$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24A6928F50611EB8BF98975C4F9AE02.roa File: C24A6928F50611EB8BF98975C4F9AE02.roa (raw, json) Hash identifier: Mai833kxZmsDzvFggNkaNQ6RNFzj+gSFScl3J2VeGDM= Subject key identifier: AC:B0:FE:92:1B:CD:57:E0:5E:AA:CF:FF:46:4E:36:7D:22:2E:30:56 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F6A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24A6928F50611EB8BF98975C4F9AE02.roa Signing time: Wed 10 May 2023 16:38:42 +0000 ROA not before: Wed 10 May 2023 16:38:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142487 IP address blocks: 103.168.177.0/24 maxlen: 24 103.176.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28522 (0x6f6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:38:42 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc891-2808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:f3:8a:eb:46:ea:2c:29:69:8e:f1:fc:f2: 38:87:11:84:bb:22:24:a5:df:71:b1:8d:10:d3:ad: f2:fe:f8:f9:77:f1:cf:37:9a:5d:44:aa:88:d9:0e: e7:61:c5:36:b9:99:2c:6a:38:3a:8d:db:e0:78:5a: f7:e1:b0:21:0f:93:70:e7:66:e1:2c:cc:27:1d:2c: 8b:8a:fb:48:61:80:9d:4a:a3:bc:0a:17:4a:3a:d8: 76:2d:f5:02:81:3c:91:5e:53:e0:f4:2c:79:13:3f: f7:93:ed:bc:fd:90:79:34:21:90:3f:1c:52:a1:66: ae:e4:f5:6f:35:76:ac:b5:eb:b3:66:c9:78:d8:91: 6d:b9:bd:b1:db:4f:70:9c:04:71:09:50:0e:0d:0a: f3:b6:4c:fd:94:27:27:d7:4e:b1:57:fa:a0:e2:20: e0:47:53:53:24:7a:fb:e7:54:64:9f:42:c1:b8:90: 32:3f:d0:e2:ec:85:90:a2:58:5f:44:4a:36:c5:da: f4:b7:f3:e1:4f:c7:55:87:11:88:7c:79:18:ac:b7: 42:6e:9f:47:dd:f1:04:09:1e:3a:87:de:c6:0a:aa: 27:5b:6f:a5:32:d2:46:ec:ac:45:be:10:54:c4:19: 14:bd:93:c5:ed:68:2e:f6:b0:13:d5:75:72:9e:83: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B0:FE:92:1B:CD:57:E0:5E:AA:CF:FF:46:4E:36:7D:22:2E:30:56 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24A6928F50611EB8BF98975C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.177.0/24 103.176.176.0/24 Signature Algorithm: sha256WithRSAEncryption 37:87:e5:1f:5e:25:e4:8e:19:55:76:85:da:f4:14:5e:5c:e8: 77:12:1d:a9:3b:9a:e2:77:33:24:dd:2d:4a:d6:2c:39:22:5f: cb:cc:cd:15:a7:b7:2f:49:e0:aa:2c:df:c3:2e:75:5d:a5:38: ce:33:46:8b:18:a5:c3:43:c4:bf:21:66:60:1a:a1:53:2f:cc: 40:15:b0:e2:df:21:9b:a9:de:69:71:d4:9a:7e:db:b1:59:11: ed:c7:6a:fe:4e:3e:a8:fa:16:39:73:71:89:36:b3:7c:3c:6c: ec:3d:d0:a7:af:61:f6:b1:32:48:f0:ca:02:c7:de:d8:c1:26: 2d:64:ab:77:3b:a7:f1:f7:52:4a:7d:aa:5a:74:f1:d8:c3:5e: 17:02:c7:c8:98:8e:24:8b:c4:a9:8d:98:37:5f:e2:3e:31:c0: 7b:97:55:20:5f:95:03:bc:bd:37:1f:f1:2c:68:dd:58:0e:86: bf:6a:b1:19:c9:8a:32:94:74:7d:8c:03:0b:c1:c9:8c:3a:52: d5:e2:7f:6b:e2:ef:94:22:2e:5f:6c:d4:ef:df:23:39:02:cf: be:d3:d6:6d:4b:4a:15:c2:ae:b5:40:46:ca:5d:33:b1:16:95: 17:45:dd:67:4e:62:b4:08:bb:aa:3a:55:6e:c1:88:41:54:fc: 4b:ba:52:79 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICb2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzODQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg5MS0yODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnHziutG6iwpaY7x/PI4hxGEuyIkpd9xsY0Q063y/vj5d/HPN5pdRKqI2Q7n YcU2uZksajg6jdvgeFr34bAhD5Nw52bhLMwnHSyLivtIYYCdSqO8ChdKOth2LfUC gTyRXlPg9Cx5Ez/3k+28/ZB5NCGQPxxSoWau5PVvNXasteuzZsl42JFtub2x209w nARxCVAODQrztkz9lCcn106xV/qg4iDgR1NTJHr751Rkn0LBuJAyP9Di7IWQolhf REo2xdr0t/PhT8dVhxGIfHkYrLdCbp9H3fEECR46h97GCqonW2+lMtJG7KxFvhBU xBkUvZPF7Wgu9rAT1XVynoO9IwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKyw/pIb zVfgXqrP/0ZONn0iLjBWMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzI0QTY5MjhG NTA2MTFFQjhCRjk4OTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnqLEDBABnsLAwDQYJKoZIhvcNAQELBQADggEBADeH5R9e JeSOGVV2hdr0FF5c6HcSHak7muJ3MyTdLUrWLDkiX8vMzRWnty9J4Kos38MudV2l OM4zRosYpcNDxL8hZmAaoVMvzEAVsOLfIZup3mlx1Jp+27FZEe3Hav5OPqj6Fjlz cYk2s3w8bOw90KevYfaxMkjwygLH3tjBJi1kq3c7p/H3Ukp9qlp08djDXhcCx8iY jiSLxKmNmDdf4j4xwHuXVSBflQO8vTcf8Sxo3VgOhr9qsRnJijKUdH2MAwvByYw6 UtXif2vi75QiLl9s1O/fIzkCz77T1m1LShXCrrVARspdM7EWlRdF3WdOYrQIu6o6 VW7BiEFU/Eu6Unk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org