$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DE8E4A416D511EC8E1E3E2EC4F9AE02.roa File: 1DE8E4A416D511EC8E1E3E2EC4F9AE02.roa (raw, json) Hash identifier: fJ9GS+eAfplyPfi2L4nFR0hNZlUekvR7/NHCj3feqaI= Subject key identifier: EE:BC:82:D5:82:F3:5B:16:3C:95:BB:FB:8F:E0:D6:BB:6F:27:A5:84 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7594 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DE8E4A416D511EC8E1E3E2EC4F9AE02.roa Signing time: Sat 15 Jul 2023 22:19:20 +0000 ROA not before: Sat 15 Jul 2023 22:19:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142476 IP address blocks: 103.170.194.0/23 maxlen: 24 2001:df2:a840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30100 (0x7594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 15 22:19:20 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64b31b68-82da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:68:ea:7e:91:88:9b:47:f8:1b:24:17:b5:96: 19:86:73:e6:6c:04:2f:92:d3:6f:c5:14:55:cb:8d: c9:0e:71:35:89:3a:2b:75:01:0a:32:4f:d1:75:50: 3c:aa:b0:5f:97:71:86:99:cc:a8:32:5f:1e:a6:3d: 2a:a1:75:fe:ea:95:8f:08:1c:44:ba:af:f2:f1:d1: 36:a5:66:4f:d4:e8:e0:5e:3f:cb:b0:25:6c:38:a5: d4:88:1f:76:da:47:0a:50:03:cf:d6:30:f0:cf:7e: d0:6e:16:61:66:88:ad:5c:62:55:ea:75:13:04:d3: 43:5f:21:43:77:4e:d3:e5:1d:85:4b:8a:4d:40:57: c3:2b:fc:61:7a:04:c7:5d:83:d5:41:94:3f:9d:fe: 28:ae:12:78:9c:dc:c3:aa:76:ef:a3:f4:0c:41:59: b6:2e:5b:8e:5c:56:6e:c3:c8:ca:e6:46:6d:cb:e9: 8b:1c:8e:2e:0b:06:e1:cf:a6:60:94:25:cc:ea:e2: 27:03:ce:2a:e7:7a:88:0a:eb:5c:e7:6d:db:92:c4: 05:24:bd:5b:f6:bb:8b:a5:c7:a8:f6:1f:95:68:80: d9:61:ef:29:1d:67:9f:c7:8b:56:76:fb:de:9e:29: aa:93:c5:74:fd:ac:8e:50:47:55:8d:b4:96:30:67: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BC:82:D5:82:F3:5B:16:3C:95:BB:FB:8F:E0:D6:BB:6F:27:A5:84 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DE8E4A416D511EC8E1E3E2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.194.0/23 IPv6: 2001:df2:a840::/48 Signature Algorithm: sha256WithRSAEncryption 6b:8d:26:c1:be:82:a3:19:7b:6b:4d:09:19:32:a2:9f:a7:db: 60:a8:62:8f:ef:e9:7f:42:6f:58:af:38:72:0f:7c:00:43:bc: 56:88:ee:cc:6d:82:ad:aa:57:23:e8:92:0b:77:1a:bd:7b:cb: af:8b:18:82:04:61:d3:c5:0a:d1:f1:e0:ed:db:62:21:11:1b: f8:c1:39:8f:1b:df:26:e0:8c:16:85:45:81:92:c6:74:27:66: 1f:48:e7:dd:ed:78:95:71:30:6b:51:1a:cf:fa:01:81:3f:43: 2a:c3:f4:3f:f3:45:42:b2:8a:b2:8e:0f:e1:2a:19:7d:ff:5b: 12:0f:c5:33:84:78:88:20:19:0e:03:e1:40:b7:5e:73:1c:bc: 08:71:32:ee:aa:ce:a8:f3:92:40:fa:73:a1:c1:e3:a0:2f:75: 93:7d:88:2f:e3:ce:7f:21:d4:f8:bc:84:fc:af:38:83:38:79: 84:e1:c7:f4:42:03:0c:cd:d5:40:49:c5:50:a0:8b:f1:43:c0: 51:bf:e9:78:a8:26:54:f7:e8:aa:15:8c:ea:12:83:e8:b3:c5: 7f:ed:93:b9:d6:a0:11:fa:e5:6e:c1:f9:19:5c:43:c6:e4:e4: 6d:98:70:f9:65:10:cd:20:52:50:36:37:4c:72:cc:31:3d:b5: 2c:90:f4:88 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICdZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzE1MjIxOTIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGIzMWI2OC04MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GjqfpGIm0f4GyQXtZYZhnPmbAQvktNvxRRVy43JDnE1iTordQEKMk/RdVA8 qrBfl3GGmcyoMl8epj0qoXX+6pWPCBxEuq/y8dE2pWZP1OjgXj/LsCVsOKXUiB92 2kcKUAPP1jDwz37QbhZhZoitXGJV6nUTBNNDXyFDd07T5R2FS4pNQFfDK/xhegTH XYPVQZQ/nf4orhJ4nNzDqnbvo/QMQVm2LluOXFZuw8jK5kZty+mLHI4uCwbhz6Zg lCXM6uInA84q53qICutc523bksQFJL1b9ruLpceo9h+VaIDZYe8pHWefx4tWdvve nimqk8V0/ayOUEdVjbSWMGd0yQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFO68gtWC 81sWPJW7+4/g1rtvJ6WEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMURFOEU0QTQx NkQ1MTFFQzhFMUUzRTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqsIwDwQCAAIwCQMHACABDfKoQDANBgkqhkiG9w0BAQsF AAOCAQEAa40mwb6Coxl7a00JGTKin6fbYKhij+/pf0JvWK84cg98AEO8VojuzG2C rapXI+iSC3cavXvLr4sYggRh08UK0fHg7dtiIREb+ME5jxvfJuCMFoVFgZLGdCdm H0jn3e14lXEwa1Eaz/oBgT9DKsP0P/NFQrKKso4P4SoZff9bEg/FM4R4iCAZDgPh QLdecxy8CHEy7qrOqPOSQPpzocHjoC91k32IL+POfyHU+LyE/K84gzh5hOHH9EID DM3VQEnFUKCL8UPAUb/peKgmVPfoqhWM6hKD6LPFf+2TudagEfrlbsH5GVxDxuTk bZhw+WUQzSBSUDY3THLMMT21LJD0iA== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:14 2024 by rpki-client on console-fra.rpki-client.org