$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3B1EE9AAFF111ECA216D467C4F9AE02.roa File: A3B1EE9AAFF111ECA216D467C4F9AE02.roa (raw, json) Hash identifier: T+mrVL0OpA+UZQ16sHLsrO94iF223LWYR+zPhVlafw8= Subject key identifier: FE:4B:D8:20:D1:72:9D:98:CB:E4:7E:69:56:33:5A:98:0C:31:92:13 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BFD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3B1EE9AAFF111ECA216D467C4F9AE02.roa Signing time: Wed 10 May 2023 16:22:22 +0000 ROA not before: Wed 10 May 2023 16:22:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135769 IP address blocks: 103.106.183.0/24 maxlen: 24 103.146.243.0/24 maxlen: 24 2001:df3:9a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27645 (0x6bfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:22:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc4bd-3236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fe:65:ad:e4:b9:b5:d7:ed:12:73:2d:15:55: cd:d1:58:01:7e:87:65:69:40:3d:11:ea:af:6c:bb: b1:c8:41:98:0b:51:32:eb:93:c6:13:33:9b:0c:6d: 7a:74:ca:56:2d:6b:7f:65:33:9b:bf:37:41:08:11: 6f:b5:95:e8:53:4c:14:9c:00:21:51:2f:54:0a:1d: 9b:57:8c:03:aa:a8:a5:83:b7:4b:e9:18:40:c3:10: ef:ed:0b:c0:a8:e5:ff:50:2f:4d:9f:5e:b2:4f:51: e4:10:29:f3:d2:6f:50:6c:ef:c3:1c:d0:15:c9:78: d3:c8:9b:83:60:7f:f0:b5:73:1a:88:6f:0e:47:60: 75:c8:f8:d9:43:11:79:7f:a9:5b:26:e1:8e:65:21: 7d:cd:10:bc:89:21:bb:5c:c9:da:47:0b:57:ba:5f: 8e:69:ff:ed:3a:3f:4e:1e:73:52:40:90:35:69:27: 75:4d:46:63:2d:ac:94:8f:34:c6:b2:4c:d2:44:20: be:6f:b4:4e:85:2c:ab:b6:4e:6a:e1:8a:16:80:42: 5b:cd:b8:86:6a:86:6f:b5:c5:41:a3:d2:0d:b3:b7: af:ef:5d:5a:2c:42:87:7d:16:3b:bb:7d:5f:47:f0: 65:6e:24:3c:dd:58:29:03:db:8e:5b:ac:d1:0b:77: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4B:D8:20:D1:72:9D:98:CB:E4:7E:69:56:33:5A:98:0C:31:92:13 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3B1EE9AAFF111ECA216D467C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.183.0/24 103.146.243.0/24 IPv6: 2001:df3:9a00::/48 Signature Algorithm: sha256WithRSAEncryption 55:8a:6f:dc:93:c9:a0:b0:49:48:d8:f9:f2:31:86:cc:4f:12: 96:91:af:37:a4:9f:da:fe:f4:6b:92:d5:e5:c8:ca:3b:53:75: 8d:a6:6b:8a:f0:1a:14:3d:cc:f0:c8:cd:b9:7d:d7:6f:8f:00: 5b:97:30:27:b2:63:ec:02:a2:7f:1a:51:b9:65:f7:20:1e:3c: 3f:82:f3:3b:35:a8:9d:6f:cf:64:21:7a:ac:e0:93:dd:3b:d2: 63:bb:97:5f:b3:87:99:08:dd:30:f1:a8:ae:e6:1b:04:40:f5: c2:55:89:ef:c6:e5:c0:ae:db:8c:d2:af:c3:1c:4f:61:bf:51: cb:2c:54:6f:db:fc:8d:10:08:94:21:69:bc:1b:0a:23:b5:89: ef:69:a9:d4:f5:25:33:7b:1d:54:88:72:be:32:06:1b:0c:19: 9a:74:71:8c:5d:dd:e1:c8:12:d9:8b:cf:5f:12:9d:f1:ad:dd: 57:01:af:3f:da:d8:b4:fa:56:e1:b4:54:21:b4:65:e4:d6:d1: f9:a4:d3:2b:79:7a:df:b1:d1:91:48:41:08:9c:72:c6:bd:10: 6f:3a:b1:95:1e:ef:dc:6f:cb:67:2b:ea:f2:d5:8f:dc:cb:f1: 7b:66:bb:3a:6f:a1:8c:d4:53:95:5b:18:46:96:0a:7d:f9:a3: aa:26:f1:c7 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICa/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMjIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzRiZC0zMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9P5lreS5tdftEnMtFVXN0VgBfodlaUA9EeqvbLuxyEGYC1Ey65PGEzObDG16 dMpWLWt/ZTObvzdBCBFvtZXoU0wUnAAhUS9UCh2bV4wDqqilg7dL6RhAwxDv7QvA qOX/UC9Nn16yT1HkECnz0m9QbO/DHNAVyXjTyJuDYH/wtXMaiG8OR2B1yPjZQxF5 f6lbJuGOZSF9zRC8iSG7XMnaRwtXul+Oaf/tOj9OHnNSQJA1aSd1TUZjLayUjzTG skzSRCC+b7ROhSyrtk5q4YoWgEJbzbiGaoZvtcVBo9INs7ev711aLEKHfRY7u31f R/BlbiQ83VgpA9uOW6zRC3fQTQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFP5L2CDR cp2Yy+R+aVYzWpgMMZITMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTNCMUVFOUFB RkYxMTFFQ0EyMTZENDY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnarcDBABnkvMwDwQCAAIwCQMHACABDfOaADANBgkqhkiG 9w0BAQsFAAOCAQEAVYpv3JPJoLBJSNj58jGGzE8SlpGvN6Sf2v70a5LV5cjKO1N1 jaZrivAaFD3M8MjNuX3Xb48AW5cwJ7Jj7AKifxpRuWX3IB48P4LzOzWonW/PZCF6 rOCT3TvSY7uXX7OHmQjdMPGoruYbBED1wlWJ78blwK7bjNKvwxxPYb9RyyxUb9v8 jRAIlCFpvBsKI7WJ72mp1PUlM3sdVIhyvjIGGwwZmnRxjF3d4cgS2YvPXxKd8a3d VwGvP9rYtPpW4bRUIbRl5NbR+aTTK3l637HRkUhBCJxyxr0QbzqxlR7v3G/LZyvq 8tWP3Mvxe2a7Om+hjNRTlVsYRpYKffmjqibxxw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org