$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa File: A549057E0D3911EB8AD0FD2AC4F9AE02.roa (raw, json) Hash identifier: 3g1kiLvGDImvG23Ll3kZ6vDipJDEVOFo4vDpaz9Ky8U= Subject key identifier: 52:27:8A:F9:F3:EB:05:E2:71:11:7F:39:A4:14:CD:6F:06:B1:12:22 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 74F6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa Signing time: Tue 04 Jul 2023 09:21:28 +0000 ROA not before: Tue 04 Jul 2023 09:21:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135693 IP address blocks: 103.74.244.0/22 maxlen: 22 103.74.244.0/24 maxlen: 24 103.74.245.0/24 maxlen: 24 103.74.246.0/24 maxlen: 24 103.74.247.0/24 maxlen: 24 103.141.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29942 (0x74f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 4 09:21:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64a3e498-51b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:99:a6:94:34:89:de:92:60:99:10:6d:52: 0d:91:b6:22:ba:b1:01:51:2c:62:ff:b2:dc:79:e6: f8:bd:92:1a:63:2e:fc:27:87:c5:45:30:03:85:dc: 37:5f:5c:57:74:a1:4c:ba:06:c7:b4:9b:95:41:82: e0:e2:51:9f:ee:04:7e:6d:83:93:65:ad:d1:7c:87: 39:9c:31:b4:97:b8:ff:5a:c9:6e:49:3d:f4:8f:32: a7:ae:6f:c3:4e:93:29:13:41:3d:40:4d:0f:1d:73: 67:10:36:b4:5e:c7:62:56:64:30:3e:f1:88:32:dc: b1:28:8e:17:62:34:1e:7a:8b:85:32:e4:44:e2:a2: 83:48:fb:e8:01:45:fc:6e:cb:f9:70:ad:57:91:1d: d8:5a:37:d5:c4:53:4a:ff:15:35:54:ff:5a:50:68: 23:d2:32:80:6f:31:94:6e:12:85:fc:1d:72:cb:f5: 37:02:b0:19:a6:e3:7d:de:79:77:4a:42:57:20:5d: 08:05:4b:7f:d5:36:25:5b:f9:ba:0b:60:f8:99:a5: 5d:ce:aa:b8:e5:7a:ff:72:ac:3c:77:ad:30:6d:fc: 95:10:31:e8:02:61:5b:24:ca:f2:ec:c8:22:85:95: c4:09:de:a2:5e:a1:b6:3c:f1:06:34:eb:12:3c:33: 8a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:27:8A:F9:F3:EB:05:E2:71:11:7F:39:A4:14:CD:6F:06:B1:12:22 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.244.0/22 103.141.99.0/24 Signature Algorithm: sha256WithRSAEncryption 11:c7:0c:5d:92:38:8e:05:99:9f:09:23:02:9c:40:51:01:4c: 2c:79:09:4a:96:42:dc:f2:6c:07:3d:3c:91:9b:65:13:13:f7: fe:88:ac:a5:37:53:0f:c4:ae:53:4d:0a:ee:b8:cd:ea:b3:c2: 01:73:ef:54:60:3e:9d:53:7e:bc:78:a8:9d:92:62:57:15:e2: a7:53:f5:10:27:ab:62:57:01:f5:07:14:1a:b8:fa:f3:15:7b: b0:60:c0:4f:9c:5b:67:f7:b6:a0:e9:80:64:f6:2d:ee:8b:3f: 06:db:6c:a2:f5:79:38:87:33:13:78:41:35:9c:79:6e:35:58: 4b:4e:ab:33:71:62:f4:f3:8b:04:20:0a:79:6d:89:af:d1:6b: 34:17:76:db:b7:7f:38:13:44:cf:01:11:4b:00:75:35:f7:9d: 0a:27:f9:d2:03:e0:5a:46:ad:4c:7b:d5:cb:3b:64:35:4a:b1: b0:dc:78:3b:4b:22:df:e0:5c:b9:23:a7:ac:2e:7d:0b:9f:6a: 2b:3e:9e:5c:7b:46:d5:ae:f8:80:51:60:1b:f2:8e:ed:c7:69: 2e:85:11:18:bb:80:4d:cf:fe:f7:d7:b5:ac:bc:9b:b9:bb:ca: 60:c7:c4:40:cd:a3:88:54:db:34:0f:81:a3:f8:f3:41:c2:0f: 0e:b4:ca:62 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICdPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzA0MDkyMTI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGEzZTQ5OC01MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtCZppQ0id6SYJkQbVINkbYiurEBUSxi/7Lceeb4vZIaYy78J4fFRTADhdw3 X1xXdKFMugbHtJuVQYLg4lGf7gR+bYOTZa3RfIc5nDG0l7j/WsluST30jzKnrm/D TpMpE0E9QE0PHXNnEDa0XsdiVmQwPvGIMtyxKI4XYjQeeouFMuRE4qKDSPvoAUX8 bsv5cK1XkR3YWjfVxFNK/xU1VP9aUGgj0jKAbzGUbhKF/B1yy/U3ArAZpuN93nl3 SkJXIF0IBUt/1TYlW/m6C2D4maVdzqq45Xr/cqw8d60wbfyVEDHoAmFbJMry7Mgi hZXECd6iXqG2PPEGNOsSPDOKUwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFInivnz 6wXicRF/OaQUzW8GsRIiMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTU0OTA1N0Uw RDM5MTFFQjhBRDBGRDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnSvQDBABnjWMwDQYJKoZIhvcNAQELBQADggEBABHHDF2S OI4FmZ8JIwKcQFEBTCx5CUqWQtzybAc9PJGbZRMT9/6IrKU3Uw/ErlNNCu64zeqz wgFz71RgPp1Tfrx4qJ2SYlcV4qdT9RAnq2JXAfUHFBq4+vMVe7BgwE+cW2f3tqDp gGT2Le6LPwbbbKL1eTiHMxN4QTWceW41WEtOqzNxYvTziwQgCnltia/RazQXdtu3 fzgTRM8BEUsAdTX3nQon+dID4FpGrUx71cs7ZDVKsbDceDtLIt/gXLkjp6wufQuf ais+nlx7RtWu+IBRYBvyju3HaS6FERi7gE3P/vfXtay8m7m7ymDHxEDNo4hU2zQP gaP480HCDw60ymI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org