$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF301074567C11ECA1DD8342C4F9AE02.roa File: DF301074567C11ECA1DD8342C4F9AE02.roa (raw, json) Hash identifier: +f1r536C5ATW2dxRfWlzbUN8vqMm8661PpxHVBH/r+I= Subject key identifier: 04:DA:1A:96:D5:99:C6:C6:44:C5:4F:EF:3E:2F:7D:ED:EE:A7:5E:3F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FD4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF301074567C11ECA1DD8342C4F9AE02.roa Signing time: Wed 10 May 2023 16:40:40 +0000 ROA not before: Wed 10 May 2023 16:40:40 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146944 IP address blocks: 103.172.88.0/23 maxlen: 24 103.180.88.0/23 maxlen: 24 2001:df7:6780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28628 (0x6fd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:40:40 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc907-b97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:36:a7:4c:15:6d:44:b4:20:47:0b:5c:95: 4b:f3:71:84:7c:69:43:4e:60:16:e6:75:a1:21:6c: f2:57:0f:e4:2a:06:4f:74:15:97:5e:d2:f2:c3:ea: 41:cd:2d:c8:b4:f8:2b:6f:d2:a4:bc:b7:68:55:c8: dd:e7:c2:ef:f0:e1:74:cd:7f:0b:5b:d0:99:e0:c9: 8a:05:54:60:f5:d9:a7:bd:31:23:ef:a6:a4:99:97: 4e:39:4d:ce:a5:67:18:a9:20:d7:35:0e:c4:2e:ff: d2:fc:8f:cd:36:19:8e:49:ce:1c:a0:fc:51:42:de: a0:30:9a:c7:6f:a5:31:bb:5a:a6:d2:06:41:5c:bb: a5:b9:d4:3f:81:11:05:6b:b1:a9:7f:2d:47:35:e4: b0:36:1c:aa:3d:5c:78:fa:a3:cf:12:9a:db:26:5c: 3d:19:93:76:b1:d6:b1:e3:18:e0:dd:c2:a0:a2:cc: 17:d1:6e:6b:15:41:0e:c5:5d:2f:19:c4:63:c5:15: 5c:56:a0:13:2f:62:3b:f5:04:04:00:8c:a4:06:9d: ec:4b:f6:4c:4c:d2:53:69:fc:ca:74:79:64:c0:29: 95:34:bf:34:45:aa:c3:be:bd:94:61:ec:25:cc:a7: 78:be:e3:d1:26:a1:02:2e:ba:b0:45:95:36:27:53: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DA:1A:96:D5:99:C6:C6:44:C5:4F:EF:3E:2F:7D:ED:EE:A7:5E:3F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF301074567C11ECA1DD8342C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.88.0/23 103.180.88.0/23 IPv6: 2001:df7:6780::/48 Signature Algorithm: sha256WithRSAEncryption 78:22:20:df:2d:3b:47:c5:57:d8:e5:bf:af:30:2b:c9:a9:cc: 5f:7c:f9:56:f3:f9:fb:cc:c7:92:1f:74:57:7d:4c:79:01:c2: 92:8d:89:f1:3a:d1:d3:8c:d1:38:67:17:97:b9:93:1e:63:8c: 73:24:ee:49:5f:53:25:5d:c4:bf:97:74:b2:6c:67:5b:04:c2: ef:73:cf:ad:75:be:de:c4:9a:88:c9:53:1b:9d:de:df:9a:7e: b4:a8:50:b9:65:69:2f:1d:a6:09:45:f7:c0:f1:87:fd:ff:7d: ba:e4:03:e5:81:c7:24:9d:7f:80:37:51:1a:9e:1d:44:eb:f7: 8f:37:53:8c:32:4e:3f:0a:1b:a1:94:d0:a9:64:f3:51:82:69: b9:24:68:13:a5:c0:c0:e5:d8:d9:d3:f1:26:e9:21:42:cf:08: 6a:6c:3b:0c:3a:02:07:79:83:ac:5f:72:e5:a1:24:5d:ed:e0: 6b:cb:b4:df:12:f6:b9:06:dd:e2:c4:10:96:3c:4b:d6:ae:3f: ea:7e:e3:40:eb:4a:13:bd:d6:74:83:42:2a:67:f2:a1:20:18: fb:85:06:7b:5d:73:11:9c:40:11:b3:bf:ab:5c:99:f9:87:67: a7:89:5c:21:81:37:68:a1:dd:43:d1:da:6d:30:cf:27:1e:5a: 52:c1:0f:15 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICb9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MDQwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzkwNy1iOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRM2p0wVbUS0IEcLXJVL83GEfGlDTmAW5nWhIWzyVw/kKgZPdBWXXtLyw+pB zS3ItPgrb9KkvLdoVcjd58Lv8OF0zX8LW9CZ4MmKBVRg9dmnvTEj76akmZdOOU3O pWcYqSDXNQ7ELv/S/I/NNhmOSc4coPxRQt6gMJrHb6Uxu1qm0gZBXLuludQ/gREF a7Gpfy1HNeSwNhyqPVx4+qPPEprbJlw9GZN2sdax4xjg3cKgoswX0W5rFUEOxV0v GcRjxRVcVqATL2I79QQEAIykBp3sS/ZMTNJTafzKdHlkwCmVNL80RarDvr2UYewl zKd4vuPRJqECLrqwRZU2J1McuQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFATaGpbV mcbGRMVP7z4vfe3up14/MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREYzMDEwNzQ1 NjdDMTFFQ0ExREQ4MzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnrFgDBAFntFgwDwQCAAIwCQMHACABDfdngDANBgkqhkiG 9w0BAQsFAAOCAQEAeCIg3y07R8VX2OW/rzAryanMX3z5VvP5+8zHkh90V31MeQHC ko2J8TrR04zROGcXl7mTHmOMcyTuSV9TJV3Ev5d0smxnWwTC73PPrXW+3sSaiMlT G53e35p+tKhQuWVpLx2mCUX3wPGH/f99uuQD5YHHJJ1/gDdRGp4dROv3jzdTjDJO PwoboZTQqWTzUYJpuSRoE6XAwOXY2dPxJukhQs8Iamw7DDoCB3mDrF9y5aEkXe3g a8u03xL2uQbd4sQQljxL1q4/6n7jQOtKE73WdINCKmfyoSAY+4UGe11zEZxAEbO/ q1yZ+Ydnp4lcIYE3aKHdQ9HabTDPJx5aUsEPFQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org