$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBECA7C8C7F711E9A7EF4973C4F9AE02.roa File: BBECA7C8C7F711E9A7EF4973C4F9AE02.roa (raw, json) Hash identifier: uoBvDCGyIoCjzz2i9jO+EOChxk7jjFH2/0zKgOR5++A= Subject key identifier: 31:7F:9E:BD:26:62:2A:B6:96:D9:EC:96:E0:D6:C2:92:CB:B0:33:52 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B2C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBECA7C8C7F711E9A7EF4973C4F9AE02.roa Signing time: Wed 10 May 2023 16:18:22 +0000 ROA not before: Wed 10 May 2023 16:18:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134325 IP address blocks: 45.251.36.0/22 maxlen: 24 103.194.232.0/22 maxlen: 24 103.219.208.0/22 maxlen: 24 115.42.32.0/22 maxlen: 24 2405:23c0::/32 maxlen: 40 2405:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27436 (0x6b2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:18:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3cd-c1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:e6:6f:02:85:8e:69:75:70:bd:4b:3c:ce: b0:eb:4e:c2:4b:08:1b:38:68:c9:1d:06:4e:3c:3e: 70:b7:d9:93:fa:38:35:ee:3c:70:1e:bc:20:66:82: 26:33:c8:71:3c:3c:5a:13:21:fd:f5:f6:02:14:2e: 13:4e:f7:b3:30:20:e9:df:7c:7d:e4:d6:a4:57:05: 0e:65:59:16:76:65:b8:bb:65:2f:05:c6:8e:33:ee: f0:0c:b7:5f:4a:d3:a3:05:c4:1a:01:d3:9d:95:c6: 7a:27:b5:75:92:83:2c:c7:2d:37:76:d0:67:28:ea: 07:3e:b9:e5:ec:5a:8b:20:18:a9:a1:66:44:c5:28: 92:2d:96:24:43:fe:bb:09:b6:e9:31:65:68:3d:11: eb:b4:89:34:28:4c:a4:7e:2b:f1:37:46:1d:f0:ca: 91:e1:d6:cf:91:7d:bd:ab:c2:9d:80:c4:76:93:54: c2:99:4b:40:95:44:a0:03:ec:f6:c7:c8:34:96:04: be:cb:4e:80:28:ac:22:a5:61:53:46:25:9e:49:71: ef:47:e1:ac:d5:83:50:6d:f3:2e:9f:aa:0a:c7:3d: 5c:e9:2c:3a:78:75:da:87:b4:28:2a:ad:99:e4:55: ad:c8:b2:4d:ed:a9:9d:53:a2:f8:56:9e:82:52:38: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7F:9E:BD:26:62:2A:B6:96:D9:EC:96:E0:D6:C2:92:CB:B0:33:52 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBECA7C8C7F711E9A7EF4973C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.36.0/22 103.194.232.0/22 103.219.208.0/22 115.42.32.0/22 IPv6: 2405:23c0::/32 Signature Algorithm: sha256WithRSAEncryption 1e:fa:9e:b9:75:68:16:f5:74:a4:00:e1:1d:66:e8:2a:c6:91: 5c:70:24:25:08:14:2b:6a:72:21:01:a1:d5:f5:61:dd:02:27: 46:86:ea:fc:7f:38:ce:38:f4:ae:84:07:7e:67:c5:53:db:4e: a6:bd:f2:64:e8:4b:9b:2f:71:5e:df:1f:52:95:b5:52:37:b5: c8:f9:85:25:e6:4f:f1:47:39:a7:f2:c5:40:e0:42:ab:a2:54: 1f:8f:02:18:83:44:96:07:b5:df:70:3c:09:3f:19:25:eb:d9: 23:e1:9e:b4:7b:31:86:98:22:8b:61:06:ac:7e:b7:15:16:38: 66:4e:86:3a:ff:53:0e:f3:b7:94:ea:4c:c6:9c:d0:67:3e:3c: a8:b6:85:fc:30:a9:5b:36:27:8d:9a:00:42:25:45:93:a6:02: 99:df:7d:7a:87:bb:1f:3a:41:32:8c:84:97:c7:a9:7b:e7:af: 3d:7b:e1:5f:ef:ba:5d:2a:24:4e:2d:3c:2d:ff:fe:01:ca:6a: 02:36:79:4f:de:19:32:24:fd:b5:74:49:10:01:d0:ae:96:d7: 0a:59:81:a4:63:15:aa:8f:42:c4:ef:12:0f:71:0b:af:31:4d: 74:df:87:cb:72:4f:6f:ca:f5:05:36:e7:a5:4e:2e:e7:05:f0: b8:fa:6b:89 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICaywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxODIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNjZC1jMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApL7mbwKFjml1cL1LPM6w607CSwgbOGjJHQZOPD5wt9mT+jg17jxwHrwgZoIm M8hxPDxaEyH99fYCFC4TTvezMCDp33x95NakVwUOZVkWdmW4u2UvBcaOM+7wDLdf StOjBcQaAdOdlcZ6J7V1koMsxy03dtBnKOoHPrnl7FqLIBipoWZExSiSLZYkQ/67 CbbpMWVoPRHrtIk0KEykfivxN0Yd8MqR4dbPkX29q8KdgMR2k1TCmUtAlUSgA+z2 x8g0lgS+y06AKKwipWFTRiWeSXHvR+Gs1YNQbfMun6oKxz1c6Sw6eHXah7QoKq2Z 5FWtyLJN7amdU6L4Vp6CUjj+DQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDF/nr0m Yiq2ltnsluDWwpLLsDNSMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkJFQ0E3QzhD N0Y3MTFFOUE3RUY0OTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIt+yQDBAJnwugDBAJn29ADBAJzKiAwDQQCAAIwBwMFACQF I8AwDQYJKoZIhvcNAQELBQADggEBAB76nrl1aBb1dKQA4R1m6CrGkVxwJCUIFCtq ciEBodX1Yd0CJ0aG6vx/OM449K6EB35nxVPbTqa98mToS5svcV7fH1KVtVI3tcj5 hSXmT/FHOafyxUDgQquiVB+PAhiDRJYHtd9wPAk/GSXr2SPhnrR7MYaYIothBqx+ txUWOGZOhjr/Uw7zt5TqTMac0Gc+PKi2hfwwqVs2J42aAEIlRZOmApnffXqHux86 QTKMhJfHqXvnrz174V/vul0qJE4tPC3//gHKagI2eU/eGTIk/bV0SRAB0K6W1wpZ gaRjFaqPQsTvEg9xC68xTXTfh8tyT2/K9QU256VOLucF8Lj6a4k= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org