$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E93F298DEEA11EB9AC14312C4F9AE02.roa File: 3E93F298DEEA11EB9AC14312C4F9AE02.roa (raw, json) Hash identifier: eZygkagXRdIWakExYRsJ6gliLLdoz+eEcloiFilD8+U= Subject key identifier: 8E:34:AE:AC:BC:94:D8:28:74:F4:BD:ED:60:F6:02:A1:90:D8:B0:2B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 722C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E93F298DEEA11EB9AC14312C4F9AE02.roa Signing time: Tue 16 May 2023 08:22:05 +0000 ROA not before: Tue 16 May 2023 08:22:05 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138783 IP address blocks: 103.136.44.0/22 maxlen: 24 2001:df2:12c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29228 (0x722c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 16 08:22:05 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64633d2c-e134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:11:7f:8e:e3:0d:39:2e:b2:94:37:10:af:9a: 74:a9:04:34:72:c2:eb:60:00:af:e5:ca:55:f5:5d: 9d:b3:cd:1e:57:be:1c:95:43:c4:99:64:90:12:ac: 9c:1e:ca:70:ce:a7:9b:6c:5f:f9:f6:19:5a:bf:88: a1:15:70:d1:02:05:9c:43:70:49:66:51:61:2b:2f: bb:98:88:45:1d:8a:9e:a8:a7:ff:03:ce:13:ad:99: f1:c4:65:ac:25:a2:c3:bb:47:a3:4d:d7:6a:d0:fe: 4f:c9:91:45:5d:c7:bd:82:1a:02:7f:d3:ea:96:a7: b2:2e:8e:39:71:ee:52:c2:3c:46:20:09:69:ab:59: 93:9e:f5:c7:48:d5:79:cd:9d:1d:34:4e:f2:b0:5f: d1:d3:9f:e2:64:9d:95:18:53:67:f3:17:fa:2b:67: 52:7a:3d:5b:c9:62:b7:82:12:2f:c8:99:7d:75:4c: 14:3a:95:fd:8a:04:6e:a5:de:72:92:b9:78:0c:60: 62:c5:7a:5d:99:db:72:bc:95:15:04:6f:84:4c:63: c6:6a:ec:e6:93:ab:e1:e3:65:e2:ed:c2:2f:23:02: d7:a8:3b:04:71:bd:e2:a6:25:31:95:8d:4d:48:8a: f8:cb:15:e7:ba:56:95:49:ac:26:17:87:f6:3b:b7: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:34:AE:AC:BC:94:D8:28:74:F4:BD:ED:60:F6:02:A1:90:D8:B0:2B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E93F298DEEA11EB9AC14312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.44.0/22 IPv6: 2001:df2:12c0::/48 Signature Algorithm: sha256WithRSAEncryption a5:64:16:c2:9f:4f:0b:7a:2b:b7:44:51:e8:6c:cc:21:b7:63: 86:71:8c:79:77:b8:5c:b9:d6:b8:15:67:e5:5d:a8:9d:d3:87: 19:81:66:75:c0:31:80:26:4b:2f:5e:34:e2:78:27:95:ae:3e: 46:f8:69:39:0e:f6:5b:6a:ba:1f:e6:e7:43:a3:34:a0:2c:81: de:4c:84:7c:4e:2d:f2:c8:38:f7:42:10:08:d8:34:2f:32:9b: cc:f0:68:a4:80:2f:c2:d8:af:8c:21:66:c1:88:cc:fc:f3:64: e3:6f:77:cb:af:79:c4:1a:27:3d:96:f9:a1:0b:52:7e:5f:24: 0b:d2:4c:29:7b:34:0e:ee:41:ff:82:15:2b:c6:fd:aa:f9:bc: d5:03:d2:18:ce:db:3b:55:9c:67:62:5f:c4:a1:fd:8e:54:4d: 25:8e:ef:64:e1:46:16:78:5a:42:3b:2b:37:a5:15:7f:f3:72: 85:8e:0f:aa:97:72:8f:e7:c8:99:5a:5e:72:eb:72:6e:35:c5: 34:40:91:18:9b:5c:86:7b:3c:5b:ae:60:91:a2:fa:0c:14:86: 62:5b:d2:4c:d3:df:37:d5:75:c8:25:b4:aa:88:f0:be:e6:e2: 61:e8:ae:9b:64:53:59:a8:c5:7a:18:b3:1f:1e:ef:89:4e:7f: 94:29:09:30 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICciwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTE2MDgyMjA1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYzM2QyYy1lMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RF/juMNOS6ylDcQr5p0qQQ0csLrYACv5cpV9V2ds80eV74clUPEmWSQEqyc HspwzqebbF/59hlav4ihFXDRAgWcQ3BJZlFhKy+7mIhFHYqeqKf/A84TrZnxxGWs JaLDu0ejTddq0P5PyZFFXce9ghoCf9PqlqeyLo45ce5SwjxGIAlpq1mTnvXHSNV5 zZ0dNE7ysF/R05/iZJ2VGFNn8xf6K2dSej1byWK3ghIvyJl9dUwUOpX9igRupd5y krl4DGBixXpdmdtyvJUVBG+ETGPGauzmk6vh42Xi7cIvIwLXqDsEcb3ipiUxlY1N SIr4yxXnulaVSawmF4f2O7euxwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFI40rqy8 lNgodPS97WD2AqGQ2LArMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0U5M0YyOThE RUVBMTFFQjlBQzE0MzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJniCwwDwQCAAIwCQMHACABDfISwDANBgkqhkiG9w0BAQsF AAOCAQEApWQWwp9PC3ort0RR6GzMIbdjhnGMeXe4XLnWuBVn5V2ondOHGYFmdcAx gCZLL1404ngnla4+RvhpOQ72W2q6H+bnQ6M0oCyB3kyEfE4t8sg490IQCNg0LzKb zPBopIAvwtivjCFmwYjM/PNk4293y695xBonPZb5oQtSfl8kC9JMKXs0Du5B/4IV K8b9qvm81QPSGM7bO1WcZ2JfxKH9jlRNJY7vZOFGFnhaQjsrN6UVf/NyhY4Pqpdy j+fImVpecutybjXFNECRGJtchns8W65gkaL6DBSGYlvSTNPfN9V1yCW0qojwvubi Yeium2RTWajFehizHx7viU5/lCkJMA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org