$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0EB512ED9D511EDA73CB351C4F9AE02.roa File: A0EB512ED9D511EDA73CB351C4F9AE02.roa (raw, json) Hash identifier: 2SA4S0ey482NVIBjZxkUEdrogwF74jteC0kPAY3yjAA= Subject key identifier: 01:7C:08:A7:23:07:72:33:41:02:96:48:7F:E3:4B:BE:DC:9A:68:C9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7D58 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0EB512ED9D511EDA73CB351C4F9AE02.roa Signing time: Wed 08 Nov 2023 07:45:06 +0000 ROA not before: Wed 08 Nov 2023 07:45:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149550 IP address blocks: 27.116.16.0/21 maxlen: 24 103.126.42.0/23 maxlen: 24 119.235.48.0/24 maxlen: 24 119.235.49.0/24 maxlen: 24 119.235.50.0/24 maxlen: 24 119.235.51.0/24 maxlen: 24 119.235.52.0/24 maxlen: 24 119.235.53.0/24 maxlen: 24 119.235.54.0/24 maxlen: 24 119.235.55.0/24 maxlen: 24 2400:f1e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32088 (0x7d58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 8 07:45:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=654b3c82-ac3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:25:68:f3:3c:f9:ea:da:6b:da:78:b3:79: 2e:69:0a:91:02:e9:a7:ec:e4:5a:b3:9a:1f:42:e3: b5:43:e6:b9:53:63:3c:11:a1:36:5c:ce:74:fc:4d: 49:3d:dc:fb:3b:2c:a4:fa:ef:0d:c2:b2:bc:73:99: ce:86:ed:6c:d4:4a:86:f7:37:46:0c:c2:e0:2c:03: 78:ae:1a:6d:dd:d0:4b:53:34:95:f8:70:07:73:70: df:ef:e5:2f:fd:72:eb:8c:4b:0f:74:2c:5f:fa:a5: 85:b2:4f:67:3a:95:e4:ce:49:67:5d:96:cc:33:38: 34:ff:12:e0:48:e8:72:f2:6c:8e:6c:e2:5e:15:3a: 3b:09:4a:72:db:67:2c:b9:81:4b:72:9e:fa:05:80: aa:57:b5:8b:8b:7f:a3:e2:88:f1:16:0e:5d:e4:28: 99:34:f2:54:fe:d2:74:31:fa:39:70:1b:c5:87:63: 55:09:3c:ae:a3:82:30:e2:ba:97:b6:ef:ae:9c:30: 0a:70:43:ca:9e:d3:da:b6:3d:e6:da:f2:36:6b:95: fd:8a:47:bd:e4:6f:c7:31:ee:ef:1f:df:02:8f:a8: 34:37:02:b5:6e:bd:c7:e6:1d:4a:a1:c3:f5:85:87: 5f:63:83:aa:3e:f3:f9:6a:b0:a4:0e:f6:c2:73:d0: 19:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7C:08:A7:23:07:72:33:41:02:96:48:7F:E3:4B:BE:DC:9A:68:C9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0EB512ED9D511EDA73CB351C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.116.16.0/21 103.126.42.0/23 119.235.48.0/21 IPv6: 2400:f1e0::/32 Signature Algorithm: sha256WithRSAEncryption 43:9d:71:11:50:da:27:75:f8:72:0b:24:6c:24:c4:f0:6d:97: 3b:33:dd:40:d3:36:ce:95:b5:57:1b:ff:f8:2e:d6:a3:70:1c: c6:f2:55:a4:c2:2e:06:f7:3e:16:35:35:6a:e5:79:d5:31:2d: b3:84:89:4d:1a:52:a1:a5:85:81:00:e2:e7:e2:f1:3b:0a:50: f7:87:37:be:77:63:bb:8e:8e:c3:e9:0a:11:00:c8:1f:fb:ad: b6:30:92:59:1f:d6:9c:be:30:55:eb:79:d7:78:07:89:fb:5f: f7:0a:39:b4:83:10:f8:df:b2:b7:65:3a:7b:73:01:fa:24:46: f5:b6:b9:e7:f1:4f:8a:84:3e:b5:de:6a:f3:a5:ab:69:9b:90: 8e:84:0a:9d:79:c0:12:6f:e3:7c:69:9c:39:7c:65:84:c4:2c: 70:f1:60:9c:71:23:15:4b:87:b5:ed:ef:25:92:08:f6:7f:e6: bc:5a:26:36:8f:e3:01:3b:1d:b7:ec:12:dc:8c:c8:b1:66:fb: ed:f9:2d:a0:28:bc:3e:64:07:ad:ba:18:3e:6d:93:ca:81:fc: 6a:21:5a:b5:9b:78:7c:4e:24:48:c2:45:18:04:33:6b:cd:f3: b5:c6:e1:a7:5a:2f:d1:d2:2b:39:77:1e:58:ae:28:31:19:2c: 39:d2:58:29 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICfVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTA4MDc0NTA2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRiM2M4Mi1hYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3glaPM8+eraa9p4s3kuaQqRAumn7ORas5ofQuO1Q+a5U2M8EaE2XM50/E1J Pdz7Oyyk+u8NwrK8c5nOhu1s1EqG9zdGDMLgLAN4rhpt3dBLUzSV+HAHc3Df7+Uv /XLrjEsPdCxf+qWFsk9nOpXkzklnXZbMMzg0/xLgSOhy8myObOJeFTo7CUpy22cs uYFLcp76BYCqV7WLi3+j4ojxFg5d5CiZNPJU/tJ0Mfo5cBvFh2NVCTyuo4Iw4rqX tu+unDAKcEPKntPatj3m2vI2a5X9ike95G/HMe7vH98Cj6g0NwK1br3H5h1KocP1 hYdfY4OqPvP5arCkDvbCc9AZewIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAF8CKcj B3IzQQKWSH/jS77cmmjJMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTBFQjUxMkVE OUQ1MTFFREE3M0NCMzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAMbdBADBAFnfioDBAN36zAwDQQCAAIwBwMFACQA8eAwDQYJ KoZIhvcNAQELBQADggEBAEOdcRFQ2id1+HILJGwkxPBtlzsz3UDTNs6VtVcb//gu 1qNwHMbyVaTCLgb3PhY1NWrledUxLbOEiU0aUqGlhYEA4ufi8TsKUPeHN753Y7uO jsPpChEAyB/7rbYwklkf1py+MFXredd4B4n7X/cKObSDEPjfsrdlOntzAfokRvW2 uefxT4qEPrXeavOlq2mbkI6ECp15wBJv43xpnDl8ZYTELHDxYJxxIxVLh7Xt7yWS CPZ/5rxaJjaP4wE7HbfsEtyMyLFm++35LaAovD5kB626GD5tk8qB/GohWrWbeHxO JEjCRRgEM2vN87XG4adaL9HSKzl3HliuKDEZLDnSWCk= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:30 2024 by rpki-client on console-fra.rpki-client.org