$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C461C8AD5C011ECBDDE5E14C4F9AE02.roa File: 0C461C8AD5C011ECBDDE5E14C4F9AE02.roa (raw, json) Hash identifier: 1RdCNFcXfNHFANg9LP4x7VjJ4fWw5tprk4mdO82TTS8= Subject key identifier: 29:B0:7F:4F:F8:DA:CD:EA:8B:4A:4F:93:28:59:00:13:9C:F1:FC:05 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7376 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C461C8AD5C011ECBDDE5E14C4F9AE02.roa Signing time: Wed 07 Jun 2023 06:32:12 +0000 ROA not before: Wed 07 Jun 2023 06:32:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133685 IP address blocks: 43.225.20.0/22 maxlen: 24 103.42.164.0/23 maxlen: 24 103.44.12.0/22 maxlen: 24 103.102.18.0/23 maxlen: 24 103.155.30.0/23 maxlen: 24 103.176.254.0/24 maxlen: 24 103.176.255.0/24 maxlen: 24 2403:ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29558 (0x7376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 7 06:32:12 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6480246c-446f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:12:e6:79:8c:92:ba:fd:7e:0a:63:41:15: 47:d2:b3:88:7e:83:f4:7f:b2:79:94:a6:ae:8c:88: 5a:35:9e:68:ce:37:f9:cb:bc:a7:10:59:49:8e:e7: 88:4e:ce:ab:e1:16:ec:e7:22:87:e0:f3:0f:35:f5: bc:e3:da:f0:e4:86:e5:03:79:b2:fd:d7:2b:0e:53: 24:c8:52:40:c2:fb:50:b5:27:24:99:40:58:13:81: f9:72:1c:6d:95:bf:d0:aa:cd:20:6f:09:4e:ee:a2: 83:e3:37:fe:b9:48:85:ec:77:49:85:7e:97:fc:60: 9f:08:4e:5c:b5:38:3d:7b:03:af:43:fa:bc:4c:dc: f3:bf:d2:b8:f0:c8:9a:7f:a3:82:e0:07:0c:ab:ce: b7:bd:d4:f2:74:a8:58:37:a4:ec:0b:9e:fb:72:d7: 2c:1b:77:7b:f1:6d:d2:7b:e0:55:56:25:57:4d:30: 85:7a:49:ad:db:01:a2:d6:63:fc:b6:54:25:6e:52: 5c:48:9d:6a:28:5e:1b:75:4f:a0:de:e5:4f:f1:04: 6a:76:55:c2:38:7c:29:a6:3f:ee:01:3e:d6:3b:47: 0c:f4:83:a4:4b:62:2d:54:ea:9d:b3:91:07:3a:7e: 77:a6:28:0f:94:6b:55:80:35:31:e7:c3:e1:65:6e: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B0:7F:4F:F8:DA:CD:EA:8B:4A:4F:93:28:59:00:13:9C:F1:FC:05 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C461C8AD5C011ECBDDE5E14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.20.0/22 103.42.164.0/23 103.44.12.0/22 103.102.18.0/23 103.155.30.0/23 103.176.254.0/23 IPv6: 2403:ec0::/32 Signature Algorithm: sha256WithRSAEncryption 77:72:08:34:c2:b4:a2:5a:19:b9:b2:67:85:29:c1:c4:d3:b0: 29:23:c2:df:d8:be:4e:68:8c:63:9e:f8:12:fe:33:6f:5a:27: c7:a7:63:0b:e7:9f:a3:07:c4:76:81:8c:14:b3:1d:fd:f3:3a: 9f:5f:62:33:2e:aa:58:36:df:8c:1a:a7:b1:59:23:b3:0f:04: fe:98:f8:f1:4e:6c:63:06:74:83:9f:8b:1e:03:b7:62:83:95: 13:74:0d:88:38:05:60:a7:06:6e:d5:31:4f:8a:45:3b:f9:bc: 2c:aa:80:49:f1:a4:5b:07:2a:b7:a1:13:3a:87:fa:87:86:b1: e4:a3:1b:e9:10:cd:c4:7f:c5:ee:f0:db:09:4c:d4:b9:ef:33: 53:59:2b:13:81:e5:6c:e9:4d:04:40:f2:19:7a:03:06:b2:5b: e4:d0:02:de:ad:37:8e:c9:d1:f2:98:f4:ec:7d:63:29:d0:4d: dd:8f:06:f7:08:74:2e:d7:dc:1e:46:fe:d2:3d:8e:83:0e:00: c9:68:74:a6:31:73:0f:af:60:03:0e:1e:e1:07:4c:6a:d8:f7: a9:ca:ce:e1:d6:87:e0:99:68:7f:7c:6a:f5:fa:3d:62:69:42: 82:90:52:1d:3b:bb:65:6d:89:bc:b1:27:0c:ef:2f:65:7e:cc: b5:7a:9f:49 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICc3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjA3MDYzMjEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDgwMjQ2Yy00NDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxYS5nmMkrr9fgpjQRVH0rOIfoP0f7J5lKaujIhaNZ5ozjf5y7ynEFlJjueI Ts6r4Rbs5yKH4PMPNfW849rw5IblA3my/dcrDlMkyFJAwvtQtSckmUBYE4H5chxt lb/Qqs0gbwlO7qKD4zf+uUiF7HdJhX6X/GCfCE5ctTg9ewOvQ/q8TNzzv9K48Mia f6OC4AcMq863vdTydKhYN6TsC577ctcsG3d78W3Se+BVViVXTTCFekmt2wGi1mP8 tlQlblJcSJ1qKF4bdU+g3uVP8QRqdlXCOHwppj/uAT7WO0cM9IOkS2ItVOqds5EH On53pigPlGtVgDUx58PhZW6pawIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFCmwf0/4 2s3qi0pPkyhZABOc8fwFMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEM0NjFDOEFE NUMwMTFFQ0JEREU1RTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAIr4RQDBAFnKqQDBAJnLAwDBAFnZhIDBAFnmx4DBAFnsP4w DQQCAAIwBwMFACQDDsAwDQYJKoZIhvcNAQELBQADggEBAHdyCDTCtKJaGbmyZ4Up wcTTsCkjwt/Yvk5ojGOe+BL+M29aJ8enYwvnn6MHxHaBjBSzHf3zOp9fYjMuqlg2 34wap7FZI7MPBP6Y+PFObGMGdIOfix4Dt2KDlRN0DYg4BWCnBm7VMU+KRTv5vCyq gEnxpFsHKrehEzqH+oeGseSjG+kQzcR/xe7w2wlM1LnvM1NZKxOB5WzpTQRA8hl6 AwayW+TQAt6tN47J0fKY9Ox9YynQTd2PBvcIdC7X3B5G/tI9joMOAMlodKYxcw+v YAMOHuEHTGrY96nKzuHWh+CZaH98avX6PWJpQoKQUh07u2VtibyxJwzvL2V+zLV6 n0k= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org