$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8805CA50AC3011ECAB08232BC4F9AE02.roa File: 8805CA50AC3011ECAB08232BC4F9AE02.roa (raw, json) Hash identifier: A33JtFrEkQCaqPBQB//z3LfTfJhtO7jf+ARilDnHqAA= Subject key identifier: 00:B7:F5:41:4B:56:91:DD:0F:B6:F3:CC:9E:35:A5:A7:C4:31:AE:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DBF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8805CA50AC3011ECAB08232BC4F9AE02.roa Signing time: Wed 10 May 2023 16:30:51 +0000 ROA not before: Wed 10 May 2023 16:30:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138787 IP address blocks: 103.116.140.0/22 maxlen: 24 103.135.60.0/24 maxlen: 24 103.139.222.0/24 maxlen: 24 2001:df7:8980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28095 (0x6dbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:30:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc6bb-0df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:72:a9:d0:f9:92:72:e1:6b:51:fc:3e:22: f0:19:77:48:b0:1c:46:08:9f:28:6e:70:62:79:5e: a3:81:3a:85:e8:23:8d:55:0c:0b:c9:6d:3f:25:c6: 7d:c6:6f:bc:0b:77:2e:30:3c:d5:e1:48:9c:17:8a: 9b:b2:f4:fc:bc:dc:fa:c3:37:89:8d:2e:34:b6:83: 3d:b8:85:a4:c6:61:3a:76:08:f3:b5:f8:28:69:68: a7:35:6b:b1:f8:af:26:c0:ff:73:35:b7:53:b2:8a: fc:57:7f:ed:80:ab:89:24:15:26:b3:6e:60:87:e3: 7c:c6:1d:a7:40:0f:85:7f:59:6d:ad:a5:56:1f:86: 9d:97:dc:c4:99:00:87:31:65:20:d1:75:f1:46:2c: 12:63:ee:42:cf:bc:6c:1a:b8:29:68:b8:62:46:96: af:84:bd:b2:c4:26:7b:42:0e:75:5b:36:61:86:72: bc:e2:74:1a:68:8b:2d:e1:c8:d9:98:21:ad:c6:f6: 34:36:b9:14:bb:46:96:a8:14:f7:55:bd:5d:98:fb: 4e:ae:09:e0:7b:ab:88:f2:57:59:2c:99:35:aa:e0: 4e:f2:b2:e8:bd:96:0d:5f:a1:58:5d:28:77:ad:04: ad:38:42:d4:1e:67:57:d7:89:aa:42:dc:45:79:cd: c4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B7:F5:41:4B:56:91:DD:0F:B6:F3:CC:9E:35:A5:A7:C4:31:AE:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8805CA50AC3011ECAB08232BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.140.0/22 103.135.60.0/24 103.139.222.0/24 IPv6: 2001:df7:8980::/48 Signature Algorithm: sha256WithRSAEncryption a1:49:7f:ee:23:8a:0e:27:3b:bd:d5:be:b9:5d:7d:2c:b1:cc: 64:c5:ba:89:8d:8e:ce:59:25:65:f5:cb:85:fa:bc:42:6c:9e: 44:01:53:72:43:ba:a7:1b:66:89:40:a3:99:cf:9e:cd:1d:0e: d3:81:0e:5c:ff:34:56:b7:40:a9:77:d0:8a:ca:86:2e:cb:75: b9:a4:04:d6:bd:76:36:51:a9:cd:6e:ae:75:76:9a:8e:42:0c: c1:3b:16:af:f9:bf:09:fa:96:ff:6c:0c:2d:cb:dc:1c:f7:b3: c2:7c:c0:9b:16:07:c5:9a:fa:25:cf:eb:34:05:35:81:59:23: cd:36:36:fe:aa:4f:9c:e5:63:d3:39:0d:3b:62:d9:66:3b:3c: 7d:c2:97:72:1a:92:8b:ec:ce:ae:58:b5:b6:ab:9f:02:83:e9: dd:d8:ba:d9:45:71:2a:12:2d:9d:f2:a4:49:a6:f1:49:8b:5d: 50:5e:5e:1c:59:f3:cb:a5:0c:db:72:28:7e:d9:a4:89:a6:bf: 54:54:fe:2a:ff:ad:5f:3c:ab:a5:5f:0a:a6:35:43:fb:27:13: e7:33:a6:50:f7:5f:03:5a:57:ca:4d:7d:bb:ed:fe:6c:1b:0c: 6c:88:7a:b0:d4:9d:a0:e6:46:3d:90:38:a4:c4:e3:60:5e:fe: 1b:c8:80:8e -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICbb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMDUxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzZiYi0wZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfFyqdD5knLha1H8PiLwGXdIsBxGCJ8obnBieV6jgTqF6CONVQwLyW0/JcZ9 xm+8C3cuMDzV4UicF4qbsvT8vNz6wzeJjS40toM9uIWkxmE6dgjztfgoaWinNWux +K8mwP9zNbdTsor8V3/tgKuJJBUms25gh+N8xh2nQA+Ff1ltraVWH4adl9zEmQCH MWUg0XXxRiwSY+5Cz7xsGrgpaLhiRpavhL2yxCZ7Qg51WzZhhnK84nQaaIst4cjZ mCGtxvY0NrkUu0aWqBT3Vb1dmPtOrgnge6uI8ldZLJk1quBO8rLovZYNX6FYXSh3 rQStOELUHmdX14mqQtxFec3EIwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAC39UFL VpHdD7bzzJ41pafEMa4WMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODgwNUNBNTBB QzMwMTFFQ0FCMDgyMzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAJndIwDBABnhzwDBABni94wDwQCAAIwCQMHACABDfeJgDAN BgkqhkiG9w0BAQsFAAOCAQEAoUl/7iOKDic7vdW+uV19LLHMZMW6iY2OzlklZfXL hfq8QmyeRAFTckO6pxtmiUCjmc+ezR0O04EOXP80VrdAqXfQisqGLst1uaQE1r12 NlGpzW6udXaajkIMwTsWr/m/CfqW/2wMLcvcHPezwnzAmxYHxZr6Jc/rNAU1gVkj zTY2/qpPnOVj0zkNO2LZZjs8fcKXchqSi+zOrli1tqufAoPp3di62UVxKhItnfKk SabxSYtdUF5eHFnzy6UM23Ioftmkiaa/VFT+Kv+tXzyrpV8KpjVD+ycT5zOmUPdf A1pXyk19u+3+bBsMbIh6sNSdoOZGPZA4pMTjYF7+G8iAjg== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:27 2024 by rpki-client on console-fra.rpki-client.org