$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72E92DBE746D11ED83177C64C4F9AE02.roa File: 72E92DBE746D11ED83177C64C4F9AE02.roa (raw, json) Hash identifier: R2rgVgAFwQ3hngYQsP8/XNRtcV2jjAsXhHdLyQPapdM= Subject key identifier: 12:10:CB:C8:4E:81:A8:B1:96:59:88:9B:BD:20:0F:11:C8:61:44:EA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A69 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72E92DBE746D11ED83177C64C4F9AE02.roa Signing time: Wed 10 May 2023 16:14:39 +0000 ROA not before: Wed 10 May 2023 16:14:39 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133271 IP address blocks: 103.90.211.0/24 maxlen: 24 103.148.206.0/24 maxlen: 24 103.172.254.0/23 maxlen: 24 2001:df1:c540::/48 maxlen: 48 2001:df7:8180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27241 (0x6a69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:14:39 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2ee-ba22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:e5:37:2a:30:4b:e7:b2:a1:96:0b:ed:08: f1:04:60:bb:3c:8f:2a:0a:96:be:a8:73:49:5e:aa: 8e:b5:88:48:41:56:c5:2a:43:b5:ab:d5:f1:4b:7c: 71:9a:e5:bb:33:93:3a:a0:4f:25:f8:88:9e:52:21: 34:b6:96:ff:9f:69:69:5a:95:f0:95:a6:b3:8e:8c: 38:b0:3a:cb:6d:14:01:67:ea:55:0f:87:84:96:a0: 59:20:14:05:36:a1:a0:02:65:a1:73:1a:34:ca:3a: 69:0c:16:b9:ad:ec:26:78:22:be:1d:08:13:34:c9: c8:d9:98:9d:dc:bb:5e:08:c5:8f:67:40:50:ae:2e: fd:c2:fb:b2:0f:62:f7:58:3e:ec:18:25:6c:c7:ca: fc:54:15:dd:38:28:a1:0a:30:0c:76:19:44:15:f2: 64:92:f6:e6:58:05:a9:61:ae:fb:51:16:24:5c:e4: 36:59:02:33:5b:c9:e3:9e:0e:f9:68:da:bc:eb:09: 7c:87:23:0c:f0:ae:17:86:56:af:32:ae:c9:74:e9: cb:27:77:f3:a5:95:d1:e9:62:b7:b0:e2:15:cd:bc: 83:07:17:89:cf:03:1f:28:bb:d4:95:f7:25:63:56: d5:8b:c8:14:51:fa:4a:fa:49:41:f9:8f:c9:c9:af: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:10:CB:C8:4E:81:A8:B1:96:59:88:9B:BD:20:0F:11:C8:61:44:EA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72E92DBE746D11ED83177C64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.211.0/24 103.148.206.0/24 103.172.254.0/23 IPv6: 2001:df1:c540::/48 2001:df7:8180::/48 Signature Algorithm: sha256WithRSAEncryption 6e:ee:55:97:0d:71:6b:2c:bf:4e:4f:08:28:bc:cd:8d:2a:c4: 07:bf:83:bb:35:36:b0:39:2e:a3:59:b8:0b:bc:3b:84:db:c1: eb:cd:f8:46:dd:4d:70:c8:22:16:b4:de:11:31:d6:00:bc:ba: 12:c1:e4:1b:aa:d7:91:28:0e:14:be:83:bf:85:f5:03:15:09: 55:38:81:19:f0:16:46:01:f1:0a:6d:fc:27:1d:7b:55:45:15: c0:95:ba:a4:9e:69:94:0f:59:88:b0:ff:7b:71:2f:c9:f5:83: 41:be:e6:e2:73:4f:2a:55:66:5e:cc:3f:77:de:3a:39:07:b7: bc:16:4e:f2:da:78:b0:8a:50:ca:b0:49:ca:fd:9f:b7:f4:80: 89:f4:ae:79:2d:f3:8e:94:83:0f:8a:a4:51:73:01:71:8c:f6: 78:1a:39:1f:f0:6e:ef:dc:91:ca:72:c6:f8:87:9b:7b:34:ec: 83:77:0f:aa:64:31:40:c8:06:11:20:f5:75:2f:c5:f0:cd:14: 67:a6:ca:07:1b:68:56:52:88:ef:9c:fb:f1:a7:e3:1a:5a:c0: f2:79:09:1a:75:b4:8b:94:ed:97:42:74:92:f3:81:ff:92:68: ab:f0:a2:d2:c0:cc:8f:37:5f:99:ce:ce:25:b9:ad:54:cb:45: 81:52:a8:d3 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICamkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNDM5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJlZS1iYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi7lNyowS+eyoZYL7QjxBGC7PI8qCpa+qHNJXqqOtYhIQVbFKkO1q9XxS3xx muW7M5M6oE8l+IieUiE0tpb/n2lpWpXwlaazjow4sDrLbRQBZ+pVD4eElqBZIBQF NqGgAmWhcxo0yjppDBa5rewmeCK+HQgTNMnI2Zid3LteCMWPZ0BQri79wvuyD2L3 WD7sGCVsx8r8VBXdOCihCjAMdhlEFfJkkvbmWAWpYa77URYkXOQ2WQIzW8njng75 aNq86wl8hyMM8K4XhlavMq7JdOnLJ3fzpZXR6WK3sOIVzbyDBxeJzwMfKLvUlfcl Y1bVi8gUUfpK+klB+Y/Jya/fqwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFBIQy8hO gaixllmIm70gDxHIYUTqMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzJFOTJEQkU3 NDZEMTFFRDgzMTc3QzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MBgEAgABMBIDBABnWtMDBABnlM4DBAFnrP4wGAQCAAIwEgMHACABDfHFQAMH ACABDfeBgDANBgkqhkiG9w0BAQsFAAOCAQEAbu5Vlw1xayy/Tk8IKLzNjSrEB7+D uzU2sDkuo1m4C7w7hNvB6834Rt1NcMgiFrTeETHWALy6EsHkG6rXkSgOFL6Dv4X1 AxUJVTiBGfAWRgHxCm38Jx17VUUVwJW6pJ5plA9ZiLD/e3EvyfWDQb7m4nNPKlVm Xsw/d946OQe3vBZO8tp4sIpQyrBJyv2ft/SAifSueS3zjpSDD4qkUXMBcYz2eBo5 H/Bu79yRynLG+IebezTsg3cPqmQxQMgGESD1dS/F8M0UZ6bKBxtoVlKI75z78afj GlrA8nkJGnW0i5Ttl0J0kvOB/5Joq/Ci0sDMjzdfmc7OJbmtVMtFgVKo0w== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org