$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E45E0C0D25311ED922D7209C4F9AE02.roa File: 5E45E0C0D25311ED922D7209C4F9AE02.roa (raw, json) Hash identifier: 6uO9d/sdxW36ktnarhWc27C1c8A9nrX2u/nSeXbAjFY= Subject key identifier: 37:2B:DF:23:AB:19:69:54:B8:92:AD:B0:32:44:F0:44:D2:EE:61:76 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 733E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E45E0C0D25311ED922D7209C4F9AE02.roa Signing time: Fri 02 Jun 2023 12:42:09 +0000 ROA not before: Fri 02 Jun 2023 12:42:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150592 IP address blocks: 103.91.226.0/23 maxlen: 24 103.124.78.0/23 maxlen: 24 2001:df2:7640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29502 (0x733e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 2 12:42:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6479e3a1-0316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:6d:15:3b:28:56:78:f3:83:45:ff:96:66: 9d:82:75:ef:14:7c:27:f4:36:23:e2:cf:e4:a9:78: b4:77:4c:c5:2f:0f:78:aa:0f:dd:78:ed:05:cb:72: e1:91:c4:e3:55:8d:b3:6a:21:c2:34:f4:fa:90:32: 42:a7:a4:d1:43:a4:96:ca:ac:d8:c3:70:e2:43:dd: ae:42:78:fc:a5:b8:59:f0:de:42:9e:20:c1:44:95: b8:01:04:b8:42:f2:66:4f:8d:05:66:cc:d8:e2:b6: e8:bd:8c:c1:ed:fe:03:15:27:89:b3:16:fa:de:90: 80:72:d4:c0:76:23:bf:1a:a6:15:53:7d:c3:7d:79: e8:a9:8d:2c:21:b1:af:cf:9c:fd:aa:12:88:98:3d: b9:dd:d7:2e:7d:95:95:4b:f6:ef:3a:5c:bc:be:fe: 79:53:fa:11:df:11:2a:bc:29:46:07:db:84:fd:ec: 55:6f:de:88:32:43:31:5b:34:74:97:97:cf:6d:aa: 30:40:ef:20:a8:3c:fe:ae:af:e6:c6:e2:8f:fa:4f: 17:79:87:8e:0a:85:ee:cd:df:68:b3:01:0d:3b:88: 10:52:5c:cc:12:a2:41:58:70:7c:ce:a9:10:08:14: 40:99:f5:29:cf:14:75:81:b7:9e:0f:7f:da:1b:dc: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2B:DF:23:AB:19:69:54:B8:92:AD:B0:32:44:F0:44:D2:EE:61:76 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E45E0C0D25311ED922D7209C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.226.0/23 103.124.78.0/23 IPv6: 2001:df2:7640::/48 Signature Algorithm: sha256WithRSAEncryption 45:e5:af:d6:97:79:24:d7:f2:d3:0a:17:00:d3:6c:6f:c3:fd: f2:cd:59:4b:2e:11:aa:b2:07:ba:e2:33:76:9b:36:c2:3f:6c: 17:cb:95:94:ba:a7:66:3c:f5:c4:df:45:90:90:93:49:4a:a5: d7:4d:76:58:a4:9a:2b:ae:ee:fa:48:91:11:ae:06:04:d2:5b: fc:27:6d:10:5b:2a:a3:86:81:59:2c:20:32:51:00:90:62:ab: 47:5b:6c:7c:6a:4a:8f:fd:ff:1f:eb:dc:0d:f1:72:c2:87:36: 63:cc:8f:94:4e:85:75:51:71:50:28:ac:d2:52:d8:19:bc:21: e0:58:95:72:a8:0c:8d:84:ea:26:b5:3a:ee:b8:d6:37:b5:f1: 3e:e2:7c:0c:b8:4c:64:98:67:7d:9e:1a:cb:66:dd:7f:28:0d: e2:78:88:f0:29:d7:1d:44:cd:c6:54:3f:70:55:3e:a8:2f:8c: 15:71:9e:16:bc:f3:8d:e6:a4:b2:8c:71:c9:97:45:33:e6:7a: ac:53:02:af:fd:d4:e0:bc:8b:f3:24:95:c9:ad:14:6d:de:67: aa:f5:48:e9:07:44:bc:20:b0:d2:3a:17:fc:07:ef:a9:f7:df: aa:e6:a9:2d:cd:23:5b:9a:84:90:34:5f:54:6d:a3:16:04:97: 93:14:fc:11 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICcz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjAyMTI0MjA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc5ZTNhMS0wMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEhtFTsoVnjzg0X/lmadgnXvFHwn9DYj4s/kqXi0d0zFLw94qg/deO0Fy3Lh kcTjVY2zaiHCNPT6kDJCp6TRQ6SWyqzYw3DiQ92uQnj8pbhZ8N5CniDBRJW4AQS4 QvJmT40FZszY4rbovYzB7f4DFSeJsxb63pCActTAdiO/GqYVU33DfXnoqY0sIbGv z5z9qhKImD253dcufZWVS/bvOly8vv55U/oR3xEqvClGB9uE/exVb96IMkMxWzR0 l5fPbaowQO8gqDz+rq/mxuKP+k8XeYeOCoXuzd9oswENO4gQUlzMEqJBWHB8zqkQ CBRAmfUpzxR1gbeeD3/aG9yaBwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDcr3yOr GWlUuJKtsDJE8ETS7mF2MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUU0NUUwQzBE MjUzMTFFRDkyMkQ3MjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnW+IDBAFnfE4wDwQCAAIwCQMHACABDfJ2QDANBgkqhkiG 9w0BAQsFAAOCAQEAReWv1pd5JNfy0woXANNsb8P98s1ZSy4RqrIHuuIzdps2wj9s F8uVlLqnZjz1xN9FkJCTSUql1012WKSaK67u+kiREa4GBNJb/CdtEFsqo4aBWSwg MlEAkGKrR1tsfGpKj/3/H+vcDfFywoc2Y8yPlE6FdVFxUCis0lLYGbwh4FiVcqgM jYTqJrU67rjWN7XxPuJ8DLhMZJhnfZ4ay2bdfygN4niI8CnXHUTNxlQ/cFU+qC+M FXGeFrzzjeaksoxxyZdFM+Z6rFMCr/3U4LyL8ySVya0Ubd5nqvVI6QdEvCCw0joX /AfvqfffquapLc0jW5qEkDRfVG2jFgSXkxT8EQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org