$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40A9CE12EA6F11EDA7EDB55CC4F9AE02.roa File: 40A9CE12EA6F11EDA7EDB55CC4F9AE02.roa (raw, json) Hash identifier: 0tzifvZSpA7MbSuydeE5Lf5MIJmYLQK/XtkMA2mqEvk= Subject key identifier: 40:B4:02:E1:96:F1:96:05:CA:08:44:95:2D:D1:94:7A:B7:78:72:05 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7AEF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40A9CE12EA6F11EDA7EDB55CC4F9AE02.roa Signing time: Fri 29 Sep 2023 11:56:48 +0000 ROA not before: Fri 29 Sep 2023 11:56:48 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138274 IP address blocks: 103.132.204.0/22 maxlen: 24 103.250.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31471 (0x7aef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 29 11:56:48 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6516bb80-6193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:c7:11:2c:42:5f:a2:df:34:f4:58:8d:b5: 99:6b:fd:42:c6:14:01:a6:cd:7d:fe:88:ec:17:a3: 44:3c:af:57:da:e8:78:2c:f3:93:bf:cf:1b:d4:7d: 54:6e:2f:b6:f0:2c:43:80:0d:aa:07:e3:86:15:7a: 2a:cc:5a:88:9b:b5:ea:d8:70:80:1e:16:96:4f:10: 04:be:5b:93:ed:51:de:f0:a6:35:e2:0b:0c:af:3d: 3e:0d:cb:e6:24:fe:0e:55:db:e8:62:55:ee:2f:12: 77:f8:01:d8:4e:b9:7e:a9:7d:26:eb:80:dd:89:cd: c9:a8:4c:7a:87:51:68:cd:4e:14:95:74:91:11:4e: 46:ff:ef:e2:39:4d:dd:f7:85:e9:36:f0:d7:a9:04: 3d:4c:c1:98:8c:33:bb:53:e4:1f:4b:68:7e:72:72: 67:a6:12:42:04:da:2b:18:6f:0b:3a:38:e7:ef:4d: b6:00:de:46:28:ba:c6:81:63:e4:18:de:0b:ce:b0: 13:4e:dd:fc:29:9b:dd:9b:e2:72:03:44:9a:5d:dc: 13:c3:46:53:aa:80:e6:c7:04:9a:a1:02:14:b0:26: 98:d1:9e:7c:34:c7:d0:b9:2b:76:e7:22:2f:3f:8d: 32:aa:a1:06:70:5d:4c:d9:ee:46:78:aa:02:cc:80: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B4:02:E1:96:F1:96:05:CA:08:44:95:2D:D1:94:7A:B7:78:72:05 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40A9CE12EA6F11EDA7EDB55CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.204.0/22 103.250.120.0/23 Signature Algorithm: sha256WithRSAEncryption 23:9b:6c:8e:d5:40:28:1f:84:19:a0:d2:a8:21:77:12:e4:04: 1c:b0:72:d3:84:c9:31:6d:f0:8c:00:e1:cf:66:df:f3:04:a5: de:96:91:e6:d8:80:dd:df:91:29:d7:c5:35:2a:74:2a:68:a9: 6f:b4:25:2a:8c:88:4e:e5:6e:e1:22:b5:81:ee:d3:2c:6b:28: b8:66:eb:2b:2b:53:76:cf:51:5f:f8:bc:8d:12:d4:b4:54:76: 67:54:00:a9:81:c1:01:9d:ae:fc:d2:8c:ba:b5:43:04:84:b5: c4:3e:4c:11:75:c1:aa:fc:23:3a:7e:97:11:59:16:2f:70:48: 63:d5:51:39:27:1f:b6:69:c4:e2:d7:36:4f:a8:77:1f:41:10: 2b:e7:14:d6:d6:22:b1:1e:1e:31:55:b3:47:4d:80:57:9e:83: b3:59:f1:3a:76:62:85:4e:eb:cc:10:e9:1e:d2:a8:5d:4c:4e: 76:73:dc:67:c4:94:fb:88:cb:ec:bf:73:00:7e:9b:3d:14:97: 99:f3:71:eb:8d:5f:62:f3:e1:88:03:95:a8:7f:cd:ff:0e:ae: c2:e4:11:49:30:4a:d5:82:e2:53:d8:c0:64:bb:bf:64:78:67: 19:37:3d:07:62:78:78:79:b2:c2:e8:8a:ef:de:0d:0e:c9:f9: 50:08:68:f8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICeu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTI5MTE1NjQ4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE2YmI4MC02MTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpjHESxCX6LfNPRYjbWZa/1CxhQBps19/ojsF6NEPK9X2uh4LPOTv88b1H1U bi+28CxDgA2qB+OGFXoqzFqIm7Xq2HCAHhaWTxAEvluT7VHe8KY14gsMrz0+Dcvm JP4OVdvoYlXuLxJ3+AHYTrl+qX0m64Ddic3JqEx6h1FozU4UlXSREU5G/+/iOU3d 94XpNvDXqQQ9TMGYjDO7U+QfS2h+cnJnphJCBNorGG8LOjjn7022AN5GKLrGgWPk GN4LzrATTt38KZvdm+JyA0SaXdwTw0ZTqoDmxwSaoQIUsCaY0Z58NMfQuSt25yIv P40yqqEGcF1M2e5GeKoCzIDSvwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEC0AuGW 8ZYFyghElS3RlHq3eHIFMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDBBOUNFMTJF QTZGMTFFREE3RURCNTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnhMwDBAFn+ngwDQYJKoZIhvcNAQELBQADggEBACObbI7V QCgfhBmg0qghdxLkBBywctOEyTFt8IwA4c9m3/MEpd6WkebYgN3fkSnXxTUqdCpo qW+0JSqMiE7lbuEitYHu0yxrKLhm6ysrU3bPUV/4vI0S1LRUdmdUAKmBwQGdrvzS jLq1QwSEtcQ+TBF1war8Izp+lxFZFi9wSGPVUTknH7ZpxOLXNk+odx9BECvnFNbW IrEeHjFVs0dNgFeeg7NZ8Tp2YoVO68wQ6R7SqF1MTnZz3GfElPuIy+y/cwB+mz0U l5nzceuNX2Lz4YgDlah/zf8OrsLkEUkwStWC4lPYwGS7v2R4Zxk3PQdieHh5ssLo iu/eDQ7J+VAIaPg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org