$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B5AF9EBDCB11EA8AB8267EC4F9AE02.roa File: 18B5AF9EBDCB11EA8AB8267EC4F9AE02.roa (raw, json) Hash identifier: fPzLgNkEo00VZ5pg8jWSQVkLcJH0Cw7KwUA4+yzLvsM= Subject key identifier: 3D:CE:11:BE:79:6B:2B:CA:E0:3F:FB:74:1E:B4:CD:53:BA:78:BF:EA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C7D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B5AF9EBDCB11EA8AB8267EC4F9AE02.roa Signing time: Wed 10 May 2023 16:24:46 +0000 ROA not before: Wed 10 May 2023 16:24:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136372 IP address blocks: 103.81.139.0/24 maxlen: 24 103.95.234.0/24 maxlen: 24 103.104.202.0/23 maxlen: 24 103.171.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27773 (0x6c7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:24:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc54e-02f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:85:d1:25:82:6b:2b:74:00:f8:d2:90:28: 63:39:1c:ba:3c:7c:bd:de:6e:41:e5:f0:f2:2b:ab: 66:f3:72:a5:ce:90:8b:9a:d1:12:4f:a9:2e:41:f4: e7:48:15:bc:ec:dd:2b:8d:0a:78:70:a3:75:14:98: b8:ba:9e:74:94:81:d0:f8:0c:b9:83:bb:a9:96:8c: 9a:79:92:d5:f9:16:09:8b:68:58:bf:67:e8:57:8d: 97:bb:17:ad:11:50:af:ec:d7:fa:00:59:5d:69:fb: 39:7c:e1:68:d0:7c:bb:cf:e7:36:9d:21:f6:bc:a5: cb:95:fa:03:33:21:81:98:0b:db:22:21:c1:e0:31: 40:b3:d1:48:bb:d2:f7:e3:f2:92:6a:c9:6d:98:80: 97:79:bf:f7:a8:25:92:b5:03:d6:64:ae:a5:b5:7c: fa:1f:44:98:31:a5:0a:be:82:2f:22:e2:13:88:d5: 65:78:e3:9e:a2:53:57:26:88:6b:f9:84:1f:64:86: 54:7e:a3:99:1a:9d:7b:fe:c7:58:03:7f:ce:e0:20: 6c:2a:63:18:b0:cd:94:d4:ed:b3:29:7d:4e:a4:6a: 6e:cb:80:3d:4b:d4:84:41:f4:91:fe:c7:a6:a0:d9: 9f:d5:01:cb:fa:de:69:cb:48:c7:3b:da:3f:44:0e: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CE:11:BE:79:6B:2B:CA:E0:3F:FB:74:1E:B4:CD:53:BA:78:BF:EA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B5AF9EBDCB11EA8AB8267EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.139.0/24 103.95.234.0/24 103.104.202.0/23 103.171.106.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:6d:21:d2:92:ba:92:b3:32:80:0e:d3:33:4d:53:bb:eb:1b: 92:b0:36:e9:89:ca:d0:de:46:fc:34:01:1f:be:7d:0e:d8:6c: d7:5d:29:be:eb:22:57:ce:66:86:97:a5:c0:76:8f:7b:6c:e6: 1d:cc:d9:df:f3:c9:64:7a:ba:d0:dd:ab:37:02:31:57:e6:a8: 4f:62:ee:2a:ef:9e:6d:28:56:bd:b8:52:b7:62:11:0f:06:aa: 15:c8:65:62:e6:8c:83:82:60:01:4f:d0:f5:b4:32:b5:c2:6a: 03:c4:20:d3:91:85:9d:b7:4b:c3:d5:67:f3:d2:eb:6d:35:0b: 15:e8:2f:50:47:24:50:88:ec:52:5c:8e:13:ed:c0:39:36:79: 31:83:51:ec:7f:fb:71:58:5f:44:99:f1:15:a1:1c:6d:7d:61: 2a:ec:50:a6:70:5e:b8:2c:2c:ba:8d:30:17:6d:74:0c:55:dc: 97:ce:50:6a:a0:ac:3d:b0:4a:12:33:6a:51:72:f3:94:89:34: 6e:f3:23:9c:d2:bf:c1:59:b8:76:78:c5:82:60:07:95:4c:75: 3d:44:bd:bc:0e:1b:ea:f5:1b:19:e5:2b:78:0b:c1:7e:40:5e: a7:2a:8d:1c:8b:7c:7b:e1:ae:4e:55:a3:04:5f:e2:01:3b:ad: e7:d3:55:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICbH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNDQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU0ZS0wMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOGF0SWCayt0APjSkChjORy6PHy93m5B5fDyK6tm83KlzpCLmtEST6kuQfTn SBW87N0rjQp4cKN1FJi4up50lIHQ+Ay5g7uployaeZLV+RYJi2hYv2foV42Xuxet EVCv7Nf6AFldafs5fOFo0Hy7z+c2nSH2vKXLlfoDMyGBmAvbIiHB4DFAs9FIu9L3 4/KSasltmICXeb/3qCWStQPWZK6ltXz6H0SYMaUKvoIvIuITiNVleOOeolNXJohr +YQfZIZUfqOZGp17/sdYA3/O4CBsKmMYsM2U1O2zKX1OpGpuy4A9S9SEQfSR/sem oNmf1QHL+t5py0jHO9o/RA4ItQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFD3OEb55 ayvK4D/7dB60zVO6eL/qMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMThCNUFGOUVC RENCMTFFQThBQjgyNjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnUYsDBABnX+oDBAFnaMoDBAFnq2owDQYJKoZIhvcNAQEL BQADggEBAHptIdKSupKzMoAO0zNNU7vrG5KwNumJytDeRvw0AR++fQ7YbNddKb7r IlfOZoaXpcB2j3ts5h3M2d/zyWR6utDdqzcCMVfmqE9i7irvnm0oVr24UrdiEQ8G qhXIZWLmjIOCYAFP0PW0MrXCagPEINORhZ23S8PVZ/PS6201CxXoL1BHJFCI7FJc jhPtwDk2eTGDUex/+3FYX0SZ8RWhHG19YSrsUKZwXrgsLLqNMBdtdAxV3JfOUGqg rD2wShIzalFy85SJNG7zI5zSv8FZuHZ4xYJgB5VMdT1EvbwOG+r1GxnlK3gLwX5A XqcqjRyLfHvhrk5VowRf4gE7refTVdA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org