$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/908AE8AE327211ED80554E32C4F9AE02.roa File: 908AE8AE327211ED80554E32C4F9AE02.roa (raw, json) Hash identifier: AZQAFpe6mmxibgZNNFuUYe8EXcSyr7BOP/K+fubY9dQ= Subject key identifier: 13:33:6F:7E:22:45:55:44:18:97:EE:5F:D1:FD:19:28:67:33:04:47 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EA3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/908AE8AE327211ED80554E32C4F9AE02.roa Signing time: Wed 10 May 2023 16:34:58 +0000 ROA not before: Wed 10 May 2023 16:34:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141338 IP address blocks: 103.158.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28323 (0x6ea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:34:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7b2-3691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:66:6c:82:06:8b:bb:1e:80:9e:88:b1:a7: 8b:f3:16:25:df:f1:70:cf:40:c8:b9:60:22:50:39: f3:e4:75:1c:74:94:b9:56:e2:32:bc:5d:45:f5:f1: 1c:34:37:5c:09:04:e0:e6:2f:b0:4d:0c:3a:6f:58: c0:79:9c:9d:bd:1d:88:45:81:f4:9f:01:a9:38:c2: 3e:a3:1e:63:02:e1:06:f8:18:66:70:05:b2:c6:f9: cf:2b:0b:a2:88:03:26:c8:a8:20:e0:b6:a5:c4:51: ce:ac:7c:f1:36:bb:f9:0a:84:78:8c:81:84:87:dd: 0f:44:c1:c8:56:cc:32:bf:0f:97:1c:d5:95:47:82: 79:78:4c:2c:30:89:35:68:08:22:3c:cc:df:f0:33: 13:4a:a7:aa:47:a0:82:7b:c7:de:4a:6f:b8:fd:a1: 6d:1a:34:d9:4f:c0:c7:06:53:3b:8e:0e:b2:e2:1b: 59:d4:ce:4d:ff:c3:43:37:9b:ef:fe:7a:7b:da:7f: 2f:04:0e:1c:d9:ca:00:72:cf:55:2d:8b:2b:fd:dc: 8c:0a:af:a5:e3:0f:eb:18:27:6d:15:02:bc:37:61: 4f:61:20:b0:a4:11:2c:6b:c2:d2:66:7c:71:2b:6b: e9:d3:04:fb:ef:96:a6:c5:3e:a3:ff:02:6e:e2:fe: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:33:6F:7E:22:45:55:44:18:97:EE:5F:D1:FD:19:28:67:33:04:47 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/908AE8AE327211ED80554E32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.54.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:0f:59:c1:05:2f:97:1a:19:1e:bb:90:9c:d1:09:50:b8:77: a9:86:89:00:d4:12:1c:3e:61:eb:ed:b7:4f:b3:e4:e5:70:f4: c8:f5:ce:fc:fc:28:30:64:46:40:76:fd:9a:44:2d:eb:b1:2f: 88:eb:2b:54:a3:ac:a1:b0:54:bd:47:55:62:da:f7:84:20:51: ca:49:52:3c:32:60:d8:3d:59:47:96:5b:e6:51:be:f1:26:a7: 57:63:e3:a2:de:6c:f3:fd:35:69:3c:bf:9a:54:a6:f5:1e:f1: f1:20:0e:5e:56:3c:90:74:4b:fd:e2:c0:0c:0a:0d:71:3d:99: 86:34:1a:f7:02:f4:37:ae:10:41:b7:ad:ae:8c:0c:55:e4:b4: 3b:11:28:91:67:04:b8:ea:06:04:4c:2a:95:fd:80:8d:08:ef: 8b:2b:4f:a0:f3:11:88:99:87:8a:31:59:ef:83:e7:36:f1:2a: 57:04:f3:74:78:ec:4e:28:ec:1d:fb:9b:29:48:14:4c:b1:ad: 03:95:b1:48:97:a3:7f:bb:a8:48:ab:73:ec:8b:fc:d3:d6:be: cd:e6:72:e5:f3:ca:4e:ed:04:19:1c:74:8d:68:37:e1:ff:93: 9d:46:44:08:b8:70:d3:3a:5b:e7:4f:27:53:4e:fe:c2:55:45: f4:db:8e:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNDU4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdiMi0zNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH1mbIIGi7segJ6IsaeL8xYl3/Fwz0DIuWAiUDnz5HUcdJS5VuIyvF1F9fEc NDdcCQTg5i+wTQw6b1jAeZydvR2IRYH0nwGpOMI+ox5jAuEG+BhmcAWyxvnPKwui iAMmyKgg4LalxFHOrHzxNrv5CoR4jIGEh90PRMHIVswyvw+XHNWVR4J5eEwsMIk1 aAgiPMzf8DMTSqeqR6CCe8feSm+4/aFtGjTZT8DHBlM7jg6y4htZ1M5N/8NDN5vv /np72n8vBA4c2coAcs9VLYsr/dyMCq+l4w/rGCdtFQK8N2FPYSCwpBEsa8LSZnxx K2vp0wT775amxT6j/wJu4v6AvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBMzb34i RVVEGJfuX9H9GShnMwRHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTA4QUU4QUUz MjcyMTFFRDgwNTU0RTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnjYwDQYJKoZIhvcNAQELBQADggEBAF0PWcEFL5caGR67 kJzRCVC4d6mGiQDUEhw+Yevtt0+z5OVw9Mj1zvz8KDBkRkB2/ZpELeuxL4jrK1Sj rKGwVL1HVWLa94QgUcpJUjwyYNg9WUeWW+ZRvvEmp1dj46LebPP9NWk8v5pUpvUe 8fEgDl5WPJB0S/3iwAwKDXE9mYY0GvcC9DeuEEG3ra6MDFXktDsRKJFnBLjqBgRM KpX9gI0I74srT6DzEYiZh4oxWe+D5zbxKlcE83R47E4o7B37mylIFEyxrQOVsUiX o3+7qEirc+yL/NPWvs3mcuXzyk7tBBkcdI1oN+H/k51GRAi4cNM6W+dPJ1NO/sJV RfTbjjc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org