$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA12CEAE5E111EAB8E2D371C4F9AE02.roa File: 5CA12CEAE5E111EAB8E2D371C4F9AE02.roa (raw, json) Hash identifier: elKs4LikWr7e99vWjgU7xeDXOQwo4Sdu9Nx9uNmGQ1g= Subject key identifier: 43:DF:59:14:FB:CF:59:3A:ED:BC:FC:1F:8A:23:66:58:88:6B:18:60 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7804 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA12CEAE5E111EAB8E2D371C4F9AE02.roa Signing time: Fri 18 Aug 2023 10:18:20 +0000 ROA not before: Fri 18 Aug 2023 10:18:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134922 IP address blocks: 103.116.136.0/23 maxlen: 24 103.121.204.0/23 maxlen: 24 103.160.72.0/23 maxlen: 24 103.171.168.0/23 maxlen: 24 103.210.28.0/22 maxlen: 24 103.224.48.0/24 maxlen: 24 103.224.54.0/24 maxlen: 24 2401:fbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30724 (0x7804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 18 10:18:20 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64df456c-e615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:4c:4b:92:d4:0a:db:36:07:f6:9a:57:d1: ed:86:67:9c:f6:05:37:94:0f:93:f8:71:f3:3d:0c: 72:5d:66:44:f4:c2:b2:75:01:b0:14:71:5a:f3:d4: 52:82:cb:ce:b3:89:ef:81:82:45:d1:c8:e7:6f:a8: 19:45:15:dc:45:fc:ca:8d:86:ad:68:c4:7e:77:eb: 35:3a:c7:7e:87:af:fd:28:ec:20:a7:46:29:f2:d3: 6d:24:6b:6d:bd:a9:73:31:fd:86:09:8b:95:5c:b6: 60:a0:21:fc:c8:62:37:f1:8a:46:af:60:8a:35:f8: 3a:97:78:af:bf:2e:66:6a:59:4d:04:c0:8e:17:63: 2a:0b:8e:d2:9e:34:b2:6d:d1:d2:06:bd:78:aa:f6: 6e:cc:12:7f:ce:4f:d5:01:a3:68:3c:5b:1b:60:88: 80:63:1d:05:4f:5f:2f:43:06:23:98:54:67:fb:e1: 47:89:57:30:f3:f9:a7:20:bf:49:47:ac:f8:2e:f0: 6a:1d:23:98:f7:70:38:8f:82:2a:93:38:93:a1:20: ed:44:bc:4c:6d:ea:f2:76:e2:0d:fd:b7:a1:c4:22: 87:22:ff:d4:83:0d:7b:76:e1:27:de:0a:a4:87:f0: da:0f:40:71:b4:4d:8c:cc:9d:54:a7:c1:2d:b0:ec: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DF:59:14:FB:CF:59:3A:ED:BC:FC:1F:8A:23:66:58:88:6B:18:60 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA12CEAE5E111EAB8E2D371C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.136.0/23 103.121.204.0/23 103.160.72.0/23 103.171.168.0/23 103.210.28.0/22 103.224.48.0/24 103.224.54.0/24 IPv6: 2401:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption 01:26:4b:ba:47:10:74:02:72:d5:17:2a:8d:7e:b1:07:1c:82: 30:82:4d:91:9f:7b:7a:d8:a5:f1:e6:62:74:dd:c1:67:1d:b9: 74:29:e8:1f:38:87:a1:6e:9f:de:2b:fa:d7:8a:99:fd:6e:66: 1b:58:49:27:1f:e5:41:99:8a:ca:fe:0e:4f:15:f6:b6:52:c1: ea:7c:6f:06:56:18:c3:d4:57:d9:c1:8c:c0:1a:85:10:5c:69: 3d:68:90:f9:d5:6a:db:01:bb:59:f6:33:1b:a8:03:ce:f9:42: 90:1b:a0:6f:f3:9a:f3:3a:d7:63:35:16:92:5e:05:a6:53:01: 32:58:b7:bd:7f:a7:3a:66:da:06:fc:db:56:42:e3:3e:6e:b6: de:47:b9:6d:8d:c1:b9:4e:f8:06:3d:4c:70:88:58:b9:c2:ba: 31:f2:ca:37:ae:30:c0:eb:21:f3:8a:a7:f2:01:91:6c:df:44: 64:b1:1e:57:52:8b:28:6a:0d:0a:8c:73:35:f4:e5:ca:29:ba: f6:86:e3:f0:cd:58:bb:6e:ce:d8:3a:8e:b2:e0:c4:58:c0:b9: 0a:a6:fa:80:37:31:1a:2c:48:81:ae:d6:38:d7:e4:69:23:19: 66:51:71:23:7f:32:be:f2:c1:22:fd:af:e5:1d:67:21:b5:69: 7e:3f:a7:21 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICeAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODE4MTAxODIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRmNDU2Yy1lNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPdMS5LUCts2B/aaV9Hthmec9gU3lA+T+HHzPQxyXWZE9MKydQGwFHFa89RS gsvOs4nvgYJF0cjnb6gZRRXcRfzKjYataMR+d+s1Osd+h6/9KOwgp0Yp8tNtJGtt valzMf2GCYuVXLZgoCH8yGI38YpGr2CKNfg6l3ivvy5mallNBMCOF2MqC47SnjSy bdHSBr14qvZuzBJ/zk/VAaNoPFsbYIiAYx0FT18vQwYjmFRn++FHiVcw8/mnIL9J R6z4LvBqHSOY93A4j4IqkziToSDtRLxMberyduIN/behxCKHIv/Ugw17duEn3gqk h/DaD0BxtE2MzJ1Up8EtsOyT9QIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFEPfWRT7 z1k67bz8H4ojZliIaxhgMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUNBMTJDRUFF NUUxMTFFQUI4RTJEMzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAFndIgDBAFnecwDBAFnoEgDBAFnq6gDBAJn0hwDBABn4DAD BABn4DYwDQQCAAIwBwMFACQB+8AwDQYJKoZIhvcNAQELBQADggEBAAEmS7pHEHQC ctUXKo1+sQccgjCCTZGfe3rYpfHmYnTdwWcduXQp6B84h6Fun94r+teKmf1uZhtY SScf5UGZisr+Dk8V9rZSwep8bwZWGMPUV9nBjMAahRBcaT1okPnVatsBu1n2Mxuo A875QpAboG/zmvM612M1FpJeBaZTATJYt71/pzpm2gb821ZC4z5utt5HuW2NwblO +AY9THCIWLnCujHyyjeuMMDrIfOKp/IBkWzfRGSxHldSiyhqDQqMczX05copuvaG 4/DNWLtuztg6jrLgxFjAuQqm+oA3MRosSIGu1jjX5GkjGWZRcSN/Mr7ywSL9r+Ud ZyG1aX4/pyE= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:22 2024 by rpki-client on console-fra.rpki-client.org