$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/109A89C2A8C811EBADA0F334C4F9AE02.roa File: 109A89C2A8C811EBADA0F334C4F9AE02.roa (raw, json) Hash identifier: dC33SmCHn/PYqVkVMoLtISBDSUQqWo6txP0aeA7kGhs= Subject key identifier: 29:E9:28:3F:A8:57:B1:16:12:55:15:68:44:5D:29:FE:8E:EA:CA:5F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 77A0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/109A89C2A8C811EBADA0F334C4F9AE02.roa Signing time: Wed 16 Aug 2023 08:10:48 +0000 ROA not before: Wed 16 Aug 2023 08:10:48 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141873 IP address blocks: 103.165.70.0/23 maxlen: 24 103.176.46.0/23 maxlen: 24 2001:df6:6180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30624 (0x77a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 16 08:10:48 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64dc8488-2e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:f2:8f:85:2c:fb:f1:ee:8e:00:65:71:e6: 1d:17:fd:70:28:35:1b:c9:f0:29:69:a3:3d:99:b7: e8:7c:12:54:50:86:dd:9f:52:f9:91:ef:90:44:08: a3:ff:ae:7d:1d:47:b6:f2:0c:13:ec:2d:04:83:b2: 0d:be:1a:ac:d5:54:02:c2:39:34:da:1f:98:cd:7c: d5:01:c9:3d:c0:90:0f:58:1f:a9:2d:d3:0e:81:35: ca:0a:f4:16:a3:75:af:06:de:b3:ef:27:74:d6:02: e3:24:bd:7c:73:8a:bc:4b:81:8a:99:e7:72:be:90: 5b:dd:3f:47:a3:70:6c:07:0e:51:d7:0f:6b:54:a8: a1:89:11:01:ef:f6:9a:e4:3a:ca:4a:c7:c8:db:01: 6b:23:d7:19:5d:99:01:76:8d:1f:3c:1d:39:0d:88: 41:f4:61:aa:d2:6a:b6:c9:a1:04:ea:ac:d9:b2:10: b6:9d:84:2d:89:ff:f6:b0:91:ce:42:23:5d:ec:d2: e7:54:75:71:c9:b9:96:55:ac:43:16:9a:3d:18:d8: 14:18:92:ce:25:03:bc:1a:f4:da:27:be:e6:2e:2b: 1f:11:99:e6:22:0d:13:1e:71:b8:84:69:31:d0:88: f3:b5:5c:0d:32:f8:be:e0:47:73:fd:85:1e:95:9b: 9a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E9:28:3F:A8:57:B1:16:12:55:15:68:44:5D:29:FE:8E:EA:CA:5F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/109A89C2A8C811EBADA0F334C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.70.0/23 103.176.46.0/23 IPv6: 2001:df6:6180::/48 Signature Algorithm: sha256WithRSAEncryption 38:2e:56:fc:60:3b:10:f7:f0:7e:11:2a:bc:e5:fb:4a:e0:64: 3a:e2:7c:07:7e:df:c6:8f:93:eb:9b:9c:6c:19:99:58:2d:3b: 1e:3d:9e:8e:0a:86:13:8a:9a:9f:98:7a:67:c4:a2:66:b7:1d: ca:19:f3:c1:be:f4:aa:70:cb:1c:f8:ab:fc:4c:a8:59:af:ce: d2:ad:3b:7d:ef:7c:44:84:c6:9f:aa:e0:bd:47:96:3c:c8:69: 87:e6:cf:b5:01:0c:73:38:58:30:09:70:7c:82:be:ea:10:bd: e7:f9:b3:6f:59:8e:ca:07:1f:50:dd:2e:86:14:98:f9:d5:8b: 43:aa:ca:fe:2d:c3:8e:8b:58:db:99:c2:26:3d:50:62:1a:33: f6:49:0e:f8:f3:0b:3b:5c:71:e0:fb:35:82:b8:fc:91:e7:36: 5b:d0:d7:55:17:94:89:11:f4:2a:0c:ff:e0:65:1f:32:e9:93: 56:d2:07:d9:ec:bc:15:6a:f6:32:c4:79:e7:ba:aa:35:b1:eb: a9:44:ab:7c:1f:53:58:2d:69:77:84:2f:1b:45:d4:58:46:12: 99:3b:83:a8:89:c3:cf:c4:56:2b:fb:bf:a2:89:b8:24:ea:c7: 00:2a:0c:ca:3d:0a:96:36:d1:5d:e7:08:22:a1:bb:7a:e2:cd: e8:d7:49:16 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICd6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODE2MDgxMDQ4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRjODQ4OC0yZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4vyj4Us+/HujgBlceYdF/1wKDUbyfApaaM9mbfofBJUUIbdn1L5ke+QRAij /659HUe28gwT7C0Eg7INvhqs1VQCwjk02h+YzXzVAck9wJAPWB+pLdMOgTXKCvQW o3WvBt6z7yd01gLjJL18c4q8S4GKmedyvpBb3T9Ho3BsBw5R1w9rVKihiREB7/aa 5DrKSsfI2wFrI9cZXZkBdo0fPB05DYhB9GGq0mq2yaEE6qzZshC2nYQtif/2sJHO QiNd7NLnVHVxybmWVaxDFpo9GNgUGJLOJQO8GvTaJ77mLisfEZnmIg0THnG4hGkx 0IjztVwNMvi+4Edz/YUelZua6wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCnpKD+o V7EWElUVaERdKf6O6spfMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTA5QTg5QzJB OEM4MTFFQkFEQTBGMzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnpUYDBAFnsC4wDwQCAAIwCQMHACABDfZhgDANBgkqhkiG 9w0BAQsFAAOCAQEAOC5W/GA7EPfwfhEqvOX7SuBkOuJ8B37fxo+T65ucbBmZWC07 Hj2ejgqGE4qan5h6Z8SiZrcdyhnzwb70qnDLHPir/EyoWa/O0q07fe98RITGn6rg vUeWPMhph+bPtQEMczhYMAlwfIK+6hC95/mzb1mOygcfUN0uhhSY+dWLQ6rK/i3D jotY25nCJj1QYhoz9kkO+PMLO1xx4Ps1grj8kec2W9DXVReUiRH0Kgz/4GUfMumT VtIH2ey8FWr2MsR557qqNbHrqUSrfB9TWC1pd4QvG0XUWEYSmTuDqInDz8RWK/u/ oom4JOrHACoMyj0KljbRXecIIqG7euLN6NdJFg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org