$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC265844BEFB11EC82FBEC0AC4F9AE02.roa File: BC265844BEFB11EC82FBEC0AC4F9AE02.roa (raw, json) Hash identifier: gcihxU4KwqZvIO9O2L6l7Yoo+Ac9YnrEcGEcGfhLHNA= Subject key identifier: 7A:3D:72:73:66:1B:A2:AD:46:03:D2:13:F8:5E:85:A7:A3:DC:8E:42 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CE5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC265844BEFB11EC82FBEC0AC4F9AE02.roa Signing time: Wed 10 May 2023 16:26:44 +0000 ROA not before: Wed 10 May 2023 16:26:44 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137124 IP address blocks: 103.112.12.0/24 maxlen: 24 103.112.13.0/24 maxlen: 24 103.112.14.0/24 maxlen: 24 103.112.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27877 (0x6ce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:26:44 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5c4-8787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:6b:bd:8a:4d:93:a5:12:de:f5:4b:98:ad: 30:d4:6b:37:48:df:92:26:3c:6c:4d:9e:d3:45:87: 79:8d:48:a1:11:43:f4:00:d2:dd:36:34:0b:9a:de: f4:bb:72:f8:87:72:f2:eb:55:29:95:f4:a9:2f:c4: a2:3a:99:9b:0e:df:0f:30:3f:bb:31:65:12:ff:bc: 9f:ef:b2:55:53:ab:bf:84:5e:ad:b4:a7:99:78:0d: 92:5d:dc:ae:7f:48:99:ff:62:92:71:4f:6c:ce:51: 4f:72:e1:b6:a6:ea:fc:8b:b1:c8:11:07:f9:bd:21: d7:82:9d:12:9a:32:60:04:5b:cb:9c:c1:ca:5f:ac: fd:0b:e5:25:aa:12:95:dc:f9:1d:83:5c:12:64:0d: d8:7d:39:53:a0:40:60:5c:04:b0:9f:92:44:b1:22: 7b:9a:7d:39:aa:7a:31:db:5f:78:ae:1c:66:c2:95: 8e:13:5a:e9:d5:68:1a:20:0e:dc:2d:11:cc:62:50: a4:b1:41:0b:13:2e:7d:fc:f9:21:4c:44:90:ef:5d: 46:0b:7b:52:e7:0d:85:76:b6:36:36:45:64:ca:3d: 11:4a:9e:b6:0b:e9:9d:45:62:16:60:58:85:f2:fb: d0:23:59:72:a5:69:20:c9:6f:71:e6:bb:ed:1a:ce: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3D:72:73:66:1B:A2:AD:46:03:D2:13:F8:5E:85:A7:A3:DC:8E:42 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC265844BEFB11EC82FBEC0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.12.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:59:8e:f9:d2:57:90:75:3f:0a:8d:7d:72:0f:94:98:05:f9: f6:c3:87:2f:c6:f4:d3:69:d5:f9:18:17:12:18:09:55:37:a9: c0:9a:97:de:3c:8a:38:8a:a2:dc:5e:2c:0e:76:d5:45:7a:1a: f0:6e:77:80:65:da:01:68:2d:0d:2a:33:4c:3d:63:1f:ed:fa: 9a:d3:b7:58:b2:8c:15:85:2d:f5:87:8b:30:9a:2d:23:1f:79: 3c:8c:69:89:b1:8f:2f:77:41:34:67:83:51:16:8d:45:85:17: d2:18:97:34:63:99:63:b5:bc:d4:91:16:6f:0f:f0:f3:2d:bd: c0:e0:b3:54:b8:2e:04:94:9d:e4:64:89:15:f6:f8:a8:1a:02: 46:72:b2:c9:f2:bf:7f:1e:ac:89:d5:52:ae:a1:de:22:33:6b: f6:82:2e:fd:82:88:19:55:ff:c9:69:90:e9:ef:47:41:0f:34: f7:51:1f:b1:88:a7:8d:7d:14:d2:70:a9:7e:dc:e3:d0:4d:b5: 7a:b2:cd:97:a3:55:13:53:a2:65:5d:98:96:41:c3:9f:4e:f5: 9f:0a:45:0c:45:2d:69:f5:ac:cb:84:47:db:d1:c8:fa:a9:e4: 70:0c:e5:41:0a:46:da:9f:4a:5d:44:b4:f0:1a:19:d3:45:8f: 66:6b:88:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNjQ0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzVjNC04Nzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zZrvYpNk6US3vVLmK0w1Gs3SN+SJjxsTZ7TRYd5jUihEUP0ANLdNjQLmt70 u3L4h3Ly61UplfSpL8SiOpmbDt8PMD+7MWUS/7yf77JVU6u/hF6ttKeZeA2SXdyu f0iZ/2KScU9szlFPcuG2pur8i7HIEQf5vSHXgp0SmjJgBFvLnMHKX6z9C+UlqhKV 3Pkdg1wSZA3YfTlToEBgXASwn5JEsSJ7mn05qnox2194rhxmwpWOE1rp1WgaIA7c LRHMYlCksUELEy59/PkhTESQ711GC3tS5w2FdrY2NkVkyj0RSp62C+mdRWIWYFiF 8vvQI1lypWkgyW9x5rvtGs4RlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHo9cnNm G6KtRgPSE/hehaej3I5CMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkMyNjU4NDRC RUZCMTFFQzgyRkJFQzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncAwwDQYJKoZIhvcNAQELBQADggEBAJpZjvnSV5B1PwqN fXIPlJgF+fbDhy/G9NNp1fkYFxIYCVU3qcCal948ijiKotxeLA521UV6GvBud4Bl 2gFoLQ0qM0w9Yx/t+prTt1iyjBWFLfWHizCaLSMfeTyMaYmxjy93QTRng1EWjUWF F9IYlzRjmWO1vNSRFm8P8PMtvcDgs1S4LgSUneRkiRX2+KgaAkZyssnyv38erInV Uq6h3iIza/aCLv2CiBlV/8lpkOnvR0EPNPdRH7GIp419FNJwqX7c49BNtXqyzZej VRNTomVdmJZBw59O9Z8KRQxFLWn1rMuER9vRyPqp5HAM5UEKRtqfSl1EtPAaGdNF j2ZriGg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org