$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B56E0C2C736D11EE99AC962DC4F9AE02.roa File: B56E0C2C736D11EE99AC962DC4F9AE02.roa (raw, json) Hash identifier: YJhoHnQP57BDoK5RDzQhYjvvLEoud1DaTrYGkBvMSWs= Subject key identifier: 3C:49:18:EF:33:BB:D1:D0:E2:A0:54:FA:8F:64:FF:E9:5E:42:F8:0B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7F09 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B56E0C2C736D11EE99AC962DC4F9AE02.roa Signing time: Thu 30 Nov 2023 07:25:24 +0000 ROA not before: Thu 30 Nov 2023 07:25:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133283 IP address blocks: 45.114.36.0/22 maxlen: 24 103.44.156.0/22 maxlen: 24 103.252.240.0/24 maxlen: 24 103.252.241.0/24 maxlen: 24 2001:df7:6300::/48 maxlen: 48 2401:4aa0::/36 maxlen: 36 2401:4aa0:1000::/36 maxlen: 36 2401:4aa0:2000::/36 maxlen: 36 2401:4aa0:3000::/36 maxlen: 36 2401:4aa0:4000::/36 maxlen: 36 2401:4aa0:5000::/36 maxlen: 36 2401:4aa0:6000::/36 maxlen: 36 2401:4aa0:7000::/36 maxlen: 36 2401:4aa0:8000::/36 maxlen: 36 2401:4aa0:9000::/36 maxlen: 36 2401:4aa0:a000::/36 maxlen: 36 2401:4aa0:b000::/36 maxlen: 36 2401:4aa0:c000::/36 maxlen: 36 2401:4aa0:d000::/36 maxlen: 36 2401:4aa0:e000::/36 maxlen: 36 2401:4aa0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32521 (0x7f09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 30 07:25:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=656838e4-94c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:39:25:d8:37:15:d1:fe:a7:75:a9:df:2b: c7:ba:bc:f3:18:4a:55:fb:e2:de:ed:12:c1:5c:37: 72:8e:91:d2:7d:7f:f2:c0:0a:11:02:29:c8:6a:6a: a8:55:b6:df:a6:64:78:63:05:1c:7f:45:11:4e:58: 58:e7:a8:e1:d2:0a:bf:6d:de:0d:53:b7:a5:1d:f8: d1:c0:6e:28:5a:d2:01:75:43:bb:78:62:13:eb:6d: ac:b9:80:88:6f:10:e7:49:de:c2:5b:f7:e8:09:6c: 40:e1:6c:b1:21:1d:94:63:ca:a4:9d:58:7a:61:07: ab:85:4d:a9:73:45:ea:4c:58:f0:2d:80:64:36:3d: d0:ff:3d:6d:36:9c:db:0d:f1:50:b3:74:bb:c6:b8: 6b:dd:05:52:8f:64:9e:19:aa:c0:ae:e1:03:d7:f6: f2:70:2c:69:2f:a9:8a:32:0d:81:bd:69:9b:8b:d5: 25:ad:83:84:82:f4:91:8e:aa:77:d1:89:7d:b1:7a: 80:b7:98:4c:2f:05:17:7e:28:2f:66:0e:78:e8:5c: 17:97:60:04:a1:8e:12:03:38:da:db:e6:70:4a:b8: 2d:0c:9f:8c:bd:80:ce:53:21:c2:a8:f3:32:20:d4: 32:d9:4b:eb:b2:7d:2e:4e:68:11:12:11:25:94:ec: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:49:18:EF:33:BB:D1:D0:E2:A0:54:FA:8F:64:FF:E9:5E:42:F8:0B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B56E0C2C736D11EE99AC962DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.36.0/22 103.44.156.0/22 103.252.240.0/23 IPv6: 2001:df7:6300::/48 2401:4aa0::/32 Signature Algorithm: sha256WithRSAEncryption 84:37:bd:1d:fc:5f:b7:c4:16:d7:64:3a:b5:26:22:9e:48:62: fe:a3:6b:d1:5e:bf:82:a6:0e:78:90:c5:25:59:17:be:a6:e5: 24:39:60:de:ea:30:57:7a:6a:9c:8f:9a:f7:34:cf:45:f8:29: a5:6b:46:da:8c:47:2b:13:ee:a9:7f:0c:20:f8:1c:e2:b4:82: 68:90:eb:41:7d:9c:21:9c:87:0d:10:c2:f1:48:f4:e1:33:fe: c3:96:3a:cf:08:b0:e7:06:23:c7:27:7a:73:da:c9:49:bf:d7: 2e:12:54:d5:75:06:46:14:eb:90:9c:45:7c:24:21:9f:9c:ad: 9e:c6:d1:84:3d:a6:51:72:82:eb:bd:d8:70:55:e2:39:04:d0: 4e:69:7d:ba:0c:68:c6:85:42:e7:27:5e:ee:80:42:55:95:22: d3:e9:0d:c1:11:c1:67:5a:68:07:46:6b:7b:55:3e:d8:8e:c4: 20:ab:3c:11:b9:63:62:db:24:59:60:ee:97:be:8d:8f:f1:1d: 3e:38:d4:44:db:b5:52:ce:86:12:b3:97:79:50:43:40:10:fc: 24:cf:da:91:76:0c:38:ce:4d:97:54:3b:5b:b6:ff:a9:bc:03: 12:66:b1:50:f9:30:49:a6:b0:ae:83:4b:a0:0e:8a:ae:c3:ed: bd:9a:cd:c4 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICfwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTMwMDcyNTI0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4MzhlNC05NGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApy45Jdg3FdH+p3Wp3yvHurzzGEpV++Le7RLBXDdyjpHSfX/ywAoRAinIamqo VbbfpmR4YwUcf0URTlhY56jh0gq/bd4NU7elHfjRwG4oWtIBdUO7eGIT622suYCI bxDnSd7CW/foCWxA4WyxIR2UY8qknVh6YQerhU2pc0XqTFjwLYBkNj3Q/z1tNpzb DfFQs3S7xrhr3QVSj2SeGarAruED1/bycCxpL6mKMg2BvWmbi9UlrYOEgvSRjqp3 0Yl9sXqAt5hMLwUXfigvZg546FwXl2AEoY4SAzja2+ZwSrgtDJ+MvYDOUyHCqPMy INQy2Uvrsn0uTmgREhEllOzpswIDAQABo4ICuTCCArUwHQYDVR0OBBYEFDxJGO8z u9HQ4qBU+o9k/+leQvgLMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjU2RTBDMkM3 MzZEMTFFRTk5QUM5NjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMBgEAgABMBIDBAItciQDBAJnLJwDBAFn/PAwFgQCAAIwEAMHACABDfdjAAMF ACQBSqAwDQYJKoZIhvcNAQELBQADggEBAIQ3vR38X7fEFtdkOrUmIp5IYv6ja9Fe v4KmDniQxSVZF76m5SQ5YN7qMFd6apyPmvc0z0X4KaVrRtqMRysT7ql/DCD4HOK0 gmiQ60F9nCGchw0QwvFI9OEz/sOWOs8IsOcGI8cnenPayUm/1y4SVNV1BkYU65Cc RXwkIZ+crZ7G0YQ9plFyguu92HBV4jkE0E5pfboMaMaFQucnXu6AQlWVItPpDcER wWdaaAdGa3tVPtiOxCCrPBG5Y2LbJFlg7pe+jY/xHT441ETbtVLOhhKzl3lQQ0AQ /CTP2pF2DDjOTZdUO1u2/6m8AxJmsVD5MEmmsK6DS6AOiq7D7b2azcQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org