$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa File: 2663C7EA402011EEB5DD5049C4F9AE02.roa (raw, json) Hash identifier: zwMxz2V0NgdaOSBAAOs4kVpLEw6PZEWNSex2nyNmkFQ= Subject key identifier: C5:C3:54:09:EA:8A:13:A6:32:BD:C8:37:67:9F:DC:4D:0A:7B:84:26 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 79D3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa Signing time: Wed 06 Sep 2023 11:18:57 +0000 ROA not before: Wed 06 Sep 2023 11:18:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133007 IP address blocks: 103.119.196.0/24 maxlen: 24 103.119.198.0/24 maxlen: 24 103.155.210.0/23 maxlen: 24 103.159.239.0/24 maxlen: 24 103.183.90.0/23 maxlen: 24 103.187.248.0/23 maxlen: 24 103.190.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31187 (0x79d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 6 11:18:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64f86021-a154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:c1:af:c4:f3:f8:d9:2d:ae:86:e4:ca:0a: 99:fd:76:3f:a1:b9:0d:9f:65:92:9a:f9:31:65:22: 8d:73:01:98:3c:79:ea:07:1d:96:5e:71:0c:d6:3f: 98:ae:ba:20:9a:16:a7:dc:c3:e7:b9:f3:1d:97:62: 6b:9c:47:ec:fb:2e:dd:dd:98:05:ef:40:38:e7:03: ea:77:35:5e:78:cf:12:3f:1e:22:e4:6e:93:c1:e1: 2e:7f:44:b5:e8:d3:85:cf:e4:b7:04:7b:99:3c:2c: f2:41:90:d6:f1:2d:21:e5:e3:8b:1f:61:a4:91:4f: 31:c9:0b:3a:30:c8:ba:79:d0:00:5f:34:8e:e4:b2: a9:c4:29:e1:b7:4c:5b:2e:3b:b4:43:13:e2:c9:38: a6:8a:75:41:2f:39:3b:83:cb:de:67:ae:01:aa:6e: 35:42:45:9e:42:07:52:92:1f:ac:50:15:89:4f:23: d6:1a:0e:a1:36:51:51:4b:71:c7:e2:0c:8e:64:08: d2:e1:02:90:9a:f6:2f:46:f6:a0:91:ad:27:93:e5: ad:c6:9d:f4:f7:29:a4:9e:27:9d:ab:36:9b:01:3f: 26:8f:ca:3a:f5:c8:e5:c5:38:a5:07:66:c5:f6:b0: 12:dc:4a:79:8d:a1:0d:cd:f9:cc:41:84:ab:ef:c1: 7a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:54:09:EA:8A:13:A6:32:BD:C8:37:67:9F:DC:4D:0A:7B:84:26 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.196.0/24 103.119.198.0/24 103.155.210.0/23 103.159.239.0/24 103.183.90.0/23 103.187.248.0/23 103.190.12.0/23 Signature Algorithm: sha256WithRSAEncryption 42:58:fe:15:50:f9:8f:2a:94:b8:d3:e0:b5:fc:a6:7e:7f:68: b5:04:8f:f2:64:a3:ba:67:23:c7:de:11:68:1a:86:99:64:0d: f1:07:1b:ea:ff:29:92:39:85:1a:a3:d4:bb:28:f9:8e:c1:e0: 8c:c6:44:d2:3e:8e:77:bd:5f:d9:e2:c3:c8:93:b2:1a:01:cd: 33:6c:0d:1a:56:0a:0f:31:86:ec:8d:88:15:80:51:81:b0:e1: df:7b:62:ab:44:ab:c0:0e:3d:61:32:83:1e:11:ea:e0:da:11: 84:20:41:6f:62:84:95:3b:17:62:94:7a:83:4f:92:3e:b0:bc: 44:df:0f:fe:f4:4d:01:2b:4a:3d:d1:e8:bc:c9:fd:80:46:b9: 0b:10:cb:aa:14:8c:39:56:92:db:7b:60:17:95:a8:70:56:4f: 82:54:43:a6:74:d8:54:e1:1f:a2:71:7f:87:a7:47:f9:4e:cc: 52:11:95:09:ec:7f:25:20:a4:41:6b:1a:03:4d:55:2f:31:6d: 8e:a5:5f:70:aa:8d:0b:44:f4:92:b1:11:96:27:19:85:87:81: 63:33:7e:b6:62:2e:cf:74:c4:4d:9c:02:c7:c4:0b:85:70:48: 7e:da:1e:74:9c:1a:a2:05:43:e7:b4:db:51:98:ed:ad:0d:da: ec:fb:aa:31 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICedMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTA2MTExODU3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY4NjAyMS1hMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvonBr8Tz+NktrobkygqZ/XY/obkNn2WSmvkxZSKNcwGYPHnqBx2WXnEM1j+Y rrogmhan3MPnufMdl2JrnEfs+y7d3ZgF70A45wPqdzVeeM8SPx4i5G6TweEuf0S1 6NOFz+S3BHuZPCzyQZDW8S0h5eOLH2GkkU8xyQs6MMi6edAAXzSO5LKpxCnht0xb Lju0QxPiyTiminVBLzk7g8veZ64Bqm41QkWeQgdSkh+sUBWJTyPWGg6hNlFRS3HH 4gyOZAjS4QKQmvYvRvagka0nk+Wtxp309ymkniedqzabAT8mj8o69cjlxTilB2bF 9rAS3Ep5jaENzfnMQYSr78F6SQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMXDVAnq ihOmMr3IN2ef3E0Ke4QmMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjY2M0M3RUE0 MDIwMTFFRUI1REQ1MDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBABnd8QDBABnd8YDBAFnm9IDBABnn+8DBAFnt1oDBAFnu/gD BAFnvgwwDQYJKoZIhvcNAQELBQADggEBAEJY/hVQ+Y8qlLjT4LX8pn5/aLUEj/Jk o7pnI8feEWgahplkDfEHG+r/KZI5hRqj1Lso+Y7B4IzGRNI+jne9X9niw8iTshoB zTNsDRpWCg8xhuyNiBWAUYGw4d97YqtEq8AOPWEygx4R6uDaEYQgQW9ihJU7F2KU eoNPkj6wvETfD/70TQErSj3R6LzJ/YBGuQsQy6oUjDlWktt7YBeVqHBWT4JUQ6Z0 2FThH6Jxf4enR/lOzFIRlQnsfyUgpEFrGgNNVS8xbY6lX3CqjQtE9JKxEZYnGYWH gWMzfrZiLs90xE2cAsfEC4VwSH7aHnScGqIFQ+e021GY7a0N2uz7qjE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org