$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa File: A60940C24BAD11EE8EF6480CC4F9AE02.roa (raw, json) Hash identifier: GPrsWA7Z0HLK8Xnblav0zJK5X0kblq/smftUL3WlFcM= Subject key identifier: 48:E2:EF:D8:CE:06:63:F6:02:36:07:C8:71:CD:69:C8:4D:25:0A:67 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 79A6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa Signing time: Tue 05 Sep 2023 05:32:48 +0000 ROA not before: Tue 05 Sep 2023 05:32:48 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151154 IP address blocks: 103.122.204.0/24 maxlen: 24 103.122.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31142 (0x79a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 5 05:32:48 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64f6bd80-af53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:dc:35:be:3a:85:78:37:a8:0c:e7:89:f4: ba:e8:c7:9b:4f:87:f5:65:09:0e:d2:06:8b:94:3a: ed:ed:85:bf:c7:3f:3d:6b:71:49:34:e0:78:6a:79: 77:89:5f:1a:c6:7c:cf:5f:f4:d0:ae:04:6b:df:7b: 7d:1f:da:a3:56:db:01:91:53:5d:c7:a2:5f:61:33: 29:8d:26:e0:87:a0:a4:1a:09:9a:6e:17:0c:3a:c7: c9:91:74:0b:9e:cb:6a:e3:b0:85:dd:81:d4:83:2b: 33:38:6e:6b:80:f5:dc:ac:a9:d2:9c:45:dc:cc:b4: e3:bd:ab:75:1e:05:2a:7b:ca:1d:bb:cc:a3:b2:15: 46:3f:d3:4d:fd:3f:85:eb:34:14:92:72:6f:de:39: 17:7b:30:5a:bf:d7:6b:49:a9:91:54:8e:b5:74:49: 61:df:17:be:90:b6:06:08:42:a2:7e:4d:6c:8d:d2: fe:2a:e2:01:37:ec:e4:29:00:66:48:57:e1:b0:3a: 4f:86:c1:a3:0f:98:34:4e:c0:31:1d:a9:7e:ab:c7: ca:95:f6:fe:9e:7d:f0:e9:01:3f:fa:85:3b:38:1d: 2f:b5:11:7a:93:b3:4d:fe:90:a5:e4:99:7b:bd:7f: 37:b3:ca:1a:30:06:e1:e5:b8:95:32:9f:60:89:96: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E2:EF:D8:CE:06:63:F6:02:36:07:C8:71:CD:69:C8:4D:25:0A:67 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.204.0/23 Signature Algorithm: sha256WithRSAEncryption 32:c8:c4:77:25:0d:31:0b:31:82:33:37:67:f2:78:69:4e:5c: f3:4e:01:13:fa:bb:dd:11:6c:ad:5b:fb:08:08:ca:ad:48:bd: dd:11:98:d5:13:59:69:14:6f:36:cc:57:b3:c1:ce:cf:c8:b0: f5:29:8c:97:4b:67:03:18:2f:06:d1:7f:7c:b1:95:4b:bb:6b: e8:c4:9d:9e:88:8c:23:70:7e:a5:ba:a8:a0:43:e6:23:cd:1b: 95:e1:56:10:de:d2:3b:00:ef:0c:40:76:f4:49:eb:7b:dc:97: ab:59:76:ef:d9:b4:ab:5e:e8:e4:c5:de:5b:8b:f2:55:47:c2: 71:ac:79:1e:09:99:92:f8:2f:8f:27:e6:33:df:05:8a:a4:b7: 96:a8:32:c9:c3:61:4d:07:f8:56:a3:ca:ec:1d:80:e2:8f:18: 5b:5e:bc:2b:2b:45:3f:a2:18:9c:01:bd:b0:25:e1:f7:6f:c9: a8:b4:9b:e1:9e:9b:e2:74:ba:81:31:b0:73:cd:11:98:d9:94: 6e:81:96:15:aa:43:32:e8:e4:15:f6:8a:33:ab:19:bc:ad:2a: 96:6e:5a:37:5a:a4:aa:57:38:6d:52:0a:db:e3:ba:01:6d:64: 2c:e6:a6:59:14:e1:3d:0e:a9:0d:23:e4:9f:a4:86:60:5b:3b: d4:f7:f0:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICeaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTA1MDUzMjQ4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY2YmQ4MC1hZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB/cNb46hXg3qAznifS66MebT4f1ZQkO0gaLlDrt7YW/xz89a3FJNOB4anl3 iV8axnzPX/TQrgRr33t9H9qjVtsBkVNdx6JfYTMpjSbgh6CkGgmabhcMOsfJkXQL nstq47CF3YHUgyszOG5rgPXcrKnSnEXczLTjvat1HgUqe8odu8yjshVGP9NN/T+F 6zQUknJv3jkXezBav9drSamRVI61dElh3xe+kLYGCEKifk1sjdL+KuIBN+zkKQBm SFfhsDpPhsGjD5g0TsAxHal+q8fKlfb+nn3w6QE/+oU7OB0vtRF6k7NN/pCl5Jl7 vX83s8oaMAbh5biVMp9giZbhqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEji79jO BmP2AjYHyHHNachNJQpnMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTYwOTQwQzI0 QkFEMTFFRThFRjY0ODBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFneswwDQYJKoZIhvcNAQELBQADggEBADLIxHclDTELMYIz N2fyeGlOXPNOARP6u90RbK1b+wgIyq1Ivd0RmNUTWWkUbzbMV7PBzs/IsPUpjJdL ZwMYLwbRf3yxlUu7a+jEnZ6IjCNwfqW6qKBD5iPNG5XhVhDe0jsA7wxAdvRJ63vc l6tZdu/ZtKte6OTF3luL8lVHwnGseR4JmZL4L48n5jPfBYqkt5aoMsnDYU0H+Faj yuwdgOKPGFtevCsrRT+iGJwBvbAl4fdvyai0m+Gem+J0uoExsHPNEZjZlG6BlhWq QzLo5BX2ijOrGbytKpZuWjdapKpXOG1SCtvjugFtZCzmplkU4T0OqQ0j5J+khmBb O9T38PE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org