$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/CA67185A02E511EF8ED1355CC4F9AE02.roa File: CA67185A02E511EF8ED1355CC4F9AE02.roa (raw, json) Hash identifier: wHhpRiqBr3hK50V+Phj70tryQ0HqBEHePg9PAHRjbTI= Subject key identifier: 81:17:42:B5:07:80:DB:92:57:2D:C5:36:28:59:BF:E1:C8:14:81:84 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 093F Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/CA67185A02E511EF8ED1355CC4F9AE02.roa Signing time: Thu 02 May 2024 21:39:54 +0000 ROA not before: Thu 02 May 2024 21:39:54 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140523 IP address blocks: 103.150.18.0/23 maxlen: 23 103.150.18.0/24 maxlen: 24 2001:df3:4d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 21:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: May 2 21:39:54 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6634082a-e67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:fa:7d:48:5e:c0:15:3f:57:52:4f:eb:e3: a1:a1:cb:27:dc:fa:e5:b2:54:70:13:b1:6b:98:e3: 6d:84:b4:be:20:53:d4:c2:dd:71:93:79:4a:6b:81: 70:0b:90:6d:42:f1:1c:2f:f1:cc:c5:9d:13:c5:b2: 82:f9:5d:81:16:ec:ff:30:92:cc:17:ea:7d:8d:3b: 1c:12:67:2b:1f:7c:d1:69:87:cb:cf:c6:c4:94:aa: ba:5f:30:6f:ed:25:9f:b4:f1:a9:a2:68:08:81:99: ac:8c:0c:c9:45:db:cb:e2:ab:3c:16:35:ca:08:48: 44:d7:ee:1c:01:a2:93:c6:69:6c:05:0a:07:4e:d0: 8d:d9:79:58:58:8e:a0:77:82:16:74:9a:62:bd:ca: c7:a8:d5:6a:a7:79:c6:c7:53:43:32:95:a7:99:00: e9:42:fd:2d:b0:f6:78:28:9a:54:bc:1e:45:43:4f: de:67:20:4f:e6:03:e3:24:6b:20:09:f7:13:d2:45: 20:9c:83:ad:0c:06:52:f4:b3:0a:d9:d9:21:cd:88: 3f:39:d3:5b:22:86:69:4b:65:f6:8f:32:7d:bc:6a: 7c:a9:23:15:0d:78:29:42:8c:0a:74:a1:4d:cd:d1: 40:66:2a:b0:26:36:4f:f4:98:f2:f5:a5:f8:54:63: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:17:42:B5:07:80:DB:92:57:2D:C5:36:28:59:BF:E1:C8:14:81:84 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/CA67185A02E511EF8ED1355CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.18.0/23 IPv6: 2001:df3:4d80::/48 Signature Algorithm: sha256WithRSAEncryption 68:89:cd:6e:0f:b9:ca:29:7c:c0:d4:99:67:91:34:cb:23:83: 17:dd:3a:38:92:67:61:0b:9a:71:cb:5d:ab:0b:f4:29:cd:58: b3:c0:8a:02:b8:f3:6a:e5:9a:50:f9:42:8e:a1:49:fe:e2:da: 89:29:78:f2:6a:0f:e1:f2:cd:50:01:fe:fa:5a:7e:d0:b5:87: bd:8a:06:9c:11:44:e4:31:db:03:ee:ad:68:59:51:6d:4a:1e: 1e:09:d0:79:73:f3:8d:c9:7b:8d:91:3b:9f:01:69:f5:59:8f: 5c:41:20:e5:48:79:be:a3:76:51:71:f0:77:e7:ae:4a:94:e7: c3:89:a1:05:c0:28:49:88:90:f2:9a:b7:c3:00:98:40:9a:d0: 1d:37:6f:2a:81:e4:98:2a:9f:54:ff:87:9c:28:60:40:8b:ef: c8:ec:f3:9f:5a:a0:00:03:23:64:3b:e9:7a:3c:4d:ee:83:08: bc:52:78:7a:1e:4b:11:ed:c7:d9:33:3a:38:37:e9:80:02:ab: a8:21:dd:bc:7c:2e:3e:a0:da:d0:e2:a9:72:89:80:a5:82:f4: 7e:96:24:7f:9b:87:c4:79:d8:0c:5f:46:d1:80:0b:d3:7a:56: bb:c3:a2:e9:94:a8:97:e3:ad:51:f8:e3:1f:40:c2:7f:8f:32: d3:52:2e:5b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjQwNTAyMjEzOTU0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0MDgyYS1lNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyz6fUhewBU/V1JP6+Ohocsn3PrlslRwE7FrmONthLS+IFPUwt1xk3lKa4Fw C5BtQvEcL/HMxZ0TxbKC+V2BFuz/MJLMF+p9jTscEmcrH3zRaYfLz8bElKq6XzBv 7SWftPGpomgIgZmsjAzJRdvL4qs8FjXKCEhE1+4cAaKTxmlsBQoHTtCN2XlYWI6g d4IWdJpivcrHqNVqp3nGx1NDMpWnmQDpQv0tsPZ4KJpUvB5FQ0/eZyBP5gPjJGsg CfcT0kUgnIOtDAZS9LMK2dkhzYg/OdNbIoZpS2X2jzJ9vGp8qSMVDXgpQowKdKFN zdFAZiqwJjZP9Jjy9aX4VGMrlwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIEXQrUH gNuSVy3FNihZv+HIFIGEMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJERUIvRkE1Q0Y0MkM3NUJDMTFFQUEzRTNBMDZBQzRGOUFFMDIvQ0E2NzE4NUEw MkU1MTFFRjhFRDEzNTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlhIwDwQCAAIwCQMHACABDfNNgDANBgkqhkiG9w0BAQsF AAOCAQEAaInNbg+5yil8wNSZZ5E0yyODF906OJJnYQuacctdqwv0Kc1Ys8CKArjz auWaUPlCjqFJ/uLaiSl48moP4fLNUAH++lp+0LWHvYoGnBFE5DHbA+6taFlRbUoe HgnQeXPzjcl7jZE7nwFp9VmPXEEg5Uh5vqN2UXHwd+euSpTnw4mhBcAoSYiQ8pq3 wwCYQJrQHTdvKoHkmCqfVP+HnChgQIvvyOzzn1qgAAMjZDvpejxN7oMIvFJ4eh5L Ee3H2TM6ODfpgAKrqCHdvHwuPqDa0OKpcomApYL0fpYkf5uHxHnYDF9G0YAL03pW u8Oi6ZSol+OtUfjjH0DCf48y01IuWw== -----END CERTIFICATE-----Generated at Wed May 22 22:41:52 2024 by rpki-client on console-fra.rpki-client.org