$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88922EB00A9311EEA38A3246C4F9AE02.roa File: 88922EB00A9311EEA38A3246C4F9AE02.roa (raw, json) Hash identifier: awXBHez4Fl5+SAlppGli0sYlrW/IcDy4CHPstkyz/sw= Subject key identifier: 0F:03:EA:3B:A6:B8:8B:20:31:93:74:1A:74:C0:25:C1:25:5D:8E:91 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 73F5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88922EB00A9311EEA38A3246C4F9AE02.roa Signing time: Wed 14 Jun 2023 09:12:07 +0000 ROA not before: Wed 14 Jun 2023 09:12:07 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135719 IP address blocks: 103.105.236.0/22 maxlen: 24 103.137.168.0/22 maxlen: 22 103.137.168.0/24 maxlen: 24 103.137.169.0/24 maxlen: 24 103.137.170.0/24 maxlen: 24 103.137.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29685 (0x73f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 14 09:12:07 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64898466-d68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:4d:7f:02:0a:d6:75:ba:1c:0b:84:8a:c1: f1:af:2a:6b:3d:12:38:87:73:ed:f5:4d:52:72:52: 6c:14:27:e1:19:a2:c6:92:e9:9e:db:16:2b:d7:b5: a0:37:a5:7d:5b:91:7e:2a:08:13:95:10:81:ab:8d: e1:9c:64:7f:25:7a:28:70:b3:eb:b7:9f:ee:cf:06: 6a:43:55:07:25:50:b5:1f:e7:13:ca:8e:44:59:f8: d2:c1:7a:cd:4c:1c:4a:a4:cc:4c:b1:c2:98:34:c8: d8:50:d1:e6:5f:31:3c:4c:74:6f:9a:a3:ee:99:02: e7:8f:69:fe:77:65:fa:bf:e7:2c:de:ea:ef:20:de: 81:74:d8:12:00:d5:3e:a3:01:f8:57:f1:71:e4:ee: 05:16:61:f9:9f:43:1a:4a:35:85:b0:40:a0:fe:01: 81:1f:06:23:fb:53:a7:7b:4b:8d:13:1d:f7:33:d6: 93:c3:fc:de:4e:99:8a:4a:f2:5c:37:0b:8b:5b:87: 90:d1:fa:95:72:16:3a:80:ae:da:50:6e:7b:02:73: bd:5d:fb:66:d9:d8:2e:9f:ca:b0:aa:09:af:d0:8d: f1:5d:9c:bb:10:81:c3:49:c3:18:19:ff:06:5e:dc: ca:13:a1:b3:63:d1:58:1d:58:48:5b:f6:0d:5c:8f: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:03:EA:3B:A6:B8:8B:20:31:93:74:1A:74:C0:25:C1:25:5D:8E:91 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88922EB00A9311EEA38A3246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.105.236.0/22 103.137.168.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:e0:d3:ed:4a:90:38:b7:00:d7:b5:aa:ff:43:37:2e:7e:f2: f5:1d:cd:cd:c7:61:78:08:11:4f:65:67:b8:6a:76:4d:45:82: 30:95:11:4e:5c:aa:52:1c:a6:61:69:26:eb:a8:0c:c0:2f:0e: a9:23:e1:05:b0:ed:06:a8:2d:c2:8b:9f:a6:b7:23:e2:95:56: e4:38:95:47:b6:03:15:a3:54:ca:f0:fe:36:c5:5b:80:8c:4d: 44:73:76:ad:e4:49:f4:3f:f6:be:8b:1a:41:34:81:ef:f6:44: 64:b6:0a:c9:e9:c6:b6:9b:07:db:48:86:36:2e:c8:fe:3b:36: 56:32:0c:07:e4:a1:9f:54:8c:98:82:c7:83:be:4f:2c:e3:9f: 1a:66:7c:56:64:2b:18:71:b8:55:62:b2:f5:c0:f9:2e:87:7a: d4:4d:5f:d6:a7:a6:2b:70:ef:84:91:6f:dd:49:d7:74:d1:6f: fa:11:a3:80:56:5d:9e:c6:1a:47:b4:7b:fe:0c:5b:3d:a7:68: 94:fc:72:74:5f:00:5f:e4:19:cd:1f:76:85:b1:0b:9d:2e:53: 2c:c3:8e:71:7f:d0:68:e7:2f:c5:5a:46:5f:34:e4:92:6e:9e: 6c:31:0d:dc:f5:6c:d3:4c:20:ef:5c:fe:a1:36:e9:94:73:66: f2:df:52:1f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICc/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjE0MDkxMjA3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDg5ODQ2Ni1kNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAtNfwIK1nW6HAuEisHxryprPRI4h3Pt9U1SclJsFCfhGaLGkume2xYr17Wg N6V9W5F+KggTlRCBq43hnGR/JXoocLPrt5/uzwZqQ1UHJVC1H+cTyo5EWfjSwXrN TBxKpMxMscKYNMjYUNHmXzE8THRvmqPumQLnj2n+d2X6v+cs3urvIN6BdNgSANU+ owH4V/Fx5O4FFmH5n0MaSjWFsECg/gGBHwYj+1One0uNEx33M9aTw/zeTpmKSvJc NwuLW4eQ0fqVchY6gK7aUG57AnO9Xftm2dgun8qwqgmv0I3xXZy7EIHDScMYGf8G XtzKE6GzY9FYHVhIW/YNXI9z3wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA8D6jum uIsgMZN0GnTAJcElXY6RMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODg5MjJFQjAw QTkzMTFFRUEzOEEzMjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnaewDBAJniagwDQYJKoZIhvcNAQELBQADggEBAIvg0+1K kDi3ANe1qv9DNy5+8vUdzc3HYXgIEU9lZ7hqdk1FgjCVEU5cqlIcpmFpJuuoDMAv Dqkj4QWw7QaoLcKLn6a3I+KVVuQ4lUe2AxWjVMrw/jbFW4CMTURzdq3kSfQ/9r6L GkE0ge/2RGS2CsnpxrabB9tIhjYuyP47NlYyDAfkoZ9UjJiCx4O+TyzjnxpmfFZk KxhxuFVisvXA+S6HetRNX9anpitw74SRb91J13TRb/oRo4BWXZ7GGke0e/4MWz2n aJT8cnRfAF/kGc0fdoWxC50uUyzDjnF/0GjnL8VaRl805JJunmwxDdz1bNNMIO9c /qE26ZRzZvLfUh8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org