$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEEBD486817311EB9AE5C36AC4F9AE02.roa File: FEEBD486817311EB9AE5C36AC4F9AE02.roa (raw, json) Hash identifier: Zwh9Qiak7Iw/G6f6TJxLrwsk++BDKEX1KjiHLOR3KQM= Subject key identifier: F8:C6:70:75:0B:76:D6:5D:B0:BE:81:D4:96:35:4F:2D:CB:37:B8:3F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A60 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEEBD486817311EB9AE5C36AC4F9AE02.roa Signing time: Wed 10 May 2023 16:14:29 +0000 ROA not before: Wed 10 May 2023 16:14:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133251 IP address blocks: 103.124.164.0/24 maxlen: 24 103.124.165.0/24 maxlen: 24 103.124.166.0/24 maxlen: 24 103.124.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27232 (0x6a60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:14:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2e5-00b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:73:35:bd:27:66:5a:79:08:d5:0f:2f:62: 05:8c:dd:98:74:da:07:26:39:c2:9e:1c:51:ca:20: af:62:eb:89:47:7b:51:68:59:ff:9d:fb:b6:9b:46: 8e:2c:6f:d1:f6:01:38:26:f3:d2:7d:1e:ca:b4:26: 9c:d0:df:14:0a:4e:62:18:8b:1e:04:0a:e9:ac:51: 15:97:7e:e6:a1:4a:ea:8a:b0:3e:25:7c:14:8e:26: fc:7b:8b:bc:2a:b6:35:1f:11:3c:07:60:25:5d:8e: 5f:ae:36:89:74:1d:f8:b5:db:f6:91:19:2e:11:4f: a3:37:d3:cf:4b:bc:63:b6:04:c1:62:89:c5:f8:4a: 42:21:4d:ff:b0:29:a9:0f:1c:39:7f:22:b1:a3:49: 85:be:a3:1c:c7:3c:3b:1c:f7:53:e8:08:92:4b:01: ea:37:e0:e8:fc:26:08:4e:85:fa:3f:c4:66:03:c5: 86:78:cf:8c:88:68:2b:c9:13:5c:54:e4:37:c9:14: d1:4c:e0:13:ac:b9:3d:7e:cb:d6:4c:64:a3:7a:b6: 0d:6c:7c:62:97:ab:1b:66:44:76:af:68:e3:75:db: 63:8d:9e:7a:c8:34:19:3d:f6:e6:ef:54:cd:5c:a5: a6:c4:c0:6a:63:a5:3b:89:10:53:f0:68:e8:1c:e8: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C6:70:75:0B:76:D6:5D:B0:BE:81:D4:96:35:4F:2D:CB:37:B8:3F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEEBD486817311EB9AE5C36AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.164.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:f9:27:49:60:40:06:6a:63:1f:89:7f:3c:a6:2c:66:dc:5a: 31:f0:27:f2:dc:d2:91:d8:d7:cd:ed:1d:d2:fa:17:a0:0f:54: 8d:43:77:c0:cd:5b:b6:b0:14:90:80:a0:c0:46:e8:af:ed:ba: 46:3d:bd:73:81:98:a4:c4:da:96:f0:c1:c0:3e:5d:fb:87:1f: ec:b1:04:75:6a:d0:fa:63:93:66:bc:27:45:9d:f2:9f:65:8f: 22:5b:f6:42:77:9a:61:b9:2f:ba:83:0f:b7:68:4a:75:61:bd: a4:0e:4b:f1:f6:52:66:7e:60:85:56:dd:cf:0e:ee:5f:c1:3d: 16:98:66:57:00:66:5f:a7:44:62:de:2e:59:fa:a6:6c:dc:04: 10:d4:23:74:27:d3:d6:09:02:b8:45:91:a4:46:65:3e:58:83: bb:a4:9b:39:d6:6b:4c:21:0a:78:ab:0a:d7:76:ec:a6:13:20: 80:9b:e7:6b:86:69:ab:99:42:a4:f3:70:6b:90:eb:86:75:7b: a3:6e:61:c9:7a:82:95:39:7e:6c:fc:03:cb:f3:71:8c:ee:2c: df:6f:2a:26:76:09:e6:4f:89:f6:92:e7:81:ab:95:5a:19:b6: c0:67:5d:e5:68:96:2d:4c:cd:c6:f8:74:38:79:5e:ff:c0:95: 37:f8:2f:bf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICamAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNDI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJlNS0wMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqlzNb0nZlp5CNUPL2IFjN2YdNoHJjnCnhxRyiCvYuuJR3tRaFn/nfu2m0aO LG/R9gE4JvPSfR7KtCac0N8UCk5iGIseBArprFEVl37moUrqirA+JXwUjib8e4u8 KrY1HxE8B2AlXY5frjaJdB34tdv2kRkuEU+jN9PPS7xjtgTBYonF+EpCIU3/sCmp Dxw5fyKxo0mFvqMcxzw7HPdT6AiSSwHqN+Do/CYIToX6P8RmA8WGeM+MiGgryRNc VOQ3yRTRTOATrLk9fsvWTGSjerYNbHxil6sbZkR2r2jjddtjjZ56yDQZPfbm71TN XKWmxMBqY6U7iRBT8GjoHOiSMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPjGcHUL dtZdsL6B1JY1Ty3LN7g/MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkVFQkQ0ODY4 MTczMTFFQjlBRTVDMzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnfKQwDQYJKoZIhvcNAQELBQADggEBAAz5J0lgQAZqYx+J fzymLGbcWjHwJ/Lc0pHY183tHdL6F6APVI1Dd8DNW7awFJCAoMBG6K/tukY9vXOB mKTE2pbwwcA+XfuHH+yxBHVq0Ppjk2a8J0Wd8p9ljyJb9kJ3mmG5L7qDD7doSnVh vaQOS/H2UmZ+YIVW3c8O7l/BPRaYZlcAZl+nRGLeLln6pmzcBBDUI3Qn09YJArhF kaRGZT5Yg7ukmznWa0whCnirCtd27KYTIICb52uGaauZQqTzcGuQ64Z1e6NuYcl6 gpU5fmz8A8vzcYzuLN9vKiZ2CeZPifaS54GrlVoZtsBnXeVoli1Mzcb4dDh5Xv/A lTf4L78= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org