$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/576692580E1611EBA01C3D7CC4F9AE02.roa File: 576692580E1611EBA01C3D7CC4F9AE02.roa (raw, json) Hash identifier: xdV+mpAh08wwEHOYvUHuhvRb3PLFKiAkABu7KSDQHE0= Subject key identifier: 03:9E:C5:9B:02:2A:86:B0:C7:9F:38:87:B0:61:84:12:8B:B3:EC:B8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A5A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/576692580E1611EBA01C3D7CC4F9AE02.roa Signing time: Wed 10 May 2023 16:14:22 +0000 ROA not before: Wed 10 May 2023 16:14:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133242 IP address blocks: 103.138.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27226 (0x6a5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:14:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2de-407f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:e6:3b:7d:f4:02:46:32:47:2c:54:aa:b0: a9:33:1c:54:ea:0f:e9:9d:16:cf:89:36:b5:57:fb: da:78:cc:ef:92:a2:bc:87:57:07:7e:2c:f5:e3:28: ed:3c:29:8b:74:36:0b:be:26:7c:25:6f:60:09:2d: 7f:c6:4e:ee:2c:6c:6d:f6:7e:27:aa:4c:79:67:4e: a9:d2:ce:02:ab:e8:48:28:92:ad:ea:3b:01:62:15: 61:56:f9:7a:d8:6b:75:57:d1:60:ef:c4:cb:e5:3b: 8d:aa:ba:73:f3:0a:63:63:72:a3:27:95:8c:92:a6: 3e:24:0d:c4:13:67:b7:db:b7:31:89:9e:72:e5:20: bb:ba:f8:3c:e5:cd:6e:ce:07:09:fe:58:02:ce:28: eb:a3:fc:90:fb:91:01:a2:45:21:08:c6:0f:0b:93: 9d:26:d8:59:45:4d:ac:7e:ca:d0:88:26:aa:b1:51: 00:e0:ff:96:97:82:7c:74:9e:ec:b3:5c:28:86:f8: 95:9b:00:19:d2:67:6b:3d:ac:ed:85:31:e0:17:96: 99:40:74:8f:22:6f:5e:30:82:90:16:f1:2a:83:da: 36:3b:d6:cd:26:3b:4b:74:7f:b3:3d:e3:44:ba:f4: 3a:78:e5:2f:8c:d0:8b:15:24:fa:fb:dc:82:f3:88: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:C5:9B:02:2A:86:B0:C7:9F:38:87:B0:61:84:12:8B:B3:EC:B8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/576692580E1611EBA01C3D7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.234.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:a7:c6:f3:0d:28:29:4e:d8:2c:a1:c3:4b:f9:eb:45:7c:ca: 85:03:fd:b9:93:d5:e9:8f:d5:b4:e1:4c:64:03:29:36:ac:00: 1e:5a:62:68:7b:7d:da:aa:59:25:26:58:da:65:d8:2c:38:3a: 8c:2d:90:c6:db:8d:0a:66:2e:8a:0b:59:5c:bc:3f:38:e5:91: 5f:f0:0a:f3:5c:e1:df:df:fe:57:5c:76:97:ce:63:1b:2b:92: 62:58:af:af:c3:c8:da:7d:6c:81:26:58:6c:ad:c0:76:f6:04: b8:fc:60:08:ec:93:8e:77:26:a0:7a:8c:31:0a:94:62:c1:3d: d8:b2:70:fe:d1:b9:06:a5:79:fd:8f:f3:9f:be:63:e7:af:a2: 39:02:b4:5c:6e:fd:0b:95:6c:df:35:9a:97:cc:e5:a1:07:bd: 1c:9b:8e:8f:06:ed:f2:5f:f6:69:6a:62:e3:6b:35:ec:5f:9d: 05:41:95:74:66:a2:cc:3b:15:d8:5a:a6:94:01:a6:70:d1:4f: 69:8a:61:a0:dc:ba:f8:f1:e7:81:e5:c9:a9:25:f2:93:6d:52: 1b:d1:1a:c2:b4:03:cf:7a:45:8e:11:33:3b:59:0d:61:05:82: 2a:67:69:57:80:fa:3a:20:10:93:24:ed:78:62:fb:d2:c2:b2: 51:b9:7b:99 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICalowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNDIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJkZS00MDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq7mO330AkYyRyxUqrCpMxxU6g/pnRbPiTa1V/vaeMzvkqK8h1cHfiz14yjt PCmLdDYLviZ8JW9gCS1/xk7uLGxt9n4nqkx5Z06p0s4Cq+hIKJKt6jsBYhVhVvl6 2Gt1V9Fg78TL5TuNqrpz8wpjY3KjJ5WMkqY+JA3EE2e327cxiZ5y5SC7uvg85c1u zgcJ/lgCzijro/yQ+5EBokUhCMYPC5OdJthZRU2sfsrQiCaqsVEA4P+Wl4J8dJ7s s1wohviVmwAZ0mdrPazthTHgF5aZQHSPIm9eMIKQFvEqg9o2O9bNJjtLdH+zPeNE uvQ6eOUvjNCLFST6+9yC84iaPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAOexZsC Koawx584h7BhhBKLs+y4MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTc2NjkyNTgw RTE2MTFFQkEwMUMzRDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFniuowDQYJKoZIhvcNAQELBQADggEBABqnxvMNKClO2Cyh w0v560V8yoUD/bmT1emP1bThTGQDKTasAB5aYmh7fdqqWSUmWNpl2Cw4OowtkMbb jQpmLooLWVy8PzjlkV/wCvNc4d/f/ldcdpfOYxsrkmJYr6/DyNp9bIEmWGytwHb2 BLj8YAjsk453JqB6jDEKlGLBPdiycP7RuQalef2P85++Y+evojkCtFxu/QuVbN81 mpfM5aEHvRybjo8G7fJf9mlqYuNrNexfnQVBlXRmosw7FdhappQBpnDRT2mKYaDc uvjx54Hlyakl8pNtUhvRGsK0A896RY4RMztZDWEFgipnaVeA+jogEJMk7Xhi+9LC slG5e5k= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org