$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BBA890E678411EB8F8A8E5FC4F9AE02.roa File: 1BBA890E678411EB8F8A8E5FC4F9AE02.roa (raw, json) Hash identifier: zpXXt6kN2W9HX9NoObSyb+f/IzHF+wCbi4W9P20fqpI= Subject key identifier: 18:94:AB:AF:5E:9F:34:51:6E:68:8C:E3:1B:4A:B0:1A:61:23:80:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D70 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BBA890E678411EB8F8A8E5FC4F9AE02.roa Signing time: Wed 10 May 2023 16:29:20 +0000 ROA not before: Wed 10 May 2023 16:29:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138278 IP address blocks: 103.133.124.0/24 maxlen: 24 103.133.125.0/24 maxlen: 24 103.133.126.0/24 maxlen: 24 103.133.127.0/24 maxlen: 24 2400:d020::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28016 (0x6d70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:20 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc660-9948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:44:2c:bd:d4:0b:46:2c:41:3b:09:c5:4d: 2e:16:f1:24:3e:b7:da:40:6b:2a:f2:c0:fd:1e:dc: 77:30:7c:4e:76:30:8a:20:11:91:58:a0:6a:62:ef: 0d:d1:ed:7d:f1:89:9c:2e:14:e6:0d:94:2b:e6:d7: e5:aa:2b:b0:75:b0:91:50:f8:d0:53:5b:de:c8:ae: ff:b5:21:2f:b0:cf:b2:bb:53:96:67:7c:e1:e7:5e: f0:b0:d3:dc:ea:57:db:ea:fd:80:c2:ac:d2:71:ea: 49:a9:c4:75:b5:83:40:39:a2:66:d8:d4:6d:3b:a9: fc:d7:ef:ea:bf:da:68:50:1d:fa:75:ba:a8:98:48: ed:f0:07:c9:07:89:71:02:7d:7d:91:0b:31:d0:6b: a8:72:ab:4b:8d:e3:2c:f3:25:5e:dd:8e:99:23:13: 06:9f:7f:2e:5d:78:51:13:ed:5e:e2:f5:e4:c3:8c: 14:8b:b6:3c:6d:c2:d2:5b:cb:db:fe:4f:b7:be:8f: bf:cc:0a:fd:ad:d4:20:53:db:f7:b1:9d:b4:ba:4f: 28:bb:ae:66:3b:7d:e9:e0:34:96:54:8b:53:d8:2f: e0:c8:86:1a:58:25:37:fb:85:8d:87:84:d7:bd:3f: 1c:4f:16:c7:72:a3:eb:ee:3a:32:c4:2c:99:2a:6d: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:94:AB:AF:5E:9F:34:51:6E:68:8C:E3:1B:4A:B0:1A:61:23:80:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BBA890E678411EB8F8A8E5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.124.0/22 IPv6: 2400:d020::/32 Signature Algorithm: sha256WithRSAEncryption 3e:8e:7b:c1:ea:22:e5:07:f3:c5:bc:a6:b9:cb:b3:30:2c:eb: e1:53:3e:85:28:8a:44:3a:6c:c2:34:fd:4d:0e:72:04:f6:7c: 2a:62:a5:ad:3e:18:27:6a:f4:3b:2b:33:d4:b7:1e:47:c1:4d: 50:d7:95:72:98:92:8a:b3:5c:93:b1:6e:72:34:f1:0c:e9:36: 2c:27:0a:36:21:d1:40:69:43:a9:f0:4e:a0:5c:f9:77:73:e6: ef:34:94:ad:83:9e:23:05:30:53:4b:28:c0:f2:7f:10:c2:5b: c8:63:13:10:42:58:43:c0:9c:0e:c1:fa:07:ef:a8:2d:cc:f0: df:0a:59:9c:bd:60:1f:48:58:dd:1b:90:cf:37:d7:7a:22:85: a4:96:30:31:1e:fd:92:1b:ac:25:31:21:9b:53:04:9e:26:42: 2e:ca:97:5d:29:b2:c1:a7:3d:18:0a:cd:3d:f5:67:7e:4c:ce: 1f:91:7f:c9:32:15:d0:8a:bd:83:9c:d1:7b:ee:0e:ca:60:1d: 9e:e7:bf:87:dc:e3:3a:37:63:20:d8:ee:8c:b4:bb:17:f8:24: 64:21:74:07:f4:71:a8:0d:03:07:ba:e0:1e:e1:88:f6:a2:87: 99:b5:33:95:b9:df:5e:ce:a0:c2:a4:20:b0:e0:cf:34:d1:15: c6:61:3b:86 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICbXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY2MC05OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oFELL3UC0YsQTsJxU0uFvEkPrfaQGsq8sD9Htx3MHxOdjCKIBGRWKBqYu8N 0e198YmcLhTmDZQr5tflqiuwdbCRUPjQU1veyK7/tSEvsM+yu1OWZ3zh517wsNPc 6lfb6v2AwqzScepJqcR1tYNAOaJm2NRtO6n81+/qv9poUB36dbqomEjt8AfJB4lx An19kQsx0GuocqtLjeMs8yVe3Y6ZIxMGn38uXXhRE+1e4vXkw4wUi7Y8bcLSW8vb /k+3vo+/zAr9rdQgU9v3sZ20uk8ou65mO33p4DSWVItT2C/gyIYaWCU3+4WNh4TX vT8cTxbHcqPr7joyxCyZKm3CWwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBiUq69e nzRRbmiM4xtKsBphI4DhMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUJCQTg5MEU2 Nzg0MTFFQjhGOEE4RTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhXwwDQQCAAIwBwMFACQA0CAwDQYJKoZIhvcNAQELBQAD ggEBAD6Oe8HqIuUH88W8prnLszAs6+FTPoUoikQ6bMI0/U0OcgT2fCpipa0+GCdq 9DsrM9S3HkfBTVDXlXKYkoqzXJOxbnI08QzpNiwnCjYh0UBpQ6nwTqBc+Xdz5u80 lK2DniMFMFNLKMDyfxDCW8hjExBCWEPAnA7B+gfvqC3M8N8KWZy9YB9IWN0bkM83 13oihaSWMDEe/ZIbrCUxIZtTBJ4mQi7Kl10pssGnPRgKzT31Z35Mzh+Rf8kyFdCK vYOc0XvuDspgHZ7nv4fc4zo3YyDY7oy0uxf4JGQhdAf0cagNAwe64B7hiPaih5m1 M5W5317OoMKkILDgzzTRFcZhO4Y= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org