$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/532C82DE29C511ED9D438B68C4F9AE02.roa File: 532C82DE29C511ED9D438B68C4F9AE02.roa (raw, json) Hash identifier: TAkZOi4B2zg6VFdaa1ZWuyPJXkJOVDu7qxK3NqkwZmQ= Subject key identifier: B3:F9:50:18:3B:0A:A7:7D:8F:C2:C4:7F:6C:9F:B9:15:3C:2C:C7:17 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7186 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/532C82DE29C511ED9D438B68C4F9AE02.roa Signing time: Wed 10 May 2023 16:48:40 +0000 ROA not before: Wed 10 May 2023 16:48:40 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45232 IP address blocks: 103.15.80.0/24 maxlen: 24 103.15.81.0/24 maxlen: 24 103.15.82.0/24 maxlen: 24 103.15.83.0/24 maxlen: 24 103.120.241.0/24 maxlen: 24 103.175.37.0/24 maxlen: 24 110.232.248.0/21 maxlen: 24 111.125.136.0/21 maxlen: 24 114.30.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29062 (0x7186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:40 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcae8-1430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:9f:3a:2a:80:04:b5:c8:13:8a:7a:7e:f8: 9e:a2:af:fb:fb:e2:e3:c1:2b:1f:30:5c:99:3a:75: 10:29:f8:2a:cb:6e:7e:f7:a1:83:21:2c:5e:8d:d9: 0d:97:01:a6:5c:35:4a:15:86:dd:83:68:7a:e4:86: 38:77:2f:58:1f:55:58:18:7e:e3:8c:14:92:94:3c: fb:92:11:fe:db:5c:51:fc:7c:62:30:56:d0:c6:6b: e3:c1:d1:5d:8d:d2:3f:9a:92:ff:d4:1c:56:1e:61: 11:91:e2:f7:c4:cd:71:c1:7b:cc:4e:c0:fb:99:be: 16:59:45:3c:d3:b3:b8:fa:45:f8:7d:96:35:88:ef: d5:86:8d:2c:2b:f5:e2:03:12:b6:34:74:9b:84:92: 7a:ea:15:f0:6b:4f:22:b5:a7:3e:96:f8:54:61:80: ec:03:30:50:9f:14:2c:52:c8:9e:c7:d9:bc:bf:d9: 15:ce:80:2a:e7:e3:23:34:56:ec:e1:69:f6:c3:36: 87:0c:9d:64:f5:58:f8:43:05:ec:67:05:31:25:cc: 8e:bb:55:4d:ed:c5:75:eb:25:04:f7:29:d4:74:f2: bb:47:15:2a:96:88:f1:73:ef:ae:a6:7a:4c:3f:fb: 1a:4f:71:d9:28:7b:58:97:c1:ba:e6:0d:8d:77:97: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F9:50:18:3B:0A:A7:7D:8F:C2:C4:7F:6C:9F:B9:15:3C:2C:C7:17 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/532C82DE29C511ED9D438B68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.80.0/22 103.120.241.0/24 103.175.37.0/24 110.232.248.0/21 111.125.136.0/21 114.30.72.0/21 Signature Algorithm: sha256WithRSAEncryption 06:69:c0:89:74:1b:84:e2:f1:52:5b:07:dc:cd:a3:7f:38:e9: 67:a6:36:aa:8b:a8:bd:38:16:21:4e:b9:b8:34:91:88:4e:66: 89:db:6c:a5:50:cc:76:b2:1a:da:52:ec:5e:c0:27:2b:dc:67: d8:d9:25:a2:cf:46:66:08:b2:e8:a2:cd:2c:9a:fe:86:32:91: 6d:e1:8e:de:5e:aa:07:f6:12:0f:eb:5d:ca:9a:a6:48:0d:3d: 23:5a:50:05:1a:9d:4e:10:f2:6a:e7:f4:b7:73:fc:d2:8a:4b: aa:84:8f:54:70:41:f2:dd:43:e8:b2:8b:7a:05:a4:9b:f3:97: 39:ba:8d:bd:17:04:75:9e:f6:60:21:c4:36:f8:50:aa:6a:d6: 49:7c:bc:74:f8:35:59:8e:3d:dd:04:ca:83:e6:f1:44:9c:74: ed:9f:fb:df:ae:25:81:25:da:74:c7:c3:35:3d:d0:9e:57:10: 2f:b0:58:bb:2d:d9:cf:95:20:19:bd:74:12:c4:dc:d8:f6:6e: a0:22:90:49:35:64:2d:8d:bd:7e:ee:a9:95:68:9b:37:01:bf: b0:db:55:83:20:d9:17:dd:f8:a2:5f:f6:f9:54:44:c1:ad:70: 12:4e:20:53:c1:f1:1d:09:ce:49:3c:f0:cf:cb:d8:19:3f:12: 77:6c:b7:12 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICcYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODQwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FlOC0xNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMefOiqABLXIE4p6fvieoq/7++LjwSsfMFyZOnUQKfgqy25+96GDISxejdkN lwGmXDVKFYbdg2h65IY4dy9YH1VYGH7jjBSSlDz7khH+21xR/HxiMFbQxmvjwdFd jdI/mpL/1BxWHmERkeL3xM1xwXvMTsD7mb4WWUU807O4+kX4fZY1iO/Vho0sK/Xi AxK2NHSbhJJ66hXwa08itac+lvhUYYDsAzBQnxQsUsiex9m8v9kVzoAq5+MjNFbs 4Wn2wzaHDJ1k9Vj4QwXsZwUxJcyOu1VN7cV16yUE9ynUdPK7RxUqlojxc++upnpM P/saT3HZKHtYl8G65g2Nd5cvMwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFLP5UBg7 Cqd9j8LEf2yfuRU8LMcXMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTMyQzgyREUy OUM1MTFFRDlENDM4QjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAJnD1ADBABnePEDBABnryUDBANu6PgDBANvfYgDBANyHkgw DQYJKoZIhvcNAQELBQADggEBAAZpwIl0G4Ti8VJbB9zNo3846WemNqqLqL04FiFO ubg0kYhOZonbbKVQzHayGtpS7F7AJyvcZ9jZJaLPRmYIsuiizSya/oYykW3hjt5e qgf2Eg/rXcqapkgNPSNaUAUanU4Q8mrn9Ldz/NKKS6qEj1RwQfLdQ+iyi3oFpJvz lzm6jb0XBHWe9mAhxDb4UKpq1kl8vHT4NVmOPd0EyoPm8UScdO2f+9+uJYEl2nTH wzU90J5XEC+wWLst2c+VIBm9dBLE3Nj2bqAikEk1ZC2NvX7uqZVomzcBv7DbVYMg 2Rfd+KJf9vlURMGtcBJOIFPB8R0Jzkk88M/L2Bk/EndstxI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org