$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06694A9CB3F311ECBCB2F130C4F9AE02.roa File: 06694A9CB3F311ECBCB2F130C4F9AE02.roa (raw, json) Hash identifier: 4xo8Bl+m9/ogwjreUCcBcnB1VtHYlfd8aHxQr7MkUhw= Subject key identifier: 78:E4:25:E3:65:92:40:20:75:3D:65:67:1C:D1:E5:C5:C9:36:D2:CF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B79 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06694A9CB3F311ECBCB2F130C4F9AE02.roa Signing time: Wed 10 May 2023 16:19:51 +0000 ROA not before: Wed 10 May 2023 16:19:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134939 IP address blocks: 103.185.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27513 (0x6b79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:19:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc426-1f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:34:d1:91:f4:3a:90:56:98:71:e8:23:0a: a1:16:67:6e:86:c6:8c:65:a2:c3:bd:18:07:a9:ea: 50:d0:bd:8a:a0:ce:30:d5:a9:5d:ce:d5:0a:ce:ef: 57:1f:3d:b0:cd:96:ac:63:2c:5d:77:43:49:25:7d: 68:ab:6a:2d:95:f8:1d:a5:11:c8:e9:1d:ae:16:ac: 25:08:60:2f:34:ad:de:d3:7d:75:fd:1c:3a:d3:06: 4e:59:49:bb:31:fb:78:8d:00:5b:a5:9e:43:fe:44: 69:e9:b1:45:52:bd:fa:13:87:65:8a:b2:05:20:d5: 0a:1e:2e:59:ec:78:9a:09:e7:30:a5:5a:be:27:97: d0:df:db:0b:40:13:64:a6:91:99:68:be:e7:97:93: d4:59:56:7e:ab:47:37:b4:d8:57:d8:c0:a5:ee:22: c6:ab:e2:7a:a2:b0:f6:1b:53:bc:a4:d4:19:cd:ae: 59:17:fc:70:20:60:98:c1:48:b0:df:0e:1a:ee:2d: 3d:9a:da:26:3f:a5:f4:e1:2c:af:4d:df:89:f6:c3: 61:70:9f:66:24:28:a2:07:b3:1c:6e:c8:49:11:40: e7:f5:c8:8b:48:f5:30:e3:97:91:4f:0f:f2:d8:1f: 4f:65:3d:82:26:e1:61:f4:48:1d:57:e2:88:d7:3f: 36:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E4:25:E3:65:92:40:20:75:3D:65:67:1C:D1:E5:C5:C9:36:D2:CF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06694A9CB3F311ECBCB2F130C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.108.0/23 Signature Algorithm: sha256WithRSAEncryption 80:4c:b3:04:4d:da:da:24:4f:00:a2:42:e7:3f:ec:93:38:6e: ca:94:5e:3c:f8:ca:54:19:34:be:7c:e6:89:2d:5c:26:cf:12: ff:94:ac:40:85:34:68:fa:a8:80:92:15:ab:69:1e:78:41:de: 7e:53:b5:be:3a:60:57:51:22:00:6f:78:9a:a7:15:28:69:b9: b7:87:ad:0a:9d:a1:e3:0b:ac:5b:a8:52:f2:29:7b:75:ca:f4: c1:f4:d2:c6:35:ec:43:a4:ed:11:d7:fc:9e:a2:fb:a0:58:12: d7:f0:d8:50:45:59:69:b6:6f:92:23:9d:85:fa:fc:c0:1c:23: a0:b2:ed:20:b6:94:d6:df:da:4d:9a:26:19:f4:4d:38:e5:b7: 9d:19:08:8b:fe:d4:23:b1:e4:cb:0f:33:02:f0:20:a5:fc:e6: 92:04:93:45:ee:69:3c:46:69:19:df:03:c4:49:ad:9b:8f:8d: b6:c6:12:8e:65:a5:ac:e3:1d:e3:23:d5:3b:03:59:09:55:40: cf:90:b9:9e:2c:99:49:80:38:90:d2:60:9f:e5:d1:bb:97:d6: 05:8e:77:a6:b0:2c:6c:0a:f9:97:08:48:98:2a:76:7a:a8:c1: 28:a3:f3:cc:2a:18:89:52:17:04:85:db:db:5d:be:be:46:33: fb:ab:5a:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICa3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxOTUxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQyNi0xZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4Q00ZH0OpBWmHHoIwqhFmduhsaMZaLDvRgHqepQ0L2KoM4w1aldztUKzu9X Hz2wzZasYyxdd0NJJX1oq2otlfgdpRHI6R2uFqwlCGAvNK3e0311/Rw60wZOWUm7 Mft4jQBbpZ5D/kRp6bFFUr36E4dlirIFINUKHi5Z7HiaCecwpVq+J5fQ39sLQBNk ppGZaL7nl5PUWVZ+q0c3tNhX2MCl7iLGq+J6orD2G1O8pNQZza5ZF/xwIGCYwUiw 3w4a7i09mtomP6X04SyvTd+J9sNhcJ9mJCiiB7McbshJEUDn9ciLSPUw45eRTw/y 2B9PZT2CJuFh9EgdV+KI1z82MwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHjkJeNl kkAgdT1lZxzR5cXJNtLPMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDY2OTRBOUNC M0YzMTFFQ0JDQjJGMTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuWwwDQYJKoZIhvcNAQELBQADggEBAIBMswRN2tokTwCi Quc/7JM4bsqUXjz4ylQZNL585oktXCbPEv+UrECFNGj6qICSFatpHnhB3n5Ttb46 YFdRIgBveJqnFShpubeHrQqdoeMLrFuoUvIpe3XK9MH00sY17EOk7RHX/J6i+6BY Etfw2FBFWWm2b5IjnYX6/MAcI6Cy7SC2lNbf2k2aJhn0TTjlt50ZCIv+1COx5MsP MwLwIKX85pIEk0XuaTxGaRnfA8RJrZuPjbbGEo5lpazjHeMj1TsDWQlVQM+QuZ4s mUmAOJDSYJ/l0buX1gWOd6awLGwK+ZcISJgqdnqowSij88wqGIlSFwSF29tdvr5G M/urWvE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org