$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa File: AEF723E4413B11EC87AB0687C4F9AE02.roa (raw, json) Hash identifier: KLLXigXSlHfU71gPt2xlzHqX8s8r3Fim8UfY4gkCDq0= Subject key identifier: 61:94:7E:0D:59:DE:D0:71:8F:35:17:40:A1:04:EA:BB:EE:1B:11:27 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BE3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa Signing time: Wed 10 May 2023 16:21:52 +0000 ROA not before: Wed 10 May 2023 16:21:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135731 IP address blocks: 103.174.76.0/23 maxlen: 24 2400:10a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27619 (0x6be3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:21:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc4a0-3a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f1:98:4a:af:ec:97:63:ba:ab:65:af:1d:3e: b5:bd:eb:c8:ee:18:ea:4d:36:53:61:1c:ea:ab:85: 3d:71:fc:0a:58:aa:94:da:79:ea:7a:29:b8:2b:d7: 7e:c1:d2:f6:a7:39:26:8d:11:54:8a:bb:4c:ab:6e: 37:d5:1f:c0:a5:90:aa:e5:c2:b6:53:bf:2b:1e:9e: 73:0b:40:54:6c:1b:63:eb:b6:c9:65:29:84:70:ea: de:f9:6f:02:d0:3b:eb:1e:c4:30:b7:02:00:b1:39: c7:19:29:6a:c4:4f:e7:71:06:36:d6:a9:64:0e:de: f0:50:3a:02:c6:51:f4:e0:0a:12:64:ef:2d:2e:75: 5e:a4:70:ef:9f:e1:e0:7b:4f:36:8a:4f:c3:3e:aa: 5b:51:27:50:3e:4b:22:02:f3:79:bc:44:d9:72:9a: 18:be:4d:1e:0f:68:9f:36:39:ec:70:3c:86:b9:dd: 41:9d:fa:a5:19:18:52:9d:09:b2:31:4e:bd:39:40: 9e:52:7e:39:2f:23:30:f6:3e:11:a4:ac:67:53:85: 9f:7b:51:3d:e5:38:81:ce:2a:5d:ed:f5:50:3c:f4: 06:36:89:f1:6a:59:29:af:8f:4b:05:d7:1c:28:23: 88:86:18:68:e7:d2:25:23:5a:e5:84:f2:5b:62:d8: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:94:7E:0D:59:DE:D0:71:8F:35:17:40:A1:04:EA:BB:EE:1B:11:27 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.76.0/23 IPv6: 2400:10a0::/32 Signature Algorithm: sha256WithRSAEncryption 75:00:99:dd:c4:f1:5d:fd:e6:82:af:91:25:72:03:57:c6:24: 48:f2:10:09:0c:52:6c:38:b2:7c:06:8b:c6:01:12:7f:1f:18: 76:23:2f:d7:f5:be:6f:2b:63:28:78:bc:0f:1d:8a:be:ed:b5: b3:d8:d9:98:d8:5e:ff:b1:9b:74:74:f0:2a:87:f4:ce:18:94: d9:ac:fb:5f:cf:50:8f:ea:79:58:9a:ce:1d:a0:4e:59:36:e6: 87:44:11:6e:82:e4:36:22:8b:f1:0e:a4:62:39:23:47:7e:c4: ea:24:64:11:d3:58:c4:d2:e1:e9:12:ea:26:53:62:86:cb:09: 92:21:9b:0c:12:5f:99:2e:64:b9:3b:40:b9:28:e8:c7:6a:44: ca:86:f5:dc:e8:13:c8:86:8a:a9:f0:73:9a:62:9b:70:8d:20: 11:99:0f:91:54:62:a7:b2:f1:76:16:95:5b:ea:21:c6:be:42: 48:5b:ab:6e:49:a0:8c:04:78:26:31:91:36:f3:e5:6f:9d:a5: 46:9b:d0:ec:d9:6b:78:5b:2e:e2:bd:71:2a:cb:df:a1:65:b5: 45:80:de:f1:9b:46:97:bc:70:7c:4f:d6:a2:15:b2:ef:57:09: 53:8f:62:ba:b1:db:e5:29:7b:68:da:73:fb:64:a0:c8:a7:f8: c6:a2:95:55 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICa+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMTUyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzRhMC0zYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PGYSq/sl2O6q2WvHT61vevI7hjqTTZTYRzqq4U9cfwKWKqU2nnqeim4K9d+ wdL2pzkmjRFUirtMq2431R/ApZCq5cK2U78rHp5zC0BUbBtj67bJZSmEcOre+W8C 0DvrHsQwtwIAsTnHGSlqxE/ncQY21qlkDt7wUDoCxlH04AoSZO8tLnVepHDvn+Hg e082ik/DPqpbUSdQPksiAvN5vETZcpoYvk0eD2ifNjnscDyGud1BnfqlGRhSnQmy MU69OUCeUn45LyMw9j4RpKxnU4Wfe1E95TiBzipd7fVQPPQGNonxalkpr49LBdcc KCOIhhho59IlI1rlhPJbYtgLJwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGGUfg1Z 3tBxjzUXQKEE6rvuGxEnMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUVGNzIzRTQ0 MTNCMTFFQzg3QUIwNjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrkwwDQQCAAIwBwMFACQAEKAwDQYJKoZIhvcNAQELBQAD ggEBAHUAmd3E8V395oKvkSVyA1fGJEjyEAkMUmw4snwGi8YBEn8fGHYjL9f1vm8r Yyh4vA8dir7ttbPY2ZjYXv+xm3R08CqH9M4YlNms+1/PUI/qeViazh2gTlk25odE EW6C5DYii/EOpGI5I0d+xOokZBHTWMTS4ekS6iZTYobLCZIhmwwSX5kuZLk7QLko 6MdqRMqG9dzoE8iGiqnwc5pim3CNIBGZD5FUYqey8XYWlVvqIca+Qkhbq25JoIwE eCYxkTbz5W+dpUab0OzZa3hbLuK9cSrL36FltUWA3vGbRpe8cHxP1qIVsu9XCVOP Yrqx2+Upe2jac/tkoMin+MailVU= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:32 2024 by rpki-client on console-fra.rpki-client.org