$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/463677A4976511EBBDA2A315C4F9AE02.roa File: 463677A4976511EBBDA2A315C4F9AE02.roa (raw, json) Hash identifier: gY1pIMAadQkIyjwu+GpodHz0ZCO0M0oR/qT1CxARxpQ= Subject key identifier: 4E:CA:5B:7B:2F:D2:5D:35:99:A4:05:9F:94:4A:F2:85:16:25:C9:E9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F37 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/463677A4976511EBBDA2A315C4F9AE02.roa Signing time: Wed 10 May 2023 16:37:45 +0000 ROA not before: Wed 10 May 2023 16:37:45 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141869 IP address blocks: 103.164.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28471 (0x6f37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:37:45 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc859-d760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:4d:94:3f:a9:dc:a6:f1:35:19:be:91:40: b6:ab:c7:d8:c9:28:f4:2b:b8:0a:56:64:fa:d0:98: 6d:27:29:44:98:c8:27:d6:d7:50:dd:6a:63:35:28: a0:93:21:55:9b:d1:0c:37:bc:58:24:ee:95:74:fa: b1:19:9a:0b:2c:47:1e:f4:41:99:7c:ca:d5:b5:3b: a6:70:c2:e0:6a:19:d5:72:93:3c:73:52:30:5f:8c: a7:5e:6b:fa:60:9d:68:eb:bb:33:6a:41:d1:c2:a5: 0c:55:e7:fa:8b:d6:58:76:2d:7b:d0:b3:75:a4:e1: c9:a4:f1:ac:51:da:e4:86:b7:24:4a:4b:40:58:25: ad:ea:24:ae:e5:47:5a:2e:62:e0:86:c5:4a:c0:5d: 10:dd:71:53:dd:8b:02:43:7b:79:26:5d:41:d4:a1: 1a:bd:f4:ef:7b:c8:79:fd:4c:d2:92:1d:05:b5:cc: cb:7c:8b:cd:e3:3a:b6:99:6c:4b:8c:6d:12:e4:04: 9d:07:1a:72:5a:e4:a9:b2:25:cd:59:71:dc:de:83: cb:3b:b5:d1:89:f2:91:e0:d3:1d:75:5d:c9:21:4d: ab:44:99:06:9f:34:13:c8:79:af:05:40:59:cb:0c: 3a:e4:7b:d6:3c:15:45:be:3c:c0:c9:c7:d7:89:4e: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CA:5B:7B:2F:D2:5D:35:99:A4:05:9F:94:4A:F2:85:16:25:C9:E9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/463677A4976511EBBDA2A315C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.206.0/23 Signature Algorithm: sha256WithRSAEncryption 44:ab:f8:6a:0b:eb:d4:af:46:3e:d7:c9:bb:9c:df:66:62:ff: c5:fd:b8:5f:98:be:eb:bf:ed:00:2e:48:04:c6:22:c8:35:d0: b0:81:4e:a8:98:50:d9:79:2e:6c:e6:8b:fa:a7:de:7d:fc:88: 19:0d:57:aa:74:2b:1b:be:7d:f2:f3:d1:ab:73:46:d2:d0:d9: d7:72:ac:1d:fa:19:a3:2b:4e:5b:61:3b:93:5c:b2:8a:59:d5: aa:93:b0:19:b2:64:b0:f3:41:55:3e:62:bc:57:ea:6f:5b:69: 99:7c:1b:08:28:33:9c:e5:92:99:12:ca:5c:f1:33:8e:f1:1a: ba:91:c0:68:f6:dc:94:71:19:9b:54:31:3b:b4:8c:58:d7:65: b4:d8:a2:b5:43:0c:b7:1d:97:b6:d1:a3:81:dc:95:47:b3:9f: c1:b9:0c:cf:48:ed:d6:31:2a:87:f4:85:44:cb:e5:1f:f4:f5: ae:db:c8:a4:46:7c:0f:25:21:4c:40:76:1e:74:86:db:10:60: 19:a5:d9:94:2d:95:1b:03:33:41:33:3f:0b:23:a4:7d:9d:d3: 35:f4:61:b6:cf:0d:af:44:f3:87:65:86:10:9c:66:eb:dd:c0: 9a:6f:0b:4e:0a:4f:90:5c:3a:83:d4:e3:91:18:49:d1:bf:dc: 87:c5:c4:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNzQ1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg1OS1kNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZtNlD+p3KbxNRm+kUC2q8fYySj0K7gKVmT60JhtJylEmMgn1tdQ3WpjNSig kyFVm9EMN7xYJO6VdPqxGZoLLEce9EGZfMrVtTumcMLgahnVcpM8c1IwX4ynXmv6 YJ1o67szakHRwqUMVef6i9ZYdi170LN1pOHJpPGsUdrkhrckSktAWCWt6iSu5Uda LmLghsVKwF0Q3XFT3YsCQ3t5Jl1B1KEavfTve8h5/UzSkh0FtczLfIvN4zq2mWxL jG0S5ASdBxpyWuSpsiXNWXHc3oPLO7XRifKR4NMddV3JIU2rRJkGnzQTyHmvBUBZ yww65HvWPBVFvjzAycfXiU7HlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE7KW3sv 0l01maQFn5RK8oUWJcnpMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDYzNjc3QTQ5 NzY1MTFFQkJEQTJBMzE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpM4wDQYJKoZIhvcNAQELBQADggEBAESr+GoL69SvRj7X ybuc32Zi/8X9uF+Yvuu/7QAuSATGIsg10LCBTqiYUNl5Lmzmi/qn3n38iBkNV6p0 Kxu+ffLz0atzRtLQ2ddyrB36GaMrTlthO5NcsopZ1aqTsBmyZLDzQVU+YrxX6m9b aZl8GwgoM5zlkpkSylzxM47xGrqRwGj23JRxGZtUMTu0jFjXZbTYorVDDLcdl7bR o4HclUezn8G5DM9I7dYxKof0hUTL5R/09a7byKRGfA8lIUxAdh50htsQYBml2ZQt lRsDM0EzPwsjpH2d0zX0YbbPDa9E84dlhhCcZuvdwJpvC04KT5BcOoPU45EYSdG/ 3IfFxG8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org