$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa File: 614A9704FA6C11EB8BD15366C4F9AE02.roa (raw, json) Hash identifier: q3IKOSwGF/nh9W3WQ2kwCe03BnVTmmeyvCJ/21S8Ips= Subject key identifier: 6B:9C:3A:23:DE:BA:06:D2:C6:9C:EB:2C:02:2D:32:CF:BA:94:A5:95 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A6B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa Signing time: Wed 10 May 2023 16:14:42 +0000 ROA not before: Wed 10 May 2023 16:14:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133273 IP address blocks: 103.36.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27243 (0x6a6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:14:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2f1-9327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:62:29:4c:70:16:4f:0a:62:fa:77:60:f6: d1:e7:85:8c:b1:7f:d7:cd:1a:1c:db:9f:71:44:72: 9b:1e:c8:24:de:78:6a:8b:df:a2:9b:c9:58:b7:bf: 2d:8f:15:8d:30:8d:3f:81:26:c1:23:50:84:45:bf: 9e:30:fe:f5:3a:c3:26:e8:36:17:67:44:31:c6:84: c8:97:db:4d:e6:a1:ce:67:c2:83:92:a1:b4:fa:0e: 4f:ff:6f:e2:df:85:7b:26:36:63:92:42:72:58:75: f2:5e:fb:b4:c3:d0:72:a9:b0:ff:e0:7f:96:ad:2b: d6:03:61:90:6a:91:61:e6:a7:6d:46:6e:83:cb:c8: 4e:27:65:c4:a8:77:7b:c3:62:aa:0e:83:c6:dd:ba: db:83:7e:08:e2:c1:4c:8d:c1:79:b3:c4:23:c1:27: 03:66:95:bb:f4:fb:ef:cf:d4:c8:3f:b2:b6:1b:cc: 1c:0c:10:cf:59:1b:2b:cc:a5:a4:95:a4:3d:53:dd: 9f:76:d9:aa:a6:78:a4:b0:7e:4f:fb:80:8a:7a:32: 9e:b1:4e:cf:f5:f0:4e:ce:17:2b:3f:8c:a0:66:09: 76:08:2a:33:18:dc:b6:b1:e9:86:13:af:34:f9:c3: 8b:d0:b7:32:a9:e2:dc:d4:bd:f3:b5:69:f0:64:7d: 77:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9C:3A:23:DE:BA:06:D2:C6:9C:EB:2C:02:2D:32:CF:BA:94:A5:95 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.36.84.0/22 Signature Algorithm: sha256WithRSAEncryption 99:7f:d1:48:24:bb:26:a7:b7:2d:8f:3b:54:e8:49:58:4e:4c: e5:64:c7:e9:c0:d8:68:74:ca:94:2f:2d:48:65:9e:15:fa:2d: ca:12:0d:bc:63:03:f8:77:58:ae:70:e8:df:48:e7:16:c8:ab: 27:ab:f1:82:5a:d3:e5:ed:1c:a0:6e:82:67:1c:2d:69:11:2d: e5:e2:a3:d0:9f:ef:30:c0:2b:bc:12:e7:e7:96:ba:68:5e:f5: c0:ff:a4:92:69:eb:dd:97:3f:4e:c7:1e:5b:6f:37:c2:ff:5d: 1f:d0:9c:0c:f7:23:3c:f1:1a:a4:c7:4a:cf:27:03:57:34:09: 5f:eb:de:ee:a4:89:9f:97:0e:de:c3:db:2c:1a:42:85:20:6f: 3f:f7:7b:53:d9:48:ec:f6:89:21:8c:d6:ad:9f:f7:a4:87:6f: b7:b7:d4:4f:77:af:b5:48:67:1b:b0:b3:41:e1:b0:9d:a5:06: 2c:d4:db:6e:85:2b:6b:d4:7e:61:83:01:b2:1f:2a:52:15:45: d4:2c:c3:d4:cf:3a:1e:76:fe:13:77:b8:4a:c8:63:8b:99:c2: 02:89:0d:2f:64:16:1c:9d:c6:86:42:b2:0b:18:4b:64:58:d4: 52:bb:ae:a4:82:be:c1:a2:03:20:7d:6f:57:6a:b1:95:ca:1b: 1c:ea:92:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICamswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNDQxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJmMS05MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1NiKUxwFk8KYvp3YPbR54WMsX/XzRoc259xRHKbHsgk3nhqi9+im8lYt78t jxWNMI0/gSbBI1CERb+eMP71OsMm6DYXZ0QxxoTIl9tN5qHOZ8KDkqG0+g5P/2/i 34V7JjZjkkJyWHXyXvu0w9ByqbD/4H+WrSvWA2GQapFh5qdtRm6Dy8hOJ2XEqHd7 w2KqDoPG3brbg34I4sFMjcF5s8QjwScDZpW79Pvvz9TIP7K2G8wcDBDPWRsrzKWk laQ9U92fdtmqpniksH5P+4CKejKesU7P9fBOzhcrP4ygZgl2CCozGNy2semGE680 +cOL0LcyqeLc1L3ztWnwZH13IQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGucOiPe ugbSxpzrLAItMs+6lKWVMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjE0QTk3MDRG QTZDMTFFQjhCRDE1MzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnJFQwDQYJKoZIhvcNAQELBQADggEBAJl/0Ugkuyanty2P O1ToSVhOTOVkx+nA2Gh0ypQvLUhlnhX6LcoSDbxjA/h3WK5w6N9I5xbIqyer8YJa 0+XtHKBugmccLWkRLeXio9Cf7zDAK7wS5+eWumhe9cD/pJJp692XP07HHltvN8L/ XR/QnAz3IzzxGqTHSs8nA1c0CV/r3u6kiZ+XDt7D2ywaQoUgbz/3e1PZSOz2iSGM 1q2f96SHb7e31E93r7VIZxuws0HhsJ2lBizU226FK2vUfmGDAbIfKlIVRdQsw9TP Oh52/hN3uErIY4uZwgKJDS9kFhydxoZCsgsYS2RY1FK7rqSCvsGiAyB9b1dqsZXK Gxzqkso= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:23 2024 by rpki-client on console-fra.rpki-client.org