$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa File: D28A5F86771411EE957B4716C4F9AE02.roa (raw, json) Hash identifier: V7079tVx+5IyvWKZkgRSZI38bAUztde3xfIg4OUyVe0= Subject key identifier: 43:57:AB:D1:47:18:D7:44:9D:EE:3E:63:49:EC:9C:36:6A:31:9E:7D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7CC8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa Signing time: Mon 30 Oct 2023 11:09:41 +0000 ROA not before: Mon 30 Oct 2023 11:09:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142502 IP address blocks: 27.0.253.0/24 maxlen: 24 43.246.104.0/24 maxlen: 24 45.249.124.0/22 maxlen: 22 45.249.124.0/23 maxlen: 24 45.249.236.0/22 maxlen: 24 45.251.244.0/22 maxlen: 24 45.251.252.0/22 maxlen: 24 103.66.116.0/22 maxlen: 24 103.66.144.0/24 maxlen: 24 103.68.50.0/24 maxlen: 24 103.68.51.0/24 maxlen: 24 103.70.96.0/20 maxlen: 24 137.59.128.0/20 maxlen: 24 2407:ca40::/32 maxlen: 32 2407:ca40:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31944 (0x7cc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 30 11:09:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=653f8ef5-4423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:a5:3f:a5:0a:ba:b0:ca:e9:b1:c2:46:82: 41:78:d5:79:56:39:09:9a:3e:17:a0:6f:d8:bf:fc: 17:8d:63:e8:c2:43:90:64:57:74:c6:26:c9:18:05: c6:d1:40:ec:77:56:39:30:41:f5:95:49:79:68:c1: 24:7f:e8:f8:74:fe:62:64:f1:d9:a7:c3:dd:2a:c1: 6b:16:57:e5:c5:c9:fd:d6:72:07:f6:55:33:57:13: 21:73:30:91:ab:41:c4:fd:75:52:bd:51:f3:fd:5e: fe:94:40:52:71:e5:56:0e:f2:da:e4:67:cb:a6:da: f6:ad:ab:3a:78:c6:86:97:6a:5a:30:d1:0b:2e:24: 27:2e:a5:62:70:88:97:f7:a8:40:a5:4a:29:66:d0: af:06:d8:83:bc:08:70:81:ae:05:74:30:b4:39:a8: 33:63:0a:94:a5:1b:9d:17:fa:81:a6:6e:fe:f1:c5: 39:72:c9:c5:ac:2d:9f:cd:8a:7d:48:f2:4a:fb:49: d7:2b:01:7c:aa:07:e2:2d:cb:fd:bf:ec:57:41:dd: 7e:4c:2d:51:79:2c:41:26:53:f7:b6:eb:30:38:8b: eb:a1:65:27:36:91:11:a4:1e:42:a2:1c:2e:68:17: 82:af:86:26:40:9b:51:16:17:1a:93:13:02:64:96: 0e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:AB:D1:47:18:D7:44:9D:EE:3E:63:49:EC:9C:36:6A:31:9E:7D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.253.0/24 43.246.104.0/24 45.249.124.0/22 45.249.236.0/22 45.251.244.0/22 45.251.252.0/22 103.66.116.0/22 103.66.144.0/24 103.68.50.0/23 103.70.96.0/20 137.59.128.0/20 IPv6: 2407:ca40::/32 Signature Algorithm: sha256WithRSAEncryption 61:4e:d0:f2:f0:50:64:8e:6f:6f:3a:37:a2:0f:49:97:d9:d1: 3b:e1:cd:1c:a5:fd:7c:7a:84:5a:35:a0:f1:0a:28:3d:f1:f9: 68:36:9d:ec:52:ed:aa:9d:89:b0:7f:0d:a9:05:00:0b:37:6e: f2:41:33:6d:ba:78:8d:aa:6a:aa:40:0a:4e:ca:fe:ff:74:67: 13:36:4a:2d:5f:31:a1:3e:89:c2:0c:e5:dc:79:ec:e8:5e:b6: 72:68:32:10:c1:27:8f:9f:6b:2c:93:5f:80:9d:3d:04:51:f0: bf:b6:02:df:36:25:1d:d8:3f:59:0f:35:c3:34:b2:90:48:5d: 75:0d:94:51:f5:93:24:e6:28:da:e0:62:d4:53:56:60:c4:71: a0:d1:0d:85:d5:8a:a0:97:51:fd:e4:c8:36:b7:6d:f7:cb:f3: 87:11:b7:db:51:4f:6c:09:4c:5c:92:35:7d:00:41:35:7b:db: 36:71:8d:bc:a4:59:15:15:9c:5c:26:40:35:86:3e:97:f9:1d: dd:69:e1:3d:ae:52:2a:d3:1a:cb:f4:83:3e:37:c2:c0:1a:2b: 77:9b:52:84:86:76:9c:22:30:46:8d:55:83:83:9c:85:12:9d: 81:2b:53:6c:b4:19:47:a2:73:d4:9a:cd:6c:2e:a5:b8:7f:7e: 0b:b5:ed:ef -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICfMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDMwMTEwOTQxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNmOGVmNS00NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkmlP6UKurDK6bHCRoJBeNV5VjkJmj4XoG/Yv/wXjWPowkOQZFd0xibJGAXG 0UDsd1Y5MEH1lUl5aMEkf+j4dP5iZPHZp8PdKsFrFlflxcn91nIH9lUzVxMhczCR q0HE/XVSvVHz/V7+lEBSceVWDvLa5GfLptr2ras6eMaGl2paMNELLiQnLqVicIiX 96hApUopZtCvBtiDvAhwga4FdDC0OagzYwqUpRudF/qBpm7+8cU5csnFrC2fzYp9 SPJK+0nXKwF8qgfiLcv9v+xXQd1+TC1ReSxBJlP3tuswOIvroWUnNpERpB5Cohwu aBeCr4YmQJtRFhcakxMCZJYO3wIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFENXq9FH GNdEne4+Y0nsnDZqMZ59MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDI4QTVGODY3 NzE0MTFFRTk1N0I0NzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMEgEAgABMEIDBAAbAP0DBAAr9mgDBAIt+XwDBAIt+ewDBAIt+/QDBAIt+/wD BAJnQnQDBABnQpADBAFnRDIDBARnRmADBASJO4AwDQQCAAIwBwMFACQHykAwDQYJ KoZIhvcNAQELBQADggEBAGFO0PLwUGSOb286N6IPSZfZ0TvhzRyl/Xx6hFo1oPEK KD3x+Wg2nexS7aqdibB/DakFAAs3bvJBM226eI2qaqpACk7K/v90ZxM2Si1fMaE+ icIM5dx57OhetnJoMhDBJ4+fayyTX4CdPQRR8L+2At82JR3YP1kPNcM0spBIXXUN lFH1kyTmKNrgYtRTVmDEcaDRDYXViqCXUf3kyDa3bffL84cRt9tRT2wJTFySNX0A QTV72zZxjbykWRUVnFwmQDWGPpf5Hd1p4T2uUirTGsv0gz43wsAaK3ebUoSGdpwi MEaNVYODnIUSnYErU2y0GUeic9SazWwupbh/fgu17e8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org