$ rpki-client -vvf rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/DDBBAC5CDC5711EB84C6F06CC4F9AE02.roa File: DDBBAC5CDC5711EB84C6F06CC4F9AE02.roa (raw, json) Hash identifier: HSkm0lXaipRQ5IVGw4st3TXOTkzLi75826givt3L9sA= Subject key identifier: A1:67:FD:6F:66:07:54:9E:E7:DF:55:A2:F2:5D:9F:5A:36:0E:E7:13 Certificate issuer: /CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045 Certificate serial: 05C1 Authority key identifier: BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/DDBBAC5CDC5711EB84C6F06CC4F9AE02.roa Signing time: Sat 28 Oct 2023 23:31:17 +0000 ROA not before: Sat 28 Oct 2023 23:31:17 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 58712 IP address blocks: 103.20.246.0/23 maxlen: 23 103.20.246.0/24 maxlen: 24 103.101.166.0/23 maxlen: 23 103.101.166.0/24 maxlen: 24 103.101.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1473 (0x5c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045 Validity Not Before: Oct 28 23:31:17 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=653d99c5-8e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:b8:a8:eb:ba:49:7b:08:92:69:9f:ea:84: 35:87:c5:ac:4b:a9:9d:2e:f6:1c:02:46:3e:28:55: a7:2b:57:bc:b9:5f:a1:da:f4:05:99:c8:d3:15:43: e4:36:f3:36:70:73:bd:d8:a4:20:1e:42:a2:51:f3: 34:04:88:42:88:a7:12:d6:3e:52:f7:70:c9:7d:48: ca:76:46:1d:f0:4f:9e:8b:bc:8a:84:dd:bf:dc:32: be:34:5b:f5:a0:55:f9:8a:2d:08:d4:8f:54:49:1f: 64:30:aa:36:66:08:0f:04:fa:77:ce:95:11:ad:fa: d6:3f:81:ec:05:83:f9:de:01:36:88:2a:dc:60:41: 5a:f5:33:39:48:7e:19:b5:da:bf:4a:f1:30:6b:66: de:c2:5a:6b:58:14:c1:de:b6:b1:4d:f1:86:d0:8b: 17:cd:16:05:08:03:35:ba:b9:6a:21:fd:c6:38:53: 5c:09:ec:9a:b7:89:cd:df:99:f5:a3:c0:51:4b:c4: 85:c3:15:bb:6c:53:89:5c:1e:06:c5:75:e5:35:eb: 6c:25:0b:35:87:a3:90:c0:32:83:fc:dd:ae:a9:b8: 3e:ed:ae:b8:a9:ab:8a:f1:8b:5f:5f:a3:62:c9:dc: 32:a0:54:98:5f:1a:f4:e3:9a:66:26:8a:ae:7e:76: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:67:FD:6F:66:07:54:9E:E7:DF:55:A2:F2:5D:9F:5A:36:0E:E7:13 X509v3 Authority Key Identifier: keyid:BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/DDBBAC5CDC5711EB84C6F06CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.246.0/23 103.101.166.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:95:ed:6f:f2:5a:6a:82:f9:5c:f4:e3:6f:66:f2:94:85:a5: 60:59:1a:bd:26:5f:c2:3c:01:73:65:72:f0:43:7c:3b:2a:de: 36:ef:5a:5e:73:ba:66:2b:b5:d1:9a:cd:16:e8:44:4c:51:10: 38:c2:1b:f8:38:18:45:80:c4:19:a4:3c:62:cd:9f:92:df:9c: 58:7e:47:5e:7c:5c:06:c8:97:12:f6:3c:ed:f0:db:78:98:61: bc:dc:e1:35:ac:4d:8c:b1:a8:8b:2b:6b:c6:f0:a5:bb:b0:ba: fa:bb:0f:e2:d6:39:b4:7f:15:95:50:9b:24:b2:02:e2:4d:bf: 15:72:fc:24:d2:49:fa:4f:66:16:9d:a2:c2:57:7f:e9:e7:bc: 9a:d5:39:02:49:9d:34:b8:c7:e2:e1:15:ed:2f:e4:0c:1e:1a: 25:59:ea:7d:e6:62:bc:a1:90:38:b5:d6:24:7e:21:11:7c:9f: b0:9f:2a:af:79:d3:dd:6d:0a:2d:2f:3d:ee:2e:71:39:d1:4c: 85:f2:18:77:10:fe:6c:22:46:d6:0c:63:aa:9e:ab:eb:7c:7d: b0:0a:26:8a:9b:6f:ce:03:ec:06:cc:1a:67:95:07:88:5f:29: 51:72:f1:47:a1:c4:1c:0b:1b:07:f4:7a:6b:44:8f:6d:b9:cd: b8:3d:0c:fc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxNTcxMTAvBgNVBAUTKEJBRTU2MzBEMkE2MTMzMEZBQ0JBMzdGOENDRkRDRjg5 MjgwN0YwNDUwHhcNMjMxMDI4MjMzMTE3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkOTljNS04ZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnX+4qOu6SXsIkmmf6oQ1h8WsS6mdLvYcAkY+KFWnK1e8uV+h2vQFmcjTFUPk NvM2cHO92KQgHkKiUfM0BIhCiKcS1j5S93DJfUjKdkYd8E+ei7yKhN2/3DK+NFv1 oFX5ii0I1I9USR9kMKo2ZggPBPp3zpURrfrWP4HsBYP53gE2iCrcYEFa9TM5SH4Z tdq/SvEwa2bewlprWBTB3raxTfGG0IsXzRYFCAM1urlqIf3GOFNcCeyat4nN35n1 o8BRS8SFwxW7bFOJXB4GxXXlNetsJQs1h6OQwDKD/N2uqbg+7a64qauK8YtfX6Ni ydwyoFSYXxr045pmJoqufnZdmQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKFn/W9m B1Se599VovJdn1o2DucTMB8GA1UdIwQYMBaAFLrlYw0qYTMPrLo3+Mz9z4koB/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTE1Ny9FM0FGOTQ5QzU5 RTAxMUVCQTkxNjEzNTJDNEY5QUUwMi91dVZqRFNwaE13LXN1amY0elAzUGlTZ0g4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V1VmpEU3BoTXctc3VqZjR6UDNQaVNnSDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUxNTcvRTNBRjk0OUM1OUUwMTFFQkE5MTYxMzUyQzRGOUFFMDIvRERCQkFDNUNE QzU3MTFFQjg0QzZGMDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnFPYDBAFnZaYwDQYJKoZIhvcNAQELBQADggEBAD6V7W/y WmqC+Vz0429m8pSFpWBZGr0mX8I8AXNlcvBDfDsq3jbvWl5zumYrtdGazRboRExR EDjCG/g4GEWAxBmkPGLNn5LfnFh+R158XAbIlxL2PO3w23iYYbzc4TWsTYyxqIsr a8bwpbuwuvq7D+LWObR/FZVQmySyAuJNvxVy/CTSSfpPZhadosJXf+nnvJrVOQJJ nTS4x+LhFe0v5AweGiVZ6n3mYryhkDi11iR+IRF8n7CfKq95091tCi0vPe4ucTnR TIXyGHcQ/mwiRtYMY6qeq+t8fbAKJoqbb84D7AbMGmeVB4hfKVFy8UehxBwLGwf0 emtEj225zbg9DPw= -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:17 2024 by rpki-client on console-ams.rpki-client.org