$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E500052189E11ED8B305961C4F9AE02.roa File: 9E500052189E11ED8B305961C4F9AE02.roa (raw, json) Hash identifier: ZaT2oAPYO5yf6OGfp+apXOMEdy0uY0BadB5JV7Ksz0c= Subject key identifier: 89:81:BB:8B:68:B4:6F:97:DB:B3:A5:EE:6F:94:17:0D:62:EE:9F:B3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BD8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E500052189E11ED8B305961C4F9AE02.roa Signing time: Wed 10 May 2023 16:21:39 +0000 ROA not before: Wed 10 May 2023 16:21:39 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135715 IP address blocks: 103.134.108.0/22 maxlen: 22 103.134.108.0/24 maxlen: 24 103.134.109.0/24 maxlen: 24 103.134.110.0/24 maxlen: 24 103.134.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27608 (0x6bd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:21:39 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc493-b86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:14:16:47:61:a4:1e:65:8c:57:19:73:68:21: d3:b9:0e:b7:bd:c6:d7:03:dc:da:5f:48:74:61:bb: ca:d2:5e:d0:71:a2:d9:ec:63:42:72:18:5b:20:e7: a9:f1:e3:43:55:18:b2:16:a7:98:5d:1d:4e:49:6d: 78:1d:7f:46:1d:62:5a:f2:93:7b:b8:29:33:68:8e: c3:fb:e6:80:b1:6b:43:91:d7:03:f9:c5:57:84:d6: 6a:9d:85:1f:2b:55:3f:6a:66:cc:5c:2f:c6:18:cd: 0d:43:fd:b9:a0:a7:5c:2c:72:68:27:14:fc:6c:26: 76:b4:dc:25:3e:ad:04:77:95:a0:5a:99:81:2a:10: 7d:08:d0:05:b8:c7:74:d2:78:83:ce:a8:e4:f9:4b: 71:1d:ff:1b:53:22:6c:15:83:d3:06:03:7c:db:c4: b5:93:1a:eb:40:d6:8d:e0:a9:9b:be:32:4c:71:eb: 94:b9:5c:74:9d:31:8e:63:a7:ee:c1:0e:76:2a:7f: 02:db:14:48:4c:23:0a:6a:42:9d:15:88:a1:4b:ed: 3e:87:5b:58:ee:69:d6:08:c4:51:55:80:1a:b1:a1: cd:fe:11:19:74:4d:cd:ab:c7:18:35:24:e5:7f:ac: cc:fe:eb:cc:8b:0c:f5:93:98:bb:93:f8:29:d7:28: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:81:BB:8B:68:B4:6F:97:DB:B3:A5:EE:6F:94:17:0D:62:EE:9F:B3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E500052189E11ED8B305961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.108.0/22 Signature Algorithm: sha256WithRSAEncryption 27:c6:da:35:f7:20:3c:e5:08:74:a2:b7:b3:95:f5:0b:0f:08: c4:62:63:00:7a:37:ad:bc:06:7b:c2:8f:35:19:47:be:fe:69: 61:d8:19:ad:8e:21:5f:4f:2b:d5:e7:95:cc:d3:4f:f7:1c:a1: 38:f9:f3:9e:1d:7c:8b:33:43:0c:6a:78:12:5b:0f:fb:30:73: ab:77:d5:6f:48:c2:1d:b0:13:25:bf:93:3a:ba:b1:b9:3d:34: bc:a2:72:25:04:e2:32:b8:8c:2f:20:62:42:39:31:3e:a6:ac: a3:ca:f8:6c:5c:44:a5:e8:86:8b:7d:74:91:83:9d:6a:20:28: 7d:b7:6c:19:f9:14:83:b9:90:df:c1:bc:4a:23:a3:68:e6:d4: 22:f1:c0:bf:23:cc:ba:80:45:ee:ff:0a:cc:68:c0:b2:b3:75: f2:e5:82:75:fa:a3:ca:a7:7d:b0:76:7b:a5:d3:07:5f:a4:93: c3:54:d3:24:d5:0d:c4:ae:59:f5:24:c9:75:d5:a5:2e:87:c1: ca:84:87:df:94:2c:5d:71:ae:16:c8:df:73:ac:ea:2d:b9:43: 0c:a0:0c:ff:72:0b:dc:eb:f3:29:c5:47:ce:25:e5:3c:14:7c: ee:f0:4d:2c:5f:40:b9:1f:c9:a9:13:fa:1f:27:eb:06:a9:b5: 86:61:c3:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICa9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMTM5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ5My1iODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BQWR2GkHmWMVxlzaCHTuQ63vcbXA9zaX0h0YbvK0l7QcaLZ7GNCchhbIOep 8eNDVRiyFqeYXR1OSW14HX9GHWJa8pN7uCkzaI7D++aAsWtDkdcD+cVXhNZqnYUf K1U/ambMXC/GGM0NQ/25oKdcLHJoJxT8bCZ2tNwlPq0Ed5WgWpmBKhB9CNAFuMd0 0niDzqjk+UtxHf8bUyJsFYPTBgN828S1kxrrQNaN4KmbvjJMceuUuVx0nTGOY6fu wQ52Kn8C2xRITCMKakKdFYihS+0+h1tY7mnWCMRRVYAasaHN/hEZdE3Nq8cYNSTl f6zM/uvMiwz1k5i7k/gp1yh/+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFImBu4to tG+X27Ol7m+UFw1i7p+zMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUU1MDAwNTIx ODlFMTFFRDhCMzA1OTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnhmwwDQYJKoZIhvcNAQELBQADggEBACfG2jX3IDzlCHSi t7OV9QsPCMRiYwB6N628BnvCjzUZR77+aWHYGa2OIV9PK9XnlczTT/ccoTj5854d fIszQwxqeBJbD/swc6t31W9Iwh2wEyW/kzq6sbk9NLyiciUE4jK4jC8gYkI5MT6m rKPK+GxcRKXohot9dJGDnWogKH23bBn5FIO5kN/BvEojo2jm1CLxwL8jzLqARe7/ CsxowLKzdfLlgnX6o8qnfbB2e6XTB1+kk8NU0yTVDcSuWfUkyXXVpS6HwcqEh9+U LF1xrhbI33Os6i25QwygDP9yC9zr8ynFR84l5TwUfO7wTSxfQLkfyakT+h8n6wap tYZhwxA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org