$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD6DB94671FD11ECA4BCDD52C4F9AE02.roa File: AD6DB94671FD11ECA4BCDD52C4F9AE02.roa (raw, json) Hash identifier: N5gdo85iHoFGDij0QD9xLCn1Pz4gZmISy0HFOlIC00s= Subject key identifier: BD:E2:F2:17:96:66:CD:D7:52:7A:85:59:CA:30:60:E4:C0:04:52:06 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 69F9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD6DB94671FD11ECA4BCDD52C4F9AE02.roa Signing time: Wed 10 May 2023 16:12:28 +0000 ROA not before: Wed 10 May 2023 16:12:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132527 IP address blocks: 103.244.124.0/24 maxlen: 24 103.244.125.0/24 maxlen: 24 103.244.126.0/24 maxlen: 24 103.244.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27129 (0x69f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:12:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc26c-ad76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:ff:31:2f:f8:03:50:36:03:af:ae:58:45: 45:80:9a:db:c0:54:d2:6d:f8:38:9d:8a:0a:9a:39: 40:e6:91:ac:c0:7f:d2:03:17:ae:84:e5:21:38:3a: 76:2b:26:a0:1b:f5:e9:c0:91:c1:42:51:48:02:f0: 2b:65:63:fc:4e:83:df:26:8f:ac:c0:d8:73:bd:e9: 74:0b:ab:70:c8:4c:e8:60:0e:96:de:ad:05:d2:68: 3d:0b:6b:a7:14:1e:7f:9f:25:14:64:f7:99:af:75: 0d:ee:3b:d0:6e:cb:6f:55:eb:3e:a6:d0:1e:f1:a7: f4:cb:a5:ea:d8:dc:bf:e3:35:8b:dd:4a:c8:bc:79: 7d:43:45:14:d7:80:4b:b0:a9:b1:ab:48:0b:da:a6: 22:1e:6d:e2:23:cc:a7:c9:09:42:5e:4a:2a:56:b6: 31:10:0f:94:74:3f:21:b2:45:53:90:bc:11:37:83: bd:88:a7:c0:94:0b:bc:3b:85:31:5c:8a:ed:0d:f0: be:47:04:eb:55:eb:bc:d0:26:6c:7e:81:9a:4a:33: a1:fa:d9:39:b0:5a:78:2a:70:66:65:a6:39:84:f1: 87:e2:80:24:b4:d8:c4:6c:ab:8b:6d:64:f8:89:b8: 48:c7:e0:0d:87:86:fd:a7:3f:dc:56:49:d1:49:4a: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:F2:17:96:66:CD:D7:52:7A:85:59:CA:30:60:E4:C0:04:52:06 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD6DB94671FD11ECA4BCDD52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.124.0/22 Signature Algorithm: sha256WithRSAEncryption 37:9e:61:f9:3b:a3:73:c9:31:67:91:16:71:59:32:5a:7a:40: 0f:eb:01:9b:2e:93:f0:47:1a:a8:58:4f:c4:f8:83:84:89:ce: 15:0f:6f:a7:d6:5e:01:64:0a:36:35:20:6c:a9:28:aa:01:e1: d5:6a:af:d7:d5:9c:41:90:f0:86:9e:51:72:62:9a:f6:4f:9b: 86:33:35:6e:1a:fd:10:73:54:51:f1:d9:a5:e3:0c:60:c4:db: 4b:35:d4:8d:8f:c3:e5:92:b4:3d:8a:b5:99:1a:03:9a:3b:90: d7:09:e2:28:c1:37:80:a2:8e:af:1e:ab:ce:87:53:96:d2:6d: 83:2a:4c:54:0e:9e:3c:b7:13:67:45:4e:58:1a:dc:00:3f:ee: 32:e7:e9:99:73:b9:69:79:c3:10:29:0e:3d:18:2a:fe:fb:8d: cd:75:a4:eb:0b:42:cf:08:6a:2f:d0:bf:c5:9d:a8:d3:2e:a7: 49:0b:33:89:ce:77:fd:62:d7:e8:c0:19:ec:d2:b0:88:ea:47: 38:23:be:11:53:33:63:de:09:32:90:00:b2:aa:6b:73:3c:44: da:2e:bb:15:d9:47:2b:19:76:a2:d0:0d:b0:4b:f8:f9:b5:7e: 44:12:36:63:69:11:e5:92:25:9e:c8:03:01:30:9e:27:5b:4f: 58:64:01:a4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICafkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMjI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI2Yy1hZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7D/MS/4A1A2A6+uWEVFgJrbwFTSbfg4nYoKmjlA5pGswH/SAxeuhOUhODp2 KyagG/XpwJHBQlFIAvArZWP8ToPfJo+swNhzvel0C6twyEzoYA6W3q0F0mg9C2un FB5/nyUUZPeZr3UN7jvQbstvVes+ptAe8af0y6Xq2Ny/4zWL3UrIvHl9Q0UU14BL sKmxq0gL2qYiHm3iI8ynyQlCXkoqVrYxEA+UdD8hskVTkLwRN4O9iKfAlAu8O4Ux XIrtDfC+RwTrVeu80CZsfoGaSjOh+tk5sFp4KnBmZaY5hPGH4oAktNjEbKuLbWT4 ibhIx+ANh4b9pz/cVknRSUp27wIDAQABo4IClTCCApEwHQYDVR0OBBYEFL3i8heW Zs3XUnqFWcowYOTABFIGMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUQ2REI5NDY3 MUZEMTFFQ0E0QkNERDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn9HwwDQYJKoZIhvcNAQELBQADggEBADeeYfk7o3PJMWeR FnFZMlp6QA/rAZsuk/BHGqhYT8T4g4SJzhUPb6fWXgFkCjY1IGypKKoB4dVqr9fV nEGQ8IaeUXJimvZPm4YzNW4a/RBzVFHx2aXjDGDE20s11I2Pw+WStD2KtZkaA5o7 kNcJ4ijBN4Cijq8eq86HU5bSbYMqTFQOnjy3E2dFTlga3AA/7jLn6ZlzuWl5wxAp Dj0YKv77jc11pOsLQs8Iai/Qv8WdqNMup0kLM4nOd/1i1+jAGezSsIjqRzgjvhFT M2PeCTKQALKqa3M8RNouuxXZRysZdqLQDbBL+Pm1fkQSNmNpEeWSJZ7IAwEwnidb T1hkAaQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org