$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/466E073C0C2011EE8884CE62C4F9AE02.roa File: 466E073C0C2011EE8884CE62C4F9AE02.roa (raw, json) Hash identifier: 8BJXl5j6+a6hb5GWpATPNvtLLECQfLCgl02a4oxa5sw= Subject key identifier: D8:00:4F:FF:5C:39:4E:8D:27:53:F7:26:3B:3A:14:16:4B:13:72:5E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 741A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/466E073C0C2011EE8884CE62C4F9AE02.roa Signing time: Fri 16 Jun 2023 09:02:08 +0000 ROA not before: Fri 16 Jun 2023 09:02:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150588 IP address blocks: 103.136.189.0/24 maxlen: 24 2001:df1:c940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29722 (0x741a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 16 09:02:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=648c2510-c077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:6f:2b:7d:02:95:29:7e:67:36:47:9b:bc: b2:c9:f1:ea:d0:aa:a3:f8:14:14:10:57:b4:8d:02: 45:47:b9:bc:3b:02:55:ba:d3:70:06:7b:a5:d8:f0: 7f:33:0b:79:31:18:cd:ab:bd:6d:3d:27:a6:cd:a4: 40:b5:1b:98:ed:58:9b:f6:d0:79:8f:53:5e:ec:12: 30:21:09:d8:b7:04:4e:8f:f2:f7:e5:02:10:94:a5: d7:a5:61:90:74:e3:99:7b:33:61:1f:b7:64:59:f6: 1b:4d:e4:44:c1:a9:8a:12:c1:60:2b:86:fa:e0:90: 55:ae:b6:2f:c8:1e:c6:55:b0:00:e9:c0:ed:73:0e: 6b:e0:33:22:40:93:4a:02:fc:a6:e2:7d:ee:e3:0d: ea:b9:47:43:0e:a5:aa:17:be:3e:dd:3a:5f:d4:89: f8:75:f2:c9:4e:9d:50:54:63:c8:e2:01:2c:57:43: c2:9d:41:77:da:2e:61:22:6e:60:b0:09:fd:dd:13: 0b:a6:68:b9:61:c8:f4:5c:49:13:2b:43:0f:24:fc: 54:99:62:7e:ee:97:0d:02:ad:47:47:b1:2d:c4:46: f1:d9:34:47:e4:3a:74:a1:65:ce:c7:bc:ac:94:6c: 5d:f6:55:c1:5c:84:e4:dd:7a:6b:81:5a:b8:11:84: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:00:4F:FF:5C:39:4E:8D:27:53:F7:26:3B:3A:14:16:4B:13:72:5E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/466E073C0C2011EE8884CE62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.189.0/24 IPv6: 2001:df1:c940::/48 Signature Algorithm: sha256WithRSAEncryption af:2d:35:8a:f4:6c:80:1e:2c:45:34:4e:9c:82:1d:34:f3:b7: c9:6a:a2:e9:44:44:fd:4a:e2:51:2d:67:e5:b9:e6:75:f7:cc: 43:94:a3:97:4f:0d:1c:8f:07:41:d8:c7:dd:3d:78:f1:c0:0e: 79:80:22:30:be:a1:3e:29:9d:85:cd:9a:a2:9c:cb:81:fa:7d: 3f:96:14:96:17:1f:f0:8f:14:95:b5:7b:60:e1:ea:11:ad:47: 72:47:af:5d:f2:75:06:c4:61:e7:25:9b:cb:86:0b:90:15:96: 45:a2:05:70:fe:13:6b:36:05:6a:cd:50:d3:2e:25:a0:e3:26: c6:f7:2b:94:0f:7a:88:42:9d:30:f9:55:10:23:1a:6d:6c:09: cb:81:ee:1d:8a:65:55:5e:9b:56:f6:f3:d5:dc:fe:4f:0f:f5: 78:a4:d6:33:54:8c:d8:4b:9b:22:c4:1b:4e:3b:0b:9d:d9:51: 98:be:7a:77:90:07:4f:61:e5:07:b0:59:34:b1:62:05:d3:83: 33:5f:e5:6f:3c:2f:a0:5d:80:35:04:d6:26:42:cb:c8:af:0a: 23:92:35:3c:b7:79:6f:48:30:d0:20:17:cf:2a:ae:c5:1f:9f: 65:88:2c:e4:91:d7:78:a5:1b:62:17:f6:4d:e6:ee:2e:b5:e6: 51:bd:61:f2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICdBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjE2MDkwMjA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDhjMjUxMC1jMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L1vK30ClSl+ZzZHm7yyyfHq0Kqj+BQUEFe0jQJFR7m8OwJVutNwBnul2PB/ Mwt5MRjNq71tPSemzaRAtRuY7Vib9tB5j1Ne7BIwIQnYtwROj/L35QIQlKXXpWGQ dOOZezNhH7dkWfYbTeREwamKEsFgK4b64JBVrrYvyB7GVbAA6cDtcw5r4DMiQJNK Avym4n3u4w3quUdDDqWqF74+3Tpf1In4dfLJTp1QVGPI4gEsV0PCnUF32i5hIm5g sAn93RMLpmi5Ycj0XEkTK0MPJPxUmWJ+7pcNAq1HR7EtxEbx2TRH5Dp0oWXOx7ys lGxd9lXBXITk3XprgVq4EYTOpQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNgAT/9c OU6NJ1P3Jjs6FBZLE3JeMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDY2RTA3M0Mw QzIwMTFFRTg4ODRDRTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABniL0wDwQCAAIwCQMHACABDfHJQDANBgkqhkiG9w0BAQsF AAOCAQEAry01ivRsgB4sRTROnIIdNPO3yWqi6URE/UriUS1n5bnmdffMQ5Sjl08N HI8HQdjH3T148cAOeYAiML6hPimdhc2aopzLgfp9P5YUlhcf8I8UlbV7YOHqEa1H ckevXfJ1BsRh5yWby4YLkBWWRaIFcP4TazYFas1Q0y4loOMmxvcrlA96iEKdMPlV ECMabWwJy4HuHYplVV6bVvbz1dz+Tw/1eKTWM1SM2EubIsQbTjsLndlRmL56d5AH T2HlB7BZNLFiBdODM1/lbzwvoF2ANQTWJkLLyK8KI5I1PLd5b0gw0CAXzyquxR+f ZYgs5JHXeKUbYhf2TebuLrXmUb1h8g== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org