$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A1FA218BDD611EA97CDF72CC4F9AE02.roa File: 5A1FA218BDD611EA97CDF72CC4F9AE02.roa (raw, json) Hash identifier: wYHjBbs24+X0h4AyooDQQVp9/n+wcg8dWLb4a2GzBvo= Subject key identifier: FD:4D:65:27:1B:4C:CF:FA:F5:F3:1E:AD:BA:72:92:09:7F:C8:37:91 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C1B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A1FA218BDD611EA97CDF72CC4F9AE02.roa Signing time: Wed 10 May 2023 16:22:55 +0000 ROA not before: Wed 10 May 2023 16:22:55 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135826 IP address blocks: 103.83.80.0/24 maxlen: 24 103.86.137.0/24 maxlen: 24 103.93.136.0/23 maxlen: 24 103.177.130.0/23 maxlen: 24 2400:3a20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27675 (0x6c1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:22:55 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc4df-e4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:9c:62:32:8c:88:d9:9b:df:75:c3:7b:f2: 5b:a0:b0:63:a8:90:cc:50:df:98:e1:8d:e5:75:79: 61:03:90:d2:b4:a0:80:1b:de:d1:0a:98:9b:3b:a3: 3d:3a:a4:d1:9a:3b:7a:cb:ab:52:6b:b7:06:2e:39: b8:19:82:cd:25:e0:22:12:1a:b9:86:3e:f7:32:58: 34:60:d6:18:c9:e6:eb:0f:1d:03:9a:8a:25:fb:1b: 36:e3:8b:5b:d7:6c:bb:1b:19:e5:49:a9:ef:86:b7: 2e:5a:89:6a:bb:30:03:2f:99:4a:dc:e8:db:32:86: 9a:78:ce:eb:ed:35:c7:25:ba:39:c4:32:3f:ac:54: 35:98:4d:9a:bf:8f:d4:93:e0:2a:8e:9e:40:2a:8f: 02:8f:6e:42:11:f8:4d:07:b1:d0:c4:32:76:ce:7d: d2:70:dd:44:19:2b:4e:16:d8:ef:42:2d:86:fa:9f: ad:b9:85:af:fc:62:da:0b:c2:ae:ec:53:22:c5:f9: 28:48:cb:ae:cb:a6:e4:17:76:55:42:24:59:80:9a: ae:53:66:cf:68:39:09:c6:93:e4:55:5d:80:f9:a0: a3:44:4c:be:5c:66:a8:13:80:4b:1f:c8:9f:2f:d7: 31:9b:eb:ae:e3:0e:7f:fa:23:08:06:73:48:62:1e: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:65:27:1B:4C:CF:FA:F5:F3:1E:AD:BA:72:92:09:7F:C8:37:91 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A1FA218BDD611EA97CDF72CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.80.0/24 103.86.137.0/24 103.93.136.0/23 103.177.130.0/23 IPv6: 2400:3a20::/32 Signature Algorithm: sha256WithRSAEncryption 1f:58:bc:fd:25:1c:fd:43:16:61:d9:8a:2a:16:99:a9:61:a5: 5b:39:fa:82:a3:b7:10:1a:dd:59:43:54:b3:a7:42:8e:80:19: af:31:a3:a0:bf:42:52:a7:08:1a:04:74:52:b8:c8:14:ff:47: c0:d3:8e:f0:ca:04:38:ee:07:6d:26:c4:4c:49:ec:6b:c5:0e: 1e:57:f8:42:e5:c6:a2:3d:e7:b8:10:34:55:a1:bc:46:f1:b0: 3a:bf:d7:92:8b:a8:31:24:d4:39:44:52:95:fb:5a:95:d3:66: 40:a3:e7:25:f3:b8:c1:c7:fc:52:19:d6:32:85:85:11:6e:90: e2:39:87:d0:33:03:cf:35:57:6d:cb:83:2d:35:14:6b:3c:7d: 30:16:ad:fa:44:cc:09:fe:a1:33:10:27:eb:4c:da:81:82:50: 8b:fb:64:ed:cb:4c:1e:db:01:b5:b2:7e:95:8c:0f:f1:79:23: 94:c1:19:9a:b3:17:91:fd:c2:39:d8:83:4f:30:81:8f:73:0c: 02:59:32:c9:f3:fb:c6:9c:8c:5f:bd:83:17:d4:54:e2:74:22: fa:4c:e5:65:26:8d:24:00:a3:61:16:cd:0a:90:b1:76:19:98: e7:96:da:b6:d6:bd:ad:1a:c1:2b:dd:bb:f2:db:8c:2c:c7:bd: ba:dd:17:e0 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICbBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMjU1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzRkZi1lNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygKcYjKMiNmb33XDe/JboLBjqJDMUN+Y4Y3ldXlhA5DStKCAG97RCpibO6M9 OqTRmjt6y6tSa7cGLjm4GYLNJeAiEhq5hj73Mlg0YNYYyebrDx0Dmool+xs244tb 12y7GxnlSanvhrcuWolquzADL5lK3OjbMoaaeM7r7TXHJbo5xDI/rFQ1mE2av4/U k+Aqjp5AKo8Cj25CEfhNB7HQxDJ2zn3ScN1EGStOFtjvQi2G+p+tuYWv/GLaC8Ku 7FMixfkoSMuuy6bkF3ZVQiRZgJquU2bPaDkJxpPkVV2A+aCjREy+XGaoE4BLH8if L9cxm+uu4w5/+iMIBnNIYh7X/QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFP1NZScb TM/69fMerbpykgl/yDeRMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUExRkEyMThC REQ2MTFFQTk3Q0RGNzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBABnU1ADBABnVokDBAFnXYgDBAFnsYIwDQQCAAIwBwMFACQA OiAwDQYJKoZIhvcNAQELBQADggEBAB9YvP0lHP1DFmHZiioWmalhpVs5+oKjtxAa 3VlDVLOnQo6AGa8xo6C/QlKnCBoEdFK4yBT/R8DTjvDKBDjuB20mxExJ7GvFDh5X +ELlxqI957gQNFWhvEbxsDq/15KLqDEk1DlEUpX7WpXTZkCj5yXzuMHH/FIZ1jKF hRFukOI5h9AzA881V23Lgy01FGs8fTAWrfpEzAn+oTMQJ+tM2oGCUIv7ZO3LTB7b AbWyfpWMD/F5I5TBGZqzF5H9wjnYg08wgY9zDAJZMsnz+8acjF+9gxfUVOJ0IvpM 5WUmjSQAo2EWzQqQsXYZmOeW2rbWva0awSvdu/LbjCzHvbrdF+A= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org