$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BFE35A6541011ECA5AE5110C4F9AE02.roa File: 9BFE35A6541011ECA5AE5110C4F9AE02.roa (raw, json) Hash identifier: EjjxP6kstD+NHJnMoDYt3fKbMmpjvhK1b9Vqk6tcwuM= Subject key identifier: 98:C9:FB:99:D4:53:21:CC:10:16:3B:A1:6A:5D:3F:F0:B4:B9:7B:17 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 717A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BFE35A6541011ECA5AE5110C4F9AE02.roa Signing time: Wed 10 May 2023 16:48:27 +0000 ROA not before: Wed 10 May 2023 16:48:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 38571 IP address blocks: 45.115.96.0/22 maxlen: 24 45.122.44.0/22 maxlen: 24 103.1.80.0/22 maxlen: 24 103.137.224.0/23 maxlen: 24 103.137.226.0/23 maxlen: 24 103.232.112.0/22 maxlen: 24 111.91.224.0/21 maxlen: 24 116.68.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29050 (0x717a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcadb-b62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8b:cc:eb:32:64:3d:f3:8c:35:26:c7:91:b6: a9:15:e4:6c:ef:de:ef:00:a1:2a:62:c2:5b:03:ff: 1f:94:06:b0:98:7a:76:ec:e1:d5:d8:c0:16:c9:94: 7c:dd:65:1f:7e:7d:53:40:9b:39:50:9d:4a:b2:02: 83:63:b6:ed:b0:84:ff:cf:6f:21:5e:d1:91:c8:70: 0c:65:93:8f:9c:bb:c2:16:37:32:28:5e:ab:24:59: 7a:8b:f7:3e:5a:6b:5f:f9:9f:d0:74:37:31:a3:f1: 07:0f:a4:b7:53:0c:07:b6:a3:06:9c:b6:6a:b9:53: 5b:9a:3a:6e:fd:83:b5:0e:c7:a5:9b:2f:f4:8d:6d: 26:6e:94:7f:96:25:da:ad:23:ca:56:5a:e8:01:c1: d3:69:8f:97:b9:c4:69:f8:d6:ce:c2:45:96:6c:54: e1:5a:f7:ce:81:b2:f6:04:c8:e3:c2:1e:f1:cb:3d: e3:64:4d:e9:35:69:7c:e8:b1:c0:2c:a8:e6:2f:44: 1e:36:a2:4c:88:db:e8:05:4b:81:7a:80:3b:7f:36: d8:ad:e5:cb:2b:e3:d8:95:bc:0c:f3:c0:41:e4:c9: bb:39:66:42:67:6d:e8:81:a4:2b:42:68:e1:c8:57: 28:0e:66:08:9b:5a:87:af:36:1c:a2:b2:c6:ba:24: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C9:FB:99:D4:53:21:CC:10:16:3B:A1:6A:5D:3F:F0:B4:B9:7B:17 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BFE35A6541011ECA5AE5110C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.96.0/22 45.122.44.0/22 103.1.80.0/22 103.137.224.0/22 103.232.112.0/22 111.91.224.0/21 116.68.240.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:f1:37:02:0d:d2:e1:e2:38:8e:4d:69:80:ac:a8:64:c2:d9: e3:6f:65:d7:75:c5:29:3e:0b:51:27:fa:9d:49:c2:47:a5:f5: 87:64:00:3c:66:42:df:e6:0f:35:db:3f:59:58:44:d6:fb:17: 1b:9f:44:a3:af:16:ba:1c:e3:7c:38:3f:46:a9:4f:42:37:88: cb:42:67:41:cf:20:0e:30:7c:56:66:17:e2:47:64:8b:6b:53: 3c:a1:26:46:49:1b:2d:27:5b:44:13:3f:89:12:e9:9c:2a:c0: c8:3b:09:f6:8e:a4:20:65:20:b1:1d:d2:80:5a:63:b9:3d:fc: ea:98:7d:e3:e4:b6:54:6a:c1:92:d9:15:ef:70:fe:7f:a4:c4: fe:82:ac:f4:01:da:88:b1:aa:06:ca:d1:0f:f8:a7:3d:7c:5e: a3:22:56:1b:2a:80:5a:c9:3c:86:d2:e3:a9:c4:2b:61:1a:8e: 1d:e7:f1:8f:44:0e:77:a9:22:49:de:91:b6:a1:89:28:ab:0e: d7:43:f3:a4:bc:dc:75:98:0b:b0:69:8c:e2:93:0c:4d:4b:2d: f5:35:85:7e:95:c5:dd:62:04:49:2c:f2:97:26:1e:cf:13:87: b0:02:d2:50:19:61:b2:76:f7:b4:cf:a7:de:cb:52:84:32:af: 80:08:3c:a9 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICcXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FkYi1iNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7YvM6zJkPfOMNSbHkbapFeRs797vAKEqYsJbA/8flAawmHp27OHV2MAWyZR8 3WUffn1TQJs5UJ1KsgKDY7btsIT/z28hXtGRyHAMZZOPnLvCFjcyKF6rJFl6i/c+ Wmtf+Z/QdDcxo/EHD6S3UwwHtqMGnLZquVNbmjpu/YO1Dselmy/0jW0mbpR/liXa rSPKVlroAcHTaY+XucRp+NbOwkWWbFThWvfOgbL2BMjjwh7xyz3jZE3pNWl86LHA LKjmL0QeNqJMiNvoBUuBeoA7fzbYreXLK+PYlbwM88BB5Mm7OWZCZ23ogaQrQmjh yFcoDmYIm1qHrzYcorLGuiRDbwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFJjJ+5nU UyHMEBY7oWpdP/C0uXsXMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUJGRTM1QTY1 NDEwMTFFQ0E1QUU1MTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBAItc2ADBAIteiwDBAJnAVADBAJnieADBAJn6HADBANvW+AD BAN0RPAwDQYJKoZIhvcNAQELBQADggEBAH7xNwIN0uHiOI5NaYCsqGTC2eNvZdd1 xSk+C1En+p1Jwkel9YdkADxmQt/mDzXbP1lYRNb7FxufRKOvFroc43w4P0apT0I3 iMtCZ0HPIA4wfFZmF+JHZItrUzyhJkZJGy0nW0QTP4kS6ZwqwMg7CfaOpCBlILEd 0oBaY7k9/OqYfePktlRqwZLZFe9w/n+kxP6CrPQB2oixqgbK0Q/4pz18XqMiVhsq gFrJPIbS46nEK2Eajh3n8Y9EDnepIknekbahiSirDtdD86S83HWYC7BpjOKTDE1L LfU1hX6Vxd1iBEks8pcmHs8Th7AC0lAZYbJ297TPp97LUoQyr4AIPKk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org