$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4B5B58A7DB011EC937DA114C4F9AE02.roa File: D4B5B58A7DB011EC937DA114C4F9AE02.roa (raw, json) Hash identifier: 4o04iLWyHnCMKp1IG/RRhbfR+4GGAfBshyVAi1pBF+0= Subject key identifier: BE:30:78:A0:B0:C3:F5:D4:3B:65:1F:D5:A3:DF:25:6B:76:C9:79:63 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 69FA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4B5B58A7DB011EC937DA114C4F9AE02.roa Signing time: Wed 10 May 2023 16:12:29 +0000 ROA not before: Wed 10 May 2023 16:12:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132535 IP address blocks: 103.245.48.0/22 maxlen: 24 163.53.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27130 (0x69fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:12:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc26d-cf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:0d:be:ec:bc:45:69:e2:15:bc:60:24:df: 31:8d:b3:4e:39:df:b6:ca:85:c0:72:1e:11:f0:94: 6b:c1:89:9f:27:22:ea:fc:dc:aa:5c:d9:53:cf:73: a7:d0:02:06:fd:59:5c:2b:c0:68:42:b5:05:73:de: 93:ea:8c:ab:b0:34:76:18:b8:35:72:1e:fc:7c:ed: 24:f6:60:aa:3b:77:90:43:4f:6e:d7:0f:cd:b5:0f: d1:02:6c:8e:82:ea:11:11:2a:4e:4c:33:d6:85:61: 97:33:73:92:8b:91:65:47:f5:8a:37:41:bd:82:e4: d2:0a:30:a9:90:be:d3:21:c9:35:d5:33:10:e8:fc: e3:0d:d7:d8:14:e5:e1:22:77:e8:53:e9:5b:fe:db: 06:fc:4e:fc:c4:72:14:d2:e2:7c:1b:9e:15:ab:3c: 57:1e:d3:00:75:d8:3d:99:7e:e4:4d:52:88:48:4e: be:7d:45:1b:d7:b6:aa:5e:cc:8a:33:ba:2f:d1:a9: 53:ab:86:c6:15:8d:24:8e:bb:04:88:22:31:9b:5d: 4c:56:c6:a0:6a:77:cb:cc:96:eb:fa:2b:8c:4f:3c: ec:7e:3d:86:2c:46:2e:a4:77:2c:9f:f0:4d:10:5a: 4a:91:9f:6b:a3:83:ac:54:25:1b:22:1f:ce:c8:1f: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:30:78:A0:B0:C3:F5:D4:3B:65:1F:D5:A3:DF:25:6B:76:C9:79:63 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4B5B58A7DB011EC937DA114C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.48.0/22 163.53.252.0/22 Signature Algorithm: sha256WithRSAEncryption 04:c3:86:64:ee:d8:64:0a:37:00:85:c2:d1:7c:3b:b8:5e:c1: fc:53:5c:d5:38:39:1b:d8:46:28:c1:4b:eb:04:55:cd:ab:2a: 1b:fd:76:c7:21:ec:d1:d1:57:a6:0f:03:a1:f2:74:ba:e0:85: 36:c3:ba:fa:fe:f8:90:a2:f7:7c:81:68:b5:2e:5e:7b:64:75: 74:dd:88:81:31:bd:1c:00:99:23:e6:23:e4:41:dd:2d:c6:3d: a6:b6:db:06:71:9c:40:72:16:d8:e7:1f:66:1f:52:ce:7b:5f: bf:d9:94:98:ee:1f:91:1a:16:56:8b:cf:0c:95:a5:60:d9:a9: 7a:98:09:60:df:48:a0:49:91:fa:11:12:be:b7:5b:9a:fe:d2: 6f:43:1f:49:9e:48:c0:05:ab:42:00:c3:07:14:b6:f7:4c:78: 06:9a:30:b4:0c:c7:2c:d5:ae:16:ac:df:d4:43:1c:ce:59:de: ea:8a:4b:2e:57:aa:a2:4f:2e:a7:98:4e:0e:cd:31:93:b3:5e: 29:68:6e:42:f9:da:eb:2d:93:b0:12:13:99:72:44:8e:7d:07: d1:8a:51:f6:5c:76:59:d6:55:d3:3f:b2:6c:5e:05:d7:e0:37: 3c:1b:ab:85:68:58:c3:3b:fd:09:29:1b:cf:83:f5:ce:c7:4d: 7b:4a:52:1f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICafowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMjI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI2ZC1jZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjwNvuy8RWniFbxgJN8xjbNOOd+2yoXAch4R8JRrwYmfJyLq/NyqXNlTz3On 0AIG/VlcK8BoQrUFc96T6oyrsDR2GLg1ch78fO0k9mCqO3eQQ09u1w/NtQ/RAmyO guoRESpOTDPWhWGXM3OSi5FlR/WKN0G9guTSCjCpkL7TIck11TMQ6PzjDdfYFOXh InfoU+lb/tsG/E78xHIU0uJ8G54VqzxXHtMAddg9mX7kTVKISE6+fUUb17aqXsyK M7ov0alTq4bGFY0kjrsEiCIxm11MVsaganfLzJbr+iuMTzzsfj2GLEYupHcsn/BN EFpKkZ9ro4OsVCUbIh/OyB/f+wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFL4weKCw w/XUO2Uf1aPfJWt2yXljMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDRCNUI1OEE3 REIwMTFFQzkzN0RBMTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn9TADBAKjNfwwDQYJKoZIhvcNAQELBQADggEBAATDhmTu 2GQKNwCFwtF8O7hewfxTXNU4ORvYRijBS+sEVc2rKhv9dsch7NHRV6YPA6HydLrg hTbDuvr++JCi93yBaLUuXntkdXTdiIExvRwAmSPmI+RB3S3GPaa22wZxnEByFtjn H2YfUs57X7/ZlJjuH5EaFlaLzwyVpWDZqXqYCWDfSKBJkfoREr63W5r+0m9DH0me SMAFq0IAwwcUtvdMeAaaMLQMxyzVrhas39RDHM5Z3uqKSy5XqqJPLqeYTg7NMZOz XilobkL52ustk7ASE5lyRI59B9GKUfZcdlnWVdM/smxeBdfgNzwbq4VoWMM7/Qkp G8+D9c7HTXtKUh8= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:38 2024 by rpki-client on console-fra.rpki-client.org