$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCA0BFEC754C11ED98BF8629C4F9AE02.roa File: FCA0BFEC754C11ED98BF8629C4F9AE02.roa (raw, json) Hash identifier: SK8zSkh7FUa29qRPrD5V22lJXpHWwkMQL/cTqmV5Wpo= Subject key identifier: 7A:67:A1:5F:0B:3A:07:74:87:31:7E:23:AC:6F:55:67:89:B8:49:E8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7393 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCA0BFEC754C11ED98BF8629C4F9AE02.roa Signing time: Thu 08 Jun 2023 09:52:03 +0000 ROA not before: Thu 08 Jun 2023 09:52:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133227 IP address blocks: 103.48.2.0/23 maxlen: 24 103.71.112.0/23 maxlen: 24 103.137.112.0/23 maxlen: 24 103.153.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29587 (0x7393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 8 09:52:03 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6481a4c3-e1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:e6:35:9b:ee:b7:c5:0b:e5:78:cc:2c:5f: 25:b1:4d:4a:e4:55:be:08:55:f6:06:85:ef:49:5f: e0:5f:a1:b1:a1:4a:53:be:de:43:c3:96:e6:2e:50: b1:45:5f:05:9f:55:f9:13:1f:88:7b:c4:66:db:d8: f9:23:d1:bf:81:7c:de:92:e5:ce:21:a5:38:bb:3f: 66:67:69:1c:dc:83:ce:d9:32:c3:46:f1:52:a7:6b: aa:36:7d:c7:c9:ff:92:82:74:af:6f:92:5d:80:bf: 11:ce:fa:02:13:f5:75:cf:e6:0e:1c:be:3e:f7:43: c0:46:86:58:03:93:c9:e7:8a:9a:d2:2d:91:0a:1b: fb:77:75:78:21:b2:7f:74:c5:fd:ee:24:c9:3e:04: cf:10:5f:eb:1f:ca:db:69:8f:6e:c5:27:e5:7d:a3: e4:b5:31:7e:3d:6b:3a:cf:25:1b:c6:a5:8d:be:a8: 7e:18:b3:ca:94:41:76:06:98:ff:90:75:2b:74:c6: bd:69:5b:50:ef:f9:98:c4:07:20:83:37:f9:ed:3d: 5d:32:6c:95:3e:58:4e:c6:a6:3a:12:02:f3:9c:4e: 32:6f:93:db:b8:6c:70:08:48:73:34:5c:11:84:c3: a7:b1:b4:1d:92:63:fd:7a:15:24:8c:03:52:6d:47: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:A1:5F:0B:3A:07:74:87:31:7E:23:AC:6F:55:67:89:B8:49:E8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCA0BFEC754C11ED98BF8629C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.2.0/23 103.71.112.0/23 103.137.112.0/23 103.153.224.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:69:3e:20:7a:b9:32:06:75:11:1e:55:33:12:61:69:6e:84: 29:c6:bc:e1:d5:90:5c:fb:f3:59:20:53:5d:66:db:a9:84:d2: 98:3a:15:f0:66:46:5c:94:63:14:eb:7c:df:3f:79:4e:e4:9a: 11:29:73:86:5b:54:f0:7d:49:08:87:86:8e:2f:74:ac:03:0c: 6e:57:6c:49:6e:24:0d:b9:ce:ad:63:a4:dd:31:a4:25:b4:8a: 79:67:ca:89:ac:f4:98:a1:a6:67:94:82:5b:72:98:2f:2f:c9: 7c:b3:83:98:1e:11:be:e8:9c:3f:87:06:af:62:ae:85:29:f1: 76:f5:a2:38:0c:58:00:6e:e9:e4:8e:8f:89:26:13:31:35:d1: ed:1f:18:92:ee:a5:f6:74:9a:75:1f:7f:23:bb:88:de:94:11: 19:8f:df:5f:26:4e:d6:b7:da:e9:55:ca:78:cc:a6:b6:23:81: c6:d6:22:7a:80:fc:68:c9:4e:83:50:db:ee:8d:7e:7c:97:67: b6:11:95:97:ae:ff:a5:f4:ad:1f:98:32:fa:fb:25:53:d2:4d: 6c:d4:18:31:a9:6b:d1:ba:26:44:58:12:b4:fa:47:b6:8f:9e: a1:1c:38:e4:7b:9d:26:79:9c:c7:b8:b9:61:f0:fb:25:e4:a7: eb:6c:ef:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICc5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjA4MDk1MjAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDgxYTRjMy1lMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR7mNZvut8UL5XjMLF8lsU1K5FW+CFX2BoXvSV/gX6GxoUpTvt5Dw5bmLlCx RV8Fn1X5Ex+Ie8Rm29j5I9G/gXzekuXOIaU4uz9mZ2kc3IPO2TLDRvFSp2uqNn3H yf+SgnSvb5JdgL8RzvoCE/V1z+YOHL4+90PARoZYA5PJ54qa0i2RChv7d3V4IbJ/ dMX97iTJPgTPEF/rH8rbaY9uxSflfaPktTF+PWs6zyUbxqWNvqh+GLPKlEF2Bpj/ kHUrdMa9aVtQ7/mYxAcggzf57T1dMmyVPlhOxqY6EgLznE4yb5PbuGxwCEhzNFwR hMOnsbQdkmP9ehUkjANSbUeBuQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHpnoV8L Ogd0hzF+I6xvVWeJuEnoMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkNBMEJGRUM3 NTRDMTFFRDk4QkY4NjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAFnMAIDBAFnR3ADBAFniXADBAFnmeAwDQYJKoZIhvcNAQEL BQADggEBAItpPiB6uTIGdREeVTMSYWluhCnGvOHVkFz781kgU11m26mE0pg6FfBm RlyUYxTrfN8/eU7kmhEpc4ZbVPB9SQiHho4vdKwDDG5XbEluJA25zq1jpN0xpCW0 inlnyoms9JihpmeUgltymC8vyXyzg5geEb7onD+HBq9iroUp8Xb1ojgMWABu6eSO j4kmEzE10e0fGJLupfZ0mnUffyO7iN6UERmP318mTta32ulVynjMprYjgcbWInqA /GjJToNQ2+6NfnyXZ7YRlZeu/6X0rR+YMvr7JVPSTWzUGDGpa9G6JkRYErT6R7aP nqEcOOR7nSZ5nMe4uWHw+yXkp+ts7z0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org