$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C89ED2F56411EDB6E6C96EC4F9AE02.roa File: 72C89ED2F56411EDB6E6C96EC4F9AE02.roa (raw, json) Hash identifier: RoVD7PIRB9RUWfoh+MN3q35H43r4fRF/s187oqmVDh8= Subject key identifier: 1A:0A:16:C6:00:19:9B:02:1D:47:7F:40:D8:B0:DF:B9:32:40:89:4F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7248 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C89ED2F56411EDB6E6C96EC4F9AE02.roa Signing time: Thu 18 May 2023 10:12:10 +0000 ROA not before: Thu 18 May 2023 10:12:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134333 IP address blocks: 103.203.209.0/24 maxlen: 24 103.203.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29256 (0x7248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 18 10:12:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6465f9f9-a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:49:11:c4:8c:fd:ab:3d:b4:3a:5e:67:f1: d3:78:b0:dd:94:44:10:1d:d4:0c:a1:63:9a:06:29: 5a:6e:53:24:5c:df:31:02:23:07:9e:76:a5:e6:11: 20:91:d3:e7:24:23:9c:a8:b5:54:ad:5d:ba:04:2c: cf:d6:b5:c9:f3:c5:ad:cf:6f:3c:ed:15:4d:7c:06: 91:cc:b0:7d:95:e7:31:1f:12:39:16:f0:c6:e3:a3: b9:2f:b8:00:82:2c:86:45:33:41:44:a7:12:9a:5b: a7:37:a2:57:b9:03:8b:c4:d5:55:37:08:e9:b8:5b: 98:4a:73:9c:de:49:f5:c0:87:31:39:c7:1c:0e:02: cf:53:b3:ad:cd:b4:85:98:13:2f:d1:b4:24:cb:dd: 5d:1f:93:8b:42:86:6b:02:42:16:a3:7d:c8:1a:ac: 51:79:7d:bc:d7:5f:d2:6a:b7:bb:52:84:71:65:0c: 46:b5:af:b6:19:9c:cc:3f:d6:2e:f7:54:09:c8:30: 06:ea:d0:cb:93:3f:1c:2f:56:0d:51:02:df:b1:7f: 81:72:e1:e1:10:7e:1a:be:ce:49:8a:00:95:8b:16: 4f:b2:58:ce:3b:87:72:61:99:ac:c1:cd:b8:aa:e7: 8d:99:e1:39:b7:94:fd:8c:35:11:5c:fc:28:82:33: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0A:16:C6:00:19:9B:02:1D:47:7F:40:D8:B0:DF:B9:32:40:89:4F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C89ED2F56411EDB6E6C96EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.209.0-103.203.210.255 Signature Algorithm: sha256WithRSAEncryption 62:a6:bc:87:bd:da:75:61:12:c1:27:81:59:f0:b5:19:e7:f6: 25:f5:24:8a:31:f6:7b:c2:4a:03:09:5b:79:79:e3:12:47:c5: 47:c0:f0:93:e6:39:18:95:2d:45:c0:05:40:b4:3b:75:4b:b6: ba:1d:be:55:bc:ca:64:93:27:f0:bc:ac:39:c8:40:a4:8a:68: 58:10:59:6e:0e:aa:11:4e:6e:17:c3:ac:00:f6:b2:aa:f2:50: ad:76:cb:6e:e6:37:42:12:07:d3:2d:e9:46:91:a8:fa:75:c4: 3a:cd:2c:fe:76:ef:40:03:50:bf:e1:c9:33:7a:ec:f8:b1:f1: eb:e8:95:1a:12:70:40:aa:4a:f1:93:5f:dd:9e:78:52:d3:6a: 5a:ae:99:f4:43:70:3e:fc:e7:a8:cd:f7:fe:0b:1a:89:9b:60: 84:c1:19:8c:b1:17:db:a3:48:1e:8a:d9:c5:bc:06:70:40:f0: 8f:b3:41:60:0d:ac:dc:42:f1:5c:8f:01:92:f6:f1:b5:d7:b1: fe:ed:f7:fb:02:49:3f:01:07:55:9d:2e:26:46:6b:eb:ef:5a: be:ed:49:4c:29:c3:95:34:2d:63:6f:34:bb:27:bc:b0:76:df: d3:ed:a2:e4:89:84:b9:4a:c3:69:fc:2a:ad:e1:8e:d4:ec:0b: 75:61:16:98 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICckgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTE4MTAxMjEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDY1ZjlmOS1hMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3dJEcSM/as9tDpeZ/HTeLDdlEQQHdQMoWOaBilablMkXN8xAiMHnnal5hEg kdPnJCOcqLVUrV26BCzP1rXJ88Wtz2887RVNfAaRzLB9lecxHxI5FvDG46O5L7gA giyGRTNBRKcSmlunN6JXuQOLxNVVNwjpuFuYSnOc3kn1wIcxOcccDgLPU7OtzbSF mBMv0bQky91dH5OLQoZrAkIWo33IGqxReX2811/Sare7UoRxZQxGta+2GZzMP9Yu 91QJyDAG6tDLkz8cL1YNUQLfsX+BcuHhEH4avs5JigCVixZPsljOO4dyYZmswc24 queNmeE5t5T9jDURXPwogjOPcwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFBoKFsYA GZsCHUd/QNiw37kyQIlPMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzJDODlFRDJG NTY0MTFFREI2RTZDOTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfL0QMEAGfL0jANBgkqhkiG9w0BAQsFAAOCAQEAYqa8 h73adWESwSeBWfC1Gef2JfUkijH2e8JKAwlbeXnjEkfFR8Dwk+Y5GJUtRcAFQLQ7 dUu2uh2+VbzKZJMn8LysOchApIpoWBBZbg6qEU5uF8OsAPayqvJQrXbLbuY3QhIH 0y3pRpGo+nXEOs0s/nbvQANQv+HJM3rs+LHx6+iVGhJwQKpK8ZNf3Z54UtNqWq6Z 9ENwPvznqM33/gsaiZtghMEZjLEX26NIHorZxbwGcEDwj7NBYA2s3ELxXI8Bkvbx tdex/u33+wJJPwEHVZ0uJkZr6+9avu1JTCnDlTQtY280uye8sHbf0+2i5ImEuUrD afwqreGO1OwLdWEWmA== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:25 2024 by rpki-client on console-fra.rpki-client.org