$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa File: 54B0F400FE3911EA8CBCF925C4F9AE02.roa (raw, json) Hash identifier: Jhf7FOvYP/MWx+DlXHRD0gSstACRL+33txK2+Vvhnok= Subject key identifier: 01:06:01:50:35:1A:03:7C:2E:C7:78:47:7E:23:2F:E7:3B:B4:96:DB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A02 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa Signing time: Wed 10 May 2023 16:12:38 +0000 ROA not before: Wed 10 May 2023 16:12:38 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132568 IP address blocks: 45.120.16.0/22 maxlen: 22 45.120.16.0/24 maxlen: 24 45.120.17.0/24 maxlen: 24 45.120.18.0/24 maxlen: 24 45.120.19.0/24 maxlen: 24 103.24.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27138 (0x6a02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:12:38 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc276-6de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:e8:ef:8c:03:4a:8d:fd:ae:fb:ad:7e:57: b4:19:b3:72:8e:4e:4a:bc:44:85:01:fe:10:92:8d: 44:fe:ba:48:65:c0:4c:e0:99:d8:c8:8f:5b:d2:e4: a9:b0:67:49:e0:e4:d4:a4:c8:32:a8:70:6b:00:dc: 1c:1b:57:db:17:a7:ac:ce:23:4f:5a:2a:10:53:e9: 32:9e:4e:59:47:f1:3d:29:68:8c:74:54:01:10:b1: 84:00:b9:17:4e:9c:8d:24:06:fb:ae:87:14:3c:c0: fa:61:cb:74:c9:fa:30:71:94:5a:91:2d:c7:31:3e: c4:10:f6:06:9e:91:f3:1a:0d:ad:33:e2:61:19:db: d2:85:aa:46:e9:e8:64:db:e0:50:e6:8c:0a:2a:b9: fa:0d:05:f9:87:a6:23:1a:0b:8c:92:d4:20:3f:78: 0e:6e:26:8a:dc:4f:07:b4:8c:8d:17:c6:7d:df:70: 19:cf:1e:db:94:fa:ef:ff:9f:da:99:06:3f:cc:79: 84:e4:67:3a:3d:e6:65:24:36:44:70:48:2b:dc:a4: 51:46:41:f4:20:48:ad:82:92:07:c8:02:8e:8d:12: 87:3d:dc:b3:0b:07:8a:cc:5b:ce:bc:1e:cd:97:51: 27:93:12:18:9a:e8:5d:3b:7a:a2:27:f0:2c:5c:52: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:01:50:35:1A:03:7C:2E:C7:78:47:7E:23:2F:E7:3B:B4:96:DB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.16.0/22 103.24.108.0/22 Signature Algorithm: sha256WithRSAEncryption bb:40:f5:b7:d7:a7:65:c7:de:b0:86:08:b3:40:2d:a2:e7:6e: be:cf:20:1b:d4:38:7e:4e:26:a7:b8:3a:bb:c0:0d:31:43:95: 43:ec:4c:11:53:a1:15:8a:97:7f:bd:1d:55:c8:00:39:fa:57: 22:06:2f:ad:0b:78:7f:8d:13:75:27:26:be:59:aa:bd:c8:78: 20:00:3e:e7:c6:6e:12:ae:22:97:ee:9f:29:9e:01:ff:bf:c1: ce:7a:cb:fd:fc:70:e0:db:e2:7a:47:93:90:54:42:ca:7b:4e: 63:91:69:d8:36:d1:91:c8:ab:1d:a2:da:44:6d:e8:68:4f:90: a2:f3:e4:1e:d6:a7:74:cc:f8:eb:7c:0f:76:0d:81:93:ae:d5: b0:21:31:ad:c2:bc:9e:57:66:88:0f:f7:4f:8c:4e:22:12:88: 8c:b2:17:94:d7:36:ac:5c:4c:b9:7a:c2:18:da:66:53:ec:60: b0:86:11:22:67:70:f6:62:83:02:97:0e:ca:1a:39:61:fd:9c: ab:ab:d4:96:0e:51:1c:c6:52:bf:7d:c1:ee:36:1a:93:50:09: 63:85:3e:ae:8b:2f:22:0d:3e:10:e6:d5:48:e6:69:cd:53:99: c1:e6:5a:4e:3a:52:ff:ff:5c:40:7c:1a:bd:05:2c:06:45:d1: ed:34:62:39 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICagIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMjM4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI3Ni02ZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvPo74wDSo39rvutfle0GbNyjk5KvESFAf4Qko1E/rpIZcBM4JnYyI9b0uSp sGdJ4OTUpMgyqHBrANwcG1fbF6esziNPWioQU+kynk5ZR/E9KWiMdFQBELGEALkX TpyNJAb7rocUPMD6Yct0yfowcZRakS3HMT7EEPYGnpHzGg2tM+JhGdvShapG6ehk 2+BQ5owKKrn6DQX5h6YjGguMktQgP3gObiaK3E8HtIyNF8Z933AZzx7blPrv/5/a mQY/zHmE5Gc6PeZlJDZEcEgr3KRRRkH0IEitgpIHyAKOjRKHPdyzCweKzFvOvB7N l1EnkxIYmuhdO3qiJ/AsXFLqiwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAEGAVA1 GgN8Lsd4R34jL+c7tJbbMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTRCMEY0MDBG RTM5MTFFQThDQkNGOTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteBADBAJnGGwwDQYJKoZIhvcNAQELBQADggEBALtA9bfX p2XH3rCGCLNALaLnbr7PIBvUOH5OJqe4OrvADTFDlUPsTBFToRWKl3+9HVXIADn6 VyIGL60LeH+NE3UnJr5Zqr3IeCAAPufGbhKuIpfunymeAf+/wc56y/38cODb4npH k5BUQsp7TmORadg20ZHIqx2i2kRt6GhPkKLz5B7Wp3TM+Ot8D3YNgZOu1bAhMa3C vJ5XZogP90+MTiISiIyyF5TXNqxcTLl6whjaZlPsYLCGESJncPZigwKXDsoaOWH9 nKur1JYOURzGUr99we42GpNQCWOFPq6LLyINPhDm1Ujmac1TmcHmWk46Uv//XEB8 Gr0FLAZF0e00Yjk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org