$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E0D24334D27411EBB2B2A05DC4F9AE02.roa File: E0D24334D27411EBB2B2A05DC4F9AE02.roa (raw, json) Hash identifier: /YBTkkw735XR9MvEA6/coj17dZMZnPPSu4hIVIKYZMQ= Subject key identifier: 69:40:C7:CD:98:B8:2A:25:B4:91:78:07:E6:86:2A:77:E7:1C:BC:A5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D74 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E0D24334D27411EBB2B2A05DC4F9AE02.roa Signing time: Wed 10 May 2023 16:29:25 +0000 ROA not before: Wed 10 May 2023 16:29:25 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138283 IP address blocks: 103.195.252.0/24 maxlen: 24 103.195.254.0/24 maxlen: 24 103.195.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28020 (0x6d74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:25 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc665-9799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:e9:30:4e:a2:8e:76:f7:f8:21:23:2b:a7: 83:53:84:0d:2b:d1:fb:11:f2:e4:3c:13:6c:65:34: 82:c6:94:27:64:c8:6f:0b:de:67:05:c5:fe:48:ad: 42:31:2e:0b:1c:74:c3:d2:89:9d:99:c4:6d:c6:19: 8c:1d:3d:91:dd:24:5f:1c:4e:7a:5d:cc:30:36:8a: 35:ce:fe:66:19:eb:eb:1a:6c:1c:6d:84:63:98:ce: ce:f4:de:4e:ea:78:f4:f9:e4:d7:db:24:c0:6a:be: 7a:ec:b1:ca:41:4f:bd:c9:aa:45:37:fe:f5:d4:4f: ce:a2:f6:02:dd:83:fc:82:4a:c3:b0:d8:4e:5e:5b: 4d:81:cc:37:7c:65:63:b9:62:bf:4d:4b:c0:76:12: 83:f3:34:be:83:62:0a:09:8d:52:21:19:97:b1:88: bd:56:4c:4b:04:be:75:be:bf:c8:36:85:8c:e4:da: 69:20:c4:a6:e2:49:ed:5c:f8:b9:00:e1:52:8a:04: 2b:3b:6c:eb:bb:19:1c:91:d0:02:bf:06:18:ce:a8: 63:46:79:15:7f:8e:75:d0:23:e5:b0:92:43:d8:af: f9:80:a2:df:31:31:e3:f4:4a:c1:7e:17:d9:07:62: dd:19:45:40:d5:b9:42:69:17:f5:0c:c8:36:5e:fe: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:40:C7:CD:98:B8:2A:25:B4:91:78:07:E6:86:2A:77:E7:1C:BC:A5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E0D24334D27411EBB2B2A05DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.195.252.0/24 103.195.254.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:4c:d2:af:4f:bc:12:10:3b:2d:40:b4:0c:9f:f6:2c:12:69: 63:f4:bb:e9:c3:15:e0:23:9a:7a:ad:04:ab:20:f8:9e:2e:39: c5:20:60:d3:8b:87:de:93:6f:ce:3d:a6:4f:51:15:b3:38:25: 83:a2:64:2b:3f:88:d0:a1:d0:c3:b4:ce:b3:19:1f:95:ab:7e: 42:da:e5:63:03:c4:aa:62:7f:81:1e:61:8f:cc:cd:48:cb:f8: a1:c7:bf:dd:c3:9b:c7:f2:9c:15:ef:89:d3:f0:81:d4:12:c7: d8:54:a5:70:29:58:9c:2d:35:14:ba:ab:ec:81:c6:ad:56:c7: d0:35:37:20:02:14:d4:86:62:dd:eb:76:46:12:c5:b6:15:41: 43:91:3b:4e:e1:f8:b6:3a:a7:62:d7:c1:60:5b:01:44:48:e0: fb:19:3e:15:d4:a0:56:e9:cc:b7:ff:2a:9d:9c:68:47:f0:40: 34:ed:80:97:6a:c4:49:4f:1b:d4:ad:4b:1c:16:8a:34:73:2f: b5:c7:20:22:46:6e:ed:3b:06:00:33:b3:d5:a6:d3:b6:98:7b: d8:e8:b9:3a:71:8c:83:f5:ca:f7:b3:85:16:d7:f4:ff:15:0a: 7c:36:78:36:aa:9c:26:ea:77:63:f7:36:26:5e:f7:f6:4c:7b: 72:bf:ec:bf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTI1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY2NS05Nzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V/pME6ijnb3+CEjK6eDU4QNK9H7EfLkPBNsZTSCxpQnZMhvC95nBcX+SK1C MS4LHHTD0omdmcRtxhmMHT2R3SRfHE56XcwwNoo1zv5mGevrGmwcbYRjmM7O9N5O 6nj0+eTX2yTAar567LHKQU+9yapFN/711E/OovYC3YP8gkrDsNhOXltNgcw3fGVj uWK/TUvAdhKD8zS+g2IKCY1SIRmXsYi9VkxLBL51vr/INoWM5NppIMSm4kntXPi5 AOFSigQrO2zruxkckdACvwYYzqhjRnkVf4510CPlsJJD2K/5gKLfMTHj9ErBfhfZ B2LdGUVA1blCaRf1DMg2Xv4HjQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGlAx82Y uColtJF4B+aGKnfnHLylMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTBEMjQzMzRE Mjc0MTFFQkIyQjJBMDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnw/wDBAFnw/4wDQYJKoZIhvcNAQELBQADggEBAItM0q9P vBIQOy1AtAyf9iwSaWP0u+nDFeAjmnqtBKsg+J4uOcUgYNOLh96Tb849pk9RFbM4 JYOiZCs/iNCh0MO0zrMZH5WrfkLa5WMDxKpif4EeYY/MzUjL+KHHv93Dm8fynBXv idPwgdQSx9hUpXApWJwtNRS6q+yBxq1Wx9A1NyACFNSGYt3rdkYSxbYVQUORO07h +LY6p2LXwWBbAURI4PsZPhXUoFbpzLf/Kp2caEfwQDTtgJdqxElPG9StSxwWijRz L7XHICJGbu07BgAzs9Wm07aYe9jouTpxjIP1yvezhRbX9P8VCnw2eDaqnCbqd2P3 NiZe9/ZMe3K/7L8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org