$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/2A0CFF60000811EC9CB70449C4F9AE02.roa File: 2A0CFF60000811EC9CB70449C4F9AE02.roa (raw, json) Hash identifier: slDwBJ8SrOY53C1WcLW4YgR010A4sLsmuSXnvRxd4f8= Subject key identifier: 0F:E2:31:49:45:94:67:9B:EE:BE:DE:36:EB:42:A9:07:CD:2A:C4:06 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 06D7 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/2A0CFF60000811EC9CB70449C4F9AE02.roa Signing time: Thu 28 Sep 2023 21:59:00 +0000 ROA not before: Thu 28 Sep 2023 21:59:00 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 141014 IP address blocks: 103.154.234.0/23 maxlen: 23 103.154.234.0/24 maxlen: 24 103.154.235.0/24 maxlen: 24 2406:5ec0::/32 maxlen: 32 2406:5ec0:1::/48 maxlen: 48 2406:5ec0:2::/48 maxlen: 48 2406:5ec0:3::/48 maxlen: 48 2406:5ec0:4::/48 maxlen: 48 2406:5ec0:5::/48 maxlen: 48 2406:5ec0:6::/48 maxlen: 48 2406:5ec0:7::/48 maxlen: 48 2406:5ec0:8::/48 maxlen: 48 2406:5ec0:9::/48 maxlen: 48 2406:5ec0:a::/48 maxlen: 48 2406:5ec0:b::/48 maxlen: 48 2406:5ec0:c::/48 maxlen: 48 2406:5ec0:d::/48 maxlen: 48 2406:5ec0:e::/48 maxlen: 48 2406:5ec0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1751 (0x6d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Sep 28 21:59:00 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6515f724-8e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:4c:b2:80:9d:de:6d:b6:39:d0:b2:ab:b9: 9f:19:12:67:56:c3:13:93:62:80:6a:27:97:a9:bf: 6f:16:db:f2:6e:f9:31:e7:a6:3e:62:ca:5e:61:1d: 9a:92:66:fb:17:c4:8c:2a:b1:22:19:d2:43:87:28: 04:c7:96:20:ca:d2:4a:8a:9f:e3:64:a6:16:99:2b: 81:04:4c:97:31:8b:6f:63:f6:8c:74:82:5b:fd:bb: c3:33:e0:bd:f8:0f:7f:a9:c9:f9:5c:51:63:c0:84: 2d:bd:d6:98:aa:23:61:20:84:b3:28:6c:85:97:25: ff:61:8d:52:1d:1b:65:13:40:cd:34:c5:59:3b:75: 26:f9:f5:4d:b7:14:c5:ea:44:5e:f4:4a:84:c0:94: 86:93:cb:a8:fd:2f:98:7e:85:f2:50:02:d6:56:27: 57:ff:16:9e:2a:07:ae:1a:d7:2e:a1:62:f6:df:43: dd:a2:aa:a3:19:9b:22:16:b0:4b:43:7c:29:60:31: 5e:95:ca:56:de:1f:b2:73:64:6d:b9:dd:70:b2:82: 48:61:7c:6b:6a:d2:f0:15:0c:2e:18:89:60:9b:e6: 85:49:cb:84:7b:99:ee:0c:7e:93:fc:27:32:b0:72: cb:ac:74:73:34:4c:96:4f:83:ed:10:b5:95:09:ed: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E2:31:49:45:94:67:9B:EE:BE:DE:36:EB:42:A9:07:CD:2A:C4:06 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/2A0CFF60000811EC9CB70449C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.234.0/23 IPv6: 2406:5ec0::/32 Signature Algorithm: sha256WithRSAEncryption c6:eb:0a:d2:ba:f5:65:6d:36:f8:8c:db:4c:10:46:c3:7a:5d: ea:31:0c:07:42:d8:fc:2a:ca:24:1e:c7:f1:d2:89:b5:b2:a4: 7b:05:5e:2a:63:64:fb:8d:76:db:24:d6:46:53:44:4b:73:43: 18:0b:e5:2c:5f:22:f8:0c:52:86:a3:0a:d0:53:94:62:ba:63: 2f:78:89:1c:46:b8:6e:90:07:61:66:a4:46:6c:27:97:b2:52: fd:5f:32:66:06:74:8a:81:bb:3a:b1:fb:78:9e:f0:15:f8:25: f3:ca:b4:4e:eb:f8:a6:d3:f1:c6:1a:79:9e:57:73:da:a5:32: ce:ab:37:58:83:69:b3:9c:23:49:7e:50:be:86:f0:fc:e3:8d: 10:bc:55:57:13:4a:93:f6:aa:c9:22:8f:c3:0f:49:f5:48:80: ba:17:61:bd:7e:5d:08:98:a0:f1:36:06:de:9b:c1:7c:7c:0d: 55:80:56:70:e8:d7:ee:10:f0:18:a9:fb:18:71:24:7c:6c:45: 0b:63:91:68:15:43:08:a4:02:f4:6f:ca:70:1c:6e:55:91:7d: 9f:d9:41:1d:45:cb:ba:8d:82:cb:28:97:7f:da:99:de:5c:d2: 2c:84:9c:b1:85:4d:47:ca:b5:7d:c7:96:e3:41:3a:11:62:fa: c5:79:41:5c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjMwOTI4MjE1OTAwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1ZjcyNC04ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWZMsoCd3m22OdCyq7mfGRJnVsMTk2KAaieXqb9vFtvybvkx56Y+YspeYR2a kmb7F8SMKrEiGdJDhygEx5YgytJKip/jZKYWmSuBBEyXMYtvY/aMdIJb/bvDM+C9 +A9/qcn5XFFjwIQtvdaYqiNhIISzKGyFlyX/YY1SHRtlE0DNNMVZO3Um+fVNtxTF 6kRe9EqEwJSGk8uo/S+YfoXyUALWVidX/xaeKgeuGtcuoWL230PdoqqjGZsiFrBL Q3wpYDFelcpW3h+yc2Rtud1wsoJIYXxratLwFQwuGIlgm+aFScuEe5nuDH6T/Ccy sHLLrHRzNEyWT4PtELWVCe0h9wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFA/iMUlF lGeb7r7eNutCqQfNKsQGMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVDODIvNDAyNTgwN0NFMUU4MTFFQTlFODMzQTUzQzRGOUFFMDIvMkEwQ0ZGNjAw MDA4MTFFQzlDQjcwNDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmuowDQQCAAIwBwMFACQGXsAwDQYJKoZIhvcNAQELBQAD ggEBAMbrCtK69WVtNviM20wQRsN6XeoxDAdC2PwqyiQex/HSibWypHsFXipjZPuN dtsk1kZTREtzQxgL5SxfIvgMUoajCtBTlGK6Yy94iRxGuG6QB2FmpEZsJ5eyUv1f MmYGdIqBuzqx+3ie8BX4JfPKtE7r+KbT8cYaeZ5Xc9qlMs6rN1iDabOcI0l+UL6G 8PzjjRC8VVcTSpP2qskij8MPSfVIgLoXYb1+XQiYoPE2Bt6bwXx8DVWAVnDo1+4Q 8Bip+xhxJHxsRQtjkWgVQwikAvRvynAcblWRfZ/ZQR1Fy7qNgssol3/amd5c0iyE nLGFTUfKtX3HluNBOhFi+sV5QVw= -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org