$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa File: 5F4C7CF88B2411ECB7E39916C4F9AE02.roa (raw, json) Hash identifier: Mow8d8kz4Ixn6kKODjZ7L59EWKvQtvTC/TqnvmV5C8c= Subject key identifier: 6A:94:D9:1F:C3:EF:4C:14:2D:86:33:F0:21:97:AB:53:B6:FC:26:84 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6AB2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa Signing time: Wed 10 May 2023 16:16:02 +0000 ROA not before: Wed 10 May 2023 16:16:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133705 IP address blocks: 103.181.51.0/24 maxlen: 24 2001:df0:68c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27314 (0x6ab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:16:02 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc342-53a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:0d:72:b3:66:2e:99:1b:a7:54:83:fb:8e: e3:e3:80:7b:f5:d3:fc:fe:c7:13:53:c5:3b:52:7d: 4b:ee:ba:f5:e5:d2:e8:d1:05:de:e7:41:46:a1:47: bc:50:14:cc:cd:a6:1b:8f:55:9e:be:90:94:36:37: cb:72:43:08:51:31:4d:5c:50:76:db:0b:a8:c3:45: da:28:50:a4:be:3b:1d:b2:e6:e5:a8:93:47:bc:8b: 28:f3:ea:c2:5c:80:16:c3:fa:2f:97:f5:3e:db:28: 87:3f:64:f2:ae:a3:82:bc:73:be:90:3d:8c:e6:9d: a9:b9:7c:65:b4:26:84:83:7f:6e:41:eb:a7:a8:30: 52:eb:9c:17:7a:83:6e:f5:81:31:93:f3:e6:9f:1e: f0:dc:31:61:43:98:56:e2:bd:e4:7b:a6:b5:cf:fe: e1:1d:29:cb:9b:e0:6c:e4:46:1f:ab:3b:72:8f:6c: 96:7b:e5:37:a0:4e:a6:d2:74:82:da:66:ac:eb:25: 33:44:a0:de:60:eb:8d:66:06:5a:68:c2:7c:fa:90: de:ef:f8:9d:48:d8:9c:ce:4d:22:40:bd:4b:c4:64: 8e:eb:05:98:a7:3b:ba:61:d6:2b:ad:fa:5b:2e:bd: 02:6e:43:85:70:8b:1b:d9:77:04:34:0b:69:3e:89: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:94:D9:1F:C3:EF:4C:14:2D:86:33:F0:21:97:AB:53:B6:FC:26:84 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.51.0/24 IPv6: 2001:df0:68c0::/48 Signature Algorithm: sha256WithRSAEncryption 3c:28:69:55:de:de:f5:78:d8:7f:41:d2:29:a1:5c:f0:1b:ac: e9:e9:03:6f:6f:f8:f7:71:a5:02:f1:db:e2:e8:1b:07:27:96: 61:51:66:17:6a:3a:e7:4d:f7:f8:9c:46:dd:9c:89:75:73:74: ef:e3:35:73:2a:9e:1c:8e:6c:a4:2b:52:e8:58:5d:39:b7:b7: 4f:49:77:f0:5a:d7:e4:28:ec:60:ad:20:d5:5d:05:3c:e5:0c: f3:a6:94:72:93:c6:90:ee:6b:c8:34:29:2d:2e:39:bc:52:79: 2f:dd:0d:21:99:71:c3:d1:22:9a:07:f5:b5:f3:2e:a1:83:2a: 8c:b7:c5:1d:25:e6:2f:e5:7c:f8:bb:ae:23:0c:c7:0c:12:a7: 58:bc:1b:18:62:8f:99:29:17:0c:55:c4:f2:17:33:f2:8f:50: ac:33:09:4c:7d:b1:2c:25:91:d9:a0:e4:4a:b6:76:56:10:2f: ee:61:37:2f:e3:39:5e:a1:e2:ca:98:30:51:b9:78:5d:53:5d: 85:bb:9e:dd:f0:d0:88:4f:93:ee:c3:5e:cc:92:42:d8:92:ba: 7d:94:31:68:bd:bc:26:85:01:7c:84:c4:b7:34:7b:42:d9:fd: b4:32:0e:3b:27:c3:fc:a4:00:5c:07:57:fd:24:5e:9c:eb:01: 25:88:5d:bf -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICarIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNjAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzM0Mi01M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudYNcrNmLpkbp1SD+47j44B79dP8/scTU8U7Un1L7rr15dLo0QXe50FGoUe8 UBTMzaYbj1WevpCUNjfLckMIUTFNXFB22wuow0XaKFCkvjsdsublqJNHvIso8+rC XIAWw/ovl/U+2yiHP2TyrqOCvHO+kD2M5p2puXxltCaEg39uQeunqDBS65wXeoNu 9YExk/Pmnx7w3DFhQ5hW4r3ke6a1z/7hHSnLm+Bs5EYfqztyj2yWe+U3oE6m0nSC 2mas6yUzRKDeYOuNZgZaaMJ8+pDe7/idSNiczk0iQL1LxGSO6wWYpzu6YdYrrfpb Lr0CbkOFcIsb2XcENAtpPolpPQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGqU2R/D 70wULYYz8CGXq1O2/CaEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUY0QzdDRjg4 QjI0MTFFQ0I3RTM5OTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABntTMwDwQCAAIwCQMHACABDfBowDANBgkqhkiG9w0BAQsF AAOCAQEAPChpVd7e9XjYf0HSKaFc8Bus6ekDb2/493GlAvHb4ugbByeWYVFmF2o6 5033+JxG3ZyJdXN07+M1cyqeHI5spCtS6FhdObe3T0l38FrX5CjsYK0g1V0FPOUM 86aUcpPGkO5ryDQpLS45vFJ5L90NIZlxw9Eimgf1tfMuoYMqjLfFHSXmL+V8+Luu IwzHDBKnWLwbGGKPmSkXDFXE8hcz8o9QrDMJTH2xLCWR2aDkSrZ2VhAv7mE3L+M5 XqHiypgwUbl4XVNdhbue3fDQiE+T7sNezJJC2JK6fZQxaL28JoUBfITEtzR7Qtn9 tDIOOyfD/KQAXAdX/SRenOsBJYhdvw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org