$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2048ADAFB9611ECB0A2556AC4F9AE02.roa File: A2048ADAFB9611ECB0A2556AC4F9AE02.roa (raw, json) Hash identifier: h4unKZOI5u1qenfaNYtFQ7rH6jPt/f3sghRRP9qsF8A= Subject key identifier: 7B:ED:15:95:FC:FA:3D:D8:AB:80:F8:EB:1D:10:63:0B:3A:73:DF:DD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6AE4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2048ADAFB9611ECB0A2556AC4F9AE02.roa Signing time: Wed 10 May 2023 16:16:59 +0000 ROA not before: Wed 10 May 2023 16:16:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134009 IP address blocks: 103.51.137.0/24 maxlen: 24 103.159.212.0/24 maxlen: 24 103.169.157.0/24 maxlen: 24 103.171.8.0/24 maxlen: 24 103.174.158.0/24 maxlen: 24 103.179.38.0/23 maxlen: 24 103.181.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27364 (0x6ae4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:16:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc37b-7fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:d8:a2:77:9b:c4:12:4a:e9:b5:a6:52:c7: 65:c4:b9:43:9c:8f:be:83:51:22:f3:4d:6c:d8:31: 2e:a7:05:e9:df:6a:ba:ae:f7:81:2b:12:43:01:47: 2c:d7:7e:0e:34:7a:99:d0:fb:2b:92:d6:ee:e5:32: e2:d5:f1:e1:d2:67:cf:c1:a3:04:35:75:b3:91:a7: c4:f8:17:ba:56:08:2a:ca:77:d3:33:7d:b5:e5:fc: 5c:54:f9:62:3a:89:7f:b4:f9:02:c9:2f:2f:a0:a0: 62:1d:06:85:6b:66:db:a1:5b:dd:5c:c0:a0:4f:78: 82:cc:16:4d:47:28:6d:83:62:ff:04:c7:98:03:2f: 14:f9:ad:bd:db:e1:be:03:77:04:9f:6f:4b:16:74: 21:41:a5:b7:48:48:f7:aa:20:24:b4:38:d2:c2:8d: 63:36:e9:b9:9f:3b:39:70:30:7d:03:9f:09:fa:86: a6:f3:16:a0:b1:2e:0a:0c:7b:c9:82:34:05:c1:a9: ec:5a:58:c5:e0:0f:c2:c5:0f:83:ef:01:00:52:9a: 01:e6:d9:1d:e3:8f:c9:5a:e3:72:57:62:9a:e7:f7: cc:80:5e:34:71:02:a1:41:04:66:18:57:dc:af:36: f9:8a:5a:02:57:31:53:81:02:fa:b5:51:56:90:cb: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:ED:15:95:FC:FA:3D:D8:AB:80:F8:EB:1D:10:63:0B:3A:73:DF:DD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2048ADAFB9611ECB0A2556AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.51.137.0/24 103.159.212.0/24 103.169.157.0/24 103.171.8.0/24 103.174.158.0/24 103.179.38.0/23 103.181.141.0/24 Signature Algorithm: sha256WithRSAEncryption 47:e3:72:cc:c5:d8:f8:d3:77:91:a5:f3:ea:df:9d:09:23:02: a2:d7:00:1f:6d:8a:4e:2e:d7:17:07:ae:f0:d6:aa:66:63:cd: 1f:e9:6b:07:4d:98:52:3b:51:ef:96:12:6c:b3:ae:97:b0:65: ad:23:8f:0b:ec:52:6d:67:b4:e1:95:44:67:43:9e:11:6c:a2: 81:1e:22:75:bd:81:52:c9:1c:89:22:fc:da:15:36:1c:a4:cc: d6:10:eb:b7:e9:15:5f:ec:09:a8:9c:02:53:78:cc:72:70:44: 6a:91:db:57:1f:f2:62:27:ae:d3:10:82:5d:96:28:ef:f0:63: 60:6c:f9:62:25:3d:96:69:5a:59:23:89:3f:14:cb:05:a9:64: bd:6b:3e:61:5c:6a:44:d4:57:22:b9:03:5f:56:91:41:fb:f2: 4b:9c:a5:f6:70:df:61:9a:c4:53:0d:91:5a:53:53:68:ef:dd: c5:10:ab:30:c6:44:ce:d2:34:45:fd:66:ed:e5:32:8d:79:ee: b5:21:b2:87:08:de:8c:36:e8:ba:f4:ba:82:6c:37:a6:b4:fc: 9d:33:24:3a:6e:37:d5:a5:73:40:8d:3c:39:e0:32:cb:23:78: 7a:c3:e5:d0:db:f3:af:b0:c7:f0:88:df:da:f8:16:df:a7:31: 45:f2:01:bd -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICauQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNjU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzM3Yi03ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWPYonebxBJK6bWmUsdlxLlDnI++g1Ei801s2DEupwXp32q6rveBKxJDAUcs 134ONHqZ0Psrktbu5TLi1fHh0mfPwaMENXWzkafE+Be6VggqynfTM3215fxcVPli Ool/tPkCyS8voKBiHQaFa2bboVvdXMCgT3iCzBZNRyhtg2L/BMeYAy8U+a292+G+ A3cEn29LFnQhQaW3SEj3qiAktDjSwo1jNum5nzs5cDB9A58J+oam8xagsS4KDHvJ gjQFwansWljF4A/CxQ+D7wEAUpoB5tkd44/JWuNyV2Ka5/fMgF40cQKhQQRmGFfc rzb5iloCVzFTgQL6tVFWkMuyJwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFHvtFZX8 +j3Yq4D46x0QYws6c9/dMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTIwNDhBREFG Qjk2MTFFQ0IwQTI1NTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBABnM4kDBABnn9QDBABnqZ0DBABnqwgDBABnrp4DBAFnsyYD BABntY0wDQYJKoZIhvcNAQELBQADggEBAEfjcszF2PjTd5Gl8+rfnQkjAqLXAB9t ik4u1xcHrvDWqmZjzR/pawdNmFI7Ue+WEmyzrpewZa0jjwvsUm1ntOGVRGdDnhFs ooEeInW9gVLJHIki/NoVNhykzNYQ67fpFV/sCaicAlN4zHJwRGqR21cf8mInrtMQ gl2WKO/wY2Bs+WIlPZZpWlkjiT8UywWpZL1rPmFcakTUVyK5A19WkUH78kucpfZw 32GaxFMNkVpTU2jv3cUQqzDGRM7SNEX9Zu3lMo157rUhsocI3ow26Lr0uoJsN6a0 /J0zJDpuN9Wlc0CNPDngMssjeHrD5dDb86+wx/CI39r4Ft+nMUXyAb0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org