$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67CB26F677AF11EB9AE94785C4F9AE02.roa File: 67CB26F677AF11EB9AE94785C4F9AE02.roa (raw, json) Hash identifier: rY2jjdaR9jxBenTRgiJOTeOYj00GEt8Zl4wOQAwuses= Subject key identifier: 8A:C5:1C:EB:31:2C:6C:1F:57:9C:2B:3E:87:45:09:08:67:95:8E:69 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A31 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67CB26F677AF11EB9AE94785C4F9AE02.roa Signing time: Wed 10 May 2023 16:13:34 +0000 ROA not before: Wed 10 May 2023 16:13:34 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132960 IP address blocks: 45.115.172.0/22 maxlen: 24 103.96.48.0/22 maxlen: 24 103.162.80.0/23 maxlen: 24 103.224.184.0/22 maxlen: 24 2407:1340::/32 maxlen: 32 2407:3780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27185 (0x6a31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:34 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2ad-9a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f1:40:c4:d7:0d:7b:82:eb:af:fe:f5:48:e3: 1f:02:53:7a:74:be:c7:99:32:c4:5e:7f:31:0e:90: 18:38:8c:a3:d1:83:96:c4:83:61:ed:c6:e5:02:d8: 45:28:f6:34:f4:c8:05:b9:a8:8a:9b:50:2c:91:0a: 02:2f:aa:f2:0a:4f:7a:c7:94:58:9d:6a:65:d3:44: 64:02:d4:14:11:3e:e0:ea:1f:29:96:db:bb:c0:82: 91:3b:f7:18:43:dc:88:81:3a:a3:fe:ec:c5:25:af: 34:da:89:d5:e4:55:d9:db:dc:08:4c:54:f4:6c:f9: f3:19:64:95:c8:da:fc:15:30:40:f3:2a:1a:0f:49: 09:32:b0:73:12:0b:02:8a:77:31:2a:81:8d:f8:04: bd:32:94:82:b5:c1:05:2d:b3:db:78:29:06:a4:53: 67:71:4b:a0:be:e3:f1:ed:65:c1:5c:69:ee:eb:a5: 4f:95:04:37:62:b1:e3:79:88:5a:63:9e:fb:3e:e7: a0:3b:df:df:59:54:9a:62:97:c0:c8:d8:ad:d8:df: 40:a7:3e:33:c2:74:dd:f1:94:dc:80:bf:e7:31:a4: 67:23:9a:c0:e7:72:ef:1e:5c:9e:08:3e:8a:94:5d: b2:97:cc:c6:15:52:3f:dd:92:8e:5b:45:01:06:45: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C5:1C:EB:31:2C:6C:1F:57:9C:2B:3E:87:45:09:08:67:95:8E:69 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67CB26F677AF11EB9AE94785C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.172.0/22 103.96.48.0/22 103.162.80.0/23 103.224.184.0/22 IPv6: 2407:1340::/32 2407:3780::/32 Signature Algorithm: sha256WithRSAEncryption 02:a4:95:61:15:8e:06:a0:64:40:95:0b:05:a6:9f:84:10:bf: 31:58:d8:a7:0d:1f:e0:e6:42:7f:4f:8b:b7:c2:8e:b8:eb:60: 75:47:73:4e:ac:98:80:c9:d8:b3:7d:fc:7c:7e:1a:74:54:76: 3a:e5:39:ae:0d:f0:31:2f:4c:bc:a2:91:d4:fc:4a:07:24:65: 58:52:d9:4e:3f:31:7c:d2:4d:4d:6d:3d:9b:e2:8f:43:53:2d: 7e:14:77:71:7e:58:70:01:a1:e3:86:1a:eb:f4:84:0c:b3:40: cd:3b:41:d1:6d:21:4a:57:84:b1:2c:e7:80:6e:0d:81:75:80: c7:79:1a:3e:ad:77:4a:18:95:aa:9f:56:91:66:6e:a5:ae:17: 82:d3:c8:f4:25:03:ee:55:bc:09:9f:33:40:ce:6b:cb:db:e2: 20:6f:dd:49:6b:12:e1:e4:cb:06:4d:7e:76:73:e0:3a:25:40: ee:4b:f0:ad:e2:fa:2b:ad:ed:32:3c:24:06:ef:9f:1b:26:0a: 69:be:cd:36:07:79:c7:50:cd:e1:ac:48:ac:9b:1a:db:ea:07: 6b:43:09:a6:c4:19:98:22:f8:e3:36:e9:ae:e9:d7:32:b3:68: 64:d1:7c:30:6b:c5:31:1a:be:a4:ca:8f:45:c5:d2:f4:6a:50: 69:42:7c:70 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICajEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJhZC05YTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+vFAxNcNe4Lrr/71SOMfAlN6dL7HmTLEXn8xDpAYOIyj0YOWxINh7cblAthF KPY09MgFuaiKm1AskQoCL6ryCk96x5RYnWpl00RkAtQUET7g6h8pltu7wIKRO/cY Q9yIgTqj/uzFJa802onV5FXZ29wITFT0bPnzGWSVyNr8FTBA8yoaD0kJMrBzEgsC incxKoGN+AS9MpSCtcEFLbPbeCkGpFNncUugvuPx7WXBXGnu66VPlQQ3YrHjeYha Y577PuegO9/fWVSaYpfAyNit2N9Apz4zwnTd8ZTcgL/nMaRnI5rA53LvHlyeCD6K lF2yl8zGFVI/3ZKOW0UBBkWTjQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFIrFHOsx LGwfV5wrPodFCQhnlY5pMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjdDQjI2RjY3 N0FGMTFFQjlBRTk0Nzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MB4EAgABMBgDBAItc6wDBAJnYDADBAFnolADBAJn4LgwFAQCAAIwDgMFACQH E0ADBQAkBzeAMA0GCSqGSIb3DQEBCwUAA4IBAQACpJVhFY4GoGRAlQsFpp+EEL8x WNinDR/g5kJ/T4u3wo6462B1R3NOrJiAydizffx8fhp0VHY65TmuDfAxL0y8opHU /EoHJGVYUtlOPzF80k1NbT2b4o9DUy1+FHdxflhwAaHjhhrr9IQMs0DNO0HRbSFK V4SxLOeAbg2BdYDHeRo+rXdKGJWqn1aRZm6lrheC08j0JQPuVbwJnzNAzmvL2+Ig b91JaxLh5MsGTX52c+A6JUDuS/Ct4vorre0yPCQG758bJgppvs02B3nHUM3hrEis mxrb6gdrQwmmxBmYIvjjNumu6dcys2hk0Xwwa8UxGr6kyo9FxdL0alBpQnxw -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:35 2024 by rpki-client on console-ams.rpki-client.org