$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC44D0CE326C11ED85CDB81DC4F9AE02.roa File: FC44D0CE326C11ED85CDB81DC4F9AE02.roa (raw, json) Hash identifier: vvuay1FWnM0kzNIdM3g0Bt6eD52wgNRXaQlQNv9hVoI= Subject key identifier: 7B:B6:ED:C7:A7:A1:CF:34:EA:F1:D4:FC:B8:29:7D:39:07:9B:99:EA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F89 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC44D0CE326C11ED85CDB81DC4F9AE02.roa Signing time: Wed 10 May 2023 16:39:16 +0000 ROA not before: Wed 10 May 2023 16:39:15 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142529 IP address blocks: 103.171.116.0/23 maxlen: 24 2001:df7:4480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28553 (0x6f89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:39:15 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc8b3-8e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:68:eb:2b:a9:95:fd:be:c7:d5:9b:d5:47: 12:5d:9a:fb:f5:48:9d:a6:41:19:e8:5f:14:69:78: d3:ae:e2:af:72:9e:5a:0d:69:e8:f3:02:73:9f:b3: f4:16:18:c5:1f:2e:4d:cd:13:ac:c0:21:98:ae:43: 28:96:64:93:ec:7a:2a:eb:6d:a8:1a:1e:e3:f5:73: 03:b2:63:6d:14:e0:75:1b:65:e8:ba:b0:00:cd:89: 99:00:ac:1e:ff:23:d2:57:ba:3a:b0:a3:09:9b:f5: 02:e5:07:8b:82:17:d2:e2:b8:83:9f:64:88:2b:0a: e9:4e:16:83:93:4b:28:62:57:6e:a5:29:aa:af:0a: ea:d7:26:5e:da:6b:0d:be:ff:77:5e:99:4f:1c:0f: 54:a8:51:88:47:ed:a5:16:82:eb:2a:7f:74:14:ef: 0c:87:80:25:03:aa:bb:17:d1:37:3f:b2:db:f9:6b: 55:b6:ec:28:ba:5d:c9:5e:e2:e7:2e:68:3c:42:21: 78:24:4a:86:ec:fb:18:01:3e:d8:9e:53:c1:20:46: 4b:49:bb:ab:cb:a6:a2:8e:8c:b4:4c:05:53:08:ce: 91:06:2f:3e:3b:13:b4:6c:a2:61:29:0d:bf:a7:2f: 9b:17:9c:58:aa:49:be:f4:3b:3c:a4:63:7c:01:ff: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B6:ED:C7:A7:A1:CF:34:EA:F1:D4:FC:B8:29:7D:39:07:9B:99:EA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC44D0CE326C11ED85CDB81DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.116.0/23 IPv6: 2001:df7:4480::/48 Signature Algorithm: sha256WithRSAEncryption 33:24:00:c3:f4:c3:ba:10:71:ab:42:cc:82:86:02:e5:89:f3: 1c:97:79:57:59:c3:f4:53:11:bf:a9:f9:69:b4:fe:95:e4:ca: 08:28:b8:51:03:c0:58:d7:2f:f9:c3:58:1f:cf:61:7d:46:eb: b0:7c:42:38:11:aa:38:be:65:dd:b2:5a:f7:bd:ed:9b:53:aa: 47:d2:26:30:7d:23:eb:10:85:87:48:84:45:4f:e7:a9:85:72: 32:e0:9b:4f:ec:6b:e5:9d:eb:7d:e8:42:e9:47:d4:4e:9e:1b: 29:9d:20:bf:f5:bb:90:78:f4:f0:47:ac:d5:4c:aa:7d:2f:bd: 8f:36:e8:ba:78:83:0e:4e:1c:2d:3f:77:1a:cb:08:93:31:10: d2:e9:49:9c:68:e5:9f:6b:32:16:26:94:3a:37:3c:d3:d7:fb: 83:4e:6d:48:4b:8f:f0:0f:88:b5:34:9d:14:b2:55:57:83:d3: 9a:8d:33:12:2c:b6:14:2c:83:d8:e7:c8:02:25:cc:47:3c:8a: a2:9b:52:54:ce:55:90:c0:b4:06:fa:52:79:11:27:ce:3a:29: 44:e4:2b:10:59:2e:b6:48:42:26:8d:f5:93:e6:df:2f:18:d8: 57:0d:11:63:2f:4f:68:b1:4a:5b:67:c8:b2:64:57:2c:5a:4b: 08:c4:05:60 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzOTE1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzhiMy04ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09Zo6yuplf2+x9Wb1UcSXZr79UidpkEZ6F8UaXjTruKvcp5aDWno8wJzn7P0 FhjFHy5NzROswCGYrkMolmST7Hoq622oGh7j9XMDsmNtFOB1G2XourAAzYmZAKwe /yPSV7o6sKMJm/UC5QeLghfS4riDn2SIKwrpThaDk0soYldupSmqrwrq1yZe2msN vv93XplPHA9UqFGIR+2lFoLrKn90FO8Mh4AlA6q7F9E3P7Lb+WtVtuwoul3JXuLn Lmg8QiF4JEqG7PsYAT7YnlPBIEZLSbury6aijoy0TAVTCM6RBi8+OxO0bKJhKQ2/ py+bF5xYqkm+9Ds8pGN8Af8pPQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHu27cen oc806vHU/LgpfTkHm5nqMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkM0NEQwQ0Uz MjZDMTFFRDg1Q0RCODFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnq3QwDwQCAAIwCQMHACABDfdEgDANBgkqhkiG9w0BAQsF AAOCAQEAMyQAw/TDuhBxq0LMgoYC5YnzHJd5V1nD9FMRv6n5abT+leTKCCi4UQPA WNcv+cNYH89hfUbrsHxCOBGqOL5l3bJa973tm1OqR9ImMH0j6xCFh0iERU/nqYVy MuCbT+xr5Z3rfehC6UfUTp4bKZ0gv/W7kHj08Ees1UyqfS+9jzbouniDDk4cLT93 GssIkzEQ0ulJnGjln2syFiaUOjc809f7g05tSEuP8A+ItTSdFLJVV4PTmo0zEiy2 FCyD2OfIAiXMRzyKoptSVM5VkMC0BvpSeREnzjopROQrEFkutkhCJo31k+bfLxjY Vw0RYy9PaLFKW2fIsmRXLFpLCMQFYA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org