$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08DB807ECFBC11EEA1200A35C4F9AE02.roa File: 08DB807ECFBC11EEA1200A35C4F9AE02.roa (raw, json) Hash identifier: 4J5wweyh0+LUCji064nIT7TSFYftGbaS7QDCeTBg02g= Subject key identifier: 12:18:1B:ED:BE:D1:F7:5F:B4:FD:B9:0E:DF:1F:E8:A9:B1:E8:69:B0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 833B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08DB807ECFBC11EEA1200A35C4F9AE02.roa Signing time: Tue 20 Feb 2024 06:48:20 +0000 ROA not before: Tue 20 Feb 2024 06:48:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147277 IP address blocks: 103.109.44.0/22 maxlen: 24 103.176.188.0/24 maxlen: 24 2001:df2:140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33595 (0x833b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Feb 20 06:48:20 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65d44b34-6727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:3b:08:ec:a2:75:b6:c2:d8:06:20:24:d7: 96:bc:d8:67:24:01:4a:ba:78:bd:1f:7d:44:55:70: d8:bb:aa:5b:93:5f:82:d2:58:8c:40:c8:36:64:73: 23:a2:87:63:ce:29:a6:e6:f4:13:68:cf:5d:e2:9f: 9c:36:6e:10:44:93:7a:01:c3:47:13:ff:c4:98:ec: 1c:94:c8:20:67:f5:23:24:b9:3c:aa:68:f0:09:87: 5f:6f:e6:10:e0:81:02:e9:d3:ae:4f:f0:19:f0:ad: 0c:b2:4e:31:6f:04:1e:1e:e3:b9:34:2a:ec:77:09: b9:01:7c:e8:7d:aa:42:1f:9b:a8:33:dd:f9:9b:ef: 5d:ff:b3:bd:f1:8c:f7:b4:45:95:43:50:7f:ad:87: a3:f4:44:69:43:be:8b:94:9b:5d:4c:b2:be:3e:d3: eb:3d:bd:c9:6c:57:86:63:38:8f:ee:95:59:48:0c: c9:e4:0a:13:2a:f1:47:99:2c:aa:66:53:df:74:dd: 28:a2:9c:39:f2:20:3d:ee:d5:6a:82:63:51:f1:11: ae:77:bb:b8:9b:80:3e:7b:54:f3:56:ed:c3:06:2a: cd:30:76:c4:4e:48:dd:ba:61:3b:d6:80:4e:ac:21: a3:a8:41:2e:8a:48:cc:71:13:2b:8d:83:f3:a9:9c: 9b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:18:1B:ED:BE:D1:F7:5F:B4:FD:B9:0E:DF:1F:E8:A9:B1:E8:69:B0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08DB807ECFBC11EEA1200A35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.44.0/22 103.176.188.0/24 IPv6: 2001:df2:140::/48 Signature Algorithm: sha256WithRSAEncryption 05:8c:9d:55:78:18:86:66:21:2d:2f:70:f0:3b:cb:0f:a6:d7: 8a:34:9a:5f:e2:8e:d2:06:c1:71:f7:86:ae:70:56:5a:34:36: 9a:7c:f9:5a:2f:d1:be:a9:d9:36:1a:57:d9:c5:ea:e1:52:b1: 3d:6e:0b:cf:6c:8b:37:62:96:99:a6:da:b7:04:e3:26:dd:2d: d8:9e:6e:c3:03:c0:4b:0a:db:a9:e3:88:1b:36:66:65:be:f4: 8d:fe:c1:c6:76:41:31:d4:16:33:67:c2:81:37:64:f8:bd:80: 9b:72:fe:52:c9:9e:c2:d8:4f:01:59:0d:f8:ae:2b:04:e5:05: f2:1e:a1:1f:51:8d:03:d8:18:9f:18:20:38:bf:e1:b4:f9:d1: 0f:87:cb:60:22:42:55:da:92:31:27:d1:dd:53:98:22:40:9d: e2:2b:0c:f3:5c:76:62:cf:ef:50:fa:b5:cc:ee:c6:5c:fd:3d: e3:2d:4b:a8:27:de:7e:32:ed:1c:36:f7:8b:a9:7d:83:02:0a: 93:25:e1:b2:5a:37:31:81:76:c0:be:8a:ed:ae:20:73:5d:8b: 47:cb:68:75:76:24:93:bb:db:27:e6:a7:8c:0c:64:fa:b7:14: fd:93:d0:10:f2:f8:f9:ab:28:fb:d8:a4:9c:b0:ff:d3:ee:bb: 40:48:7b:36 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAIM7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDIyMDA2NDgyMFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVkNDRiMzQtNjcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/7OwjsonW2wtgGICTXlrzYZyQBSrp4vR99RFVw2LuqW5NfgtJYjEDINmRz I6KHY84ppub0E2jPXeKfnDZuEESTegHDRxP/xJjsHJTIIGf1IyS5PKpo8AmHX2/m EOCBAunTrk/wGfCtDLJOMW8EHh7juTQq7HcJuQF86H2qQh+bqDPd+ZvvXf+zvfGM 97RFlUNQf62Ho/REaUO+i5SbXUyyvj7T6z29yWxXhmM4j+6VWUgMyeQKEyrxR5ks qmZT33TdKKKcOfIgPe7VaoJjUfERrne7uJuAPntU81btwwYqzTB2xE5I3bphO9aA Tqwho6hBLopIzHETK42D86mcm3cCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBQSGBvt vtH3X7T9uQ7fH+ipsehpsDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA4REI4MDdF Q0ZCQzExRUVBMTIwMEEzNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQCZ20sAwQAZ7C8MA8EAgACMAkDBwAgAQ3yAUAwDQYJKoZI hvcNAQELBQADggEBAAWMnVV4GIZmIS0vcPA7yw+m14o0ml/ijtIGwXH3hq5wVlo0 Npp8+Vov0b6p2TYaV9nF6uFSsT1uC89sizdilpmm2rcE4ybdLdiebsMDwEsK26nj iBs2ZmW+9I3+wcZ2QTHUFjNnwoE3ZPi9gJty/lLJnsLYTwFZDfiuKwTlBfIeoR9R jQPYGJ8YIDi/4bT50Q+Hy2AiQlXakjEn0d1TmCJAneIrDPNcdmLP71D6tczuxlz9 PeMtS6gn3n4y7Rw294upfYMCCpMl4bJaNzGBdsC+iu2uIHNdi0fLaHV2JJO72yfm p4wMZPq3FP2T0BDy+PmrKPvYpJyw/9Puu0BIezY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org