$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E569AC6E0B5911EEB4D80578C4F9AE02.roa File: E569AC6E0B5911EEB4D80578C4F9AE02.roa (raw, json) Hash identifier: A8C/C3Jmy5klb/l57yF1gqE2KkglKJ7QZAqEw9BJSFQ= Subject key identifier: 91:35:61:F4:E6:51:B1:50:33:06:0D:B0:23:8E:7B:38:E1:5F:D8:53 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7563 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E569AC6E0B5911EEB4D80578C4F9AE02.roa Signing time: Wed 12 Jul 2023 07:31:28 +0000 ROA not before: Wed 12 Jul 2023 07:31:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151122 IP address blocks: 103.209.214.0/24 maxlen: 24 103.209.215.0/24 maxlen: 24 2001:df2:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30051 (0x7563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 12 07:31:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64ae56d0-8340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:5a:ce:19:cf:1e:40:52:45:e0:7a:a9:51: 34:8c:72:c4:22:b4:aa:33:6b:d8:66:d9:3d:ac:48: 11:ab:83:e6:e2:13:cf:71:cf:00:9c:3a:e5:98:92: 8c:de:0c:9a:e5:7c:5e:f2:63:b2:55:05:4c:52:aa: ff:16:23:aa:2f:cc:91:4d:13:97:eb:c0:ea:04:67: 32:3a:dc:5f:15:f1:b1:4a:eb:ef:4d:a0:ac:31:52: a3:ce:f0:fb:fe:8e:9d:5d:95:b8:3d:5b:a6:46:b2: 32:6e:6e:8a:23:4e:e1:b8:15:15:4c:d8:93:d2:16: 02:92:80:40:91:86:68:51:b1:12:c7:0e:b3:9b:73: 33:a1:4b:f5:85:4c:3b:7a:f6:52:81:ac:f1:ea:8d: b1:80:5e:61:8d:0b:6f:72:14:d9:89:c8:06:51:30: 83:c9:90:01:c5:9b:59:c7:ec:a2:1f:21:a8:a9:7b: 49:cf:89:e4:5e:71:f6:9b:2b:be:86:fc:56:8b:98: df:b6:2e:d0:0f:fa:56:27:8b:fd:27:0d:f9:81:b0: e0:cb:f7:29:b1:d8:0b:d7:9a:99:20:8b:c7:3d:04: 80:ad:cf:fd:a3:5a:78:c9:29:4e:a1:5b:ee:d0:57: b0:a6:23:e5:70:bc:ef:d4:2c:c9:ae:ea:5b:e0:af: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:35:61:F4:E6:51:B1:50:33:06:0D:B0:23:8E:7B:38:E1:5F:D8:53 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E569AC6E0B5911EEB4D80578C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.214.0/23 IPv6: 2001:df2:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:10:63:d6:5a:7c:91:a4:67:1c:b1:5f:f0:c1:39:4b:83:bc: 3f:07:9d:6c:bf:fb:2f:90:e9:3a:3c:2c:ea:17:2a:8a:b2:93: 41:4a:6d:49:17:a4:eb:93:97:ab:59:8c:0e:cf:8d:2f:21:44: d3:c9:13:61:86:42:8c:7f:e3:21:96:4a:32:51:bf:9c:46:02: 1a:48:ab:54:dc:0a:47:0d:bd:a9:28:e1:c5:83:e5:10:e6:2a: 8b:8e:ef:39:af:46:3e:45:39:71:0a:0e:72:48:fb:30:e5:58: df:dd:33:09:70:24:e0:da:47:c4:b1:95:0b:cc:86:5c:36:6e: b7:b6:1e:68:74:6b:47:1e:c4:d7:a6:97:a3:74:51:ce:f6:2a: 41:b9:76:85:33:a1:a2:5f:79:d6:b5:3c:55:58:2c:c1:07:94: f2:a5:54:40:09:c9:eb:ce:ed:ad:0f:30:45:56:3a:de:c2:a0: b2:9f:d9:ba:b6:5d:51:47:a0:1c:c1:6b:c4:d0:cb:d5:44:7b: db:d9:d9:91:88:c1:dd:60:89:69:bd:c8:45:1b:f0:4c:93:56: 19:8f:e6:ef:7c:1a:cb:48:d9:57:48:1e:f3:11:94:9a:a0:08: a5:a7:6b:f0:7b:a8:cd:3c:b5:00:57:ea:d7:a5:59:d7:68:1a: 77:9b:d7:3c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICdWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzEyMDczMTI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFlNTZkMC04MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMZazhnPHkBSReB6qVE0jHLEIrSqM2vYZtk9rEgRq4Pm4hPPcc8AnDrlmJKM 3gya5Xxe8mOyVQVMUqr/FiOqL8yRTROX68DqBGcyOtxfFfGxSuvvTaCsMVKjzvD7 /o6dXZW4PVumRrIybm6KI07huBUVTNiT0hYCkoBAkYZoUbESxw6zm3MzoUv1hUw7 evZSgazx6o2xgF5hjQtvchTZicgGUTCDyZABxZtZx+yiHyGoqXtJz4nkXnH2myu+ hvxWi5jfti7QD/pWJ4v9Jw35gbDgy/cpsdgL15qZIIvHPQSArc/9o1p4ySlOoVvu 0FewpiPlcLzv1CzJrupb4K/kAwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJE1YfTm UbFQMwYNsCOOezjhX9hTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTU2OUFDNkUw QjU5MTFFRUI0RDgwNTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn0dYwDwQCAAIwCQMHACABDfKAwDANBgkqhkiG9w0BAQsF AAOCAQEAMBBj1lp8kaRnHLFf8ME5S4O8PwedbL/7L5DpOjws6hcqirKTQUptSRek 65OXq1mMDs+NLyFE08kTYYZCjH/jIZZKMlG/nEYCGkirVNwKRw29qSjhxYPlEOYq i47vOa9GPkU5cQoOckj7MOVY390zCXAk4NpHxLGVC8yGXDZut7YeaHRrRx7E16aX o3RRzvYqQbl2hTOhol951rU8VVgswQeU8qVUQAnJ687trQ8wRVY63sKgsp/ZurZd UUegHMFrxNDL1UR729nZkYjB3WCJab3IRRvwTJNWGY/m73way0jZV0ge8xGUmqAI padr8HuozTy1AFfq16VZ12gad5vXPA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org