$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09012B281D1111EB94731745C4F9AE02.roa File: 09012B281D1111EB94731745C4F9AE02.roa (raw, json) Hash identifier: gQlPjEx1zu5TstlVxLqdsRfueg3cWBUbZafKyjre58o= Subject key identifier: 49:D2:66:EA:62:2A:F6:06:5A:68:D4:E1:BB:3B:79:CA:DE:E0:4E:D3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D76 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09012B281D1111EB94731745C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:27 +0000 ROA not before: Wed 10 May 2023 16:29:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138286 IP address blocks: 103.157.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28022 (0x6d76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc666-92c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:84:5d:26:f9:d5:8f:7b:0c:46:51:19:71:79: 83:89:c0:11:72:d7:ce:5c:0f:04:f6:e4:d3:c9:a7: 3b:a8:59:a7:fd:3e:0f:3e:2c:ee:82:c4:fe:47:8e: 21:1f:6d:6a:fb:1b:38:f5:8e:52:2d:7d:14:f9:40: ac:80:2c:78:c1:a6:2b:35:c5:82:94:53:c9:d7:5d: 5a:ad:8f:dd:b2:5f:d9:11:b7:ac:79:29:b6:31:9b: dd:1a:22:36:8d:df:94:b8:ed:7d:9e:91:15:7b:ba: 04:5c:6c:d9:2d:0c:99:cf:60:41:99:87:4c:a2:fe: 63:7d:07:6e:d5:c3:03:07:a7:af:71:81:6a:2e:37: 66:62:cd:4a:0e:eb:4e:9b:5a:2b:f7:2c:d6:6c:2b: a5:bf:10:fb:b4:60:87:34:ff:44:9b:c3:54:36:cc: cb:e0:85:1d:07:5e:1b:e4:52:b4:9e:ea:99:d1:a5: 0b:68:01:d7:5c:28:9a:59:9f:17:8a:3e:63:e4:24: b1:f1:38:54:58:21:91:d9:5a:ca:a5:51:b6:ef:7f: e3:a1:39:11:d5:95:b0:f1:c6:af:07:00:05:56:30: ac:8b:87:3a:77:ca:d7:61:1f:a8:70:c9:8d:28:5b: 5b:d1:30:b6:59:c3:92:64:9a:21:c0:57:99:53:54: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:66:EA:62:2A:F6:06:5A:68:D4:E1:BB:3B:79:CA:DE:E0:4E:D3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09012B281D1111EB94731745C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.8.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:b2:b4:58:1d:ce:76:e8:fd:8b:c6:16:ab:19:c0:d5:65:7e: bb:1d:b9:2f:7d:d5:87:58:85:1a:9b:7a:d1:62:55:70:bb:15: ad:77:2b:fd:f1:83:4b:74:32:6f:7a:7d:ed:6e:97:e8:54:67: 26:9b:5e:73:08:bb:8f:75:fb:77:fb:df:3c:af:fa:e6:e2:c2: 90:20:ff:d5:4d:13:a8:fd:c4:1a:e8:05:5a:fb:63:1b:c5:38: 00:1b:40:7b:bb:39:31:bf:aa:74:dd:a9:31:c2:8c:c0:77:7d: be:05:cc:f3:dc:41:43:e0:fe:cf:4d:97:6a:6c:34:82:07:25: c6:a4:9d:1a:af:a1:f1:73:50:e9:98:29:0b:cb:fc:12:cf:2e: e3:13:33:c3:89:06:93:d3:58:df:88:4e:e0:7b:3c:57:4d:aa: fd:d2:29:4b:73:ba:8b:95:20:6c:6f:e3:0d:fc:43:69:58:33: 73:6c:c0:cb:ed:f3:35:61:9d:42:44:22:c1:c3:98:3e:39:a7: 45:78:aa:99:22:7a:37:3b:26:81:c8:d5:54:10:e3:53:7c:95: 08:8b:a4:0c:4f:52:61:39:79:77:24:4b:ae:df:25:20:ea:2c: fc:6b:66:8c:47:e4:0a:5e:da:8e:a2:a5:da:44:fb:66:d6:b1: 0e:e4:1b:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY2Ni05MmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4RdJvnVj3sMRlEZcXmDicARctfOXA8E9uTTyac7qFmn/T4PPizugsT+R44h H21q+xs49Y5SLX0U+UCsgCx4waYrNcWClFPJ111arY/dsl/ZEbeseSm2MZvdGiI2 jd+UuO19npEVe7oEXGzZLQyZz2BBmYdMov5jfQdu1cMDB6evcYFqLjdmYs1KDutO m1or9yzWbCulvxD7tGCHNP9Em8NUNszL4IUdB14b5FK0nuqZ0aULaAHXXCiaWZ8X ij5j5CSx8ThUWCGR2VrKpVG273/joTkR1ZWw8cavBwAFVjCsi4c6d8rXYR+ocMmN KFtb0TC2WcOSZJohwFeZU1RofwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEnSZupi KvYGWmjU4bs7ecre4E7TMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDkwMTJCMjgx RDExMTFFQjk0NzMxNzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnQgwDQYJKoZIhvcNAQELBQADggEBAJ6ytFgdznbo/YvG FqsZwNVlfrsduS991YdYhRqbetFiVXC7Fa13K/3xg0t0Mm96fe1ul+hUZyabXnMI u491+3f73zyv+ubiwpAg/9VNE6j9xBroBVr7YxvFOAAbQHu7OTG/qnTdqTHCjMB3 fb4FzPPcQUPg/s9Nl2psNIIHJcaknRqvofFzUOmYKQvL/BLPLuMTM8OJBpPTWN+I TuB7PFdNqv3SKUtzuouVIGxv4w38Q2lYM3NswMvt8zVhnUJEIsHDmD45p0V4qpki ejc7JoHI1VQQ41N8lQiLpAxPUmE5eXckS67fJSDqLPxrZoxH5Ape2o6ipdpE+2bW sQ7kG88= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org