$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3E84DC40E3A11ED893B557EC4F9AE02.roa File: C3E84DC40E3A11ED893B557EC4F9AE02.roa (raw, json) Hash identifier: fO2FzIAKXnJsghEHFYnu3v8hlD5kyC23dp2hhzdHwrQ= Subject key identifier: C5:FC:D0:3A:67:19:C9:A3:28:9B:37:BF:BC:D5:B8:53:6F:B2:33:B2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8C16 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3E84DC40E3A11ED893B557EC4F9AE02.roa Signing time: Thu 30 May 2024 16:09:50 +0000 ROA not before: Thu 30 May 2024 16:09:50 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138289 IP address blocks: 103.123.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35862 (0x8c16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:09:50 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a4ce-7088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:1e:3d:21:c4:9c:1c:cd:71:9b:c2:a0:fc: fd:25:44:8d:a3:6d:2d:0c:22:46:98:d8:13:28:6b: b6:f2:73:13:98:3a:8a:ed:0b:2a:b8:57:ab:db:7e: 25:24:64:44:28:87:ed:94:ab:f4:c8:4b:70:bc:36: 1b:d5:ef:09:78:13:13:6c:50:a9:3e:6a:90:65:e7: 3d:db:ea:97:9b:78:e3:2a:0c:97:11:49:0b:c4:9e: 0d:8c:61:fa:c8:c9:62:8a:0b:82:f3:f0:cf:01:cc: 76:7f:8b:7a:30:10:63:8a:96:40:77:6d:00:de:44: 9f:3b:47:57:aa:c9:ad:f8:76:7d:15:fe:de:91:73: 25:e6:0d:28:66:fc:8a:66:ae:fb:2d:6c:a1:62:10: 0a:9c:f0:f4:7e:e4:1c:d0:ca:61:33:51:a3:a3:eb: ee:3a:a1:45:dd:36:a3:b9:5c:9f:ce:44:17:1f:1f: c6:c8:ea:94:8a:a5:4c:25:8a:ee:30:47:6f:7f:e3: de:02:d9:57:0c:69:ae:9c:96:5d:1b:57:65:ce:c5: c9:2c:71:cc:76:f0:e5:c3:55:86:f3:68:bc:9a:7b: 29:47:9c:f6:86:91:16:2f:ba:ff:74:82:8f:c2:77: d0:ae:11:f3:62:54:c6:06:3c:76:fa:0e:85:6d:4f: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FC:D0:3A:67:19:C9:A3:28:9B:37:BF:BC:D5:B8:53:6F:B2:33:B2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3E84DC40E3A11ED893B557EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.52.0/22 Signature Algorithm: sha256WithRSAEncryption 93:50:d4:2b:59:34:5f:bc:53:31:6d:b2:2d:6c:08:7d:6a:60: ce:34:5e:95:5d:98:7b:f7:35:82:78:b4:7f:d6:fb:70:0d:6e: 15:10:9c:41:bc:4f:d1:40:ef:e3:7a:6a:7c:12:b2:b1:6f:76: c4:f6:a4:2d:5d:58:5c:cf:2e:3a:a2:ac:cb:d7:f3:4e:53:de: ca:3f:ba:70:b8:0d:21:52:76:c8:a6:89:c9:31:9f:d3:cc:7c: 80:88:fb:1d:cf:3b:c8:2b:19:46:25:7e:d4:4d:2e:95:06:52: 3e:64:4a:0b:36:dc:a1:cb:9e:10:61:95:56:f0:51:6a:60:72: f7:4d:0c:ea:c2:c6:3f:b5:48:e1:dc:f4:38:2e:7c:13:11:2b: ef:d5:87:d0:01:79:90:f4:df:cf:fb:40:f5:4e:50:bf:c1:36: 18:7e:0d:4a:2c:2a:6e:f2:b6:d7:fc:06:e2:1a:04:d4:7c:7c: c2:ed:40:6a:ef:ce:c0:a3:e1:85:00:4f:2b:45:2b:0d:e2:55: 6e:73:9a:55:23:24:92:d4:9f:60:50:a8:a6:73:58:b1:5d:b2: fa:e9:d8:da:bd:f6:b1:2e:b4:a9:3f:38:2d:74:49:9c:43:b6: 19:56:1f:f7:eb:d6:bd:2d:34:5a:fa:71:30:6d:0a:94:fc:30: c3:54:20:ba -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIwWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDk1MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0Y2UtNzA4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANETHj0hxJwczXGbwqD8/SVEjaNtLQwiRpjYEyhrtvJzE5g6iu0LKrhXq9t+ JSRkRCiH7ZSr9MhLcLw2G9XvCXgTE2xQqT5qkGXnPdvql5t44yoMlxFJC8SeDYxh +sjJYooLgvPwzwHMdn+LejAQY4qWQHdtAN5EnztHV6rJrfh2fRX+3pFzJeYNKGb8 imau+y1soWIQCpzw9H7kHNDKYTNRo6Pr7jqhRd02o7lcn85EFx8fxsjqlIqlTCWK 7jBHb3/j3gLZVwxprpyWXRtXZc7FySxxzHbw5cNVhvNovJp7KUec9oaRFi+6/3SC j8J30K4R82JUxgY8dvoOhW1PAX0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBTF/NA6 ZxnJoyibN7+81bhTb7IzsjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MzRTg0REM0 MEUzQTExRUQ4OTNCNTU3RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ3s0MA0GCSqGSIb3DQEBCwUAA4IBAQCTUNQrWTRfvFMx bbItbAh9amDONF6VXZh79zWCeLR/1vtwDW4VEJxBvE/RQO/jemp8ErKxb3bE9qQt XVhczy46oqzL1/NOU97KP7pwuA0hUnbIponJMZ/TzHyAiPsdzzvIKxlGJX7UTS6V BlI+ZEoLNtyhy54QYZVW8FFqYHL3TQzqwsY/tUjh3PQ4LnwTESvv1YfQAXmQ9N/P +0D1TlC/wTYYfg1KLCpu8rbX/AbiGgTUfHzC7UBq787Ao+GFAE8rRSsN4lVuc5pV IySS1J9gUKimc1ixXbL66djavfaxLrSpPzgtdEmcQ7YZVh/369a9LTRa+nEwbQqU /DDDVCC6 -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:51 2024 by rpki-client on console-fra.rpki-client.org