$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F569BB36123011EDAF736F65C4F9AE02.roa File: F569BB36123011EDAF736F65C4F9AE02.roa (raw, json) Hash identifier: wIF8rOAiPtVo5/TjutJdmPSZ4odyi2sZxid4KMcUJbw= Subject key identifier: EA:71:D9:C9:15:F7:80:EB:24:3F:DA:0A:83:8D:3F:CD:AE:60:48:9D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70F1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F569BB36123011EDAF736F65C4F9AE02.roa Signing time: Wed 10 May 2023 16:45:55 +0000 ROA not before: Wed 10 May 2023 16:45:55 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150098 IP address blocks: 103.191.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28913 (0x70f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:45:55 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca42-d40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:9d:09:85:07:b7:90:bd:f6:4a:43:be:e9: e6:f9:24:cf:2b:ae:18:a0:b0:11:8d:ae:44:69:3d: 6f:f0:98:fd:0e:6f:b2:ff:88:8a:fc:94:45:7d:51: 06:45:ee:26:9d:ec:4e:06:25:1a:86:cb:a9:52:1e: 20:8f:9b:c6:6a:db:de:3b:ae:41:25:b7:06:52:11: 11:83:35:3c:30:a3:3f:e2:ec:4f:5d:8e:23:34:48: fa:46:25:00:02:76:d9:4c:21:73:cf:54:bf:25:d8: 91:7f:55:be:ca:a2:33:f8:33:71:69:ec:6f:63:4e: dd:dd:76:97:c2:2e:cc:32:72:3a:38:68:38:5f:1e: d8:fd:b4:d0:ef:bc:17:bd:a6:39:55:d7:de:fa:35: ba:ad:32:37:2b:f8:c2:02:de:e6:38:71:f4:a7:2a: 8a:a8:2b:dd:62:bc:54:67:b0:cd:db:0f:cd:1f:22: f7:db:48:c2:80:86:8e:7f:44:2e:b2:d6:28:60:d0: 44:e2:41:ba:bb:05:3d:48:b0:d8:77:ec:5b:c5:02: 1f:61:66:4f:f9:7c:fd:4a:d8:fd:62:91:2f:7c:c3: c8:ca:ba:4f:37:38:e4:d7:d0:d5:be:10:24:9c:9d: cf:55:fd:81:6c:78:2d:d5:66:82:b4:13:e6:96:8e: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:71:D9:C9:15:F7:80:EB:24:3F:DA:0A:83:8D:3F:CD:AE:60:48:9D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F569BB36123011EDAF736F65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.88.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:03:4a:b9:4a:16:ce:5d:a5:27:b7:04:49:23:47:64:58:13: eb:28:63:a8:ff:8c:40:cc:84:93:28:48:cb:70:07:c6:45:2b: c2:bb:d7:94:30:62:d3:1a:c6:a5:7e:21:7e:9e:a7:49:43:b1: 75:20:6c:cc:9f:10:e7:36:b9:12:7f:9f:15:1c:68:11:57:f6: f3:7a:75:c1:74:7c:b1:d2:e5:2d:ed:45:4b:2c:75:f4:48:64: 8f:00:3c:61:6f:0d:fb:6e:c5:44:9e:5c:d4:5f:06:ef:dc:43: d3:51:cb:e1:14:04:d3:06:2b:53:d9:f1:82:63:f7:c2:90:8d: ab:af:d3:6c:61:ff:0c:e1:24:b7:6b:f0:fe:d6:b9:20:c7:a2: 4c:2f:7c:56:91:42:4e:e9:79:5e:af:66:92:fb:46:12:18:12: 0d:27:a2:3e:ea:b4:99:8e:e9:90:1a:1a:f5:27:54:1b:c5:52: 12:25:c0:a6:55:67:3f:69:a6:19:03:a1:74:4e:d0:42:02:91: e7:d6:3a:b9:b1:76:b3:d3:1c:d8:c7:69:c4:84:5e:68:88:fb: e3:41:63:53:c0:85:54:fb:48:ed:ce:46:54:f6:ea:45:9a:9c: c1:f8:f5:6e:96:e6:40:43:f0:c7:11:cd:11:4e:ae:37:97:5b: b7:f2:52:7f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NTU1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E0Mi1kNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGOdCYUHt5C99kpDvunm+STPK64YoLARja5EaT1v8Jj9Dm+y/4iK/JRFfVEG Re4mnexOBiUahsupUh4gj5vGatveO65BJbcGUhERgzU8MKM/4uxPXY4jNEj6RiUA AnbZTCFzz1S/JdiRf1W+yqIz+DNxaexvY07d3XaXwi7MMnI6OGg4Xx7Y/bTQ77wX vaY5Vdfe+jW6rTI3K/jCAt7mOHH0pyqKqCvdYrxUZ7DN2w/NHyL320jCgIaOf0Qu stYoYNBE4kG6uwU9SLDYd+xbxQIfYWZP+Xz9Stj9YpEvfMPIyrpPNzjk19DVvhAk nJ3PVf2BbHgt1WaCtBPmlo5NKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOpx2ckV 94DrJD/aCoONP82uYEidMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjU2OUJCMzYx MjMwMTFFREFGNzM2RjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnv1gwDQYJKoZIhvcNAQELBQADggEBAF0DSrlKFs5dpSe3 BEkjR2RYE+soY6j/jEDMhJMoSMtwB8ZFK8K715QwYtMaxqV+IX6ep0lDsXUgbMyf EOc2uRJ/nxUcaBFX9vN6dcF0fLHS5S3tRUssdfRIZI8APGFvDftuxUSeXNRfBu/c Q9NRy+EUBNMGK1PZ8YJj98KQjauv02xh/wzhJLdr8P7WuSDHokwvfFaRQk7peV6v ZpL7RhIYEg0noj7qtJmO6ZAaGvUnVBvFUhIlwKZVZz9pphkDoXRO0EICkefWOrmx drPTHNjHacSEXmiI++NBY1PAhVT7SO3ORlT26kWanMH49W6W5kBD8McRzRFOrjeX W7fyUn8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org