$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D19FE4B8CB0411ED91A5B43BC4F9AE02.roa File: D19FE4B8CB0411ED91A5B43BC4F9AE02.roa (raw, json) Hash identifier: p88wPTmRdRdEnPVaYnoktQzVe5OiIZq1Qo00Q2ohBU4= Subject key identifier: B4:83:DC:D8:81:2B:28:C2:EF:9C:6E:54:63:C0:9C:58:F6:BC:6C:E5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7124 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D19FE4B8CB0411ED91A5B43BC4F9AE02.roa Signing time: Wed 10 May 2023 16:46:49 +0000 ROA not before: Wed 10 May 2023 16:46:49 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150621 IP address blocks: 103.68.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28964 (0x7124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:46:49 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca78-ca98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:59:15:40:08:4f:d3:f4:42:19:a6:cd:b3: aa:53:56:a5:e9:36:ee:68:fd:8b:fd:0e:ac:de:56: 0e:17:d1:ce:3b:ce:14:de:66:fa:eb:6d:2d:ca:32: 84:66:44:26:84:84:df:69:1c:fc:b1:9f:73:90:3f: 99:2f:97:a5:96:c9:19:41:80:41:ea:9f:19:bc:99: 2c:a6:f8:c6:fd:7f:d5:23:df:e9:89:cd:2d:50:7e: dc:b3:84:65:fc:59:97:2d:d9:ff:f0:b2:86:06:31: 83:93:2b:92:f1:c6:8d:fb:70:35:8d:52:c6:9d:2d: 59:19:19:d1:65:97:31:b5:53:e7:be:34:f0:05:51: 07:6b:cd:e1:2b:93:a2:50:ee:ac:2e:42:34:d5:42: 2b:38:92:46:94:ef:16:90:48:0c:4f:b1:d5:00:18: 96:62:e8:5a:1d:24:35:ba:d1:d6:d8:d9:2a:02:8d: 90:c0:8e:57:62:1b:35:f2:bc:cd:dc:12:43:74:4b: c9:72:6b:c9:ce:9c:1c:96:b5:66:4b:57:c9:90:6a: da:cf:16:6e:4c:4a:3d:cc:ed:3b:7c:e1:0e:14:d0: 12:a6:61:aa:84:9b:98:e9:53:1a:e4:ac:44:42:f3: 39:4c:15:5c:66:be:e2:f1:ac:1c:dd:02:b3:75:71: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:83:DC:D8:81:2B:28:C2:EF:9C:6E:54:63:C0:9C:58:F6:BC:6C:E5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D19FE4B8CB0411ED91A5B43BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.142.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:ae:be:d6:fe:f8:bd:a4:55:f0:e7:3d:bf:6e:a5:f3:17:99: ab:61:7c:74:55:21:41:5c:8b:20:72:9b:9d:20:9c:9d:5b:46: 8d:73:0d:29:57:87:db:d0:6c:4a:ff:35:8a:ef:84:83:fb:28: 43:53:f3:21:e6:68:72:b3:98:66:aa:1f:ae:ca:37:18:5c:de: 18:14:73:76:6c:5d:8b:b1:41:dc:dd:ce:11:65:f9:da:d7:77: 28:db:7e:e7:df:0a:f6:91:da:e8:6d:2b:c8:0a:26:ad:d2:42: 21:ed:1b:e3:ec:24:39:00:2f:ff:09:e0:ef:b4:db:25:98:a9: de:66:41:4b:47:15:c2:52:71:3a:77:8c:50:6d:f1:88:18:f9: be:4c:d7:63:0e:f4:d5:e6:e7:b8:7a:d4:98:54:2e:a4:62:8c: 99:58:88:3f:94:0b:f4:5a:f5:b3:7b:74:48:8e:18:ef:06:09: 02:13:96:3d:3d:71:8f:22:47:65:5d:83:7b:ea:2c:4c:60:56: 19:14:5e:8e:e8:0b:7e:f5:7a:a8:ce:ab:3c:b8:27:41:89:ff: 74:21:d9:0d:78:6d:2b:3f:0a:75:2f:4e:23:6e:f8:45:f4:97: f6:01:38:77:b2:7d:96:af:db:ac:73:06:90:ef:fc:2c:3d:b5: b5:09:2b:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjQ5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E3OC1jYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtylZFUAIT9P0QhmmzbOqU1al6TbuaP2L/Q6s3lYOF9HOO84U3mb6620tyjKE ZkQmhITfaRz8sZ9zkD+ZL5ellskZQYBB6p8ZvJkspvjG/X/VI9/pic0tUH7cs4Rl /FmXLdn/8LKGBjGDkyuS8caN+3A1jVLGnS1ZGRnRZZcxtVPnvjTwBVEHa83hK5Oi UO6sLkI01UIrOJJGlO8WkEgMT7HVABiWYuhaHSQ1utHW2NkqAo2QwI5XYhs18rzN 3BJDdEvJcmvJzpwclrVmS1fJkGrazxZuTEo9zO07fOEOFNASpmGqhJuY6VMa5KxE QvM5TBVcZr7i8awc3QKzdXGP1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLSD3NiB KyjC75xuVGPAnFj2vGzlMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDE5RkU0QjhD QjA0MTFFRDkxQTVCNDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnRI4wDQYJKoZIhvcNAQELBQADggEBAJ6uvtb++L2kVfDn Pb9upfMXmathfHRVIUFciyBym50gnJ1bRo1zDSlXh9vQbEr/NYrvhIP7KENT8yHm aHKzmGaqH67KNxhc3hgUc3ZsXYuxQdzdzhFl+drXdyjbfuffCvaR2uhtK8gKJq3S QiHtG+PsJDkAL/8J4O+02yWYqd5mQUtHFcJScTp3jFBt8YgY+b5M12MO9NXm57h6 1JhULqRijJlYiD+UC/Ra9bN7dEiOGO8GCQITlj09cY8iR2Vdg3vqLExgVhkUXo7o C371eqjOqzy4J0GJ/3Qh2Q14bSs/CnUvTiNu+EX0l/YBOHeyfZav26xzBpDv/Cw9 tbUJKzY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org