$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB839398BF3111EEBDF2063DC4F9AE02.roa File: AB839398BF3111EEBDF2063DC4F9AE02.roa (raw, json) Hash identifier: GfuQ+eM9WRKj9VbphMNkGmM3wKTNkInW4zkcWhzD4Jc= Subject key identifier: CD:42:88:AC:16:39:D1:2D:77:D0:E4:DF:39:46:80:8A:77:8F:E5:AA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8229 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB839398BF3111EEBDF2063DC4F9AE02.roa Signing time: Tue 30 Jan 2024 05:42:07 +0000 ROA not before: Tue 30 Jan 2024 05:42:07 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133638 IP address blocks: 103.40.72.0/22 maxlen: 24 182.255.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33321 (0x8229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 30 05:42:07 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65b88c2f-b3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0b:9f:9f:2e:c1:82:98:c2:4b:21:7f:69:d2: 00:e1:8d:3b:5e:52:3c:ee:7d:8b:87:b9:0f:c9:13: ad:96:a9:f7:da:b3:d1:3c:19:c5:2f:ed:24:f1:45: a5:b8:64:55:69:09:fe:85:78:5a:f7:f8:eb:b0:e4: 5d:16:8b:ed:ba:7f:eb:30:2e:59:aa:fa:83:bf:c3: b7:bc:4d:c5:31:79:75:27:3a:b0:04:63:55:d8:12: 93:fe:bf:64:8d:9f:3a:a3:6d:ab:7f:aa:f9:56:89: a3:70:84:df:53:07:01:9f:fc:73:dc:c4:93:b2:04: 01:c8:03:cb:90:1c:e6:10:17:55:c3:b2:91:c1:e5: e9:02:2c:31:32:50:40:bf:15:86:3c:aa:67:ae:25: d3:80:70:7e:cc:fd:22:41:b8:9a:8b:08:b2:49:3a: c1:56:e2:2a:c0:e6:76:7d:07:25:19:da:c4:86:aa: f1:c9:f6:72:20:b0:a3:76:15:1d:eb:c5:58:48:78: e3:10:13:92:8b:16:39:86:24:89:f6:a5:5c:fa:70: d9:08:55:4c:95:ca:18:ff:64:15:8d:fd:34:27:75: 91:d1:f4:70:32:27:cd:d5:ae:bd:b2:2b:a8:59:20: 49:fa:f7:6e:bc:aa:87:0e:e2:23:df:d7:4f:74:ca: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:42:88:AC:16:39:D1:2D:77:D0:E4:DF:39:46:80:8A:77:8F:E5:AA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB839398BF3111EEBDF2063DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.72.0/22 182.255.56.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:cc:b4:4f:e1:7d:a9:64:18:e6:11:b7:d6:e8:aa:19:73:85: 81:10:e1:d3:ff:e5:93:94:d2:68:09:59:ba:35:69:c6:98:c8: 6b:e2:eb:cf:7f:db:4c:e7:ae:68:19:74:ca:d9:6c:24:36:63: c9:bd:94:37:e3:64:98:a2:38:39:5c:9e:2f:d9:0d:0f:e4:cd: ab:8f:80:7d:db:8b:27:22:9c:b6:4d:bf:90:de:76:77:53:6b: 1f:7c:1a:34:a7:d9:8b:8f:db:e2:ac:72:0c:3e:83:8d:58:16: 48:52:f9:d0:6d:3b:9d:dd:b4:db:05:ce:16:f7:9c:43:91:35: 68:31:94:1e:04:f5:07:de:35:32:18:de:69:c4:0e:3d:37:ea: 33:91:2a:a4:26:a4:1a:e1:56:da:8a:7f:f0:3e:90:98:a3:88: 99:5f:1a:2b:34:d2:1a:51:c9:e6:8f:82:0b:13:c2:da:24:4d: 2a:3b:ce:77:0a:80:49:2f:cf:60:65:6c:06:89:b4:10:84:4a: a1:77:3d:23:7e:f4:4d:6e:ed:39:07:a4:c9:2a:49:9a:9a:53: 0c:88:ce:18:c1:dc:8d:0f:32:a3:23:73:d9:a1:2d:bb:ae:8e: 57:e1:da:9c:9b:69:2a:ea:a5:34:12:5d:88:b5:20:d7:38:93: c7:64:93:20 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAIIpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDEzMDA1NDIwN1oXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjViODhjMmYtYjNiZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPgLn58uwYKYwkshf2nSAOGNO15SPO59i4e5D8kTrZap99qz0TwZxS/tJPFF pbhkVWkJ/oV4Wvf467DkXRaL7bp/6zAuWar6g7/Dt7xNxTF5dSc6sARjVdgSk/6/ ZI2fOqNtq3+q+VaJo3CE31MHAZ/8c9zEk7IEAcgDy5Ac5hAXVcOykcHl6QIsMTJQ QL8VhjyqZ64l04Bwfsz9IkG4mosIskk6wVbiKsDmdn0HJRnaxIaq8cn2ciCwo3YV HevFWEh44xATkosWOYYkifalXPpw2QhVTJXKGP9kFY39NCd1kdH0cDInzdWuvbIr qFkgSfr3bryqhw7iI9/XT3TK6psCAwEAAaOCApswggKXMB0GA1UdDgQWBBTNQois FjnRLXfQ5N85RoCKd4/lqjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FCODM5Mzk4 QkYzMTExRUVCREYyMDYzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCZyhIAwQCtv84MA0GCSqGSIb3DQEBCwUAA4IBAQBuzLRP 4X2pZBjmEbfW6KoZc4WBEOHT/+WTlNJoCVm6NWnGmMhr4uvPf9tM565oGXTK2Wwk NmPJvZQ342SYojg5XJ4v2Q0P5M2rj4B924snIpy2Tb+Q3nZ3U2sffBo0p9mLj9vi rHIMPoONWBZIUvnQbTud3bTbBc4W95xDkTVoMZQeBPUH3jUyGN5pxA49N+ozkSqk JqQa4Vbain/wPpCYo4iZXxorNNIaUcnmj4ILE8LaJE0qO853CoBJL89gZWwGibQQ hEqhdz0jfvRNbu05B6TJKkmamlMMiM4YwdyNDzKjI3PZoS27ro5X4dqcm2kq6qU0 El2ItSDXOJPHZJMg -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org