$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21C28F22CA6D11EAA2BDC169C4F9AE02.roa File: 21C28F22CA6D11EAA2BDC169C4F9AE02.roa (raw, json) Hash identifier: fQGau7Cp86OzA32susHqqFP5KraDBHUJYqO/vT6yx9Y= Subject key identifier: 89:51:93:CC:E6:AE:D7:45:D2:0F:2F:65:6F:94:16:49:98:F7:7A:64 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E30 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21C28F22CA6D11EAA2BDC169C4F9AE02.roa Signing time: Wed 10 May 2023 16:32:54 +0000 ROA not before: Wed 10 May 2023 16:32:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 140162 IP address blocks: 103.153.57.0/24 maxlen: 24 103.153.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28208 (0x6e30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:32:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc736-48c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:3f:43:d6:7b:af:7a:06:e9:e2:b2:eb:6c: 27:83:a2:94:84:06:ed:f1:09:c1:f4:82:1b:1e:35: d3:9c:37:3f:c8:fc:b8:3d:48:99:b6:ec:8a:56:7d: 92:dc:68:f5:cc:5b:23:74:4c:01:37:0c:df:4d:b0: 45:f0:83:32:73:ac:54:36:e6:2f:b8:12:5a:dd:49: 86:68:b3:f8:8a:e2:ab:f0:31:ea:45:06:9b:81:e7: 53:93:cb:f9:65:3d:f8:a6:34:50:0b:e1:a5:98:49: 35:7f:79:37:d5:a4:00:1c:05:0e:fc:25:03:60:ba: 88:fa:89:22:2c:63:d6:c3:31:1b:29:23:c6:6b:64: 80:ba:8b:93:2d:24:6d:36:64:59:2a:66:79:a0:bb: 5f:ec:83:23:b1:66:9e:1a:ad:9e:46:b6:b4:68:3f: 69:45:4e:5b:d7:3d:82:72:55:0d:f4:bc:d8:a4:5a: 16:8a:36:26:2f:0a:eb:cd:21:ed:5e:05:5b:7c:cc: b7:f5:c7:94:d7:08:00:d5:db:fd:41:ce:3f:d4:53: 9c:0a:05:b8:e5:13:88:ca:57:41:cc:89:cc:07:11: 22:56:66:9c:1c:67:95:b1:04:57:55:09:c1:e9:8d: 9f:f9:1c:45:53:94:4b:47:6c:37:83:4d:43:3e:5b: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:51:93:CC:E6:AE:D7:45:D2:0F:2F:65:6F:94:16:49:98:F7:7A:64 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21C28F22CA6D11EAA2BDC169C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.57.0/24 103.153.251.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:3d:6f:48:36:cc:c0:5e:65:9f:a5:1f:3a:fd:17:dd:ee:39: d8:37:75:36:b2:9d:d9:a1:a5:22:af:72:c6:8b:8c:ba:c4:79: 09:d0:60:75:55:3f:15:dd:d4:03:6a:55:07:1c:17:ee:0d:47: ec:c0:8c:5a:54:b1:c8:0d:5f:b8:cc:e7:a0:42:20:d2:46:51: 1b:7f:8e:ba:00:f5:db:fe:92:33:10:7a:87:d1:1f:f8:31:cc: 37:2d:af:1c:8c:4b:54:48:82:71:ca:1d:f9:3d:bc:92:30:72: ea:62:bb:7b:fb:64:a4:cd:c8:84:e0:df:d8:96:fb:40:a8:a2: 0c:43:12:c6:c1:65:f0:80:ae:8f:32:00:71:d0:30:c2:91:85: 47:2d:a8:22:49:57:be:de:c0:d3:b1:ed:57:91:43:56:7a:ff: 22:15:a8:e2:79:a3:ca:5e:cc:9c:f3:6b:1e:d0:d0:9f:d8:f2: ca:c6:79:a2:ee:58:b3:81:3d:99:42:d2:e7:ad:3c:9a:85:51: 3d:d9:f4:22:e6:cc:76:bb:9f:be:b2:45:22:2d:eb:11:a2:7e: 73:5c:15:99:73:a9:b2:56:72:15:02:6d:08:b1:c3:03:e1:f2: d4:d0:09:fb:a8:0e:b2:63:e7:b5:4c:a8:b5:b0:7a:4a:b0:f0: 2c:c8:e3:d6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMjU0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzczNi00OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V0/Q9Z7r3oG6eKy62wng6KUhAbt8QnB9IIbHjXTnDc/yPy4PUiZtuyKVn2S 3Gj1zFsjdEwBNwzfTbBF8IMyc6xUNuYvuBJa3UmGaLP4iuKr8DHqRQabgedTk8v5 ZT34pjRQC+GlmEk1f3k31aQAHAUO/CUDYLqI+okiLGPWwzEbKSPGa2SAuouTLSRt NmRZKmZ5oLtf7IMjsWaeGq2eRra0aD9pRU5b1z2CclUN9LzYpFoWijYmLwrrzSHt XgVbfMy39ceU1wgA1dv9Qc4/1FOcCgW45ROIyldBzInMBxEiVmacHGeVsQRXVQnB 6Y2f+RxFU5RLR2w3g01DPlv1CwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIlRk8zm rtdF0g8vZW+UFkmY93pkMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjFDMjhGMjJD QTZEMTFFQUEyQkRDMTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnmTkDBABnmfswDQYJKoZIhvcNAQELBQADggEBAH09b0g2 zMBeZZ+lHzr9F93uOdg3dTayndmhpSKvcsaLjLrEeQnQYHVVPxXd1ANqVQccF+4N R+zAjFpUscgNX7jM56BCINJGURt/jroA9dv+kjMQeofRH/gxzDctrxyMS1RIgnHK Hfk9vJIwcupiu3v7ZKTNyITg39iW+0CoogxDEsbBZfCAro8yAHHQMMKRhUctqCJJ V77ewNOx7VeRQ1Z6/yIVqOJ5o8pezJzzax7Q0J/Y8srGeaLuWLOBPZlC0uetPJqF UT3Z9CLmzHa7n76yRSIt6xGifnNcFZlzqbJWchUCbQixwwPh8tTQCfuoDrJj57VM qLWwekqw8CzI49Y= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:15 2024 by rpki-client on console-fra.rpki-client.org