$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A03B8B431AB11ECAB908E42C4F9AE02.roa File: 6A03B8B431AB11ECAB908E42C4F9AE02.roa (raw, json) Hash identifier: bIc7V1mX4jK3Q9RbRPtY2w45GjJF6Sg0/E9niUDFP/U= Subject key identifier: F2:EF:77:71:C0:AE:B5:CB:16:B7:F6:68:9C:86:B1:5B:C9:12:6B:2C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E57 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A03B8B431AB11ECAB908E42C4F9AE02.roa Signing time: Thu 30 May 2024 16:19:18 +0000 ROA not before: Thu 30 May 2024 16:19:18 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 146898 IP address blocks: 103.173.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36439 (0x8e57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:19:18 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a706-04d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:f6:b9:21:c7:e3:6e:54:0f:e7:fc:57:8b: 2e:c8:4b:3b:0a:d2:10:e8:a4:0d:7e:75:c4:b4:5c: 97:ee:63:6b:1f:cd:91:14:d1:cd:a8:74:37:33:47: 7f:40:c7:f0:97:d2:f7:8b:bc:fc:fb:7d:07:ee:74: 74:df:c6:54:68:9b:ec:be:c1:d3:ff:fa:28:f7:9e: ed:98:07:ff:1a:93:b7:3d:9f:f5:75:15:a8:be:88: 4f:42:05:95:ca:43:43:5f:02:59:aa:95:34:4f:73: 54:d6:fe:54:2e:68:3b:74:e2:d3:34:60:fc:cd:cf: 99:39:11:17:d7:37:fd:97:38:84:c6:96:e8:cf:bb: 8f:68:6b:7e:91:a4:8f:62:1b:57:3c:a6:25:9f:ac: 5d:d0:36:60:a3:78:94:86:97:c0:22:32:0b:46:51: 54:a2:8b:6c:9a:cf:24:99:d2:47:c0:88:20:28:7d: 02:2d:7d:43:35:f7:73:78:1e:97:72:c4:59:a0:fe: 69:ab:e5:42:48:bd:25:39:5d:fd:8a:1f:6f:f8:b0: 24:06:86:84:f6:e3:78:7c:35:6c:cb:d2:24:29:6a: c5:08:a0:80:f2:8b:c5:0a:8b:2d:af:75:bf:a5:18: 06:7e:f6:60:f7:fe:ff:3c:95:c4:9c:fd:b5:2b:9f: c4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EF:77:71:C0:AE:B5:CB:16:B7:F6:68:9C:86:B1:5B:C9:12:6B:2C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A03B8B431AB11ECAB908E42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.202.0/23 Signature Algorithm: sha256WithRSAEncryption 59:56:d5:0e:90:eb:93:42:f0:25:51:34:9f:da:76:88:15:d2: 20:b0:6d:c3:22:b6:2b:ea:da:da:10:a8:35:26:89:0e:f1:45: 6c:65:dc:31:37:47:aa:3f:17:0b:fa:73:3f:fd:cb:b1:d9:db: 20:90:e4:84:35:5b:8e:33:77:91:04:f5:03:ab:a3:86:5b:6e: 32:38:b7:2f:a6:0c:4d:47:71:8c:39:6e:3f:7b:e2:b8:bf:dd: e3:f0:e7:43:bc:31:64:c7:5d:c3:53:cc:15:81:33:43:6c:2e: cc:98:bd:42:e6:7f:bb:e7:c8:ba:aa:fe:5c:c6:a7:f8:7b:d5: b8:09:d0:53:9b:6d:91:9d:30:07:f5:5a:7a:fe:1d:68:50:bb: 11:e2:e0:53:a9:cb:53:83:54:8f:f6:82:c8:5d:05:d1:cb:19: e0:62:65:7a:aa:67:3f:38:92:66:5d:bd:a8:dc:32:c3:5f:fc: 29:8d:8b:54:0e:36:8e:c6:66:4c:15:b4:c0:7c:e4:b9:ea:1e: ef:58:e4:5a:bb:06:87:4a:d6:59:b9:29:f0:58:92:c6:ec:89: 0c:4f:e6:5d:6a:dc:ee:c4:52:e5:cf:06:82:e5:e7:2b:c5:1f: 30:ce:d0:91:3b:55:4e:0a:5e:7d:86:10:73:60:4c:a4:59:c0: c5:ef:62:29 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI5XMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTkxOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3MDYtMDRkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZy9rkhx+NuVA/n/FeLLshLOwrSEOikDX51xLRcl+5jax/NkRTRzah0NzNH f0DH8JfS94u8/Pt9B+50dN/GVGib7L7B0//6KPee7ZgH/xqTtz2f9XUVqL6IT0IF lcpDQ18CWaqVNE9zVNb+VC5oO3Ti0zRg/M3PmTkRF9c3/Zc4hMaW6M+7j2hrfpGk j2IbVzymJZ+sXdA2YKN4lIaXwCIyC0ZRVKKLbJrPJJnSR8CIICh9Ai19QzX3c3ge l3LEWaD+aavlQki9JTld/Yofb/iwJAaGhPbjeHw1bMvSJClqxQiggPKLxQqLLa91 v6UYBn72YPf+/zyVxJz9tSufxAcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTy73dx wK61yxa39michrFbyRJrLDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZBMDNCOEI0 MzFBQjExRUNBQjkwOEU0MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ63KMA0GCSqGSIb3DQEBCwUAA4IBAQBZVtUOkOuTQvAl UTSf2naIFdIgsG3DIrYr6traEKg1JokO8UVsZdwxN0eqPxcL+nM//cux2dsgkOSE NVuOM3eRBPUDq6OGW24yOLcvpgxNR3GMOW4/e+K4v93j8OdDvDFkx13DU8wVgTND bC7MmL1C5n+758i6qv5cxqf4e9W4CdBTm22RnTAH9Vp6/h1oULsR4uBTqctTg1SP 9oLIXQXRyxngYmV6qmc/OJJmXb2o3DLDX/wpjYtUDjaOxmZMFbTAfOS56h7vWORa uwaHStZZuSnwWJLG7IkMT+ZdatzuxFLlzwaC5ecrxR8wztCRO1VOCl59hhBzYEyk WcDF72Ip -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:58 2024 by rpki-client on console-fra.rpki-client.org