$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E16BBE84E8E11EBA47A5115C4F9AE02.roa File: 4E16BBE84E8E11EBA47A5115C4F9AE02.roa (raw, json) Hash identifier: FmmkugOj1UmywdAT7doPtDJcTbWxkmQgz6ztx/qzBHw= Subject key identifier: EC:52:63:7C:8F:4A:66:68:BC:E7:5A:3A:53:C5:B7:05:55:C5:81:47 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D8B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E16BBE84E8E11EBA47A5115C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:53 +0000 ROA not before: Wed 10 May 2023 16:29:53 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138711 IP address blocks: 103.137.16.0/23 maxlen: 24 2001:df7:6380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28043 (0x6d8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:53 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc680-af56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:9b:87:b4:bb:b5:07:f1:ab:9a:03:f0:6b: fc:6b:b5:66:b1:f3:50:d4:87:de:f6:2c:72:6a:71: 6e:3f:17:5e:33:5a:5b:43:9a:49:a0:4f:77:6e:77: 41:97:9d:2e:fc:aa:03:dd:c2:3d:b0:24:4d:42:a1: ba:50:24:b3:86:f1:7b:52:e5:e3:8a:fd:fa:a0:fc: 03:f4:23:85:64:77:0c:4a:52:bb:d1:89:58:57:24: 82:15:f4:6c:bc:3a:86:52:bb:1a:aa:5c:38:8a:92: 8b:01:bb:d6:93:6a:c4:8f:41:de:09:29:01:0b:38: 06:89:95:15:74:5d:d3:b0:b2:f7:2b:97:85:5a:0f: 44:e1:de:30:88:ed:e0:e8:ea:e9:fd:98:18:9d:74: c6:af:e6:da:79:7e:93:89:7b:4d:7a:a5:fb:fc:56: 49:e8:cf:91:7f:5b:a8:21:ad:64:73:4b:be:08:f4: 82:7f:c2:8c:18:73:e3:d2:51:3f:b9:aa:83:50:b2: 1e:dc:6b:9e:5b:ea:da:2f:5f:6a:55:2e:78:55:c9: 6a:70:51:ed:7b:41:94:42:3c:27:a9:db:ce:1b:82: 67:08:f6:55:c2:a9:29:3d:55:3a:53:54:2a:ee:55: 32:fd:1c:3e:2f:e5:4b:75:cf:a1:f6:54:74:d2:a8: bb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:52:63:7C:8F:4A:66:68:BC:E7:5A:3A:53:C5:B7:05:55:C5:81:47 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E16BBE84E8E11EBA47A5115C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.16.0/23 IPv6: 2001:df7:6380::/48 Signature Algorithm: sha256WithRSAEncryption 87:d6:52:cd:1a:c1:6e:52:8b:5f:f2:65:22:23:76:c1:e5:e3: 36:e3:db:f8:4e:5e:81:a2:ca:e1:f0:ae:6e:93:4a:37:ee:11: 2c:98:36:ac:d0:ce:ef:7d:fc:ed:8b:04:0a:da:02:0e:12:84: 23:d9:1b:18:ab:c8:97:9a:30:6b:e8:59:8d:21:38:36:5e:bc: 4e:63:e1:85:09:ba:b1:b7:0d:6d:93:fd:e3:be:8f:8b:2e:ba: a3:5a:17:90:dd:08:07:93:c6:ce:3e:3b:cd:0e:0f:88:14:e9: 2e:26:43:d0:95:5f:16:9c:0d:b7:e5:bd:94:82:34:1e:c1:b2: 5f:a5:36:19:52:ff:dc:a7:e6:d6:e0:91:00:6f:c1:43:af:ca: 04:c7:ea:91:3a:40:b5:0a:cc:bb:19:17:52:32:41:c5:6d:00: b5:02:32:a6:43:98:3e:44:4c:a6:5e:60:0a:dc:01:4c:9a:71: 2c:e8:61:35:1a:75:98:ea:f5:60:28:96:53:d3:0d:be:a2:16: 0d:b7:3f:8c:7a:6d:d3:dc:02:e7:59:0b:d2:45:02:cb:4b:b2: e5:86:1e:a5:b4:8b:65:39:18:0c:5f:be:7a:bf:6f:15:35:37: 63:5e:3c:fa:03:1c:f5:0c:22:3a:79:47:c3:84:61:20:05:72: 13:81:e5:bf -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTUzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY4MC1hZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BObh7S7tQfxq5oD8Gv8a7VmsfNQ1Ife9ixyanFuPxdeM1pbQ5pJoE93bndB l50u/KoD3cI9sCRNQqG6UCSzhvF7UuXjiv36oPwD9COFZHcMSlK70YlYVySCFfRs vDqGUrsaqlw4ipKLAbvWk2rEj0HeCSkBCzgGiZUVdF3TsLL3K5eFWg9E4d4wiO3g 6Orp/ZgYnXTGr+baeX6TiXtNeqX7/FZJ6M+Rf1uoIa1kc0u+CPSCf8KMGHPj0lE/ uaqDULIe3GueW+raL19qVS54VclqcFHte0GUQjwnqdvOG4JnCPZVwqkpPVU6U1Qq 7lUy/Rw+L+VLdc+h9lR00qi7hwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOxSY3yP SmZovOdaOlPFtwVVxYFHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEUxNkJCRTg0 RThFMTFFQkE0N0E1MTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFniRAwDwQCAAIwCQMHACABDfdjgDANBgkqhkiG9w0BAQsF AAOCAQEAh9ZSzRrBblKLX/JlIiN2weXjNuPb+E5egaLK4fCubpNKN+4RLJg2rNDO 73387YsECtoCDhKEI9kbGKvIl5owa+hZjSE4Nl68TmPhhQm6sbcNbZP9476Piy66 o1oXkN0IB5PGzj47zQ4PiBTpLiZD0JVfFpwNt+W9lII0HsGyX6U2GVL/3Kfm1uCR AG/BQ6/KBMfqkTpAtQrMuxkXUjJBxW0AtQIypkOYPkRMpl5gCtwBTJpxLOhhNRp1 mOr1YCiWU9MNvqIWDbc/jHpt09wC51kL0kUCy0uy5YYepbSLZTkYDF++er9vFTU3 Y148+gMc9QwiOnlHw4RhIAVyE4Hlvw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org