$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F27A1685A411ECBAE9205EC4F9AE02.roa File: 37F27A1685A411ECBAE9205EC4F9AE02.roa (raw, json) Hash identifier: jyMtq4VRzAfpXL3SdcqH5ukMbTknoa+Fz6J+hfGRraE= Subject key identifier: C0:27:BA:70:57:D9:82:E3:30:15:DF:13:85:8A:40:72:09:8B:5A:77 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 73FE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F27A1685A411ECBAE9205EC4F9AE02.roa Signing time: Thu 15 Jun 2023 08:22:04 +0000 ROA not before: Thu 15 Jun 2023 08:22:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137088 IP address blocks: 103.106.152.0/24 maxlen: 24 103.106.153.0/24 maxlen: 24 103.106.154.0/24 maxlen: 24 103.196.2.0/23 maxlen: 24 2400:fd20::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29694 (0x73fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 15 08:22:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=648aca2c-f694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:4d:f1:4f:c9:ae:97:40:90:40:56:eb:77: 4b:8e:f0:93:ba:a5:4c:35:29:ab:0d:42:c2:de:ce: f6:fe:32:83:60:84:1b:e3:75:21:ce:ae:48:c0:65: ec:55:92:01:4f:86:05:cc:fe:1a:39:6e:c4:88:b7: 29:70:50:ce:63:e3:e4:96:87:48:8c:6a:a6:ee:fc: f1:e1:c6:12:78:66:e5:30:15:15:47:23:08:01:0f: e6:b0:90:9b:68:9d:57:da:57:19:13:b1:80:eb:a0: 5f:35:ba:64:6e:03:4e:35:fb:f3:fe:bb:ba:db:d9: ad:81:93:a2:b5:b8:11:20:47:d7:61:17:b5:d2:f8: 06:2e:23:73:1a:aa:80:6e:b8:d7:55:17:a1:99:80: 63:5b:52:3f:70:ef:90:b8:a0:b7:be:26:3c:57:31: 96:55:9a:2c:e5:53:ea:3c:2a:6b:50:6b:81:b6:eb: 2d:f7:d9:d8:c7:79:87:08:ea:55:f5:39:cc:7d:5c: 8a:bf:a3:76:b1:fc:07:90:fa:a9:4d:ea:1f:b9:2b: f3:29:22:2f:ab:37:4a:54:39:8e:72:fe:81:12:07: 66:a9:be:2f:c0:aa:f7:4d:27:be:04:a6:f8:22:a8: e3:33:fa:9b:39:22:bd:9f:3a:73:54:f0:ff:99:f9: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:27:BA:70:57:D9:82:E3:30:15:DF:13:85:8A:40:72:09:8B:5A:77 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F27A1685A411ECBAE9205EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.152.0-103.106.154.255 103.196.2.0/23 IPv6: 2400:fd20::/32 Signature Algorithm: sha256WithRSAEncryption aa:98:61:0f:03:55:5e:5c:e4:0f:36:40:02:67:26:79:7c:07: 39:bf:4d:50:a4:f0:13:87:99:48:83:33:ee:8f:30:83:3c:0e: c5:2c:1b:a4:23:94:1f:9f:5c:23:df:7b:22:c5:24:0e:0a:e8: 69:ed:16:c5:0d:27:00:94:8a:1a:a1:63:9d:f1:3f:56:39:03: a5:16:48:9f:17:02:09:3d:36:a9:b9:94:eb:17:c1:83:c4:9b: 99:3d:be:18:50:b3:72:91:ff:97:20:d5:49:48:a5:34:e1:c4: 69:e3:83:50:76:9f:a2:4c:9b:8e:7f:43:82:18:bf:de:cf:c1: 8b:7f:76:8f:e6:27:57:be:d8:2b:e4:5a:f6:b1:62:b0:98:b4: 65:52:06:0b:c0:75:6d:b0:90:8a:77:ad:8c:75:77:4e:fa:63: b6:15:2e:5e:ce:8c:2c:75:6c:bf:00:6e:03:37:e6:c1:fd:a9: 7c:75:dd:f1:59:6f:d9:25:44:3b:7d:c0:44:66:50:8e:1a:1e: 25:bc:12:86:4d:a2:b9:f7:0b:2e:b7:e8:a4:a1:86:e0:e4:ca: c7:58:e4:fc:65:c3:5f:99:53:02:ab:8e:63:54:17:f2:a0:4f: ce:fd:9a:c0:bd:2e:46:b5:0c:b4:74:c6:6c:ce:3b:0a:73:21: 80:98:5a:20 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICc/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjE1MDgyMjA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDhhY2EyYy1mNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73ZN8U/JrpdAkEBW63dLjvCTuqVMNSmrDULC3s72/jKDYIQb43Uhzq5IwGXs VZIBT4YFzP4aOW7EiLcpcFDOY+PklodIjGqm7vzx4cYSeGblMBUVRyMIAQ/msJCb aJ1X2lcZE7GA66BfNbpkbgNONfvz/ru629mtgZOitbgRIEfXYRe10vgGLiNzGqqA brjXVRehmYBjW1I/cO+QuKC3viY8VzGWVZos5VPqPCprUGuBtust99nYx3mHCOpV 9TnMfVyKv6N2sfwHkPqpTeofuSvzKSIvqzdKVDmOcv6BEgdmqb4vwKr3TSe+BKb4 IqjjM/qbOSK9nzpzVPD/mfnWtwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMAnunBX 2YLjMBXfE4WKQHIJi1p3MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzdGMjdBMTY4 NUE0MTFFQ0JBRTkyMDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQwDAMEA2dqmAMEAGdqmgMEAWfEAjANBAIAAjAHAwUAJAD9IDAN BgkqhkiG9w0BAQsFAAOCAQEAqphhDwNVXlzkDzZAAmcmeXwHOb9NUKTwE4eZSIMz 7o8wgzwOxSwbpCOUH59cI997IsUkDgroae0WxQ0nAJSKGqFjnfE/VjkDpRZInxcC CT02qbmU6xfBg8SbmT2+GFCzcpH/lyDVSUilNOHEaeODUHafokybjn9Dghi/3s/B i392j+YnV77YK+Ra9rFisJi0ZVIGC8B1bbCQinetjHV3TvpjthUuXs6MLHVsvwBu Azfmwf2pfHXd8Vlv2SVEO33ARGZQjhoeJbwShk2iufcLLrfopKGG4OTKx1jk/GXD X5lTAquOY1QX8qBPzv2awL0uRrUMtHTGbM47CnMhgJhaIA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org