$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F705BEB6E81011EDBFC1202EC4F9AE02.roa File: F705BEB6E81011EDBFC1202EC4F9AE02.roa (raw, json) Hash identifier: 4SffbxDycqkiwG2DwBb8mX2+7uFrDLqj6VmPYQsLhr0= Subject key identifier: 8F:AF:B6:60:84:E0:C8:EF:6E:87:21:96:C6:94:FC:8E:8C:C0:EA:24 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B7C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F705BEB6E81011EDBFC1202EC4F9AE02.roa Signing time: Wed 10 May 2023 16:19:54 +0000 ROA not before: Wed 10 May 2023 16:19:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134942 IP address blocks: 103.88.132.0/22 maxlen: 24 2404:cf40::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27516 (0x6b7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:19:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc42a-532d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:b0:9e:39:61:87:c8:21:b5:04:f6:8f:56: 6a:a7:e5:81:bb:15:9f:4b:05:5b:ac:c8:a3:a0:80: 6d:26:51:da:a9:95:9a:01:7a:66:25:10:69:68:b0: d1:81:ef:96:2f:b0:ff:92:3b:fb:8f:56:ce:12:26: 56:fb:6d:65:12:38:b5:a3:0a:d3:10:f1:1d:1f:2d: 4c:c5:a7:fa:3b:dd:37:60:eb:95:65:72:fb:1a:80: e4:ca:52:8a:99:66:a8:b8:b9:c2:8a:ee:a1:61:08: 06:52:fd:42:2a:65:89:28:8a:5b:df:09:bc:fc:28: 7e:cf:d4:cf:c1:1f:a3:c7:cd:d5:89:2f:2d:55:33: f2:e9:e9:27:54:d4:4c:3f:5a:25:45:fb:ff:34:fa: 25:b7:60:f5:64:7c:cc:e9:c2:0c:27:d9:aa:04:2f: c0:17:af:f7:c5:56:77:01:0b:2f:12:77:74:c5:8d: c3:e7:49:11:f3:62:61:cc:ec:79:99:99:d5:eb:76: 16:a9:d6:fb:27:20:a2:f0:bc:3e:1d:bc:53:9c:01: 88:83:9c:3f:a8:1e:c2:59:46:62:dd:9d:0a:b5:54: 4b:33:f6:18:2b:26:e3:69:22:d5:5e:08:69:e0:cc: 05:36:03:b2:61:b4:98:97:1b:a0:2a:d7:44:ec:7f: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AF:B6:60:84:E0:C8:EF:6E:87:21:96:C6:94:FC:8E:8C:C0:EA:24 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F705BEB6E81011EDBFC1202EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.132.0/22 IPv6: 2404:cf40::/32 Signature Algorithm: sha256WithRSAEncryption 47:02:b3:7b:f2:86:f7:d0:b0:fa:c7:29:59:5d:a9:89:a8:6b: cf:85:94:13:13:c7:a7:0b:18:98:ab:cd:a1:37:49:12:af:2e: 34:b4:2f:37:ab:75:9a:04:6a:f8:74:ff:25:98:13:db:44:70: 51:89:20:c0:9e:ba:0c:cd:97:1c:73:6a:9e:c3:4f:81:f2:41: 47:07:27:3a:a8:75:b9:8f:17:6d:bd:3d:3b:d3:2f:cf:a9:7a: 8f:77:82:11:19:9a:76:45:61:2d:52:71:3e:e3:b4:ca:f4:93: d3:29:87:03:ad:bc:a8:20:02:f5:0b:54:e9:53:2c:b0:2f:37: f2:5d:54:76:47:98:71:89:1d:b5:ff:ea:3c:20:4d:1c:c0:1c: 0a:4e:5e:3a:89:90:c3:0f:3f:ae:47:7b:44:70:ec:9a:ee:44: bb:ce:37:ad:07:59:fe:4a:1f:fd:b5:6a:9a:56:7c:56:6e:5e: ff:cd:b9:b3:92:d8:bc:28:a7:9f:bd:ec:25:1e:89:f7:f7:a8: 34:69:b5:cd:a7:57:e4:18:b9:e5:a3:1c:ec:42:31:76:02:7f: c3:26:29:46:fc:ff:08:52:06:46:aa:20:90:93:0e:05:ba:f2: 0d:82:7e:8d:76:35:48:dc:ef:3d:a0:0e:d2:dd:2c:b5:a7:f6: 0b:a6:c0:a5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICa3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxOTU0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQyYS01MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWiwnjlhh8ghtQT2j1Zqp+WBuxWfSwVbrMijoIBtJlHaqZWaAXpmJRBpaLDR ge+WL7D/kjv7j1bOEiZW+21lEji1owrTEPEdHy1Mxaf6O903YOuVZXL7GoDkylKK mWaouLnCiu6hYQgGUv1CKmWJKIpb3wm8/Ch+z9TPwR+jx83ViS8tVTPy6eknVNRM P1olRfv/NPolt2D1ZHzM6cIMJ9mqBC/AF6/3xVZ3AQsvEnd0xY3D50kR82JhzOx5 mZnV63YWqdb7JyCi8Lw+HbxTnAGIg5w/qB7CWUZi3Z0KtVRLM/YYKybjaSLVXghp 4MwFNgOyYbSYlxugKtdE7H/7LQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFI+vtmCE 4MjvbochlsaU/I6MwOokMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjcwNUJFQjZF ODEwMTFFREJGQzEyMDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnWIQwDQQCAAIwBwMFACQEz0AwDQYJKoZIhvcNAQELBQAD ggEBAEcCs3vyhvfQsPrHKVldqYmoa8+FlBMTx6cLGJirzaE3SRKvLjS0LzerdZoE avh0/yWYE9tEcFGJIMCeugzNlxxzap7DT4HyQUcHJzqodbmPF229PTvTL8+peo93 ghEZmnZFYS1ScT7jtMr0k9MphwOtvKggAvULVOlTLLAvN/JdVHZHmHGJHbX/6jwg TRzAHApOXjqJkMMPP65He0Rw7JruRLvON60HWf5KH/21appWfFZuXv/NubOS2Lwo p5+97CUeiff3qDRptc2nV+QYueWjHOxCMXYCf8MmKUb8/whSBkaqIJCTDgW68g2C fo12NUjc7z2gDtLdLLWn9gumwKU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org