$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E9421D060D311EDA6465F0CC4F9AE02.roa File: 7E9421D060D311EDA6465F0CC4F9AE02.roa (raw, json) Hash identifier: JdrDb8A5lon4hRDMoN7bVXRz5EJfZ34catAbcNci33A= Subject key identifier: 1D:65:77:60:62:AE:1F:FA:F9:4E:76:51:28:72:78:EC:A1:48:80:8A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B9C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E9421D060D311EDA6465F0CC4F9AE02.roa Signing time: Wed 10 May 2023 16:20:31 +0000 ROA not before: Wed 10 May 2023 16:20:31 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135214 IP address blocks: 45.121.108.0/22 maxlen: 24 103.41.28.0/22 maxlen: 24 103.83.184.0/23 maxlen: 24 103.83.186.0/23 maxlen: 24 2001:df7:c80::/48 maxlen: 48 2001:df7:f600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27548 (0x6b9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:20:31 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc44e-33bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:2f:60:0e:31:68:6f:44:99:f9:85:32:80: 82:2a:65:46:f5:f4:53:99:75:46:1e:c3:58:b2:f6: f6:2c:6d:05:20:6a:0e:6c:f7:6f:1d:08:b1:8d:7f: 7e:c4:21:1f:f7:c9:c5:25:15:a7:7c:f4:9b:2d:e2: d2:a4:d4:ac:02:60:60:93:60:ff:5e:2b:8a:52:1d: 50:9a:73:79:a2:08:76:12:1d:1a:19:f8:40:2f:93: ee:c3:77:5f:ac:d4:94:ed:5f:cf:f1:1a:11:fb:29: f0:e1:80:91:dd:ec:a6:c5:87:88:cf:c6:82:ec:47: 0e:83:f2:de:79:70:63:b0:60:6d:a7:f0:85:91:e5: 90:c9:38:15:3d:a1:9e:0c:7b:9b:97:d3:5a:69:d3: 1d:b1:04:39:f9:f0:76:8f:d4:52:92:38:a9:73:e7: 83:e6:40:26:5a:11:7b:93:f9:b8:f4:28:36:d5:45: 9c:f5:c4:fd:5a:b0:b2:c0:a7:04:6a:3f:b7:45:1f: 1a:3d:b6:db:fd:31:f4:23:c4:fe:8a:6b:70:1c:dc: 1e:95:cf:ff:b4:8d:a5:98:6d:62:1b:f1:7b:1e:7d: 05:4c:92:dd:75:56:3d:69:da:4f:20:64:3f:78:73: c2:22:df:e0:90:12:ff:56:87:be:2d:15:a0:79:21: f0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:65:77:60:62:AE:1F:FA:F9:4E:76:51:28:72:78:EC:A1:48:80:8A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E9421D060D311EDA6465F0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.108.0/22 103.41.28.0/22 103.83.184.0/22 IPv6: 2001:df7:c80::/48 2001:df7:f600::/48 Signature Algorithm: sha256WithRSAEncryption 1d:b0:d5:2c:7d:81:4f:47:e7:89:b8:ab:14:b1:f3:12:55:60: 0a:11:bd:d3:05:57:ea:05:10:23:4d:45:7d:84:dd:02:76:e5: 50:fa:bf:3a:26:d6:1d:f7:3e:0c:7b:f5:42:87:19:a9:a5:cb: 6f:ca:5c:b6:de:42:34:35:92:3d:16:aa:7e:3f:be:4e:4c:6e: b5:e7:23:f6:99:8b:91:b3:32:14:30:0f:c2:e3:b3:5b:54:2d: 61:c5:06:bf:6d:3e:9a:65:aa:dc:8b:6e:4e:89:ac:cb:35:b4: c4:98:68:55:ac:27:d8:58:72:8f:7e:77:58:5d:57:8f:af:cf: 91:0e:8a:08:6e:7c:c4:27:0e:36:5f:93:4e:0c:d2:d6:4d:10: 9b:23:53:2b:b8:b9:4a:a9:40:b9:a5:ff:7f:2e:72:b9:c2:7d: d8:88:53:05:78:ad:9f:de:11:ff:dd:7c:61:a2:c1:92:f7:e3: a7:96:de:1e:8b:91:82:e8:0a:86:03:e3:62:de:24:c1:05:d1: 22:e6:8c:88:c8:10:e0:57:bd:b1:3d:58:43:f3:45:1d:62:d5: c1:0a:79:dd:cd:35:18:86:03:5d:ff:42:fc:a8:15:a3:58:00: a5:c5:6f:09:5a:57:50:4f:b9:63:09:cc:e6:1c:b3:88:06:38: 1e:03:33:f4 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICa5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMDMxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ0ZS0zM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud8vYA4xaG9EmfmFMoCCKmVG9fRTmXVGHsNYsvb2LG0FIGoObPdvHQixjX9+ xCEf98nFJRWnfPSbLeLSpNSsAmBgk2D/XiuKUh1QmnN5ogh2Eh0aGfhAL5Puw3df rNSU7V/P8RoR+ynw4YCR3eymxYeIz8aC7EcOg/LeeXBjsGBtp/CFkeWQyTgVPaGe DHubl9NaadMdsQQ5+fB2j9RSkjipc+eD5kAmWhF7k/m49Cg21UWc9cT9WrCywKcE aj+3RR8aPbbb/TH0I8T+imtwHNwelc//tI2lmG1iG/F7Hn0FTJLddVY9adpPIGQ/ eHPCIt/gkBL/Voe+LRWgeSHwXQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFB1ld2Bi rh/6+U52UShyeOyhSICKMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0U5NDIxRDA2 MEQzMTFFREE2NDY1RjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MBgEAgABMBIDBAIteWwDBAJnKRwDBAJnU7gwGAQCAAIwEgMHACABDfcMgAMH ACABDff2ADANBgkqhkiG9w0BAQsFAAOCAQEAHbDVLH2BT0fnibirFLHzElVgChG9 0wVX6gUQI01FfYTdAnblUPq/OibWHfc+DHv1QocZqaXLb8pctt5CNDWSPRaqfj++ Tkxutecj9pmLkbMyFDAPwuOzW1QtYcUGv20+mmWq3ItuTomsyzW0xJhoVawn2Fhy j353WF1Xj6/PkQ6KCG58xCcONl+TTgzS1k0QmyNTK7i5SqlAuaX/fy5yucJ92IhT BXitn94R/918YaLBkvfjp5beHouRgugKhgPjYt4kwQXRIuaMiMgQ4Fe9sT1YQ/NF HWLVwQp53c01GIYDXf9C/KgVo1gApcVvCVpXUE+5YwnM5hyziAY4HgMz9A== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org