$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa File: 999CFA46ABEF11EB8D78A223C4F9AE02.roa (raw, json) Hash identifier: hAX35y/MfultWooSTpCPrFsfzyAkYaGVyWM5LhnleEY= Subject key identifier: C3:63:30:A9:39:1E:2D:46:9B:DB:A5:24:C8:19:6C:BB:55:6B:D6:5B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D29 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa Signing time: Wed 10 May 2023 16:27:58 +0000 ROA not before: Wed 10 May 2023 16:27:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137629 IP address blocks: 103.113.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27945 (0x6d29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:27:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc60d-c41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:4c:99:50:f4:b0:db:cc:ff:41:c7:5e:9a: d6:dc:35:6c:0c:6e:57:06:25:54:b1:1d:00:eb:e9: eb:dc:04:1d:96:46:14:3a:fc:0c:5d:88:21:02:0a: 39:4c:82:c9:f6:e1:b6:b9:f5:a4:9d:4c:c9:a8:1b: 38:67:e6:58:fa:dc:b2:e0:19:43:84:b7:ee:e3:06: 4a:d8:c4:bc:4e:61:db:47:75:73:bf:af:54:a0:d4: 61:a1:89:cb:7f:81:50:58:95:cc:b1:e7:e8:3b:d6: 65:e9:5c:dc:b0:01:43:eb:e4:8d:02:81:b8:3b:f8: 00:6e:f4:21:b1:5a:c2:33:19:8f:88:5c:b6:f6:75: 30:11:fb:3c:f7:7e:d9:87:9d:fe:96:be:25:ec:ae: de:50:79:6a:49:2a:4e:64:c0:62:f8:a9:c7:17:a2: 82:26:65:b7:7b:e6:42:43:27:f5:9b:4d:d7:98:6c: c0:63:ca:28:3e:0f:b0:40:63:25:a9:93:76:04:8d: 52:fd:3b:ab:8a:37:a5:a5:c8:37:20:5b:5d:26:41: e8:f4:0b:14:f1:95:60:12:0c:89:8d:8e:4f:df:52: be:f7:e9:53:af:5c:da:5d:a7:60:9b:c5:ef:f0:2f: dc:bc:59:fe:bb:a7:f3:fe:ce:23:bf:0b:c2:c9:51: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:63:30:A9:39:1E:2D:46:9B:DB:A5:24:C8:19:6C:BB:55:6B:D6:5B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.228.0/22 Signature Algorithm: sha256WithRSAEncryption 17:20:51:02:b4:24:01:7c:3f:f1:76:23:da:4f:f8:ba:e3:90: 93:2d:c4:92:ac:ee:c7:30:9e:af:b9:bb:20:6b:c7:c7:ab:28: 92:b3:5b:ac:57:ef:56:d5:9e:f6:7c:df:9b:06:9b:08:62:8a: 6b:6d:e3:3a:f4:5e:57:47:69:8a:3d:55:65:b4:0e:8e:a3:09: f9:3f:91:f6:84:6c:cc:00:64:e2:76:82:ec:19:5a:78:0e:50: 58:24:d4:19:00:8e:ff:fe:9f:95:ad:d0:20:a0:8a:64:6b:2c: 6a:54:49:e3:6d:af:e4:33:a8:c1:b1:8e:c5:0a:41:b2:8e:9d: b6:e6:73:29:3a:e6:e1:e0:64:03:21:d1:30:08:0e:7b:e2:69: e6:a1:e5:ea:fa:00:4d:c3:28:77:2d:30:8b:6c:50:c8:3a:76: 03:50:35:e7:86:9b:5d:73:81:fb:5f:f4:3f:12:2f:e9:88:d7: d1:11:86:dc:c0:b3:40:a3:a8:c9:5b:05:3b:1b:6e:07:d8:aa: 9e:da:d2:45:ce:9d:0c:94:d0:06:3f:09:4c:70:d9:aa:c3:89: 6e:47:a0:9e:eb:0f:02:32:ea:9a:33:9f:1c:fb:a2:47:36:2b: 0d:b6:41:ec:dd:44:c8:46:87:bc:de:56:de:a8:07:a6:c3:f9: 04:3a:f4:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNzU4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzYwZC1jNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/ZMmVD0sNvM/0HHXprW3DVsDG5XBiVUsR0A6+nr3AQdlkYUOvwMXYghAgo5 TILJ9uG2ufWknUzJqBs4Z+ZY+tyy4BlDhLfu4wZK2MS8TmHbR3Vzv69UoNRhoYnL f4FQWJXMsefoO9Zl6VzcsAFD6+SNAoG4O/gAbvQhsVrCMxmPiFy29nUwEfs8937Z h53+lr4l7K7eUHlqSSpOZMBi+KnHF6KCJmW3e+ZCQyf1m03XmGzAY8ooPg+wQGMl qZN2BI1S/Turijelpcg3IFtdJkHo9AsU8ZVgEgyJjY5P31K+9+lTr1zaXadgm8Xv 8C/cvFn+u6fz/s4jvwvCyVFLeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMNjMKk5 Hi1Gm9ulJMgZbLtVa9ZbMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTk5Q0ZBNDZB QkVGMTFFQjhENzhBMjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnceQwDQYJKoZIhvcNAQELBQADggEBABcgUQK0JAF8P/F2 I9pP+LrjkJMtxJKs7scwnq+5uyBrx8erKJKzW6xX71bVnvZ835sGmwhiimtt4zr0 XldHaYo9VWW0Do6jCfk/kfaEbMwAZOJ2guwZWngOUFgk1BkAjv/+n5Wt0CCgimRr LGpUSeNtr+QzqMGxjsUKQbKOnbbmcyk65uHgZAMh0TAIDnviaeah5er6AE3DKHct MItsUMg6dgNQNeeGm11zgftf9D8SL+mI19ERhtzAs0CjqMlbBTsbbgfYqp7a0kXO nQyU0AY/CUxw2arDiW5HoJ7rDwIy6poznxz7okc2Kw22QezdRMhGh7zeVt6oB6bD +QQ69BI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org