$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73704E0BDD711EA96C4CC31C4F9AE02.roa File: B73704E0BDD711EA96C4CC31C4F9AE02.roa (raw, json) Hash identifier: BYX55RZsocM5vm2wdVNi5hm+nKTkQFdp7DrdefHKJdM= Subject key identifier: A4:BC:D7:1D:E2:DE:84:1B:6F:00:50:94:01:7F:47:DF:00:D4:97:DA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7188 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73704E0BDD711EA96C4CC31C4F9AE02.roa Signing time: Wed 10 May 2023 16:48:43 +0000 ROA not before: Wed 10 May 2023 16:48:43 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45271 IP address blocks: 106.66.18.0/24 maxlen: 24 106.66.19.0/24 maxlen: 24 106.66.20.0/24 maxlen: 24 106.66.21.0/24 maxlen: 24 106.66.22.0/24 maxlen: 24 106.66.23.0/24 maxlen: 24 106.66.24.0/24 maxlen: 24 106.66.25.0/24 maxlen: 24 106.66.26.0/24 maxlen: 24 106.66.27.0/24 maxlen: 24 106.66.28.0/24 maxlen: 24 106.66.29.0/24 maxlen: 24 106.66.30.0/24 maxlen: 24 106.66.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29064 (0x7188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:43 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcaea-74d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:cb:74:cb:0c:11:79:81:c5:e5:08:30:cc: 70:2e:63:4d:5e:9f:42:75:e9:0d:77:5d:57:bd:e3: 92:16:58:d1:92:fe:cf:1e:b5:47:94:09:57:6d:06: a7:5c:ed:5c:f7:c5:d4:5e:c7:64:6e:cc:e8:68:80: ef:b9:23:b9:13:ec:f0:02:29:a9:b0:e3:a7:1e:63: f9:66:5b:aa:23:e2:3d:31:22:2e:5e:3f:8b:f5:c5: 76:f5:8d:a6:62:ea:55:61:d5:d3:d1:6c:a2:30:73: 4a:b7:4c:49:5a:85:8e:d1:0a:99:4e:92:ae:25:81: 2f:68:6c:98:f5:f2:32:64:db:56:af:95:5f:64:df: a7:14:19:c5:39:0c:51:0a:9c:f8:23:1b:3d:3e:dc: 7e:de:32:33:ce:31:3f:d5:45:8f:f7:bb:6b:39:b5: 33:ef:21:4e:6e:4e:e4:bb:e7:e1:a6:d8:82:c5:8c: 95:c5:46:ae:bf:0a:3f:65:98:ed:d4:f5:23:3a:c9: 02:90:74:79:ac:ef:da:2d:7a:c1:d9:0d:be:29:c9: fb:00:0a:0d:fa:eb:56:8a:71:65:5d:f2:81:fe:1b: bc:13:da:f4:ab:bc:8d:e6:86:7f:09:7a:c3:60:85: eb:ef:f9:2e:e4:f9:32:4d:f4:22:6d:66:7e:9a:81: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BC:D7:1D:E2:DE:84:1B:6F:00:50:94:01:7F:47:DF:00:D4:97:DA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73704E0BDD711EA96C4CC31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.66.18.0-106.66.31.255 Signature Algorithm: sha256WithRSAEncryption 28:c8:17:7c:5a:72:30:08:d3:b7:01:51:ea:34:4b:76:0f:cd: 72:b9:45:e3:bd:22:4c:c5:6b:26:09:67:d5:78:fb:19:99:b4: 0a:b4:3e:b2:4b:a9:61:19:75:18:be:6f:5c:5d:c0:51:f0:f1: 2f:9b:4d:e8:49:61:36:33:c2:05:b9:26:a5:64:50:a6:70:10: 3b:37:8f:fd:a0:ea:d7:4f:a2:1a:f7:cc:4f:e2:47:ae:e2:d1: e8:5f:e4:f6:23:b6:1f:51:ea:a6:34:3d:01:c0:29:27:8f:f4: 53:77:2b:6c:24:90:66:25:af:74:78:cf:34:53:fa:f2:b7:f1: 0f:05:dd:fe:52:2f:4c:30:56:0f:43:48:61:3a:59:81:f8:05: 44:98:44:fa:48:0a:78:89:36:10:d8:74:8e:3f:c3:3a:7c:55: 84:1b:67:27:b8:45:de:54:6a:28:78:64:71:95:23:48:a0:c1: eb:b9:b3:d4:49:62:94:07:b2:a9:e1:5c:70:fa:75:60:de:39: 43:16:bc:47:42:c6:8d:2e:b6:83:78:c3:75:34:d3:e2:1d:a4: 9b:f8:d6:21:9b:34:fb:8c:35:bd:af:6e:28:9a:14:ed:7a:5e: 0a:9f:cd:97:35:ad:d3:27:5c:42:6c:6d:5e:1d:a9:81:03:30: 73:ae:1b:a4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICcYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODQzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FlYS03NGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub/LdMsMEXmBxeUIMMxwLmNNXp9CdekNd11XveOSFljRkv7PHrVHlAlXbQan XO1c98XUXsdkbszoaIDvuSO5E+zwAimpsOOnHmP5ZluqI+I9MSIuXj+L9cV29Y2m YupVYdXT0WyiMHNKt0xJWoWO0QqZTpKuJYEvaGyY9fIyZNtWr5VfZN+nFBnFOQxR Cpz4Ixs9Ptx+3jIzzjE/1UWP97trObUz7yFObk7ku+fhptiCxYyVxUauvwo/ZZjt 1PUjOskCkHR5rO/aLXrB2Q2+Kcn7AAoN+utWinFlXfKB/hu8E9r0q7yN5oZ/CXrD YIXr7/ku5PkyTfQibWZ+moGniQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFKS81x3i 3oQbbwBQlAF/R98A1JfaMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjczNzA0RTBC REQ3MTFFQTk2QzRDQzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAWpCEgMEBWpCADANBgkqhkiG9w0BAQsFAAOCAQEAKMgX fFpyMAjTtwFR6jRLdg/NcrlF470iTMVrJgln1Xj7GZm0CrQ+skupYRl1GL5vXF3A UfDxL5tN6ElhNjPCBbkmpWRQpnAQOzeP/aDq10+iGvfMT+JHruLR6F/k9iO2H1Hq pjQ9AcApJ4/0U3crbCSQZiWvdHjPNFP68rfxDwXd/lIvTDBWD0NIYTpZgfgFRJhE +kgKeIk2ENh0jj/DOnxVhBtnJ7hF3lRqKHhkcZUjSKDB67mz1ElilAeyqeFccPp1 YN45Qxa8R0LGjS62g3jDdTTT4h2km/jWIZs0+4w1va9uKJoU7XpeCp/NlzWt0ydc QmxtXh2pgQMwc64bpA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org