$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C3038E025AA11EC85038918C4F9AE02.roa File: 1C3038E025AA11EC85038918C4F9AE02.roa (raw, json) Hash identifier: yh1RBvEp3BNMgxq07aODHHizeE++r8x+Zopd3O15WxQ= Subject key identifier: 92:DE:98:9B:EB:CC:64:46:69:0F:9F:A2:40:7E:0E:A9:E3:59:83:F7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C4D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C3038E025AA11EC85038918C4F9AE02.roa Signing time: Wed 10 May 2023 16:23:53 +0000 ROA not before: Wed 10 May 2023 16:23:53 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136300 IP address blocks: 103.90.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27725 (0x6c4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:23:53 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc518-5a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:f9:34:84:b7:af:15:5f:d7:ef:a2:3f:95: b5:19:6c:39:07:e1:cb:b4:f7:d6:86:c0:04:1a:75: 8b:7d:02:86:c2:77:fa:45:d1:9e:7a:25:40:71:4e: 16:f2:fe:ab:c2:25:26:b7:56:f4:4c:e3:3f:4c:49: 83:1f:80:3f:1d:f0:74:1b:6e:4f:af:b6:a4:11:58: 58:e8:4a:35:1c:bc:ac:14:05:25:26:a4:36:1b:34: 64:04:76:54:51:9a:d5:02:55:31:a0:06:6d:aa:a0: 26:7d:cf:a3:b3:b3:5f:23:ad:42:49:58:1d:b8:f5: b4:ad:ed:9a:60:89:80:42:af:33:3a:8d:6a:a0:6d: 0a:83:6e:e5:9a:a6:31:93:ab:e2:7b:16:89:1c:b2: d9:d7:36:ae:29:89:ca:7b:a3:c0:df:1a:0c:12:17: aa:da:f3:b6:50:d9:3b:dd:c2:9e:f0:db:7c:72:22: 08:1c:31:95:15:48:59:85:76:e1:ae:ff:3e:18:c5: cb:5e:79:af:1f:ea:21:aa:21:de:25:6e:4e:84:9b: f2:db:bc:24:69:ab:33:52:da:c1:2c:99:ec:27:fa: a8:e5:2f:d5:9f:6f:05:6c:26:18:61:c0:af:b0:b2: eb:ba:8b:84:71:5d:32:58:db:93:42:45:b6:d1:c9: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:98:9B:EB:CC:64:46:69:0F:9F:A2:40:7E:0E:A9:E3:59:83:F7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C3038E025AA11EC85038918C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.200.0/23 Signature Algorithm: sha256WithRSAEncryption 57:c0:57:e3:e6:ed:02:9f:01:8c:9f:a5:32:2a:f1:96:6a:bc: a4:a0:15:e0:b9:d3:5b:6d:59:30:3f:4b:ac:a9:04:3a:f4:17: 2c:4e:9b:ad:5f:0f:1f:f1:ac:50:b7:6b:64:c3:8f:ae:f4:10: 82:72:b8:f3:68:3d:51:ae:15:49:45:7d:42:ce:48:7a:7c:05: c3:aa:20:56:63:d5:9c:41:3b:92:57:dd:62:02:d1:b1:93:00: 6a:04:0b:56:b8:d1:91:68:0a:f7:0b:5d:59:d5:79:3e:14:46: f9:4b:93:37:b0:84:0b:b7:4e:60:13:f6:20:88:a7:26:07:18: 7f:7a:d6:a0:85:8a:eb:4d:26:db:91:38:f9:d0:63:e0:bd:f8: bf:da:b6:5b:f2:e2:4f:0d:97:5a:9c:91:7f:e2:63:9b:23:cf: 58:82:58:e6:59:bf:0d:9a:17:22:b0:f6:15:ad:57:9c:22:0d: 17:d9:be:97:29:b2:d2:37:cb:e2:6d:99:67:e7:d7:9c:da:a7: 8a:89:82:a3:31:3f:34:42:40:37:fb:83:95:81:4a:05:71:40: 61:cc:3b:a6:38:2d:5b:36:7b:af:be:0b:24:c4:11:24:2e:ba: 5d:58:33:68:bb:bf:3b:4c:d6:fb:55:91:23:60:57:19:9a:bb: f8:16:5e:76 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMzUzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzUxOC01YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2/5NIS3rxVf1++iP5W1GWw5B+HLtPfWhsAEGnWLfQKGwnf6RdGeeiVAcU4W 8v6rwiUmt1b0TOM/TEmDH4A/HfB0G25Pr7akEVhY6Eo1HLysFAUlJqQ2GzRkBHZU UZrVAlUxoAZtqqAmfc+js7NfI61CSVgduPW0re2aYImAQq8zOo1qoG0Kg27lmqYx k6viexaJHLLZ1zauKYnKe6PA3xoMEheq2vO2UNk73cKe8Nt8ciIIHDGVFUhZhXbh rv8+GMXLXnmvH+ohqiHeJW5OhJvy27wkaaszUtrBLJnsJ/qo5S/Vn28FbCYYYcCv sLLruouEcV0yWNuTQkW20ck8IwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJLemJvr zGRGaQ+fokB+DqnjWYP3MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUMzMDM4RTAy NUFBMTFFQzg1MDM4OTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnWsgwDQYJKoZIhvcNAQELBQADggEBAFfAV+Pm7QKfAYyf pTIq8ZZqvKSgFeC501ttWTA/S6ypBDr0FyxOm61fDx/xrFC3a2TDj670EIJyuPNo PVGuFUlFfULOSHp8BcOqIFZj1ZxBO5JX3WIC0bGTAGoEC1a40ZFoCvcLXVnVeT4U RvlLkzewhAu3TmAT9iCIpyYHGH961qCFiutNJtuROPnQY+C9+L/atlvy4k8Nl1qc kX/iY5sjz1iCWOZZvw2aFyKw9hWtV5wiDRfZvpcpstI3y+JtmWfn15zap4qJgqMx PzRCQDf7g5WBSgVxQGHMO6Y4LVs2e6++CyTEESQuul1YM2i7vztM1vtVkSNgVxma u/gWXnY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org