$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa File: FDC103263F0711ED9328213FC4F9AE02.roa (raw, json) Hash identifier: nZI+p7CNsRfnb72GjHlDHvkurUA6tYhvWMaQJzSsIPI= Subject key identifier: AA:B1:9B:FA:4A:8C:95:66:A6:B3:8F:A8:14:AB:CD:95:73:1B:D5:13 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 707C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa Signing time: Wed 10 May 2023 16:43:48 +0000 ROA not before: Wed 10 May 2023 16:43:48 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149564 IP address blocks: 103.187.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28796 (0x707c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:43:48 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9c3-b155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:aa:80:42:34:fd:8c:3c:9f:84:a0:8b:c0: 4a:1c:3f:a7:69:ff:bd:07:43:ff:25:75:5b:fd:29: 5e:74:ab:d1:f4:82:b6:29:28:b9:37:d1:db:bc:33: 49:9d:f0:e3:ce:cf:c9:71:08:6e:fe:41:ee:05:5f: ec:5b:cd:43:d0:81:61:0f:1d:0f:f0:20:8d:ee:bd: c2:64:77:14:26:20:92:f5:b4:4d:c2:71:f3:8e:54: a5:a2:ba:4e:8f:29:94:b6:05:44:8a:a8:cc:0e:b5: b7:91:a5:dc:0d:27:47:32:2f:40:30:4a:88:62:5e: a8:6e:28:a2:f5:bd:1d:90:f8:7c:b0:3a:04:eb:9c: ba:62:4a:5b:c3:79:a8:57:a5:c4:02:21:d8:15:e1: a1:a6:05:5c:a2:77:16:6b:3b:4a:ff:03:ed:81:7c: 10:13:24:f6:95:d0:2c:d0:22:1f:07:f0:5a:dc:b6: b7:93:15:05:8a:42:95:c9:d7:e4:d3:52:25:70:b0: ce:63:23:9a:b1:03:c0:1e:4c:03:03:d8:11:7f:ac: e1:8e:b8:75:ea:55:af:f1:a0:0d:35:72:6a:2c:b0: d4:e0:90:7f:13:1e:30:29:0e:1a:a1:82:ad:31:e0: 64:fb:31:f3:8a:4f:e4:57:ef:fe:46:5e:dd:3c:e9: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B1:9B:FA:4A:8C:95:66:A6:B3:8F:A8:14:AB:CD:95:73:1B:D5:13 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.20.0/23 Signature Algorithm: sha256WithRSAEncryption a4:b1:a9:e9:14:1c:c6:b3:9b:49:b5:42:a7:84:4f:77:f8:44: 75:91:97:43:47:45:d2:09:89:e3:c4:4d:41:c4:f8:4a:20:19: 84:0f:3c:6f:04:77:47:81:3c:50:a5:31:12:fe:af:6c:f2:f8: 33:ad:91:e8:7c:52:a9:5f:ae:52:d6:ed:cc:58:57:a9:43:1f: 5a:69:69:b5:a9:57:67:77:e1:82:08:5c:1e:3e:f1:c5:67:57: 51:01:b5:a9:8c:df:d1:41:ea:cd:b1:06:34:c3:f4:91:7b:e5: 4e:07:bc:c6:8b:75:7d:17:c5:e9:a5:2e:db:27:90:09:ef:33: 0b:c0:2f:70:6e:b6:06:00:3f:3f:f7:15:95:e4:67:c0:d3:95: 5d:47:00:45:b8:3f:52:8c:ee:40:3f:ba:1d:4a:79:e7:7f:c1: 47:fe:2a:1d:1e:41:49:4d:aa:81:33:21:ce:4b:8b:35:77:35: 60:4c:23:e8:5b:ac:93:69:28:5d:79:48:76:ab:d8:4f:3d:65: 37:91:ed:75:d9:ae:05:14:f5:92:38:dd:e4:91:6f:98:8e:b6: 0b:4a:69:d9:72:7c:62:69:ea:23:af:fd:1f:15:c9:1a:07:79: 84:3d:e1:ab:4a:d9:1e:2d:5a:1b:e3:59:4c:52:ab:8b:2c:55: b1:b7:f3:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MzQ4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzljMy1iMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmCqgEI0/Yw8n4Sgi8BKHD+naf+9B0P/JXVb/SledKvR9IK2KSi5N9HbvDNJ nfDjzs/JcQhu/kHuBV/sW81D0IFhDx0P8CCN7r3CZHcUJiCS9bRNwnHzjlSlorpO jymUtgVEiqjMDrW3kaXcDSdHMi9AMEqIYl6obiii9b0dkPh8sDoE65y6Ykpbw3mo V6XEAiHYFeGhpgVconcWaztK/wPtgXwQEyT2ldAs0CIfB/Ba3La3kxUFikKVydfk 01IlcLDOYyOasQPAHkwDA9gRf6zhjrh16lWv8aANNXJqLLDU4JB/Ex4wKQ4aoYKt MeBk+zHzik/kV+/+Rl7dPOmGnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKqxm/pK jJVmprOPqBSrzZVzG9UTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkRDMTAzMjYz RjA3MTFFRDkzMjgyMTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuxQwDQYJKoZIhvcNAQELBQADggEBAKSxqekUHMazm0m1 QqeET3f4RHWRl0NHRdIJiePETUHE+EogGYQPPG8Ed0eBPFClMRL+r2zy+DOtkeh8 UqlfrlLW7cxYV6lDH1ppabWpV2d34YIIXB4+8cVnV1EBtamM39FB6s2xBjTD9JF7 5U4HvMaLdX0XxemlLtsnkAnvMwvAL3ButgYAPz/3FZXkZ8DTlV1HAEW4P1KM7kA/ uh1Keed/wUf+Kh0eQUlNqoEzIc5LizV3NWBMI+hbrJNpKF15SHar2E89ZTeR7XXZ rgUU9ZI43eSRb5iOtgtKadlyfGJp6iOv/R8VyRoHeYQ94atK2R4tWhvjWUxSq4ss VbG382g= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org