$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1479BC282911ECA8E74D32C4F9AE02.roa File: DF1479BC282911ECA8E74D32C4F9AE02.roa (raw, json) Hash identifier: d5vJOfeiyLzVIud/etd176JjaejAU8RxL77h3t4ihBE= Subject key identifier: 1E:05:E5:84:51:76:EB:8B:6E:6D:16:27:AC:F4:CF:4A:9E:5A:72:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A10 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1479BC282911ECA8E74D32C4F9AE02.roa Signing time: Wed 10 May 2023 16:12:54 +0000 ROA not before: Wed 10 May 2023 16:12:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132767 IP address blocks: 103.174.56.0/23 maxlen: 24 2407:fb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27152 (0x6a10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:12:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc286-27fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:43:0c:52:e2:d1:d6:e4:ec:ff:e1:81:93: a3:44:a7:e1:7c:83:14:a8:cf:cd:21:f2:ea:de:6a: d6:36:23:b6:5c:fc:43:bd:d8:dd:22:04:92:cf:0f: 5f:c3:e8:ca:6d:68:8a:b6:d4:f5:9c:cc:d2:59:72: fd:73:a0:49:78:08:24:e1:9b:36:44:94:d0:23:a0: 36:51:c1:ea:b9:6f:df:eb:f3:6e:aa:4c:54:89:35: 22:e5:40:d0:bb:78:9e:0b:57:e3:23:09:48:88:56: e9:e3:96:06:a7:b2:a5:64:99:f5:4b:71:6c:d1:07: dc:03:a0:4e:39:53:6e:c2:b2:70:48:25:ae:c7:d5: 83:ab:00:f1:49:8f:e2:04:3f:c9:1e:97:b6:6a:fd: bb:13:4f:c8:67:88:f6:2f:12:08:7a:7a:a1:c6:5b: 75:3d:27:81:aa:1f:ac:44:b5:3c:f9:43:52:93:d0: 8a:42:ea:ce:dc:03:e5:6f:b3:27:6f:f2:d3:fb:a1: a3:fb:39:3a:bf:b6:cf:18:3e:b0:cf:72:77:fb:49: 43:4e:71:cf:77:27:46:c8:dc:ef:6b:46:98:5f:5a: 01:48:ec:28:e2:d3:d3:61:8c:e8:f7:ce:9e:22:e1: 9f:2b:b0:6e:8d:1f:7c:1c:2c:03:32:0d:46:c3:09: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:05:E5:84:51:76:EB:8B:6E:6D:16:27:AC:F4:CF:4A:9E:5A:72:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1479BC282911ECA8E74D32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.56.0/23 IPv6: 2407:fb40::/32 Signature Algorithm: sha256WithRSAEncryption 7e:f1:f4:a3:d8:af:d4:8e:b0:12:26:15:0c:d2:f5:41:75:13: 34:c7:97:1d:9d:43:17:82:ba:7d:d3:8e:38:d3:c5:22:2f:6c: 5e:a1:f9:b0:28:a9:65:68:24:5f:cb:15:7a:b2:c0:9f:af:7c: df:12:5d:26:9f:ee:9c:cd:38:5c:40:8a:7d:92:01:85:e9:c3: fb:f0:19:b4:d2:79:bf:4d:ab:28:87:2e:ed:16:e3:3d:35:23: 37:15:c0:ab:08:57:3a:0e:17:95:7e:34:85:12:23:41:a2:8e: 6e:41:c8:2a:87:ac:ca:59:f6:4f:b0:d8:9c:67:92:2f:7f:67: e7:0d:28:85:3a:eb:22:6c:f1:c2:f2:2b:0f:c0:d3:1e:a4:1d: 86:aa:89:ee:25:c7:37:38:df:af:95:33:78:2b:5a:ff:3b:11: c1:a6:89:21:bf:9d:02:f1:43:b3:9b:d4:4c:fa:62:e2:e2:86: d6:16:d1:9c:94:c6:8e:c0:d5:5a:fa:fe:57:09:90:66:4b:51: fe:e8:2d:51:7d:b5:58:e1:4f:63:09:56:2f:bf:17:65:6f:d9: 1e:3f:37:53:e2:72:06:bf:3c:dc:fc:92:cf:dd:d8:78:d5:59: 7e:d6:cd:79:dc:ca:5f:62:0b:8f:da:ab:93:a4:2e:67:1b:66: 74:05:b2:a7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICahAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMjU0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI4Ni0yN2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaZDDFLi0dbk7P/hgZOjRKfhfIMUqM/NIfLq3mrWNiO2XPxDvdjdIgSSzw9f w+jKbWiKttT1nMzSWXL9c6BJeAgk4Zs2RJTQI6A2UcHquW/f6/NuqkxUiTUi5UDQ u3ieC1fjIwlIiFbp45YGp7KlZJn1S3Fs0QfcA6BOOVNuwrJwSCWux9WDqwDxSY/i BD/JHpe2av27E0/IZ4j2LxIIenqhxlt1PSeBqh+sRLU8+UNSk9CKQurO3APlb7Mn b/LT+6Gj+zk6v7bPGD6wz3J3+0lDTnHPdydGyNzva0aYX1oBSOwo4tPTYYzo986e IuGfK7BujR98HCwDMg1GwwlKyQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB4F5YRR duuLbm0WJ6z0z0qeWnLhMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREYxNDc5QkMy ODI5MTFFQ0E4RTc0RDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrjgwDQQCAAIwBwMFACQH+0AwDQYJKoZIhvcNAQELBQAD ggEBAH7x9KPYr9SOsBImFQzS9UF1EzTHlx2dQxeCun3TjjjTxSIvbF6h+bAoqWVo JF/LFXqywJ+vfN8SXSaf7pzNOFxAin2SAYXpw/vwGbTSeb9NqyiHLu0W4z01IzcV wKsIVzoOF5V+NIUSI0Gijm5ByCqHrMpZ9k+w2Jxnki9/Z+cNKIU66yJs8cLyKw/A 0x6kHYaqie4lxzc436+VM3grWv87EcGmiSG/nQLxQ7Ob1Ez6YuLihtYW0ZyUxo7A 1Vr6/lcJkGZLUf7oLVF9tVjhT2MJVi+/F2Vv2R4/N1Picga/PNz8ks/d2HjVWX7W zXncyl9iC4/aq5OkLmcbZnQFsqc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org