$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa File: 991142DE84EE11EC83FAF06EC4F9AE02.roa (raw, json) Hash identifier: KFGLJpqdcbvkHBhDC+d0O4kTkw+m87qv8l9/Nr9QLyk= Subject key identifier: 00:CD:6F:54:AB:4E:4A:60:6D:EF:37:66:AE:51:A4:2C:F7:82:2D:26 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FB0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa Signing time: Wed 10 May 2023 16:40:00 +0000 ROA not before: Wed 10 May 2023 16:40:00 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146896 IP address blocks: 103.173.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28592 (0x6fb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:40:00 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc8df-9658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:d7:cb:18:e3:2b:df:73:b2:19:2f:24:45: aa:ae:53:40:2e:13:90:7b:db:00:d6:93:3c:bd:87: cf:ed:b2:f0:f6:de:a8:42:c2:84:4b:3c:69:b6:3f: 9d:d8:c1:2a:ee:4a:77:69:4d:22:b7:f6:18:3f:ac: 2b:5e:fc:6b:98:13:cc:bc:76:65:52:cd:de:df:5e: 04:cd:2b:98:07:d7:de:d0:d8:29:c5:9e:1b:b5:47: 7e:03:f2:0a:2b:68:91:c3:73:fe:85:c7:13:07:27: 25:0a:d7:15:74:5e:2f:9f:47:ab:41:c0:c5:35:89: 42:20:4e:3c:5d:60:7c:6c:0f:f7:84:8c:80:b2:ae: 81:a3:4f:10:3e:39:51:58:bd:50:a9:8a:23:0f:c2: 6e:8a:21:eb:b0:44:ae:9d:0b:c7:fa:9e:2b:ef:cf: 0d:d3:59:9b:74:94:e0:03:ad:f9:e0:28:e8:30:8a: ee:83:f4:22:40:da:44:59:86:75:48:76:2d:80:d7: a9:6e:ae:9f:6e:61:c0:10:7e:9a:0c:32:78:1d:b7: df:b9:dc:cf:79:22:4a:f2:71:2e:85:aa:be:44:35: 82:87:c1:c1:75:1d:88:9b:15:b9:69:26:6c:44:2e: 62:75:4c:ad:38:f8:f6:e5:8b:8f:7c:d4:fd:99:c3: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:6F:54:AB:4E:4A:60:6D:EF:37:66:AE:51:A4:2C:F7:82:2D:26 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.193.0/24 Signature Algorithm: sha256WithRSAEncryption 79:f9:4a:ed:3a:69:a0:46:56:3d:0e:a3:03:73:26:b5:b9:65: fc:bd:d2:c9:30:c9:8e:20:7c:e0:d4:c5:7f:92:c9:75:79:fc: 7c:c6:e6:0e:dd:a0:65:39:02:30:58:09:35:4c:0e:bb:97:ad: 22:bf:f1:38:73:5c:81:b1:06:ca:93:d1:6c:78:0d:8e:a8:4c: 68:b3:43:90:84:be:99:18:1c:07:01:f8:72:6b:9b:67:2f:41: 5e:99:8d:12:1f:a9:9a:5f:39:da:f1:46:3d:71:29:0e:78:90: fa:02:41:c8:c2:8d:ef:08:47:9e:95:d5:a2:99:56:b7:27:90: dd:99:3b:f1:04:e1:46:a0:7f:d8:a1:ed:f6:83:6e:db:c1:c2: 2d:a6:dd:93:e6:8a:8d:34:07:af:16:80:b4:e0:74:e5:ca:e6: f3:f4:7d:a4:17:29:29:03:5d:01:4f:a6:c4:bc:24:3e:c0:a2: 5d:80:82:0d:2f:f8:5d:80:42:5a:a5:c9:eb:31:64:e2:b3:e1: 4d:cb:fc:8e:8d:08:ec:8b:a1:23:32:ad:d1:54:2d:9c:ce:fb: f6:6b:c3:ae:8f:cc:fa:ac:9f:aa:69:55:9a:1a:72:3b:72:0c: 86:5e:68:df:a8:20:dc:04:34:8a:a6:59:de:db:24:c3:9a:0f: b3:eb:f4:8b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICb7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MDAwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzhkZi05NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyfXyxjjK99zshkvJEWqrlNALhOQe9sA1pM8vYfP7bLw9t6oQsKESzxptj+d 2MEq7kp3aU0it/YYP6wrXvxrmBPMvHZlUs3e314EzSuYB9fe0NgpxZ4btUd+A/IK K2iRw3P+hccTByclCtcVdF4vn0erQcDFNYlCIE48XWB8bA/3hIyAsq6Bo08QPjlR WL1QqYojD8JuiiHrsESunQvH+p4r788N01mbdJTgA6354CjoMIrug/QiQNpEWYZ1 SHYtgNepbq6fbmHAEH6aDDJ4HbffudzPeSJK8nEuhaq+RDWCh8HBdR2ImxW5aSZs RC5idUytOPj25YuPfNT9mcMkpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFADNb1Sr Tkpgbe83Zq5RpCz3gi0mMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTkxMTQyREU4 NEVFMTFFQzgzRkFGMDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnrcEwDQYJKoZIhvcNAQELBQADggEBAHn5Su06aaBGVj0O owNzJrW5Zfy90skwyY4gfODUxX+SyXV5/HzG5g7doGU5AjBYCTVMDruXrSK/8Thz XIGxBsqT0Wx4DY6oTGizQ5CEvpkYHAcB+HJrm2cvQV6ZjRIfqZpfOdrxRj1xKQ54 kPoCQcjCje8IR56V1aKZVrcnkN2ZO/EE4Uagf9ih7faDbtvBwi2m3ZPmio00B68W gLTgdOXK5vP0faQXKSkDXQFPpsS8JD7Aol2Agg0v+F2AQlqlyesxZOKz4U3L/I6N COyLoSMyrdFULZzO+/Zrw66PzPqsn6ppVZoacjtyDIZeaN+oINwENIqmWd7bJMOa D7Pr9Is= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org