$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa File: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (raw, json) Hash identifier: MraStnVmvcnS9AeqAcI9xA2fmZFXDQtS6JZrCq3suAA= Subject key identifier: DC:76:14:13:7C:A4:37:EA:F4:91:C0:C8:7F:69:BD:D6:77:48:01:9E Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 332C Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa Signing time: Fri 30 Jun 2023 15:30:43 +0000 ROA not before: Fri 30 Jun 2023 15:30:43 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 45926 IP address blocks: 103.245.212.0/22 maxlen: 22 110.173.224.0/22 maxlen: 22 203.15.141.0/24 maxlen: 24 2001:df0:9e80::/48 maxlen: 48 2403:dc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13100 (0x332c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: Jun 30 15:30:43 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649ef522-e7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:eb:14:9d:d5:53:cf:4a:2c:1e:d2:e6:26: 5d:88:99:f9:88:41:4e:9c:53:eb:87:71:d3:4e:11: 59:de:b2:83:fe:88:68:97:99:d6:0c:7e:51:75:68: 9f:da:5c:26:90:12:a6:2b:4b:5e:e1:f8:07:e1:5e: 87:33:5d:d2:e5:0b:1f:12:a1:f8:3d:d4:32:ed:65: 09:68:04:3b:a2:67:cb:4e:c7:f9:e5:00:25:64:90: 30:23:f0:fe:ca:bd:b3:2b:87:15:20:34:4b:40:21: 2d:f1:c0:1d:b0:fc:e1:b4:fc:c4:2f:c7:0e:cd:c2: 67:57:cd:24:46:56:13:32:5e:cd:18:03:7f:2e:fe: 54:ab:e9:e8:31:bb:d8:cb:cb:38:73:c4:ab:be:22: 2a:28:9e:37:16:1c:06:cb:3e:57:ce:66:9b:b0:72: 71:86:fa:ea:6b:73:43:df:dd:73:1b:a1:7c:21:9d: 7c:4d:5e:5c:20:fe:b8:e1:86:cb:5f:3a:76:4b:1c: 97:6e:05:06:7f:29:c3:9c:22:dd:df:00:55:22:1f: a5:92:47:fe:b6:0f:f3:49:00:f5:91:b6:3e:9b:76: 82:9e:4e:0e:b4:55:7c:f6:b4:ed:7f:d8:d1:d1:0d: 28:71:ff:14:e6:10:a7:36:58:f8:aa:93:18:41:6b: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:76:14:13:7C:A4:37:EA:F4:91:C0:C8:7F:69:BD:D6:77:48:01:9E X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.212.0/22 110.173.224.0/22 203.15.141.0/24 IPv6: 2001:df0:9e80::/48 2403:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 6c:d4:0a:58:6e:0f:7c:a9:0f:ac:28:a3:bf:17:9c:28:f0:87: 31:99:b5:f7:e7:a0:18:99:08:b3:83:77:1a:08:26:7e:dd:96: 4d:58:dc:5f:9d:21:72:63:ac:e3:f9:28:4c:8b:cf:88:0a:ab: 4f:60:6e:77:3f:2c:97:84:ba:15:a2:6c:ee:1d:d0:b4:1f:24: 44:81:e6:a1:1e:9e:5f:d7:51:18:46:b3:b9:4a:e7:1e:1c:6d: 6e:d8:72:5b:38:50:06:bd:44:c6:0e:d9:15:d9:48:85:ac:62: 94:62:68:db:b8:a0:e7:36:1f:58:5c:3a:eb:c6:e8:a5:9f:29: b1:c5:02:70:bd:f6:f0:0e:32:1e:49:60:66:93:e9:0f:8a:91: c8:7a:b2:8f:99:98:0b:c7:b1:b6:38:9a:c6:da:54:b0:77:23: 71:f8:75:84:48:d2:5f:4f:b0:b5:2f:38:75:9a:7b:74:ae:f8: 2f:6d:e4:8e:bd:50:fd:03:77:59:e2:39:1b:a1:0f:a4:d2:ec: 81:72:20:fe:66:bd:e2:ed:95:46:1f:70:9e:4e:51:d6:8a:62: 53:06:20:45:56:3d:64:23:ae:db:16:5f:2e:2a:6d:7f:ce:42: b6:33:01:39:d2:1d:8e:79:e8:c8:c8:ab:dd:7f:d6:bf:8e:e1: 1a:62:10:0c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICMywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjMwNjMwMTUzMDQzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDllZjUyMi1lN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkvrFJ3VU89KLB7S5iZdiJn5iEFOnFPrh3HTThFZ3rKD/ohol5nWDH5RdWif 2lwmkBKmK0te4fgH4V6HM13S5QsfEqH4PdQy7WUJaAQ7omfLTsf55QAlZJAwI/D+ yr2zK4cVIDRLQCEt8cAdsPzhtPzEL8cOzcJnV80kRlYTMl7NGAN/Lv5Uq+noMbvY y8s4c8SrviIqKJ43FhwGyz5XzmabsHJxhvrqa3ND391zG6F8IZ18TV5cIP644YbL Xzp2SxyXbgUGfynDnCLd3wBVIh+lkkf+tg/zSQD1kbY+m3aCnk4OtFV89rTtf9jR 0Q0ocf8U5hCnNlj4qpMYQWtm+wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFNx2FBN8 pDfq9JHAyH9pvdZ3SAGeMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEE5RkMvMzE5MzM3QUExRDlFMTFFMjg2RTlEMThEMDhCMDJDRDIvNzg1OUFFNkEw QjU1MTFFQUJDQkMzNDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMBgEAgABMBIDBAJn9dQDBAJureADBADLD40wFgQCAAIwEAMHACABDfCegAMF ACQD3AAwDQYJKoZIhvcNAQELBQADggEBAGzUClhuD3ypD6woo78XnCjwhzGZtffn oBiZCLODdxoIJn7dlk1Y3F+dIXJjrOP5KEyLz4gKq09gbnc/LJeEuhWibO4d0LQf JESB5qEenl/XURhGs7lK5x4cbW7Ycls4UAa9RMYO2RXZSIWsYpRiaNu4oOc2H1hc OuvG6KWfKbHFAnC99vAOMh5JYGaT6Q+Kkch6so+ZmAvHsbY4msbaVLB3I3H4dYRI 0l9PsLUvOHWae3Su+C9t5I69UP0Dd1niORuhD6TS7IFyIP5mveLtlUYfcJ5OUdaK YlMGIEVWPWQjrtsWXy4qbX/OQrYzATnSHY556MjIq91/1r+O4RpiEAw= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org