$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBF22F8674E611EB990B0540C4F9AE02.roa File: EBF22F8674E611EB990B0540C4F9AE02.roa (raw, json) Hash identifier: hQLu2rS31Uk+yAT98QjCJEhdcb1JLz47TSFdsoyI9nU= Subject key identifier: 99:93:FA:06:49:F9:2A:2A:6D:B4:98:8C:38:5C:07:0B:B9:6F:D6:0E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EB3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBF22F8674E611EB990B0540C4F9AE02.roa Signing time: Wed 10 May 2023 16:35:16 +0000 ROA not before: Wed 10 May 2023 16:35:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141492 IP address blocks: 103.162.64.0/23 maxlen: 24 103.182.197.0/24 maxlen: 24 2001:df5:e680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28339 (0x6eb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7c4-b6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:99:97:14:c1:04:68:bb:2a:4d:d3:1a:88: e1:de:52:b8:b9:55:1f:02:c5:df:29:33:d5:1f:3d: e6:1e:c8:44:b8:f1:17:0f:a5:1f:f3:b8:3c:91:6e: 23:17:89:4c:6c:45:ab:06:e8:a6:20:05:8d:8c:37: 78:23:9a:28:64:9b:86:2c:e2:9a:b7:75:4e:d4:7c: 44:fc:64:ad:25:e2:94:13:bd:fe:e8:7f:51:2a:ec: b0:3b:56:39:a6:14:45:90:5f:66:b6:2a:4a:74:3f: 4e:bf:a1:49:d8:c2:e5:39:00:66:a5:00:e0:b8:88: 2e:3b:9e:39:7c:96:8c:f7:34:fa:e6:c6:64:13:8f: d9:ef:e9:8c:a1:14:64:76:94:a9:34:fb:9a:01:80: 4b:b4:c1:27:5f:94:7c:1b:83:28:8f:83:20:e3:4b: 87:b0:bf:d7:f9:f7:c2:c1:cf:57:c6:d2:d9:9d:33: 6a:c6:4e:e3:87:3a:22:e1:07:63:fb:f1:28:ca:80: b2:ef:78:30:cb:08:6e:e7:03:9d:2b:4a:41:0e:6f: 87:9f:3c:2c:5c:6a:09:75:b7:60:38:a4:99:41:8c: 6d:25:87:7b:ff:13:33:bd:c8:d9:64:94:b9:6e:7c: 69:9b:af:b1:86:90:28:20:69:0c:ce:66:4e:71:3f: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:93:FA:06:49:F9:2A:2A:6D:B4:98:8C:38:5C:07:0B:B9:6F:D6:0E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBF22F8674E611EB990B0540C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.64.0/23 103.182.197.0/24 IPv6: 2001:df5:e680::/48 Signature Algorithm: sha256WithRSAEncryption 26:b7:e1:23:8e:b1:94:b0:d1:04:d4:75:8d:6c:33:32:58:d9: 17:89:bd:96:f1:a5:a3:6f:ac:26:21:82:bf:75:d2:f1:6e:dd: 6d:0f:e5:a2:fc:ea:ab:31:fb:74:c3:c3:a2:65:65:cb:d8:9a: f0:1f:fc:43:7e:de:3c:5a:37:83:f8:de:f5:b8:ae:82:36:b6: a9:b1:54:f2:d0:a5:6c:6b:cc:bc:43:28:1f:82:60:9a:31:66: 01:db:22:c2:fe:6c:d6:ea:73:e8:ae:67:fe:5c:91:81:a5:eb: 5e:04:18:1d:09:1f:79:ea:52:79:76:35:32:3d:ad:a0:07:e8: 30:8a:10:92:93:b1:ce:6f:48:13:dd:fe:bc:a0:0f:ca:0f:cb: fe:40:63:f5:2b:92:ea:51:af:c8:ef:cb:b9:9d:7f:17:36:4d: e0:cc:0a:ad:15:d8:95:1e:f2:45:b4:51:3f:7f:41:f6:2c:c1: 7a:28:ab:a8:fb:05:4f:67:5e:b0:64:21:75:f5:af:c3:52:ac: c7:bf:e6:c4:6b:40:48:89:00:72:e0:88:2a:1a:c2:10:bf:cc: 60:3c:d9:f3:f0:e1:88:52:55:5b:74:e4:12:3d:d6:13:c2:59: 79:fa:22:5e:87:9a:ab:e0:48:e3:1b:ae:de:15:14:29:d3:38: d7:05:81:c8 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdjNC1iNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvmZlxTBBGi7Kk3TGojh3lK4uVUfAsXfKTPVHz3mHshEuPEXD6Uf87g8kW4j F4lMbEWrBuimIAWNjDd4I5ooZJuGLOKat3VO1HxE/GStJeKUE73+6H9RKuywO1Y5 phRFkF9mtipKdD9Ov6FJ2MLlOQBmpQDguIguO545fJaM9zT65sZkE4/Z7+mMoRRk dpSpNPuaAYBLtMEnX5R8G4Moj4Mg40uHsL/X+ffCwc9XxtLZnTNqxk7jhzoi4Qdj +/EoyoCy73gwywhu5wOdK0pBDm+HnzwsXGoJdbdgOKSZQYxtJYd7/xMzvcjZZJS5 bnxpm6+xhpAoIGkMzmZOcT/6zwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJmT+gZJ +SoqbbSYjDhcBwu5b9YOMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUJGMjJGODY3 NEU2MTFFQjk5MEIwNTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnokADBABntsUwDwQCAAIwCQMHACABDfXmgDANBgkqhkiG 9w0BAQsFAAOCAQEAJrfhI46xlLDRBNR1jWwzMljZF4m9lvGlo2+sJiGCv3XS8W7d bQ/lovzqqzH7dMPDomVly9ia8B/8Q37ePFo3g/je9biugja2qbFU8tClbGvMvEMo H4JgmjFmAdsiwv5s1upz6K5n/lyRgaXrXgQYHQkfeepSeXY1Mj2toAfoMIoQkpOx zm9IE93+vKAPyg/L/kBj9SuS6lGvyO/LuZ1/FzZN4MwKrRXYlR7yRbRRP39B9izB eiirqPsFT2desGQhdfWvw1Ksx7/mxGtASIkAcuCIKhrCEL/MYDzZ8/DhiFJVW3Tk Ej3WE8JZefoiXoeaq+BI4xuu3hUUKdM41wWByA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org