$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/111374BEBDE011EAAEA46554C4F9AE02.roa File: 111374BEBDE011EAAEA46554C4F9AE02.roa (raw, json) Hash identifier: NRPLPfuX/oGbSU49yGn3SBvvJ3R5GAIaPAt1rK9/eos= Subject key identifier: DF:F1:3D:5B:06:36:51:E3:C2:9A:F2:76:D4:74:E9:2B:77:64:B9:DF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C88 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/111374BEBDE011EAAEA46554C4F9AE02.roa Signing time: Wed 10 May 2023 16:24:59 +0000 ROA not before: Wed 10 May 2023 16:24:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136637 IP address blocks: 103.61.100.0/24 maxlen: 24 175.111.181.0/24 maxlen: 24 2001:df1:64c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27784 (0x6c88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:24:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc55b-93a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:3f:47:cd:a2:3a:6e:1d:74:d7:39:a8:7d: e7:1b:e7:c4:3e:ed:ad:5a:e0:d4:d4:6c:d2:86:73: c3:94:f0:38:33:f1:b5:ae:c8:37:3a:d4:75:6a:48: fb:46:63:d9:ff:dc:e7:e5:c3:73:1b:06:62:5f:19: c2:90:41:3c:38:58:b1:34:6f:d2:86:91:a6:40:51: 9e:7d:84:98:c6:cd:da:38:e7:1b:28:f9:f7:37:7e: 37:ea:b6:74:6a:fd:a2:76:8e:b4:94:37:4c:45:a1: a7:e9:3e:81:b8:43:d2:53:41:4a:0d:0c:79:28:52: 20:30:11:a5:08:e7:db:d6:c6:2e:5b:d1:60:92:42: c5:9c:1c:6e:fb:88:20:a8:77:49:40:a9:81:15:a3: 46:9b:43:3d:96:d7:95:0a:1e:3f:61:ac:67:36:67: fc:93:9d:01:02:c5:3e:d2:17:51:f8:30:3e:34:78: 59:29:fc:8f:9e:e7:f9:15:5d:c1:e1:e0:c9:98:23: b3:41:aa:27:82:10:98:5c:e7:5b:d7:e0:df:7d:1b: 54:fc:f5:6c:51:65:30:21:09:9d:e4:ee:d5:56:6e: 81:df:68:0b:34:10:5b:fb:f5:98:f2:6f:38:6f:a3: d7:de:8f:71:b2:39:96:e3:15:9b:a6:84:aa:6a:24: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F1:3D:5B:06:36:51:E3:C2:9A:F2:76:D4:74:E9:2B:77:64:B9:DF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/111374BEBDE011EAAEA46554C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.61.100.0/24 175.111.181.0/24 IPv6: 2001:df1:64c0::/48 Signature Algorithm: sha256WithRSAEncryption 9f:ee:d6:c2:7b:47:cc:6b:ce:ef:63:ca:6d:d5:18:cd:d5:6e: 28:e2:ed:fd:c7:40:0d:18:96:e0:be:ec:3a:c1:d6:01:ba:c1: 7f:71:cd:fd:43:66:fc:cb:4e:2c:a8:47:2c:b3:bf:08:92:cd: af:9d:40:aa:2c:f4:57:89:5e:25:10:9c:8f:aa:8a:4b:58:d3: 78:ac:e6:7e:05:de:50:86:6f:84:bd:f6:0a:ec:50:86:24:49: e0:90:8e:b5:b4:e0:78:56:82:ff:12:bd:f9:73:f2:33:fe:6a: 97:0b:25:8a:68:f7:00:93:2a:20:f7:e8:b3:27:b6:b7:81:db: 35:f9:eb:40:ab:75:49:2e:33:14:c5:03:8e:b7:32:09:75:88: d7:f2:e6:5d:29:8d:a5:49:bf:e5:c5:09:ba:26:30:75:63:f7: 52:b7:ac:73:81:b2:81:cb:9d:b2:b2:a3:f0:72:43:ca:a9:5d: ba:a8:e3:7c:0b:e2:bd:8e:8c:44:15:63:8e:93:cf:ef:85:cb: 5c:e8:50:8f:f6:5c:bd:19:58:fa:04:d3:3f:e5:d5:9e:10:65: 81:7b:42:86:d9:d7:1f:55:dc:58:76:9a:ff:91:7a:f0:c2:e1: 82:7d:fb:24:cf:f5:75:d3:aa:5b:66:b6:51:ba:21:0c:bb:93: e3:5e:29:fc -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNDU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU1Yi05M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2Y/R82iOm4ddNc5qH3nG+fEPu2tWuDU1GzShnPDlPA4M/G1rsg3OtR1akj7 RmPZ/9zn5cNzGwZiXxnCkEE8OFixNG/ShpGmQFGefYSYxs3aOOcbKPn3N3436rZ0 av2ido60lDdMRaGn6T6BuEPSU0FKDQx5KFIgMBGlCOfb1sYuW9FgkkLFnBxu+4gg qHdJQKmBFaNGm0M9lteVCh4/YaxnNmf8k50BAsU+0hdR+DA+NHhZKfyPnuf5FV3B 4eDJmCOzQaonghCYXOdb1+DffRtU/PVsUWUwIQmd5O7VVm6B32gLNBBb+/WY8m84 b6PX3o9xsjmW4xWbpoSqaiThawIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFN/xPVsG NlHjwprydtR06St3ZLnfMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTExMzc0QkVC REUwMTFFQUFFQTQ2NTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnPWQDBACvb7UwDwQCAAIwCQMHACABDfFkwDANBgkqhkiG 9w0BAQsFAAOCAQEAn+7WwntHzGvO72PKbdUYzdVuKOLt/cdADRiW4L7sOsHWAbrB f3HN/UNm/MtOLKhHLLO/CJLNr51Aqiz0V4leJRCcj6qKS1jTeKzmfgXeUIZvhL32 CuxQhiRJ4JCOtbTgeFaC/xK9+XPyM/5qlwslimj3AJMqIPfosye2t4HbNfnrQKt1 SS4zFMUDjrcyCXWI1/LmXSmNpUm/5cUJuiYwdWP3Uresc4GygcudsrKj8HJDyqld uqjjfAvivY6MRBVjjpPP74XLXOhQj/ZcvRlY+gTTP+XVnhBlgXtChtnXH1XcWHaa /5F68MLhgn37JM/1ddOqW2a2UbohDLuT414p/A== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org