$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFC02E2CEB4A11EE861CC46BC4F9AE02.roa File: AFC02E2CEB4A11EE861CC46BC4F9AE02.roa (raw, json) Hash identifier: 5RGcdkgQAZRXgYAW8+B4aVxDSKKffLgHESoITJNRZEM= Subject key identifier: 67:CC:5A:65:4C:9C:64:79:45:AB:57:D7:45:70:D0:D5:1B:5C:05:69 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8548 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFC02E2CEB4A11EE861CC46BC4F9AE02.roa Signing time: Tue 26 Mar 2024 08:27:30 +0000 ROA not before: Tue 26 Mar 2024 08:27:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 152651 IP address blocks: 103.124.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34120 (0x8548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 26 08:27:30 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=660286f2-ce1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:61:11:ae:25:46:8c:9a:5e:1a:98:3d:3b: e2:c8:56:39:ac:75:36:18:d0:84:e8:e2:fa:d4:e6: fe:98:f1:7d:2a:00:bf:a9:9b:a5:b8:00:37:43:11: a9:37:93:f3:a3:35:5c:ef:d1:3e:60:47:52:d9:00: 70:5e:a1:58:ca:5a:2a:a9:0c:73:1c:59:f5:d1:7c: 11:f5:7a:c3:c8:17:8c:f8:cd:c8:6e:09:86:35:dc: b3:2f:99:f3:46:01:1a:b6:45:02:31:d8:82:d0:79: c8:93:0d:30:d3:35:2d:34:2b:ee:af:78:f9:38:30: 21:4b:3b:09:4b:59:a2:94:09:bf:c2:a3:70:9e:30: 64:4f:f7:8e:15:0f:42:9c:2c:56:dd:c4:3d:49:57: 6f:52:d3:f1:75:a1:00:a2:ff:a9:8a:ad:63:08:72: bd:85:1a:fe:b2:bd:22:22:7d:df:ae:a3:89:96:13: 3e:f9:98:7b:11:ee:a8:1a:21:00:04:bc:83:67:2b: 11:5b:22:96:03:9a:bf:6f:3d:bf:86:28:d7:46:7c: b5:15:b9:32:05:b4:aa:21:f2:ab:41:ab:fc:e1:82: c0:de:b7:3a:17:c7:98:39:e0:b1:83:4d:ae:86:c2: a5:a6:f6:13:4c:4c:ba:e1:ee:96:ae:4b:71:c5:d1: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CC:5A:65:4C:9C:64:79:45:AB:57:D7:45:70:D0:D5:1B:5C:05:69 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFC02E2CEB4A11EE861CC46BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.208.0/23 Signature Algorithm: sha256WithRSAEncryption 20:c6:34:6a:22:4e:fa:36:41:75:15:5f:17:c0:52:d7:bb:21: bd:d9:03:6a:c9:18:43:f5:38:25:c4:d7:ac:02:2d:87:d0:bd: 23:b2:ee:c9:ec:a6:8e:57:9f:7c:94:00:b9:87:fe:c2:cf:b9: f0:0e:4f:15:e9:36:c0:6f:b8:87:85:d5:69:1b:61:96:24:14: d9:b3:55:a4:71:28:a6:db:c4:5b:4c:00:9c:b1:82:29:24:96: 1a:3d:6e:0a:f5:33:f0:67:87:af:5f:25:71:eb:11:46:4b:85: 71:f4:c7:2b:c6:7b:f3:0f:56:65:92:b1:90:41:2a:00:67:cd: ba:39:0e:69:67:16:93:23:c3:dc:9e:4b:f8:b3:f7:c8:73:b4: ef:d1:81:32:05:99:04:9e:f1:8c:1c:19:d0:eb:80:2f:66:f3: 08:40:5c:5e:23:fb:8b:30:d8:ce:68:c6:ce:46:fc:17:ec:c7: 65:ce:e4:65:72:d2:ce:bc:9d:58:66:04:82:e0:96:6c:57:61: 30:08:72:93:4e:89:46:e1:3f:5a:89:5e:17:bc:42:ca:80:fa: 5c:6c:12:7f:74:8b:80:80:3b:28:c1:f0:d7:2c:60:44:e6:9f: 3c:4e:e2:f9:3d:44:60:76:0e:59:ba:ed:a2:10:1d:be:95:d6: 02:24:2c:2d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIVIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMyNjA4MjczMFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjYwMjg2ZjItY2UxZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVxYRGuJUaMml4amD074shWOax1NhjQhOji+tTm/pjxfSoAv6mbpbgAN0MR qTeT86M1XO/RPmBHUtkAcF6hWMpaKqkMcxxZ9dF8EfV6w8gXjPjNyG4JhjXcsy+Z 80YBGrZFAjHYgtB5yJMNMNM1LTQr7q94+TgwIUs7CUtZopQJv8KjcJ4wZE/3jhUP QpwsVt3EPUlXb1LT8XWhAKL/qYqtYwhyvYUa/rK9IiJ9366jiZYTPvmYexHuqBoh AAS8g2crEVsilgOav289v4Yo10Z8tRW5MgW0qiHyq0Gr/OGCwN63OhfHmDngsYNN robCpab2E0xMuuHulq5LccXRu8cCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRnzFpl TJxkeUWrV9dFcNDVG1wFaTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FGQzAyRTJD RUI0QTExRUU4NjFDQzQ2QkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ3zQMA0GCSqGSIb3DQEBCwUAA4IBAQAgxjRqIk76NkF1 FV8XwFLXuyG92QNqyRhD9TglxNesAi2H0L0jsu7J7KaOV598lAC5h/7Cz7nwDk8V 6TbAb7iHhdVpG2GWJBTZs1WkcSim28RbTACcsYIpJJYaPW4K9TPwZ4evXyVx6xFG S4Vx9McrxnvzD1ZlkrGQQSoAZ826OQ5pZxaTI8Pcnkv4s/fIc7Tv0YEyBZkEnvGM HBnQ64AvZvMIQFxeI/uLMNjOaMbORvwX7MdlzuRlctLOvJ1YZgSC4JZsV2EwCHKT TolG4T9aiV4XvELKgPpcbBJ/dIuAgDsowfDXLGBE5p88TuL5PURgdg5Zuu2iEB2+ ldYCJCwt -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org