$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A082FB0745911EC8FBEDD40C4F9AE02.roa File: 2A082FB0745911EC8FBEDD40C4F9AE02.roa (raw, json) Hash identifier: 6mw6SVrQGu1rSJMCNu/pHILvzolnCDGqT2fJH4bLEq4= Subject key identifier: A3:AB:5C:97:88:47:9B:96:91:74:B2:8A:58:97:98:E6:7A:0F:F4:DF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7431 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A082FB0745911EC8FBEDD40C4F9AE02.roa Signing time: Mon 19 Jun 2023 09:22:03 +0000 ROA not before: Mon 19 Jun 2023 09:22:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133289 IP address blocks: 36.255.84.0/22 maxlen: 24 103.16.68.0/22 maxlen: 24 103.146.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29745 (0x7431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 19 09:22:03 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64901e3b-bbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:e1:17:a5:b2:8b:d1:74:3b:ec:04:3b:15: e2:89:6c:a8:af:07:b0:4b:96:4c:42:58:35:5f:e5: 04:3b:26:9d:ac:e1:ca:86:fe:5a:a8:75:ea:18:66: 71:bf:b3:af:76:62:03:5b:32:c4:f2:a0:e3:bd:a4: b1:af:c8:3d:bf:69:68:fb:cf:ea:93:93:5b:29:be: 2c:bd:4f:b7:0f:92:69:29:1d:e3:1a:12:f6:db:96: a3:11:fd:0d:77:5e:1d:ca:a9:95:a8:9c:d2:77:02: b0:36:30:c6:f1:2d:16:0f:94:02:d3:82:11:1d:a2: f5:3d:30:45:16:51:47:af:06:6f:5a:0f:13:f5:b3: ba:dc:dc:33:b8:79:29:1b:20:37:fc:67:e8:60:e7: aa:b5:6a:f4:9c:0d:fb:be:e8:13:e6:4e:87:a9:43: ca:a5:79:e3:b9:84:6c:10:34:e9:02:46:05:56:2a: 60:a5:c6:5e:9a:f7:f3:ba:1f:64:de:e6:ed:58:aa: e2:1f:b1:91:ca:99:aa:2d:78:20:01:72:80:31:9b: b9:59:26:53:a7:1a:3d:be:65:3f:6b:94:70:04:ac: 25:54:e9:b0:48:48:a8:52:e2:f3:f8:c1:72:84:aa: c8:8f:2c:a3:8d:c7:27:0d:ea:32:09:a5:82:66:5f: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:5C:97:88:47:9B:96:91:74:B2:8A:58:97:98:E6:7A:0F:F4:DF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A082FB0745911EC8FBEDD40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.84.0/22 103.16.68.0/22 103.146.216.0/24 Signature Algorithm: sha256WithRSAEncryption b1:67:41:74:ac:21:94:ad:bf:da:d0:aa:9c:af:9b:78:71:cf: 53:d7:fb:c4:49:b3:e9:92:29:74:65:f9:dd:76:08:dc:69:08: e5:da:2a:89:b0:e8:ad:45:3b:e6:0a:c6:06:d9:8d:24:40:90: 85:28:f4:32:70:bc:1c:27:a6:4c:bb:ae:ea:35:2d:63:8c:f6: 61:77:57:5a:74:10:8b:e1:c1:30:62:b7:02:42:84:87:fa:77: 9a:f9:92:bf:b8:63:35:06:cf:87:40:70:c3:76:9f:bf:75:13: 97:f4:4c:da:85:24:57:61:c3:fe:f0:80:ae:af:e3:b2:02:0d: 4c:99:24:34:88:e1:4e:51:da:79:3f:7d:1b:d6:3f:e0:17:84: 23:cb:b6:a3:1c:df:cb:53:a2:86:f9:56:3b:ba:96:80:7a:ba: 8f:07:3b:fb:20:bf:30:45:b1:2d:0c:c9:c1:60:0a:8c:4c:f7: 15:b0:53:45:42:7f:c4:89:1d:6d:8b:be:67:f6:c2:35:0b:7f: d4:b7:53:72:57:a1:bb:e4:7b:24:ec:fb:35:d2:c0:ec:4f:5a: 12:2c:5f:67:1f:6f:04:df:ed:5e:0b:bc:a5:dc:04:0f:27:86: df:7d:1f:8a:70:9e:23:c4:76:a7:7b:29:39:e5:da:6e:89:c9: 17:d1:13:05 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICdDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjE5MDkyMjAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkwMWUzYi1iYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0rhF6Wyi9F0O+wEOxXiiWyorwewS5ZMQlg1X+UEOyadrOHKhv5aqHXqGGZx v7OvdmIDWzLE8qDjvaSxr8g9v2lo+8/qk5NbKb4svU+3D5JpKR3jGhL225ajEf0N d14dyqmVqJzSdwKwNjDG8S0WD5QC04IRHaL1PTBFFlFHrwZvWg8T9bO63NwzuHkp GyA3/GfoYOeqtWr0nA37vugT5k6HqUPKpXnjuYRsEDTpAkYFVipgpcZemvfzuh9k 3ubtWKriH7GRypmqLXggAXKAMZu5WSZTpxo9vmU/a5RwBKwlVOmwSEioUuLz+MFy hKrIjyyjjccnDeoyCaWCZl8hrwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKOrXJeI R5uWkXSyiliXmOZ6D/TfMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkEwODJGQjA3 NDU5MTFFQzhGQkVERDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIk/1QDBAJnEEQDBABnktgwDQYJKoZIhvcNAQELBQADggEB ALFnQXSsIZStv9rQqpyvm3hxz1PX+8RJs+mSKXRl+d12CNxpCOXaKomw6K1FO+YK xgbZjSRAkIUo9DJwvBwnpky7ruo1LWOM9mF3V1p0EIvhwTBitwJChIf6d5r5kr+4 YzUGz4dAcMN2n791E5f0TNqFJFdhw/7wgK6v47ICDUyZJDSI4U5R2nk/fRvWP+AX hCPLtqMc38tToob5Vju6loB6uo8HO/sgvzBFsS0MycFgCoxM9xWwU0VCf8SJHW2L vmf2wjULf9S3U3JXobvkeyTs+zXSwOxPWhIsX2cfbwTf7V4LvKXcBA8nht99H4pw niPEdqd7KTnl2m6JyRfREwU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org