$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4651AFAF2D111EC89771C5AC4F9AE02.roa File: B4651AFAF2D111EC89771C5AC4F9AE02.roa (raw, json) Hash identifier: 0RegkKqF1wq6SQi/A++u6VW4cYuyTQYSt/Vuete2OMw= Subject key identifier: C5:87:33:EC:9F:BF:8A:D0:40:A5:A4:A5:EC:67:2A:14:B1:AF:43:46 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 809E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4651AFAF2D111EC89771C5AC4F9AE02.roa Signing time: Tue 26 Dec 2023 08:00:38 +0000 ROA not before: Tue 26 Dec 2023 08:00:38 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149584 IP address blocks: 36.50.197.0/24 maxlen: 24 103.182.59.0/24 maxlen: 24 103.189.71.0/24 maxlen: 24 2001:df1:36c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32926 (0x809e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 26 08:00:38 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=658a8826-8bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:19:c3:32:64:1a:ba:ba:93:c4:78:07:cb: 1d:85:04:09:67:de:44:67:d0:ff:71:0f:9a:61:05: 27:55:3c:03:b3:82:32:a5:85:cc:28:bd:5b:9b:df: 9d:a3:14:e5:34:e3:c9:e5:48:b6:3a:b3:c0:5e:49: 9a:de:8e:0f:d0:7b:f4:6e:a3:bf:cb:23:d2:47:50: d4:b2:e9:68:6b:af:66:10:00:17:b5:7c:56:cb:4c: ef:21:63:26:41:19:1a:08:c1:59:3c:c5:69:19:a7: eb:81:98:ce:2f:2d:a1:9f:97:85:8a:0f:fd:83:6a: 1c:e7:48:72:ae:9c:89:5d:00:aa:cf:41:78:88:67: 2f:63:fd:dc:bb:e5:94:70:eb:9e:32:e4:ce:f2:6c: d8:21:01:14:f7:1a:30:1e:a7:f6:ae:a3:ad:a7:34: 9a:d6:60:fa:1f:8a:24:06:fd:da:96:f3:7a:90:c0: f0:f5:f4:28:31:69:8d:5d:fb:c8:e9:df:83:e2:6c: 5f:14:59:ae:f2:e5:26:45:ed:44:07:eb:c4:00:85: 27:e4:61:fa:9d:a6:29:30:ee:4a:af:a2:a1:98:19: ce:c4:69:12:1f:8f:a0:6f:60:98:f4:75:b7:da:4f: d9:f5:5f:d7:dd:58:72:73:fb:51:d2:32:18:c5:b2: e2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:87:33:EC:9F:BF:8A:D0:40:A5:A4:A5:EC:67:2A:14:B1:AF:43:46 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4651AFAF2D111EC89771C5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.197.0/24 103.182.59.0/24 103.189.71.0/24 IPv6: 2001:df1:36c0::/48 Signature Algorithm: sha256WithRSAEncryption 34:2f:fa:70:a3:b1:99:d8:95:9f:5e:08:53:c0:e4:f2:c3:5a: 67:d1:9a:c9:8c:45:8e:83:79:31:d5:4e:b1:fe:cc:38:a0:aa: 11:83:2b:38:07:c1:21:ff:7d:b3:e1:22:17:dd:b5:26:88:7b: 6e:15:9b:5e:96:f4:b1:9c:31:96:6c:bd:57:69:b0:2c:66:9a: 19:56:54:d8:2e:c8:f7:5d:8f:9e:50:f2:d9:52:a9:34:df:e1: 89:c4:55:58:01:3c:89:d2:d2:12:a2:8e:db:9d:1c:95:22:a1: af:80:f4:36:a4:2a:ea:8e:dc:b7:fe:be:f1:fe:d9:b7:82:88: 65:b2:62:d8:ec:ab:69:9d:8f:46:32:f0:1b:54:1c:c8:11:fb: 47:cc:65:0a:82:f0:ef:eb:4f:7b:ab:6d:08:8b:2d:ed:33:f9: 1d:1a:ed:dd:1f:05:c7:dc:d0:58:fe:c4:da:82:2d:06:1e:cf: 67:c1:d7:d3:4a:63:47:11:5c:85:25:c3:72:83:0c:68:cf:53: e2:5f:b4:46:58:d0:1c:c5:dd:07:27:e0:71:84:72:1d:08:7e: e1:e4:a6:1b:96:84:01:c6:64:80:9f:d9:e3:50:44:c7:7b:42: b2:2b:bd:35:6c:cf:27:d1:fd:51:22:b7:29:58:8b:99:fa:fc: 52:ff:e1:99 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAICeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTIzMTIyNjA4MDAzOFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjU4YTg4MjYtOGJhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1RGcMyZBq6upPEeAfLHYUECWfeRGfQ/3EPmmEFJ1U8A7OCMqWFzCi9W5vf naMU5TTjyeVItjqzwF5Jmt6OD9B79G6jv8sj0kdQ1LLpaGuvZhAAF7V8VstM7yFj JkEZGgjBWTzFaRmn64GYzi8toZ+XhYoP/YNqHOdIcq6ciV0Aqs9BeIhnL2P93Lvl lHDrnjLkzvJs2CEBFPcaMB6n9q6jrac0mtZg+h+KJAb92pbzepDA8PX0KDFpjV37 yOnfg+JsXxRZrvLlJkXtRAfrxACFJ+Rh+p2mKTDuSq+ioZgZzsRpEh+PoG9gmPR1 t9pP2fVf191YcnP7UdIyGMWy4scCAwEAAaOCArIwggKuMB0GA1UdDgQWBBTFhzPs n7+K0EClpKXsZyoUsa9DRjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I0NjUxQUZB RjJEMTExRUM4OTc3MUM1QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQAJDLFAwQAZ7Y7AwQAZ71HMA8EAgACMAkDBwAgAQ3xNsAw DQYJKoZIhvcNAQELBQADggEBADQv+nCjsZnYlZ9eCFPA5PLDWmfRmsmMRY6DeTHV TrH+zDigqhGDKzgHwSH/fbPhIhfdtSaIe24Vm16W9LGcMZZsvVdpsCxmmhlWVNgu yPddj55Q8tlSqTTf4YnEVVgBPInS0hKijtudHJUioa+A9DakKuqO3Lf+vvH+2beC iGWyYtjsq2mdj0Yy8BtUHMgR+0fMZQqC8O/rT3urbQiLLe0z+R0a7d0fBcfc0Fj+ xNqCLQYez2fB19NKY0cRXIUlw3KDDGjPU+JftEZY0BzF3Qcn4HGEch0IfuHkphuW hAHGZICf2eNQRMd7QrIrvTVszyfR/VEitylYi5n6/FL/4Zk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org