$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0A0EF0850511EDB1865628C4F9AE02.roa File: AF0A0EF0850511EDB1865628C4F9AE02.roa (raw, json) Hash identifier: 6e7Oo4OMjiWQvmgtKLMSEaM6yYzFSuf/FEuTMEQaVpM= Subject key identifier: EC:EE:18:F3:C1:44:9E:98:BF:36:DB:F4:E9:2C:42:E0:5A:4C:BF:C4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EB9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0A0EF0850511EDB1865628C4F9AE02.roa Signing time: Wed 10 May 2023 16:35:23 +0000 ROA not before: Wed 10 May 2023 16:35:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141506 IP address blocks: 103.163.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28345 (0x6eb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7ca-cae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:85:0d:a4:0c:32:23:f3:5b:6c:7c:4d:c1: a7:5e:0d:75:ca:d3:bc:37:15:8f:1b:3e:56:08:cb: 2d:63:2f:ea:bf:7b:78:82:9e:ce:5e:5c:bb:d3:2a: cb:18:0c:9b:0d:6e:41:5a:e3:03:2c:75:db:29:0c: f0:68:f5:c8:fc:65:e6:47:9e:c2:c6:05:1f:ca:b5: ea:37:f9:db:a7:1c:fd:c4:70:05:75:28:d4:a9:72: a4:a6:11:56:bd:d2:6f:41:74:c0:5e:08:fc:e9:4f: 99:6d:64:d9:84:24:6e:5f:57:23:cc:54:2b:f3:b2: df:0b:cc:8c:ef:91:2a:d8:cd:60:5e:cc:5b:ee:1a: 5f:af:46:b6:53:82:db:34:22:1c:25:d2:fe:82:8b: c9:61:9c:97:ec:f0:e9:0c:79:f2:38:b1:38:3c:f2: 60:46:20:51:8b:f7:ce:92:18:37:6b:c7:d6:bb:34: be:cf:4b:a8:5e:f0:2a:73:a3:8e:83:fa:99:45:1e: ac:59:e1:6a:53:f5:c2:02:32:22:9c:02:da:14:79: 93:81:f0:5b:03:3a:03:d2:06:28:c3:0c:93:cd:f4: e1:3b:21:6b:64:8e:5e:e9:d0:38:4e:88:59:8e:c0: 54:8f:cf:db:94:0e:0a:69:37:18:e8:e5:d2:36:e7: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EE:18:F3:C1:44:9E:98:BF:36:DB:F4:E9:2C:42:E0:5A:4C:BF:C4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0A0EF0850511EDB1865628C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.234.0/23 Signature Algorithm: sha256WithRSAEncryption 63:64:82:ef:4c:11:db:8f:4d:c1:fa:8e:9c:eb:bb:bb:6d:35: 3f:13:7e:c2:38:0f:01:28:34:ee:c2:e2:81:28:f5:7a:5e:a3: ce:fa:92:09:10:b4:49:11:6d:57:76:5e:94:c4:f8:00:26:7a: 7a:9b:d6:64:bf:14:10:f5:15:7e:fe:3e:89:ff:c1:6e:b1:29: b6:6f:b6:12:67:94:bd:77:52:f9:b6:5c:5a:14:18:99:f7:c1: a1:29:45:64:78:5f:39:0d:e9:44:41:7f:82:bb:f4:82:02:24: c8:a2:8c:f6:b0:21:ec:41:6e:e0:9e:9e:ac:c3:25:37:ff:00: 98:0f:11:e6:09:6a:71:57:25:0b:66:56:41:49:b9:10:7c:24: a5:18:cd:0c:28:be:02:4a:db:18:5b:10:74:ab:a0:44:fe:84: 99:36:70:31:69:8d:49:8f:7b:d0:4c:7c:aa:53:ae:2e:52:f1: c7:e5:c5:45:77:5a:1a:bb:0f:dd:f1:08:e2:7c:c3:1a:cb:8b: c4:45:c4:7b:9c:de:68:ff:dc:8a:37:dd:45:ae:5d:ed:1b:1f: 75:ec:e0:b0:e3:27:27:c5:ec:87:73:2f:6b:64:e2:f5:76:f1: 91:32:49:f8:f3:7e:aa:da:2b:aa:b3:ca:75:1b:f9:87:49:e4: 29:ce:40:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdjYS1jYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJaFDaQMMiPzW2x8TcGnXg11ytO8NxWPGz5WCMstYy/qv3t4gp7OXly70yrL GAybDW5BWuMDLHXbKQzwaPXI/GXmR57CxgUfyrXqN/nbpxz9xHAFdSjUqXKkphFW vdJvQXTAXgj86U+ZbWTZhCRuX1cjzFQr87LfC8yM75Eq2M1gXsxb7hpfr0a2U4Lb NCIcJdL+govJYZyX7PDpDHnyOLE4PPJgRiBRi/fOkhg3a8fWuzS+z0uoXvAqc6OO g/qZRR6sWeFqU/XCAjIinALaFHmTgfBbAzoD0gYowwyTzfThOyFrZI5e6dA4TohZ jsBUj8/blA4KaTcY6OXSNudA9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOzuGPPB RJ6Yvzbb9OksQuBaTL/EMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUYwQTBFRjA4 NTA1MTFFREIxODY1NjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFno+owDQYJKoZIhvcNAQELBQADggEBAGNkgu9MEduPTcH6 jpzru7ttNT8TfsI4DwEoNO7C4oEo9Xpeo876kgkQtEkRbVd2XpTE+AAmenqb1mS/ FBD1FX7+Pon/wW6xKbZvthJnlL13Uvm2XFoUGJn3waEpRWR4XzkN6URBf4K79IIC JMiijPawIexBbuCenqzDJTf/AJgPEeYJanFXJQtmVkFJuRB8JKUYzQwovgJK2xhb EHSroET+hJk2cDFpjUmPe9BMfKpTri5S8cflxUV3Whq7D93xCOJ8wxrLi8RFxHuc 3mj/3Io33UWuXe0bH3Xs4LDjJyfF7IdzL2tk4vV28ZEySfjzfqraK6qzynUb+YdJ 5CnOQGI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org