$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A120064ACDCE11EB8CED5A39C4F9AE02.roa File: A120064ACDCE11EB8CED5A39C4F9AE02.roa (raw, json) Hash identifier: 2YfBus89VRzSiUOw2l+ExSLIA9icY8CuLVql3ETERvI= Subject key identifier: 38:31:E1:76:B3:79:26:02:E5:DF:E5:5F:67:D4:48:89:56:73:20:82 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F33 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A120064ACDCE11EB8CED5A39C4F9AE02.roa Signing time: Wed 10 May 2023 16:37:40 +0000 ROA not before: Wed 10 May 2023 16:37:40 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141865 IP address blocks: 103.168.30.0/23 maxlen: 24 2001:df1:740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28467 (0x6f33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:37:40 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc854-9536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:d8:5a:6d:3a:38:97:b1:65:1f:d0:9e:08: c1:39:cd:dd:15:48:cb:fe:7e:2b:5b:d1:7a:c2:45: 19:73:58:71:b3:b9:7c:f2:f3:5c:43:b8:79:47:82: e7:79:2a:51:5b:68:2a:04:09:58:f6:0f:d3:44:a1: 00:37:8b:ed:03:00:86:00:1f:03:a0:1f:f4:1e:1d: 17:61:f5:05:d6:0f:fb:40:69:69:aa:d3:72:05:7d: ab:3f:67:a8:d5:df:70:30:56:4f:6d:3f:a9:2d:51: 1e:71:c0:e5:80:63:ca:d9:48:6d:26:b5:fc:88:23: 7a:4b:e1:8c:7e:6b:0b:da:ae:78:49:de:85:6d:6b: 9a:c5:28:3b:90:b6:34:81:92:d7:ba:a4:9b:68:c6: 10:13:8a:98:88:4a:9d:2b:d2:77:0e:d5:77:bd:0a: f8:a9:55:3c:9a:80:61:c7:11:a4:e9:ed:40:4c:f2: 4f:d7:af:65:3b:3c:36:6f:f0:26:fa:5d:61:19:c5: d7:4b:28:b4:00:bd:bc:b2:97:93:8e:dc:5f:92:8a: 96:82:0a:41:05:c0:92:67:34:55:0a:d4:6a:d0:b2: 73:af:80:61:6d:f6:a0:1a:71:18:b1:72:39:66:4e: b6:a2:53:ab:c2:34:74:5f:e5:c0:64:6c:5a:ec:02: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:E1:76:B3:79:26:02:E5:DF:E5:5F:67:D4:48:89:56:73:20:82 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A120064ACDCE11EB8CED5A39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.30.0/23 IPv6: 2001:df1:740::/48 Signature Algorithm: sha256WithRSAEncryption 17:63:17:b5:9f:6d:ef:a5:c9:d9:4f:85:e0:5a:36:73:ec:38: 55:95:bb:24:03:61:39:eb:27:be:0e:8c:8c:15:ff:5b:64:67: 4b:df:81:34:ec:31:dc:2b:dd:4a:90:ec:39:b0:fd:e4:f1:b2: 2c:92:f1:b6:57:8f:df:f8:5b:1d:1f:b8:d1:4e:bb:56:de:05: b3:4a:c2:5e:40:38:b8:bf:40:9f:9d:08:9e:de:85:eb:02:55: 0b:9b:2a:68:cf:0b:ed:98:92:b0:52:04:9e:ce:09:3a:a7:af: 7e:52:93:4d:da:1b:1e:5a:10:18:b9:28:42:3e:b5:55:4c:42: 8a:9d:c7:71:3f:89:56:1d:d7:cf:20:95:b7:bc:81:a7:5b:24: 1c:b8:ed:04:b2:f9:7c:0c:c7:dc:18:7f:20:c0:a8:71:e3:e7: d6:77:a7:03:8e:06:0f:c2:1f:67:b0:a6:80:d2:40:2b:57:3d: da:b2:cb:88:29:5f:6d:39:8d:69:62:e8:03:3e:19:4d:58:96: ba:0e:63:0d:32:42:e6:a5:79:f4:fe:83:a5:34:b5:de:ae:ae: 81:92:9f:73:07:3a:d6:8d:d5:42:bd:0c:bb:67:d3:fe:e6:27: 25:eb:84:98:41:03:53:04:7d:eb:0f:b9:9e:8c:08:ad:45:fe: 18:6e:01:05 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNzQwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg1NC05NTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03bYWm06OJexZR/QngjBOc3dFUjL/n4rW9F6wkUZc1hxs7l88vNcQ7h5R4Ln eSpRW2gqBAlY9g/TRKEAN4vtAwCGAB8DoB/0Hh0XYfUF1g/7QGlpqtNyBX2rP2eo 1d9wMFZPbT+pLVEeccDlgGPK2UhtJrX8iCN6S+GMfmsL2q54Sd6FbWuaxSg7kLY0 gZLXuqSbaMYQE4qYiEqdK9J3DtV3vQr4qVU8moBhxxGk6e1ATPJP169lOzw2b/Am +l1hGcXXSyi0AL28speTjtxfkoqWggpBBcCSZzRVCtRq0LJzr4BhbfagGnEYsXI5 Zk62olOrwjR0X+XAZGxa7AIRUQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDgx4Xaz eSYC5d/lX2fUSIlWcyCCMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTEyMDA2NEFD RENFMTFFQjhDRUQ1QTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqB4wDwQCAAIwCQMHACABDfEHQDANBgkqhkiG9w0BAQsF AAOCAQEAF2MXtZ9t76XJ2U+F4Fo2c+w4VZW7JANhOesnvg6MjBX/W2RnS9+BNOwx 3CvdSpDsObD95PGyLJLxtleP3/hbHR+40U67Vt4Fs0rCXkA4uL9An50Int6F6wJV C5sqaM8L7ZiSsFIEns4JOqevflKTTdobHloQGLkoQj61VUxCip3HcT+JVh3XzyCV t7yBp1skHLjtBLL5fAzH3Bh/IMCocePn1nenA44GD8IfZ7CmgNJAK1c92rLLiClf bTmNaWLoAz4ZTViWug5jDTJC5qV59P6DpTS13q6ugZKfcwc61o3VQr0Mu2fT/uYn JeuEmEEDUwR96w+5nowIrUX+GG4BBQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org