$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B61054AB1C611ED8BBC1E28C4F9AE02.roa File: 5B61054AB1C611ED8BBC1E28C4F9AE02.roa (raw, json) Hash identifier: UJTvQfL19NYhlqBspt2x4oOfJoYIyQtySC/FWnFmmLg= Subject key identifier: C8:76:06:1D:E2:1C:B4:AF:4B:F5:A9:CA:E4:F4:D0:23:1A:81:ED:C8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70B2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B61054AB1C611ED8BBC1E28C4F9AE02.roa Signing time: Wed 10 May 2023 16:44:46 +0000 ROA not before: Wed 10 May 2023 16:44:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150020 IP address blocks: 103.184.76.0/23 maxlen: 24 2001:df0:8e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28850 (0x70b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9fe-5496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:b0:bb:f7:93:3c:66:91:be:e8:4f:ee:ea: ea:2a:6a:c4:03:7b:90:ba:82:6e:62:dd:d0:15:05: 5f:f5:8b:ed:10:6c:1c:c9:b6:28:cf:2d:2b:de:72: 16:20:8a:9b:bb:28:b5:42:78:cd:ea:d1:d3:2a:ad: 5d:02:57:04:0d:0a:a8:f2:96:0f:2d:c7:d6:e5:ed: c4:0e:69:7e:3f:77:4b:a0:73:f4:3e:42:d8:e6:b6: 29:37:42:ea:6e:fc:03:84:d8:b1:22:6a:8c:2c:07: 00:82:5b:68:3d:89:85:e7:f2:3a:ce:8b:68:26:22: 60:25:f6:7a:4d:8e:3d:4a:11:dd:b8:fb:5a:42:83: 0b:2b:28:47:96:5a:2c:33:bf:36:f8:70:6a:c6:e6: fa:89:4c:60:7d:27:55:bc:59:28:ed:39:5d:25:7e: d1:01:b3:d1:ac:21:6b:77:a6:cc:f2:40:64:a4:c3: 11:f7:13:ab:fb:92:bd:cb:ce:88:6a:2c:48:bf:f9: d9:ac:54:ca:33:de:b7:a2:01:60:d9:cc:29:06:65: 07:d1:ef:95:e7:d3:83:ec:f8:c3:f7:48:ee:96:48: a4:7c:92:6a:9a:93:49:13:ba:4c:30:3c:a6:fc:5c: 47:a9:46:78:ee:ee:4c:7c:ed:9f:15:87:7a:cd:31: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:76:06:1D:E2:1C:B4:AF:4B:F5:A9:CA:E4:F4:D0:23:1A:81:ED:C8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B61054AB1C611ED8BBC1E28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.76.0/23 IPv6: 2001:df0:8e40::/48 Signature Algorithm: sha256WithRSAEncryption 82:b1:88:dc:e6:2a:a7:80:7f:e7:5c:61:aa:f4:9a:f1:b4:67: 52:cd:86:a2:8e:3b:74:45:cd:28:92:ba:60:55:d9:2c:cc:1d: a8:ab:96:52:b1:f1:65:77:6b:05:cf:a8:df:64:ba:33:3b:41: 6f:69:1b:89:f9:24:83:2b:45:ad:61:99:5b:1d:db:69:b6:e5: 6f:7e:52:6f:7b:9b:ab:6d:2f:20:4e:98:29:39:c1:c0:a8:6f: ba:ba:1d:15:a6:c3:ee:7b:04:29:5b:37:b0:d8:a1:33:8c:be: 4b:be:5c:69:7a:8e:4d:e4:46:9e:fd:00:a5:7c:a8:23:7f:88: 7e:87:00:1e:45:9c:fa:03:59:e9:9f:ac:7d:07:28:51:81:22: 1b:c4:c3:bf:a6:f5:49:89:85:29:c6:30:85:dc:67:60:ba:75: db:f7:a0:14:a0:d8:1e:7b:c6:19:c6:39:df:95:7d:53:ab:5f: b8:d9:ec:b7:a8:49:ca:8e:a4:6d:f2:be:85:70:26:cf:2e:12: 60:60:e0:9e:04:4e:a8:ec:f5:90:cc:01:a7:82:14:c7:f8:b8: 42:f6:d8:8d:7b:89:7d:1f:be:5a:01:14:d2:fc:de:4d:c1:5d: e8:85:e1:0f:ef:59:78:3b:c1:ec:e4:54:0a:b1:81:1a:25:8e: 3a:3f:02:8a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlmZS01NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKuwu/eTPGaRvuhP7urqKmrEA3uQuoJuYt3QFQVf9YvtEGwcybYozy0r3nIW IIqbuyi1QnjN6tHTKq1dAlcEDQqo8pYPLcfW5e3EDml+P3dLoHP0PkLY5rYpN0Lq bvwDhNixImqMLAcAgltoPYmF5/I6zotoJiJgJfZ6TY49ShHduPtaQoMLKyhHllos M782+HBqxub6iUxgfSdVvFko7TldJX7RAbPRrCFrd6bM8kBkpMMR9xOr+5K9y86I aixIv/nZrFTKM963ogFg2cwpBmUH0e+V59OD7PjD90julkikfJJqmpNJE7pMMDym /FxHqUZ47u5MfO2fFYd6zTHR0wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMh2Bh3i HLSvS/WpyuT00CMage3IMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUI2MTA1NEFC MUM2MTFFRDhCQkMxRTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnuEwwDwQCAAIwCQMHACABDfCOQDANBgkqhkiG9w0BAQsF AAOCAQEAgrGI3OYqp4B/51xhqvSa8bRnUs2Goo47dEXNKJK6YFXZLMwdqKuWUrHx ZXdrBc+o32S6MztBb2kbifkkgytFrWGZWx3babblb35Sb3ubq20vIE6YKTnBwKhv urodFabD7nsEKVs3sNihM4y+S75caXqOTeRGnv0ApXyoI3+IfocAHkWc+gNZ6Z+s fQcoUYEiG8TDv6b1SYmFKcYwhdxnYLp12/egFKDYHnvGGcY535V9U6tfuNnst6hJ yo6kbfK+hXAmzy4SYGDgngROqOz1kMwBp4IUx/i4QvbYjXuJfR++WgEU0vzeTcFd 6IXhD+9ZeDvB7ORUCrGBGiWOOj8Cig== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org