$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/706233B2BDCF11EA8755D90DC4F9AE02.roa File: 706233B2BDCF11EA8755D90DC4F9AE02.roa (raw, json) Hash identifier: qvhJYp5Oh93Xe9gBL46OuTkZgssD4C/A3Vf2pMaeRaQ= Subject key identifier: 16:E6:34:B8:15:10:64:58:6C:E1:E5:F0:F4:6B:1D:70:30:DC:96:56 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E0D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/706233B2BDCF11EA8755D90DC4F9AE02.roa Signing time: Wed 10 May 2023 16:32:17 +0000 ROA not before: Wed 10 May 2023 16:32:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139575 IP address blocks: 103.142.72.0/23 maxlen: 24 2405:8040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28173 (0x6e0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:32:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc711-4a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:16:04:f3:87:73:db:05:c8:97:f8:4a:cf: 27:b9:c2:a6:3b:b6:80:e3:2f:7d:7a:32:a6:03:a1: dc:00:e6:ea:f0:dd:cd:ca:be:36:cc:4d:4c:34:e9: 4c:09:04:91:07:12:2e:a4:c2:3c:49:4e:17:63:87: 74:84:00:05:a6:09:99:01:c4:79:31:e0:be:b4:76: 0c:63:c8:17:b7:e2:61:15:58:7f:cf:92:cb:d1:aa: da:f0:73:cc:0d:0b:4f:3a:57:a2:63:24:45:6c:31: 7a:db:31:dd:72:f3:e8:fc:b7:df:50:7b:a8:a3:3d: d4:20:b4:58:e6:24:4b:3e:9b:d6:20:b2:68:78:21: 01:4d:91:89:af:10:53:f2:f3:d7:03:cd:80:53:3d: a0:64:b9:65:bc:26:62:c1:af:e8:b5:7f:eb:c2:16: 64:b1:52:8c:78:cd:b8:df:bd:f4:72:53:4c:c7:f4: 88:86:ea:f1:1c:aa:6a:e3:aa:45:cf:b1:d0:a9:05: 8c:25:7c:c3:0a:a1:11:45:0f:b4:b3:c3:d1:23:3a: 2e:07:69:bd:24:85:f7:48:d4:67:28:82:45:bb:3a: 70:9b:05:40:c3:6d:17:84:df:8c:47:a8:5d:eb:5f: 84:62:d5:23:35:d0:b5:c1:89:b1:9d:b8:90:9d:e9: a0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E6:34:B8:15:10:64:58:6C:E1:E5:F0:F4:6B:1D:70:30:DC:96:56 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/706233B2BDCF11EA8755D90DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.72.0/23 IPv6: 2405:8040::/32 Signature Algorithm: sha256WithRSAEncryption 5b:5b:78:87:18:99:1e:89:e2:16:69:04:45:3d:be:c5:14:87: 8a:5d:29:01:f1:b0:71:a5:f3:12:7e:dc:21:62:4f:5a:d6:e6: 2b:65:3d:c4:ec:af:d9:30:49:8a:02:80:59:27:32:42:97:32: dc:09:b3:9c:d3:d8:17:f6:32:de:11:27:23:18:3e:84:28:a8: 2c:e1:71:ee:ca:22:74:6f:5c:80:99:d4:fa:bc:1a:46:15:4d: d0:8b:31:ea:14:81:21:29:e7:ba:dc:d5:33:62:4f:8d:c7:a7: fc:12:bf:53:ee:23:fd:a9:c4:ad:ca:de:c1:27:0b:7a:b1:e0: 0a:34:3f:77:7e:80:8a:b5:d1:b0:15:3e:e2:57:91:87:72:3f: d3:41:b5:b8:ae:13:b9:fe:77:1f:45:51:6e:05:fa:02:32:01: 23:8e:4b:ec:84:92:73:7e:eb:a9:51:00:75:de:aa:16:59:23: 57:27:9d:ad:9e:e0:c3:7b:d7:9f:98:3c:c3:f6:0f:ce:05:18: e9:8a:8f:e3:2c:72:9c:f6:e2:55:44:c8:19:a7:3c:2f:0b:a9: 49:a3:8e:22:e2:d2:5b:5d:bc:d8:e6:d7:26:b5:3b:40:85:7d: 56:f0:cb:0c:e5:f7:ec:cc:ae:16:dc:43:f9:a7:94:83:4d:7a: 85:b4:55:ad -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICbg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMjE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzcxMS00YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2R4WBPOHc9sFyJf4Ss8nucKmO7aA4y99ejKmA6HcAObq8N3Nyr42zE1MNOlM CQSRBxIupMI8SU4XY4d0hAAFpgmZAcR5MeC+tHYMY8gXt+JhFVh/z5LL0ara8HPM DQtPOleiYyRFbDF62zHdcvPo/LffUHuooz3UILRY5iRLPpvWILJoeCEBTZGJrxBT 8vPXA82AUz2gZLllvCZiwa/otX/rwhZksVKMeM243730clNMx/SIhurxHKpq46pF z7HQqQWMJXzDCqERRQ+0s8PRIzouB2m9JIX3SNRnKIJFuzpwmwVAw20XhN+MR6hd 61+EYtUjNdC1wYmxnbiQnemgdwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBbmNLgV EGRYbOHl8PRrHXAw3JZWMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzA2MjMzQjJC RENGMTFFQTg3NTVEOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnjkgwDQQCAAIwBwMFACQFgEAwDQYJKoZIhvcNAQELBQAD ggEBAFtbeIcYmR6J4hZpBEU9vsUUh4pdKQHxsHGl8xJ+3CFiT1rW5itlPcTsr9kw SYoCgFknMkKXMtwJs5zT2Bf2Mt4RJyMYPoQoqCzhce7KInRvXICZ1Pq8GkYVTdCL MeoUgSEp57rc1TNiT43Hp/wSv1PuI/2pxK3K3sEnC3qx4Ao0P3d+gIq10bAVPuJX kYdyP9NBtbiuE7n+dx9FUW4F+gIyASOOS+yEknN+66lRAHXeqhZZI1cnna2e4MN7 15+YPMP2D84FGOmKj+Mscpz24lVEyBmnPC8LqUmjjiLi0ltdvNjm1ya1O0CFfVbw ywzl9+zMrhbcQ/mnlINNeoW0Va0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org