$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5A863748E4B11ECB7A36987C4F9AE02.roa File: D5A863748E4B11ECB7A36987C4F9AE02.roa (raw, json) Hash identifier: i85ybwsmgWNaL61gtHc1MjT+I5QyDrQVppOZi+WT7WY= Subject key identifier: 94:02:92:3C:4D:1D:24:7D:FD:7C:88:57:01:C9:82:E7:93:D9:0B:8A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71AB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5A863748E4B11ECB7A36987C4F9AE02.roa Signing time: Wed 10 May 2023 16:49:24 +0000 ROA not before: Wed 10 May 2023 16:49:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 55831 IP address blocks: 49.136.0.0/14 maxlen: 14 101.208.0.0/12 maxlen: 12 103.18.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29099 (0x71ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:49:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb14-e2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:a2:62:a8:89:a7:49:a1:74:2d:5c:f0:17: 3e:17:9e:9b:0b:0a:a4:53:9e:52:bf:2d:b9:d7:02: ed:40:61:30:8a:00:9d:41:1d:ac:62:1d:bf:28:ac: c6:4d:db:f0:1e:6a:c2:56:ce:58:f5:3c:db:fd:01: 6e:b0:d4:2a:69:e2:fa:c7:82:63:54:32:8b:f3:7d: ec:1b:c1:15:68:e0:02:eb:a4:8c:ff:28:07:e8:6a: f2:cc:5c:a4:26:e2:8b:41:f2:5d:fc:d9:c4:03:de: 49:23:75:52:3e:07:c0:32:e1:69:a7:f6:c1:f4:db: 3b:cd:8c:90:d4:de:f1:fd:3c:e3:ec:18:3e:d4:64: 08:3d:06:0f:33:26:3a:57:74:df:0e:86:95:6e:76: 2c:9c:86:8d:4d:60:97:f0:54:2c:bd:25:cf:e7:d4: a6:6c:ea:1a:b1:62:3d:e9:73:a3:f3:24:e4:0d:43: df:05:03:43:18:5d:f5:89:ff:90:a2:14:86:99:6b: 62:44:13:30:c0:a6:0b:2e:60:49:4e:06:a5:54:0c: c3:3d:c0:80:7e:6e:5e:28:d6:ee:8a:ef:f6:f5:ae: 32:07:d7:11:36:8b:67:d3:d0:0f:66:81:a4:42:c6: 98:4d:e5:d5:55:d2:44:b7:3e:32:47:42:b4:a5:52: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:02:92:3C:4D:1D:24:7D:FD:7C:88:57:01:C9:82:E7:93:D9:0B:8A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5A863748E4B11ECB7A36987C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.136.0.0/14 101.208.0.0/12 103.18.216.0/22 Signature Algorithm: sha256WithRSAEncryption 88:c9:2d:c1:4f:a1:0e:ce:45:08:66:83:14:27:6f:d2:f4:61: d4:1d:3e:c6:ec:6c:f1:02:92:df:5b:90:13:22:df:9b:a2:2a: 30:99:e7:5c:3a:28:77:8b:54:ff:6c:5b:74:21:bd:b7:e3:c1: 92:45:da:f3:ea:db:de:0e:c8:b7:7c:2d:51:e0:d4:f4:88:f9: 15:e9:b4:be:2f:cf:cf:97:4b:e7:f7:38:11:af:7c:8f:2f:c5: f6:59:02:90:3e:6e:f3:bf:02:8e:99:b8:31:de:ff:e4:f3:de: bf:28:2c:b4:7a:f2:0c:61:8e:54:6f:bf:f5:93:17:e6:7d:d9: eb:ab:6c:75:63:9c:31:7a:a5:47:43:35:07:70:f7:41:e9:1a: 5b:72:a4:06:4a:2e:89:d2:3d:f9:d1:1c:f0:0a:b7:0f:ac:e1: d0:6c:b0:8b:0f:59:d6:6c:b2:ec:07:3e:ab:9c:b1:a4:2f:4b: 6e:65:50:94:39:7a:ef:c2:ee:b8:4d:65:7f:5d:70:53:1c:a6: 32:2e:44:24:56:5a:b5:fc:ef:7c:ba:26:a1:fc:10:bb:0e:a5: 63:83:eb:ba:56:2b:60:3f:15:ba:64:5c:fd:b4:cc:8c:91:83: 7a:42:d7:6d:01:3a:84:a5:8b:3d:28:19:56:59:c9:3a:58:a1: fe:1d:f9:d7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICcaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTI0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IxNC1lMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dmiYqiJp0mhdC1c8Bc+F56bCwqkU55Svy251wLtQGEwigCdQR2sYh2/KKzG TdvwHmrCVs5Y9Tzb/QFusNQqaeL6x4JjVDKL833sG8EVaOAC66SM/ygH6GryzFyk JuKLQfJd/NnEA95JI3VSPgfAMuFpp/bB9Ns7zYyQ1N7x/Tzj7Bg+1GQIPQYPMyY6 V3TfDoaVbnYsnIaNTWCX8FQsvSXP59SmbOoasWI96XOj8yTkDUPfBQNDGF31if+Q ohSGmWtiRBMwwKYLLmBJTgalVAzDPcCAfm5eKNbuiu/29a4yB9cRNotn09APZoGk QsaYTeXVVdJEtz4yR0K0pVI8GQIDAQABo4ICnzCCApswHQYDVR0OBBYEFJQCkjxN HSR9/XyIVwHJgueT2QuKMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDVBODYzNzQ4 RTRCMTFFQ0I3QTM2OTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E GjAYMBYEAgABMBADAwIxiAMDBGXQAwQCZxLYMA0GCSqGSIb3DQEBCwUAA4IBAQCI yS3BT6EOzkUIZoMUJ2/S9GHUHT7G7GzxApLfW5ATIt+boiowmedcOih3i1T/bFt0 Ib2348GSRdrz6tveDsi3fC1R4NT0iPkV6bS+L8/Pl0vn9zgRr3yPL8X2WQKQPm7z vwKOmbgx3v/k896/KCy0evIMYY5Ub7/1kxfmfdnrq2x1Y5wxeqVHQzUHcPdB6Rpb cqQGSi6J0j350RzwCrcPrOHQbLCLD1nWbLLsBz6rnLGkL0tuZVCUOXrvwu64TWV/ XXBTHKYyLkQkVlq1/O98uiah/BC7DqVjg+u6VitgPxW6ZFz9tMyMkYN6QtdtATqE pYs9KBlWWck6WKH+HfnX -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org