0x8241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 31 06:53:02 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65b9ee4e-974b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:38:7f:e8:40:5c:a8:07:fe:de:3d:79:02: 3c:56:35:8c:7a:b8:0d:f2:f8:a4:bc:84:cf:00:3d: 98:88:8f:4d:22:85:f6:36:9c:7e:59:e1:9e:49:6d: f3:32:dd:18:cd:a6:53:e9:4a:54:71:0f:35:b8:24: e2:3c:1e:46:d8:83:3c:0f:45:79:46:c2:e1:53:15: 27:ff:08:48:a4:2a:a9:10:74:c7:ec:20:a7:7f:5f: ba:19:94:57:ff:f0:25:4a:23:fb:c9:ba:1f:df:8b: cc:a8:f7:26:20:18:25:b8:63:2c:35:13:c6:bb:f8: cd:c2:16:c1:ca:bf:94:04:9d:01:56:af:b7:f7:ac: e0:ba:de:fb:74:32:07:f7:fe:b6:f5:4c:55:51:90: 1c:88:7f:4d:73:32:e8:ff:ce:b1:bf:56:b6:ac:db: 47:9b:8b:d7:04:c7:1f:4e:a9:a5:41:18:78:ba:08: 7e:f4:99:26:78:4f:d0:b1:07:4a:41:bd:fa:36:c6: 0f:e3:f5:4d:46:e6:7b:28:94:bf:43:3c:7d:94:ea: 85:d1:47:3f:a2:b5:86:59:6b:76:77:f0:7c:db:bf: 59:c9:ee:b0:cb:9f:b3:39:a9:5e:50:06:f8:c0:b4: ff:e8:26:fe:98:4c:22:3a:59:de:bb:72:6f:80:c6: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1D:39:A1:AD:B1:03:0D:7D:A3:DF:D4:B6:AA:C1:96:8D:F2:63:D8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F341CE2A430E11ED8A923F1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.176.0/23 Signature Algorithm: sha256WithRSAEncryption 14:1b:88:0f:5a:35:9b:b5:b2:92:1a:51:86:7d:12:16:02:d8: e0:11:27:11:c8:2d:8d:ea:ec:57:84:60:76:07:d6:0f:dc:a0: 32:07:82:99:d4:3c:33:7c:c3:71:e5:b0:90:11:0d:f4:08:fd: dc:c1:69:8c:c8:b4:fb:28:3a:37:ac:e2:75:b1:eb:16:61:38: 3f:90:29:38:50:18:a6:a6:f1:39:3d:ef:a1:53:d7:0b:a3:34: 02:9e:3b:c2:bb:dc:02:00:f5:9b:6b:15:e4:12:1c:ea:08:b1: e9:26:84:da:6e:16:95:82:d6:fb:a7:6b:5e:77:05:b4:38:3d: 59:66:74:16:13:d9:28:94:48:6f:ea:99:9c:13:b6:35:4a:6b: 26:ad:9d:65:b8:be:80:a9:ba:61:21:8d:09:7d:fa:da:3f:ba: d8:90:38:3a:07:60:93:04:7b:95:25:10:0a:6f:f0:06:dc:ca: c7:65:4d:84:1d:2d:d3:01:5c:19:32:f6:a1:01:f8:bc:90:1c: bd:e4:5f:4b:f9:82:18:40:c3:be:8f:c6:1c:aa:85:62:f4:4e: fd:26:e6:27:ac:9e:bc:ba:7b:c2:dc:53:83:b3:b2:16:6a:c1: c0:a4:0a:7c:45:98:fc:b2:21:b7:d6:08:4b:58:8c:4d:78:5d: 3f:0f:88:ce -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIJBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDEzMTA2NTMwMloXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjViOWVlNGUtOTc0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANe9OH/oQFyoB/7ePXkCPFY1jHq4DfL4pLyEzwA9mIiPTSKF9jacflnhnklt 8zLdGM2mU+lKVHEPNbgk4jweRtiDPA9FeUbC4VMVJ/8ISKQqqRB0x+wgp39fuhmU V//wJUoj+8m6H9+LzKj3JiAYJbhjLDUTxrv4zcIWwcq/lASdAVavt/es4Lre+3Qy B/f+tvVMVVGQHIh/TXMy6P/Osb9WtqzbR5uL1wTHH06ppUEYeLoIfvSZJnhP0LEH SkG9+jbGD+P1TUbmeyiUv0M8fZTqhdFHP6K1hllrdnfwfNu/WcnusMufszmpXlAG +MC0/+gm/phMIjpZ3rtyb4DGWwECAwEAAaOCApUwggKRMB0GA1UdDgQWBBSLHTmh rbEDDX2j39S2qsGWjfJj2DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YzNDFDRTJB NDMwRTExRUQ4QTkyM0YxQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ3WwMA0GCSqGSIb3DQEBCwUAA4IBAQAUG4gPWjWbtbKS GlGGfRIWAtjgEScRyC2N6uxXhGB2B9YP3KAyB4KZ1DwzfMNx5bCQEQ30CP3cwWmM yLT7KDo3rOJ1sesWYTg/kCk4UBimpvE5Pe+hU9cLozQCnjvCu9wCAPWbaxXkEhzq CLHpJoTabhaVgtb7p2tedwW0OD1ZZnQWE9kolEhv6pmcE7Y1SmsmrZ1luL6Aqbph IY0JffraP7rYkDg6B2CTBHuVJRAKb/AG3MrHZU2EHS3TAVwZMvahAfi8kBy95F9L +YIYQMO+j8YcqoVi9E79JuYnrJ68unvC3FODs7IWasHApAp8RZj8siG31ghLWIxN eF0/D4jO -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org