$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/117976925AB411ED83FBB753C4F9AE02.roa File: 117976925AB411ED83FBB753C4F9AE02.roa (raw, json) Hash identifier: GHnJ3S71s9OUPz3IOl9Gl95MlrlBY9ARkMqCWS7Sxsk= Subject key identifier: 49:92:AB:02:A0:9B:43:1F:49:11:82:29:D9:38:8B:16:86:D9:1F:5D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71A9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/117976925AB411ED83FBB753C4F9AE02.roa Signing time: Wed 10 May 2023 16:49:22 +0000 ROA not before: Wed 10 May 2023 16:49:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 55814 IP address blocks: 27.125.200.0/22 maxlen: 24 43.252.140.0/22 maxlen: 24 103.10.116.0/22 maxlen: 24 2400:b6a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29097 (0x71a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:49:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb12-2ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:ed:c4:2a:4b:b2:1c:e7:19:07:93:da:a0: 45:ef:e1:db:cc:19:be:08:d3:33:10:49:c6:06:a6: b2:57:ea:45:57:77:bd:3b:04:d6:52:33:9b:3b:54: a6:4e:5a:c3:b1:d6:5f:57:f3:bf:0f:88:f5:dc:39: b8:68:22:f1:27:98:19:fe:d8:f3:c2:48:27:b3:64: 20:dc:5a:e7:12:31:47:27:26:41:12:8b:c3:d7:70: 27:f5:fc:7f:f5:77:8e:c2:62:88:47:cc:8a:06:6b: c7:3f:e6:f4:ba:a2:74:70:0b:37:15:8c:5a:80:e8: b4:2b:65:b5:a8:05:e5:32:3e:b5:f4:66:25:dc:67: 03:80:12:8a:9a:df:f6:25:f2:8b:08:7d:e4:44:9a: 22:b7:55:7b:29:4d:df:f7:34:6f:8a:65:b0:fa:39: 94:46:66:0b:ee:c3:18:6e:b8:5c:fd:cd:48:30:05: a6:82:35:7f:22:93:27:d0:c4:82:b6:7d:7e:5c:f0: 5c:f7:86:7f:f0:f6:c3:14:3a:52:05:00:36:e4:7f: e9:da:6a:5f:64:f4:ce:1b:77:7f:3b:46:10:9f:2d: 35:2f:fb:f4:a6:84:13:1d:63:13:94:9a:71:0f:d7: 27:c3:29:75:34:55:61:95:4b:30:20:9c:d7:07:7c: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:AB:02:A0:9B:43:1F:49:11:82:29:D9:38:8B:16:86:D9:1F:5D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/117976925AB411ED83FBB753C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.125.200.0/22 43.252.140.0/22 103.10.116.0/22 IPv6: 2400:b6a0::/32 Signature Algorithm: sha256WithRSAEncryption 52:12:7f:69:21:cb:5a:cd:ec:bc:93:bc:de:b2:45:fe:dc:26: 18:05:0b:6b:8f:78:a7:47:6e:81:df:ed:13:7f:27:17:0f:a1: f3:ca:75:0c:53:b4:a1:3f:a4:cf:86:ed:cc:8e:39:e8:a8:56: 73:3a:49:46:7e:f7:fe:de:8d:80:f8:00:0a:23:98:56:e4:a4: 34:0a:46:2d:39:b3:cb:c3:4a:91:5f:9f:7a:d3:87:8c:c5:c4: 5c:3e:da:15:16:8d:51:2e:65:63:c3:5f:e1:74:28:40:45:60: 50:b8:23:0b:3c:d1:78:e2:26:03:89:67:21:6e:ca:5c:8c:20: 10:32:3a:e9:79:55:f2:94:dc:46:e5:73:0c:14:98:50:41:ca: a0:2f:5f:4a:6f:54:b8:0c:b6:92:cd:16:61:2e:08:54:1f:f8: 1a:7e:14:85:a8:16:fb:f3:75:11:e4:79:ca:11:aa:b2:bb:4a: c4:0c:04:29:db:e9:2a:be:f4:8b:d7:54:0b:ea:46:bf:0c:52: 85:99:0a:0f:5e:b5:33:20:93:92:59:32:1b:57:d4:a5:9e:9f: 65:15:e7:fa:8a:81:ac:83:af:7f:eb:c4:df:ec:ad:ce:ef:21: ec:b7:63:ee:67:3c:de:91:b3:1d:39:49:eb:2e:5b:98:cb:37: 75:eb:69:72 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICcakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IxMi0yYWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOvtxCpLshznGQeT2qBF7+HbzBm+CNMzEEnGBqayV+pFV3e9OwTWUjObO1Sm TlrDsdZfV/O/D4j13Dm4aCLxJ5gZ/tjzwkgns2Qg3FrnEjFHJyZBEovD13An9fx/ 9XeOwmKIR8yKBmvHP+b0uqJ0cAs3FYxagOi0K2W1qAXlMj619GYl3GcDgBKKmt/2 JfKLCH3kRJoit1V7KU3f9zRvimWw+jmURmYL7sMYbrhc/c1IMAWmgjV/IpMn0MSC tn1+XPBc94Z/8PbDFDpSBQA25H/p2mpfZPTOG3d/O0YQny01L/v0poQTHWMTlJpx D9cnwyl1NFVhlUswIJzXB3yyJQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEmSqwKg m0MfSRGCKdk4ixaG2R9dMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTE3OTc2OTI1 QUI0MTFFRDgzRkJCNzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIbfcgDBAIr/IwDBAJnCnQwDQQCAAIwBwMFACQAtqAwDQYJ KoZIhvcNAQELBQADggEBAFISf2khy1rN7LyTvN6yRf7cJhgFC2uPeKdHboHf7RN/ JxcPofPKdQxTtKE/pM+G7cyOOeioVnM6SUZ+9/7ejYD4AAojmFbkpDQKRi05s8vD SpFfn3rTh4zFxFw+2hUWjVEuZWPDX+F0KEBFYFC4Iws80XjiJgOJZyFuylyMIBAy Oul5VfKU3EblcwwUmFBByqAvX0pvVLgMtpLNFmEuCFQf+Bp+FIWoFvvzdRHkecoR qrK7SsQMBCnb6Sq+9IvXVAvqRr8MUoWZCg9etTMgk5JZMhtX1KWen2UV5/qKgayD r3/rxN/src7vIey3Y+5nPN6Rsx05SesuW5jLN3XraXI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org