$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2BADAD20E0211EBAA14892DC4F9AE02.roa File: C2BADAD20E0211EBAA14892DC4F9AE02.roa (raw, json) Hash identifier: lbXw833Iwz0UYeSe7TbiMrU/Rqf4sO6HuIjHBLBk48w= Subject key identifier: 45:B4:4C:78:18:EF:A6:00:1B:A9:96:93:04:6B:D4:D4:E4:17:FB:93 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71B0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2BADAD20E0211EBAA14892DC4F9AE02.roa Signing time: Wed 10 May 2023 16:49:29 +0000 ROA not before: Wed 10 May 2023 16:49:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 56110 IP address blocks: 43.231.124.0/22 maxlen: 24 103.10.234.0/23 maxlen: 24 103.50.212.0/23 maxlen: 24 202.0.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29104 (0x71b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:49:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb19-2bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:2a:09:39:74:d6:ac:d0:4d:cf:97:10:57: 09:65:57:b3:d2:3e:5b:94:30:e8:dc:be:07:5b:18: 48:5d:ea:5d:ad:96:a0:6b:ad:82:11:75:22:ca:91: 04:89:26:1a:89:2d:d0:30:11:59:80:82:3c:b5:8d: b6:60:1b:1e:c0:27:e4:85:68:15:fa:df:67:74:20: cf:b1:33:e1:7f:73:93:d5:a0:bc:0a:ba:7b:dc:4e: 81:47:a5:38:04:f0:df:dd:d4:19:fe:de:44:c3:74: 44:e4:bb:9e:27:8f:81:cf:6e:09:11:db:eb:38:ad: 7a:76:31:b8:bd:3a:b0:94:ca:52:6a:1c:b6:b1:67: 5a:3d:96:ae:d4:68:26:82:0e:5a:9f:7f:f1:3f:57: 77:a5:95:bd:76:31:84:b1:ba:17:2f:90:49:82:01: e4:c9:cb:c5:5d:f6:67:66:4d:33:ef:cf:2c:11:f5: fd:cc:88:94:15:19:23:f5:5f:39:96:5e:fc:ef:79: 5f:9e:5f:f6:6e:80:e1:5e:22:77:11:ad:ee:0f:25: de:04:e5:89:36:cd:6b:fb:95:7b:8a:ab:02:c5:44: 04:43:f8:db:be:f9:3f:2a:d9:39:e6:43:0a:b2:cc: d4:47:cb:2e:84:a9:7e:21:d4:26:78:cc:47:62:1e: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B4:4C:78:18:EF:A6:00:1B:A9:96:93:04:6B:D4:D4:E4:17:FB:93 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2BADAD20E0211EBAA14892DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.124.0/22 103.10.234.0/23 103.50.212.0/23 202.0.103.0/24 Signature Algorithm: sha256WithRSAEncryption 99:78:73:77:42:04:67:c2:b8:a7:60:40:7e:14:92:6e:5a:70: b1:b5:26:49:d0:3d:b6:e1:9f:e9:65:95:7c:3f:2e:99:1b:fc: 85:9a:96:2a:5e:75:29:f4:c5:b7:65:f0:3f:4e:4b:13:3a:7f: 96:83:d7:ef:4d:56:a8:17:b3:e4:b4:6d:21:0b:85:93:83:d8: 53:ac:f0:b1:d9:f0:27:6d:c5:3d:e9:9b:0a:60:e2:75:73:f4: bf:94:55:1d:76:c4:72:7b:c5:36:f5:67:13:f2:fc:7b:62:e3: 32:ba:ed:e6:1b:a8:32:51:66:fe:95:83:aa:e5:49:5c:08:6a: 2a:ae:26:c4:1f:80:66:f8:18:70:0a:30:be:59:95:47:a7:37: 82:7d:46:47:d8:2a:44:cf:6b:68:88:96:71:99:86:77:a1:2d: c0:ea:15:a8:7f:87:8c:39:b4:ea:91:a1:b8:3e:ed:af:21:55: 12:5b:d6:de:62:37:ac:ce:1c:b2:00:a9:e0:96:f6:68:3e:1e: 4a:8e:14:4e:f3:62:9d:9b:d4:17:de:5f:4a:83:ae:c4:bc:f8: 3b:68:b0:16:b4:72:2a:ef:9c:b2:40:44:43:90:9b:05:26:bd: 29:ea:c2:87:49:13:54:10:36:45:73:2f:29:5d:92:cd:3a:51: 57:b8:2d:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICcbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IxOS0yYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOMqCTl01qzQTc+XEFcJZVez0j5blDDo3L4HWxhIXepdrZaga62CEXUiypEE iSYaiS3QMBFZgII8tY22YBsewCfkhWgV+t9ndCDPsTPhf3OT1aC8Crp73E6BR6U4 BPDf3dQZ/t5Ew3RE5LueJ4+Bz24JEdvrOK16djG4vTqwlMpSahy2sWdaPZau1Ggm gg5an3/xP1d3pZW9djGEsboXL5BJggHkycvFXfZnZk0z788sEfX9zIiUFRkj9V85 ll7873lfnl/2boDhXiJ3Ea3uDyXeBOWJNs1r+5V7iqsCxUQEQ/jbvvk/Ktk55kMK sszUR8suhKl+IdQmeMxHYh5r0QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEW0THgY 76YAG6mWkwRr1NTkF/uTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzJCQURBRDIw RTAyMTFFQkFBMTQ4OTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr53wDBAFnCuoDBAFnMtQDBADKAGcwDQYJKoZIhvcNAQEL BQADggEBAJl4c3dCBGfCuKdgQH4Ukm5acLG1JknQPbbhn+lllXw/Lpkb/IWalipe dSn0xbdl8D9OSxM6f5aD1+9NVqgXs+S0bSELhZOD2FOs8LHZ8CdtxT3pmwpg4nVz 9L+UVR12xHJ7xTb1ZxPy/Hti4zK67eYbqDJRZv6Vg6rlSVwIaiquJsQfgGb4GHAK ML5ZlUenN4J9RkfYKkTPa2iIlnGZhnehLcDqFah/h4w5tOqRobg+7a8hVRJb1t5i N6zOHLIAqeCW9mg+HkqOFE7zYp2b1BfeX0qDrsS8+DtosBa0cirvnLJAREOQmwUm vSnqwodJE1QQNkVzLyldks06UVe4Lb8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org