$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/077DD32ADEED11EBB0C6A33CC4F9AE02.roa File: 077DD32ADEED11EBB0C6A33CC4F9AE02.roa (raw, json) Hash identifier: yIFSKbyBH4rmQR1UB2fN+PsRcJF8iPkgNxvAHj8IVLc= Subject key identifier: D8:FB:1F:01:3F:9F:DC:47:85:08:B4:45:70:A0:60:A0:8F:D2:C7:C1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A63 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/077DD32ADEED11EBB0C6A33CC4F9AE02.roa Signing time: Wed 10 May 2023 16:14:32 +0000 ROA not before: Wed 10 May 2023 16:14:32 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133257 IP address blocks: 103.121.68.0/22 maxlen: 24 2400:9d60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27235 (0x6a63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:14:32 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2e8-10db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:31:f5:7b:f4:99:7a:f6:9d:96:25:cf:3f: bd:88:49:e3:f3:4b:dc:d2:4b:7d:c1:62:7f:02:be: c9:cb:42:46:af:7a:33:f8:fb:69:05:65:a2:82:5a: 55:b4:ee:8d:fb:26:a6:a7:4b:e1:ac:8e:dd:2f:a4: 24:98:3f:b0:06:a5:81:b3:7f:75:74:44:64:0b:6c: cb:dc:af:2c:f9:6a:9f:d9:b9:9a:14:61:b4:f0:74: 1b:2a:15:c1:58:bc:a0:2b:1d:67:c0:a2:1a:b0:6a: 7e:ad:e4:59:dc:b9:63:b4:2f:4a:82:fc:67:a0:34: 8c:3d:c3:e3:03:62:83:0a:74:e5:df:bb:59:5b:e8: 9d:fe:14:94:92:01:4f:95:55:e6:9d:2f:c2:96:61: 4b:b6:bf:fa:2f:15:73:90:d6:2a:36:7f:ce:bd:45: 16:b5:86:e6:bf:89:6c:6e:dc:8c:a6:4c:8f:cb:52: 32:78:60:4a:b3:d0:c7:8a:05:c5:29:4a:f1:bd:d6: b2:c2:ab:4a:6e:b9:d9:cd:fe:ba:ea:d6:e3:0f:3b: d9:07:83:f4:de:81:15:37:e3:b4:a6:23:e6:c7:0c: 8e:19:49:72:be:25:ec:92:e7:4c:7d:da:37:b3:6f: c1:e5:68:60:ec:b3:0a:b0:70:05:62:4d:c1:3c:99: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FB:1F:01:3F:9F:DC:47:85:08:B4:45:70:A0:60:A0:8F:D2:C7:C1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/077DD32ADEED11EBB0C6A33CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.68.0/22 IPv6: 2400:9d60::/32 Signature Algorithm: sha256WithRSAEncryption a2:1b:0c:ec:fd:63:7d:e4:73:7e:55:cf:d5:df:ad:7f:25:06: d5:90:37:0c:ff:ce:49:f5:9d:9e:e9:ba:27:01:ad:9c:ff:e6: 14:9d:79:f2:94:a9:89:16:79:50:8f:c2:2a:98:87:5a:1b:ec: 04:6e:48:67:11:d5:53:99:a3:26:1b:14:38:8e:50:a5:68:0e: af:bf:d9:48:0f:19:87:3e:2c:9f:6e:17:54:10:b5:fe:df:a3: dd:e0:8a:73:f4:bc:06:16:44:f2:a1:c7:5c:86:af:6d:0f:28: 78:33:95:b8:58:de:c9:22:9b:3a:fb:4a:6f:be:41:a6:52:53: 1c:24:4e:6c:3d:16:c5:4c:9f:01:51:cc:a4:cd:ff:a2:5a:96: 12:bf:94:d2:e3:c4:6e:de:76:7a:77:51:8b:fe:3f:fa:d3:47: 22:53:a9:29:74:95:0c:b3:d0:29:3f:b0:b0:a7:57:25:58:d9: 46:5a:8f:c0:25:64:a5:44:6d:d7:a1:e1:59:d8:ac:86:61:63: b8:c7:b7:d1:00:e0:80:76:0b:59:c5:8d:3e:e2:28:3d:7a:c6: 55:a5:dc:4c:17:ac:06:95:03:3b:de:24:8b:86:90:2b:b3:a6: 28:83:02:7a:c2:b9:d0:f5:dd:5a:1f:6f:e1:5e:76:43:a8:0e: 19:3d:6d:6a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICamMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNDMyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJlOC0xMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Rcx9Xv0mXr2nZYlzz+9iEnj80vc0kt9wWJ/Ar7Jy0JGr3oz+PtpBWWiglpV tO6N+yamp0vhrI7dL6QkmD+wBqWBs391dERkC2zL3K8s+Wqf2bmaFGG08HQbKhXB WLygKx1nwKIasGp+reRZ3LljtC9KgvxnoDSMPcPjA2KDCnTl37tZW+id/hSUkgFP lVXmnS/ClmFLtr/6LxVzkNYqNn/OvUUWtYbmv4lsbtyMpkyPy1IyeGBKs9DHigXF KUrxvdaywqtKbrnZzf666tbjDzvZB4P03oEVN+O0piPmxwyOGUlyviXskudMfdo3 s2/B5Whg7LMKsHAFYk3BPJkunQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNj7HwE/ n9xHhQi0RXCgYKCP0sfBMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDc3REQzMkFE RUVEMTFFQkIwQzZBMzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneUQwDQQCAAIwBwMFACQAnWAwDQYJKoZIhvcNAQELBQAD ggEBAKIbDOz9Y33kc35Vz9XfrX8lBtWQNwz/zkn1nZ7puicBrZz/5hSdefKUqYkW eVCPwiqYh1ob7ARuSGcR1VOZoyYbFDiOUKVoDq+/2UgPGYc+LJ9uF1QQtf7fo93g inP0vAYWRPKhx1yGr20PKHgzlbhY3skimzr7Sm++QaZSUxwkTmw9FsVMnwFRzKTN /6JalhK/lNLjxG7ednp3UYv+P/rTRyJTqSl0lQyz0Ck/sLCnVyVY2UZaj8AlZKVE bdeh4VnYrIZhY7jHt9EA4IB2C1nFjT7iKD16xlWl3EwXrAaVAzveJIuGkCuzpiiD AnrCudD13Vofb+FedkOoDhk9bWo= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:12 2024 by rpki-client on console-fra.rpki-client.org