$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40AE92FC0F1A11ED86A4F720C4F9AE02.roa File: 40AE92FC0F1A11ED86A4F720C4F9AE02.roa (raw, json) Hash identifier: zSED9cwvdg51KQAPRSTOwwe9NumS+FIdy+SO3qKWvss= Subject key identifier: 24:6F:B5:9F:56:75:8D:E3:C9:3E:B0:18:02:35:94:71:B7:CC:48:DE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D12 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40AE92FC0F1A11ED86A4F720C4F9AE02.roa Signing time: Wed 10 May 2023 16:27:33 +0000 ROA not before: Wed 10 May 2023 16:27:33 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137587 IP address blocks: 103.98.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27922 (0x6d12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:27:33 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5f5-a048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:04:02:33:a4:5a:7e:9f:83:43:3c:09:4a: 0c:32:7a:bf:cf:81:d5:3f:2e:8e:98:19:ff:db:f2: 71:be:3d:cf:08:48:12:26:f9:3a:34:65:c3:f0:1d: 49:89:7b:d5:62:b5:a9:36:15:e4:25:81:65:da:e1: 80:81:12:44:10:ef:93:d2:c5:8c:60:30:0c:e7:b1: e0:64:39:8f:45:8c:99:f5:37:14:bb:ac:ec:f2:cf: 04:19:67:e3:2a:81:a0:bd:87:61:91:0b:c7:b2:2a: 09:1c:f0:37:9d:de:f2:7c:ab:e6:41:ff:93:f5:bf: 13:33:0a:83:00:3f:bb:a1:70:1c:d5:f4:93:de:f7: fa:43:40:78:eb:11:43:09:16:7c:b3:98:19:69:ac: 16:a3:fa:2f:c8:36:75:e3:48:ae:40:49:02:76:d7: be:88:01:14:67:86:a9:5a:68:ea:43:43:de:9c:17: 02:78:3e:3f:29:92:85:60:68:2f:c8:e9:ef:f0:1d: ef:3f:27:52:28:91:37:1f:f6:f4:c8:f7:9e:6d:a6: 1b:b7:7b:75:5a:aa:6f:ba:d7:63:ab:7d:a9:99:84: 93:96:29:3c:6f:a2:92:7c:8c:6f:0b:3f:1c:8b:bb: 6a:bc:ab:62:cb:45:6b:92:19:45:1d:12:d3:3a:6b: 61:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6F:B5:9F:56:75:8D:E3:C9:3E:B0:18:02:35:94:71:B7:CC:48:DE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40AE92FC0F1A11ED86A4F720C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.188.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:cf:6e:f7:90:88:ad:df:5b:80:11:40:45:de:cb:6f:55:1d: e3:99:91:e9:b0:d5:2b:de:d5:96:80:03:b9:7a:a3:df:3b:5f: 08:8f:7f:3c:4d:78:db:85:90:92:03:f5:ff:6d:2c:10:1a:df: 56:45:ec:8a:41:42:69:2b:db:8b:8b:3d:0c:40:40:b2:78:f4: e4:6d:a7:b6:6d:82:5d:7b:64:8a:73:94:67:32:2e:95:af:d0: f6:0f:0d:19:1b:1f:1d:a8:2b:ea:d8:83:c3:06:0e:11:a5:a3: 2a:78:5a:08:b1:0e:8e:d0:d3:c0:b2:90:b1:3c:24:27:a3:94: 53:03:ab:85:f4:5e:c1:d4:84:e1:c3:e5:ec:97:c9:25:12:c3: e7:54:d1:c9:0c:52:84:b2:f9:e2:4d:2f:c0:ef:b8:11:8e:88: 18:db:f2:88:62:1c:f7:53:4f:3a:86:7b:83:e7:85:fd:9b:fe: 45:e1:6f:a2:04:ee:15:b0:43:56:96:3e:0a:58:1a:39:b9:78: a8:13:ab:03:e2:23:c0:69:4c:a5:93:db:99:3e:88:11:3b:1f: 88:03:0f:1f:f7:3b:10:b4:0a:4c:f5:df:9e:89:19:e7:4d:d5: 94:6e:f7:01:32:7f:55:00:e7:64:0f:ab:02:02:a8:e3:91:b7: 45:f1:e7:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNzMzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzVmNS1hMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/8EAjOkWn6fg0M8CUoMMnq/z4HVPy6OmBn/2/Jxvj3PCEgSJvk6NGXD8B1J iXvVYrWpNhXkJYFl2uGAgRJEEO+T0sWMYDAM57HgZDmPRYyZ9TcUu6zs8s8EGWfj KoGgvYdhkQvHsioJHPA3nd7yfKvmQf+T9b8TMwqDAD+7oXAc1fST3vf6Q0B46xFD CRZ8s5gZaawWo/ovyDZ140iuQEkCdte+iAEUZ4apWmjqQ0PenBcCeD4/KZKFYGgv yOnv8B3vPydSKJE3H/b0yPeebaYbt3t1Wqpvutdjq32pmYSTlik8b6KSfIxvCz8c i7tqvKtiy0VrkhlFHRLTOmth+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCRvtZ9W dY3jyT6wGAI1lHG3zEjeMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDBBRTkyRkMw RjFBMTFFRDg2QTRGNzIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYrwwDQYJKoZIhvcNAQELBQADggEBAI3PbveQiK3fW4AR QEXey29VHeOZkemw1Sve1ZaAA7l6o987XwiPfzxNeNuFkJID9f9tLBAa31ZF7IpB Qmkr24uLPQxAQLJ49ORtp7Ztgl17ZIpzlGcyLpWv0PYPDRkbHx2oK+rYg8MGDhGl oyp4WgixDo7Q08CykLE8JCejlFMDq4X0XsHUhOHD5eyXySUSw+dU0ckMUoSy+eJN L8DvuBGOiBjb8ohiHPdTTzqGe4Pnhf2b/kXhb6IE7hWwQ1aWPgpYGjm5eKgTqwPi I8BpTKWT25k+iBE7H4gDDx/3OxC0Ckz1356JGedN1ZRu9wEyf1UA52QPqwICqOOR t0Xx5x8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org