$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27A8C5E03DAC11EE8434176AC4F9AE02.roa File: 27A8C5E03DAC11EE8434176AC4F9AE02.roa (raw, json) Hash identifier: 7uqwkJ0iywHM1h+dFVZ8YUh8MukwRCIefANh/D0vr8g= Subject key identifier: 9E:98:E5:EE:68:4F:C9:B9:4C:00:B5:A8:C5:78:5A:9B:A1:B9:24:80 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 894A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27A8C5E03DAC11EE8434176AC4F9AE02.roa Signing time: Thu 30 May 2024 15:58:14 +0000 ROA not before: Thu 30 May 2024 15:58:14 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133992 IP address blocks: 103.51.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35146 (0x894a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:58:14 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a216-866b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:66:26:f2:0e:0f:bd:49:d0:e0:ef:77:49: da:50:df:e6:a2:9f:5a:76:67:54:19:a8:8e:20:54: 19:29:5e:fc:dc:9d:b1:85:49:c6:89:80:6f:53:f8: 7f:9c:46:4e:28:f7:f4:33:0d:7f:3c:ac:84:aa:dc: 6a:61:dd:80:9e:69:81:79:8a:75:6d:05:99:b4:38: 0e:9a:59:ce:04:f0:9d:ef:59:3b:59:c2:30:e0:4e: 1a:5f:bf:34:2e:56:96:97:6a:9b:29:91:25:0a:41: 0a:bb:a9:e9:18:95:d2:61:ee:2f:0a:b7:f7:11:ee: 03:92:71:70:5e:55:c8:f5:54:11:eb:cb:3a:dd:88: 6c:f2:59:54:6a:71:89:a5:39:6f:26:04:df:3b:5b: d1:86:85:b5:b3:5d:96:64:c3:00:bd:12:34:67:0c: 8c:f8:5b:de:c4:c0:6a:8d:ac:1b:80:3f:ed:a6:03: 8f:81:88:d5:6e:94:f8:ba:76:a8:05:3e:de:5d:3b: b1:b7:82:e8:cf:be:df:4c:f4:3a:20:c2:19:21:1e: 49:ab:92:3b:5b:ee:75:96:fc:e7:89:5c:5f:89:2a: 40:0b:5f:5c:89:c5:27:2e:1e:22:b6:de:89:52:1b: 71:75:cc:fd:b0:49:2b:01:ad:7f:c8:e6:d2:2f:c6: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:98:E5:EE:68:4F:C9:B9:4C:00:B5:A8:C5:78:5A:9B:A1:B9:24:80 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27A8C5E03DAC11EE8434176AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.51.8.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:ab:2e:a4:b4:fa:b3:b6:a6:24:21:e5:5b:62:8f:76:47:d1: 4e:ba:48:af:3a:f2:0a:f7:b0:b2:6c:14:c4:b7:f5:1b:e3:7c: 23:7b:e6:b6:b9:f9:64:fe:b8:66:71:5e:34:17:82:70:c6:96: c8:de:52:0a:43:1c:41:e7:bf:99:b5:8b:90:a3:86:4d:6e:d9: 47:2e:f8:13:fe:8e:f1:0d:56:4a:1e:31:ab:a9:07:f0:9c:be: ec:27:a0:00:31:77:a3:97:9e:5d:e9:4f:6c:c4:30:de:54:aa: 4d:b7:a7:52:5a:90:0c:f9:bc:d0:ec:a8:12:82:1f:04:9f:4a: 83:89:0a:5d:9b:eb:e2:06:9e:10:c8:a7:73:ca:26:f3:ea:25: c5:18:48:0c:64:72:25:12:5d:c6:98:bd:dc:9a:9c:82:54:28: 8d:cc:8a:9a:1a:70:7e:b5:f5:a3:db:3a:6a:80:a8:05:c3:a2: 37:a9:b2:0d:90:e3:da:c7:75:c6:47:88:ff:10:12:73:1a:d5: 9a:c2:59:d5:56:a5:1d:c9:e2:3b:ea:f5:4e:ad:ea:08:73:c7: 0c:ce:de:f8:f4:14:2f:7b:74:ad:86:69:4d:dd:ae:5b:19:0a: 12:f1:a6:b3:29:1e:e3:a3:36:f2:9a:55:78:d3:3a:b2:12:a5: 91:24:3b:0c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIlKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTgxNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyMTYtODY2YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN00ZibyDg+9SdDg73dJ2lDf5qKfWnZnVBmojiBUGSle/NydsYVJxomAb1P4 f5xGTij39DMNfzyshKrcamHdgJ5pgXmKdW0FmbQ4DppZzgTwne9ZO1nCMOBOGl+/ NC5WlpdqmymRJQpBCrup6RiV0mHuLwq39xHuA5JxcF5VyPVUEevLOt2IbPJZVGpx iaU5byYE3ztb0YaFtbNdlmTDAL0SNGcMjPhb3sTAao2sG4A/7aYDj4GI1W6U+Lp2 qAU+3l07sbeC6M++30z0OiDCGSEeSauSO1vudZb854lcX4kqQAtfXInFJy4eIrbe iVIbcXXM/bBJKwGtf8jm0i/GNrECAwEAAaOCApUwggKRMB0GA1UdDgQWBBSemOXu aE/JuUwAtajFeFqbobkkgDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI3QThDNUUw M0RBQzExRUU4NDM0MTc2QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZzMIMA0GCSqGSIb3DQEBCwUAA4IBAQAdqy6ktPqztqYk IeVbYo92R9FOukivOvIK97CybBTEt/Ub43wje+a2uflk/rhmcV40F4JwxpbI3lIK QxxB57+ZtYuQo4ZNbtlHLvgT/o7xDVZKHjGrqQfwnL7sJ6AAMXejl55d6U9sxDDe VKpNt6dSWpAM+bzQ7KgSgh8En0qDiQpdm+viBp4QyKdzyibz6iXFGEgMZHIlEl3G mL3cmpyCVCiNzIqaGnB+tfWj2zpqgKgFw6I3qbINkOPax3XGR4j/EBJzGtWawlnV VqUdyeI76vVOreoIc8cMzt749BQve3SthmlN3a5bGQoS8aazKR7jozbymlV40zqy EqWRJDsM -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:37 2024 by rpki-client on console-ams.rpki-client.org