$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F566E856BE6511EE83B0C14CC4F9AE02.roa File: F566E856BE6511EE83B0C14CC4F9AE02.roa (raw, json) Hash identifier: f9sTKOgPWz4HpDlQjXui5q4nKwZEOVfy9GZlGQKeyvw= Subject key identifier: C9:03:3A:51:9C:8C:9A:10:A8:E5:19:93:5E:8B:42:92:B2:39:2D:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8201 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F566E856BE6511EE83B0C14CC4F9AE02.roa Signing time: Mon 29 Jan 2024 05:19:21 +0000 ROA not before: Mon 29 Jan 2024 05:19:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134858 IP address blocks: 103.39.116.0/22 maxlen: 24 103.80.22.0/23 maxlen: 24 103.105.96.0/23 maxlen: 24 103.127.224.0/22 maxlen: 24 103.148.8.0/23 maxlen: 24 103.158.239.0/24 maxlen: 24 2407:8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33281 (0x8201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 29 05:19:21 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65b73559-61b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b4:c4:6c:02:bf:2b:8e:98:7a:12:ba:90:4e: 67:d7:30:69:5b:22:a3:2a:0f:e1:96:5d:1f:9f:89: 2e:83:b2:49:49:5c:f6:de:ed:c5:e9:06:ac:52:b9: f9:41:df:ee:91:ca:bd:e6:67:b6:44:b8:a7:00:aa: ef:24:b5:db:86:30:72:2e:9b:a5:50:5e:fd:1b:db: 61:96:73:94:0a:e6:1f:5a:25:33:da:9d:26:b0:52: 28:b3:0f:c7:f5:2e:bc:27:74:20:7b:be:93:d5:e6: a7:17:0b:6f:25:2a:5d:5f:7c:06:b3:f4:98:fa:a6: 5a:7e:0b:0a:64:59:86:ad:5f:48:1e:c0:0d:73:73: 6e:de:31:ca:69:51:9c:d4:f4:17:22:df:50:7d:4e: 90:dc:69:37:3d:56:f5:ea:a3:3b:68:b8:70:70:33: 80:cc:a2:df:8c:5f:36:28:b6:98:f9:e3:4f:d0:f8: ce:3a:c9:05:50:9e:f8:a7:cf:b5:cf:b4:5c:0d:f4: 8e:b8:5f:d7:8f:73:c7:18:6d:6d:8a:6e:86:e3:05: b9:fd:43:02:e9:a0:9a:19:aa:08:69:69:6b:65:9c: db:9b:e1:db:24:32:4f:01:e3:54:6b:ed:69:a4:1c: 6c:dc:a1:46:f9:78:19:e4:32:c3:fc:b7:a2:c6:07: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:3A:51:9C:8C:9A:10:A8:E5:19:93:5E:8B:42:92:B2:39:2D:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F566E856BE6511EE83B0C14CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.116.0/22 103.80.22.0/23 103.105.96.0/23 103.127.224.0/22 103.148.8.0/23 103.158.239.0/24 IPv6: 2407:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 01:2d:d4:91:09:cf:01:ff:99:9d:a2:fd:cc:b0:ee:80:1b:95: 31:2e:4a:3b:a2:af:62:45:04:b8:7d:c8:35:81:84:58:f3:57: 50:44:61:6e:0d:a5:30:41:14:12:f2:bb:92:c2:86:79:cc:01: 32:f6:34:a8:17:e7:68:56:14:a7:87:5a:e4:6e:da:91:ad:d6: 41:96:a7:7c:2f:6d:56:9d:fe:de:4f:9d:c8:ea:b1:3b:22:e6: 4d:ed:fc:16:d6:10:ac:d4:52:59:36:76:81:64:19:1d:8b:39: c3:7e:e2:50:99:50:a3:49:14:ac:8a:7b:45:c8:24:d2:9b:f3: 6e:5a:82:e2:3c:d3:9b:08:7b:fb:4b:d2:fd:06:d3:23:99:25: 49:3c:5d:9a:6d:31:29:e8:5f:5c:60:5b:b2:c5:45:20:d3:a8: 85:ca:2a:60:70:22:41:fa:79:b4:68:81:a7:bc:62:02:e4:b1: 1c:be:b6:41:91:95:b9:13:53:59:b7:36:f6:4d:04:12:65:d9: 77:d6:e5:b3:72:3e:39:9a:20:93:55:bb:c2:ee:5e:51:bc:3f: b7:54:99:fa:70:46:e7:e0:1b:bb:11:43:39:ce:44:3b:28:84: 8b:3c:ce:d7:81:ae:9b:17:95:22:c4:bd:24:55:25:38:d1:a4: a0:de:e9:75 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIDAIIBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDEyOTA1MTkyMVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjViNzM1NTktNjFiMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANm0xGwCvyuOmHoSupBOZ9cwaVsioyoP4ZZdH5+JLoOySUlc9t7txekGrFK5 +UHf7pHKveZntkS4pwCq7yS124Ywci6bpVBe/RvbYZZzlArmH1olM9qdJrBSKLMP x/UuvCd0IHu+k9XmpxcLbyUqXV98BrP0mPqmWn4LCmRZhq1fSB7ADXNzbt4xymlR nNT0FyLfUH1OkNxpNz1W9eqjO2i4cHAzgMyi34xfNii2mPnjT9D4zjrJBVCe+KfP tc+0XA30jrhf149zxxhtbYpuhuMFuf1DAumgmhmqCGlpa2Wc25vh2yQyTwHjVGvt aaQcbNyhRvl4GeQyw/y3osYHJdMCAwEAAaOCAsIwggK+MB0GA1UdDgQWBBTJAzpR nIyaEKjlGZNei0KSsjkt+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y1NjZFODU2 QkU2NTExRUU4M0IwQzE0Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEwGCCsGAQUFBwEHAQH/ BD0wOzAqBAIAATAkAwQCZyd0AwQBZ1AWAwQBZ2lgAwQCZ3/gAwQBZ5QIAwQAZ57v MA0EAgACMAcDBQAkBwjAMA0GCSqGSIb3DQEBCwUAA4IBAQABLdSRCc8B/5mdov3M sO6AG5UxLko7oq9iRQS4fcg1gYRY81dQRGFuDaUwQRQS8ruSwoZ5zAEy9jSoF+do VhSnh1rkbtqRrdZBlqd8L21Wnf7eT53I6rE7IuZN7fwW1hCs1FJZNnaBZBkdiznD fuJQmVCjSRSsintFyCTSm/NuWoLiPNObCHv7S9L9BtMjmSVJPF2abTEp6F9cYFuy xUUg06iFyipgcCJB+nm0aIGnvGIC5LEcvrZBkZW5E1NZtzb2TQQSZdl31uWzcj45 miCTVbvC7l5RvD+3VJn6cEbn4Bu7EUM5zkQ7KISLPM7Xga6bF5UixL0kVSU40aSg 3ul1 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org