$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC207FD8EB5711EA8CEFC93DC4F9AE02.roa File: BC207FD8EB5711EA8CEFC93DC4F9AE02.roa (raw, json) Hash identifier: sbG+x0lFUxFHUKZu5pUxqSOPspvT/DGRb81kHYPD1kA= Subject key identifier: 4A:FF:0D:69:D0:55:5E:60:D6:7C:37:4D:28:A2:05:D8:A1:FF:31:98 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DDF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC207FD8EB5711EA8CEFC93DC4F9AE02.roa Signing time: Wed 10 May 2023 16:31:26 +0000 ROA not before: Wed 10 May 2023 16:31:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139512 IP address blocks: 103.151.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28127 (0x6ddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:31:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc6de-1a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d7:a9:46:50:07:3a:37:88:a1:2f:e4:80:29: d9:3c:ae:7e:3e:5d:d2:a0:2e:db:8f:35:91:8a:fb: e8:c1:f2:e7:ea:48:b8:f3:ea:2a:66:f6:f4:ea:95: 1d:a5:ed:69:d8:13:54:4e:5b:39:e2:2c:fc:b7:e3: 8c:5a:59:4e:76:83:45:88:bd:ed:ba:0d:cb:14:d3: b1:b0:fe:3b:10:cd:d2:02:9a:00:0f:8f:fc:68:39: 19:22:04:42:74:21:3e:a1:49:1b:b2:bd:67:41:2d: f5:96:89:97:6e:77:c8:07:3a:9b:1c:1c:91:83:01: 06:06:cf:4f:f7:da:26:03:31:c2:3d:35:2b:06:9e: 23:e9:31:3e:b6:45:e8:68:26:0e:4d:3d:62:72:c3: 9c:de:9d:fb:f5:b7:66:b9:41:27:81:bb:2a:1d:17: 46:91:eb:1d:4e:5d:46:5e:53:89:0d:7a:bd:12:ef: 0f:d9:7a:0b:a7:e9:c9:92:29:bb:d8:32:db:55:4f: 63:7c:70:cd:f3:8c:d0:06:b0:b6:7b:6b:d9:ef:24: 47:72:ea:b6:29:26:d1:24:aa:b6:fa:9a:ee:a5:64: ee:1c:63:cc:fc:9f:89:3c:98:02:81:49:f3:3e:6e: 23:eb:d3:7a:88:4c:d2:bf:59:4c:8d:3c:1b:9b:93: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FF:0D:69:D0:55:5E:60:D6:7C:37:4D:28:A2:05:D8:A1:FF:31:98 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC207FD8EB5711EA8CEFC93DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.254.0/23 Signature Algorithm: sha256WithRSAEncryption a9:44:4a:a8:bb:a0:ab:7c:82:8d:a4:7b:f8:32:6e:07:33:3b: 9d:a0:3b:fa:23:cb:9f:25:f4:89:01:fd:46:b4:28:2c:5f:61: 65:b8:16:f9:e4:ff:d3:45:2b:f7:fd:b7:04:77:c1:72:a4:c9: 7d:12:6b:ab:e0:ce:55:89:54:09:c2:8d:67:77:d0:bc:55:73: dc:44:4a:ff:49:43:07:e1:0c:01:c7:a5:24:d1:63:dc:1b:7f: 26:51:f7:39:68:d8:63:55:70:7c:a1:17:7a:d9:dd:8d:4b:51: 31:38:51:9a:9c:cb:97:b3:8c:10:26:bd:23:1f:1d:01:ed:ff: a4:11:f5:b6:a8:f9:35:fb:f4:42:cf:ef:20:9b:30:44:1b:d0: f7:04:98:08:07:46:45:79:85:10:db:c0:c2:94:e5:d5:e2:9f: 45:50:0c:23:25:39:27:7c:25:6b:81:b4:09:b9:79:00:58:6f: 04:6f:5e:f0:83:77:3f:da:10:c6:cb:31:f8:db:bc:01:0a:55: 3a:1c:e1:86:ca:13:58:fb:97:d2:29:12:75:cc:1a:f2:e9:03: 2d:a4:f6:a5:3b:4f:93:34:9e:3a:c2:09:59:55:50:8f:d9:7c: 74:ae:96:96:aa:19:d7:4f:a1:8f:30:70:f3:fc:8f:c7:8d:a5: 14:70:a9:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMTI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzZkZS0xYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4depRlAHOjeIoS/kgCnZPK5+Pl3SoC7bjzWRivvowfLn6ki48+oqZvb06pUd pe1p2BNUTls54iz8t+OMWllOdoNFiL3tug3LFNOxsP47EM3SApoAD4/8aDkZIgRC dCE+oUkbsr1nQS31lomXbnfIBzqbHByRgwEGBs9P99omAzHCPTUrBp4j6TE+tkXo aCYOTT1icsOc3p379bdmuUEngbsqHRdGkesdTl1GXlOJDXq9Eu8P2XoLp+nJkim7 2DLbVU9jfHDN84zQBrC2e2vZ7yRHcuq2KSbRJKq2+prupWTuHGPM/J+JPJgCgUnz Pm4j69N6iEzSv1lMjTwbm5P7GQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEr/DWnQ VV5g1nw3TSiiBdih/zGYMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkMyMDdGRDhF QjU3MTFFQThDRUZDOTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnl/4wDQYJKoZIhvcNAQELBQADggEBAKlESqi7oKt8go2k e/gybgczO52gO/ojy58l9IkB/Ua0KCxfYWW4Fvnk/9NFK/f9twR3wXKkyX0Sa6vg zlWJVAnCjWd30LxVc9xESv9JQwfhDAHHpSTRY9wbfyZR9zlo2GNVcHyhF3rZ3Y1L UTE4UZqcy5ezjBAmvSMfHQHt/6QR9bao+TX79ELP7yCbMEQb0PcEmAgHRkV5hRDb wMKU5dXin0VQDCMlOSd8JWuBtAm5eQBYbwRvXvCDdz/aEMbLMfjbvAEKVToc4YbK E1j7l9IpEnXMGvLpAy2k9qU7T5M0njrCCVlVUI/ZfHSulpaqGddPoY8wcPP8j8eN pRRwqew= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org