$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7438344FE6611EBB771CF1BC4F9AE02.roa File: F7438344FE6611EBB771CF1BC4F9AE02.roa (raw, json) Hash identifier: ioVxUePZcc1YCvmt4UJsSErzm0l1rElSp85JdMH14V4= Subject key identifier: 65:6B:8B:82:0E:A9:B9:30:A4:83:CF:AF:87:78:18:45:D4:1D:16:C4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71AE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7438344FE6611EBB771CF1BC4F9AE02.roa Signing time: Wed 10 May 2023 16:49:27 +0000 ROA not before: Wed 10 May 2023 16:49:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 55862 IP address blocks: 43.247.144.0/22 maxlen: 24 103.24.60.0/22 maxlen: 22 103.242.120.0/22 maxlen: 24 103.250.16.0/22 maxlen: 22 103.250.44.0/22 maxlen: 24 103.251.188.0/22 maxlen: 24 150.107.164.0/22 maxlen: 24 150.107.184.0/22 maxlen: 24 150.107.216.0/22 maxlen: 24 150.242.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29102 (0x71ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:49:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb17-aee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:4e:c7:e4:95:fd:ea:35:45:55:a0:6f:e2: 0f:66:16:d9:45:ad:8f:99:ea:5a:d6:9f:99:96:65: 9d:10:c0:8c:00:eb:49:9c:6e:d7:42:ed:16:22:7c: 59:ac:f8:41:5f:e4:a7:ba:55:58:5e:77:c0:26:b8: 3b:4e:fb:8a:30:19:a8:1b:20:97:e2:4f:48:51:ff: 67:2e:6c:d9:ee:a8:94:d0:99:30:ca:6e:6e:2e:f1: b0:31:2d:e4:97:7c:b9:a2:81:41:d4:7e:b8:59:49: f6:19:b7:aa:45:2a:0c:14:f1:3f:09:e1:15:11:08: 40:37:6a:06:aa:0e:56:12:a0:ff:d3:47:be:6e:3e: d4:1c:96:d7:4e:01:af:ee:25:4a:50:2e:d0:27:25: c1:f4:05:06:6e:d0:ff:b6:b8:28:7f:8a:5d:e5:24: 3b:c0:f8:2b:0f:10:0c:67:c8:b7:48:7f:2d:01:5a: e6:6d:56:30:a6:80:10:05:94:17:a2:8d:9c:da:c6: b3:a4:a0:11:fa:d3:9f:36:81:f6:53:de:61:1b:22: a9:80:d4:a8:0c:77:36:f8:52:1e:98:35:d5:47:d2: c0:44:db:b5:9a:62:8e:e2:82:06:f6:50:b2:93:a0: 14:55:f7:5f:aa:fc:2d:49:51:0c:14:11:c5:2e:02: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6B:8B:82:0E:A9:B9:30:A4:83:CF:AF:87:78:18:45:D4:1D:16:C4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7438344FE6611EBB771CF1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.144.0/22 103.24.60.0/22 103.242.120.0/22 103.250.16.0/22 103.250.44.0/22 103.251.188.0/22 150.107.164.0/22 150.107.184.0/22 150.107.216.0/22 150.242.24.0/22 Signature Algorithm: sha256WithRSAEncryption b5:45:d5:26:cf:57:ef:c6:f4:51:75:68:70:61:20:de:54:0a: 57:4e:fc:0b:17:53:49:49:9e:c5:98:fb:21:2f:e9:9e:de:e2: e1:a5:6b:71:5f:a5:45:9b:78:8b:a0:c6:25:41:d3:6d:5c:77: 94:a3:6e:c9:c6:27:8c:c1:36:6d:e1:8b:43:5b:7e:0d:1f:a8: 80:b6:bc:9a:25:66:a3:2c:4e:54:2a:22:1a:44:40:5d:ac:87: 5c:39:b5:d3:96:fd:b8:bc:8e:26:7b:aa:88:51:3d:a0:52:01: 9f:6f:e2:f1:e2:70:43:ae:c5:4a:30:62:a2:6b:91:87:c7:1d: a8:1b:ec:94:8d:53:2b:d9:ad:81:76:63:ad:1f:cf:a4:8c:c3: 4c:25:2a:35:9d:eb:91:ef:04:7e:05:c0:c0:3d:3a:68:80:b4: 06:ed:55:67:f6:ff:69:b6:5b:9e:75:c8:7b:a7:1f:b8:22:6a: 25:d8:08:6e:a9:cd:82:44:d3:86:32:67:07:22:bc:6e:a5:83: da:94:22:ea:db:e7:fd:19:cd:0a:e5:dc:d2:13:a4:c5:ea:4a: bf:16:2b:6a:8c:e2:b6:23:d2:c0:13:be:c8:af:1f:25:91:fd: bf:6d:74:01:90:b3:76:c9:60:3e:34:27:a8:5b:b3:e9:30:75: c7:15:78:79 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICca4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IxNy1hZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQ1Ox+SV/eo1RVWgb+IPZhbZRa2Pmepa1p+ZlmWdEMCMAOtJnG7XQu0WInxZ rPhBX+SnulVYXnfAJrg7TvuKMBmoGyCX4k9IUf9nLmzZ7qiU0Jkwym5uLvGwMS3k l3y5ooFB1H64WUn2GbeqRSoMFPE/CeEVEQhAN2oGqg5WEqD/00e+bj7UHJbXTgGv 7iVKUC7QJyXB9AUGbtD/trgof4pd5SQ7wPgrDxAMZ8i3SH8tAVrmbVYwpoAQBZQX oo2c2sazpKAR+tOfNoH2U95hGyKpgNSoDHc2+FIemDXVR9LARNu1mmKO4oIG9lCy k6AUVfdfqvwtSVEMFBHFLgK85QIDAQABo4ICyzCCAscwHQYDVR0OBBYEFGVri4IO qbkwpIPPr4d4GEXUHRbEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjc0MzgzNDRG RTY2MTFFQkI3NzFDRjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBAIr95ADBAJnGDwDBAJn8ngDBAJn+hADBAJn+iwDBAJn+7wD BAKWa6QDBAKWa7gDBAKWa9gDBAKW8hgwDQYJKoZIhvcNAQELBQADggEBALVF1SbP V+/G9FF1aHBhIN5UCldO/AsXU0lJnsWY+yEv6Z7e4uGla3FfpUWbeIugxiVB021c d5SjbsnGJ4zBNm3hi0Nbfg0fqIC2vJolZqMsTlQqIhpEQF2sh1w5tdOW/bi8jiZ7 qohRPaBSAZ9v4vHicEOuxUowYqJrkYfHHagb7JSNUyvZrYF2Y60fz6SMw0wlKjWd 65HvBH4FwMA9OmiAtAbtVWf2/2m2W551yHunH7giaiXYCG6pzYJE04YyZwcivG6l g9qUIurb5/0ZzQrl3NITpMXqSr8WK2qM4rYj0sATvsivHyWR/b9tdAGQs3bJYD40 J6hbs+kwdccVeHk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org