$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD5DEFD022A611EC91CA2237C4F9AE02.roa File: FD5DEFD022A611EC91CA2237C4F9AE02.roa (raw, json) Hash identifier: GPl80lIahQ2Mmp2BThHy5/M4EPdhZRjHhBxCrA0ZrU8= Subject key identifier: DB:3B:3C:4B:C2:87:E0:63:5C:C4:25:A4:99:90:99:E1:DA:DE:D9:51 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F3D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD5DEFD022A611EC91CA2237C4F9AE02.roa Signing time: Wed 10 May 2023 16:37:51 +0000 ROA not before: Wed 10 May 2023 16:37:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141876 IP address blocks: 103.165.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28477 (0x6f3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:37:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc85f-917d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:98:af:c9:a3:cc:29:35:0c:23:f8:0e:b3: 66:a5:3e:5a:e8:4f:1d:9d:77:94:5c:7a:c2:b2:c8: 0e:5c:1a:0d:32:8c:7c:77:1c:05:26:27:eb:cb:dd: 91:6b:e8:c7:06:2d:0f:e5:9d:d6:38:d8:ef:87:61: f9:86:d2:d4:c3:53:fe:1a:10:2f:af:45:90:a4:e4: f8:57:5f:b1:26:20:59:b3:c9:ed:c6:c8:2b:d1:c6: 7f:9b:8f:fc:ea:c8:ad:83:7d:c2:90:04:69:aa:ff: 4b:f2:5c:44:90:f2:a3:9a:97:86:84:22:a4:1a:50: 0f:a4:f4:b8:76:0b:49:62:39:67:6a:3f:42:c5:df: 21:88:1a:c7:bc:db:2a:99:3b:17:67:52:29:ad:f2: 8c:82:93:76:5b:23:8b:de:2b:9b:32:4c:7a:e8:5d: 8d:7b:d2:f7:7d:b0:f5:b8:54:40:66:5c:44:a3:83: e1:6b:a8:f0:d7:60:de:fd:71:ea:13:60:87:45:1f: bc:ce:69:2a:fb:09:9d:aa:d0:80:a3:a9:ef:82:56: 26:1a:80:b7:c4:01:1a:d0:fe:24:12:31:e4:88:f6: 76:cb:9e:45:32:ff:a9:1e:61:fc:81:e3:11:6d:f5: bf:17:d0:a5:ca:ea:91:63:8b:b6:51:42:f7:09:48: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3B:3C:4B:C2:87:E0:63:5C:C4:25:A4:99:90:99:E1:DA:DE:D9:51 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD5DEFD022A611EC91CA2237C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.104.0/23 Signature Algorithm: sha256WithRSAEncryption 23:04:6f:d9:7d:49:ee:c1:5a:5c:43:85:d1:8a:33:7e:7d:64: 26:43:13:11:9c:b9:90:f6:f4:cb:7d:b1:a4:44:32:a5:d7:c4: 28:b7:a0:23:3a:b1:49:57:f5:1d:cd:87:15:07:ad:c4:f7:67: 45:37:e0:d3:3f:2f:6b:fc:7b:8d:54:f9:9d:fc:95:7f:ab:dd: 13:a0:3b:47:4c:36:fc:c7:af:e5:cb:73:93:33:40:2d:a6:7a: 98:c5:f1:bc:85:2d:58:da:c5:55:49:ac:49:65:8a:25:c5:12: 63:9f:c7:dd:60:d3:96:fc:54:d6:a5:d0:b3:12:e1:08:c4:8b: 8c:67:c0:f4:31:12:c2:fb:49:cf:d8:4b:fb:a7:4b:dd:1c:26: 18:35:02:d7:82:24:2e:02:39:44:3a:73:29:4f:9e:5c:82:2f: 5c:96:27:c1:29:96:0b:c0:e4:c9:4b:77:fd:cf:1c:90:7d:d9: 3b:ac:b7:d4:75:6b:17:1b:55:65:c6:42:f5:c3:14:b3:cb:8c: 92:5d:7c:cb:4d:50:e1:d4:3a:8f:8c:ea:df:95:aa:78:15:23: 09:65:58:0d:97:e4:98:f5:39:a1:78:bf:fb:06:cb:bc:be:95: 21:0d:b3:6f:d8:21:d3:d8:55:2a:47:7e:6c:b4:97:be:e2:48: 31:6e:92:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNzUxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg1Zi05MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrCYr8mjzCk1DCP4DrNmpT5a6E8dnXeUXHrCssgOXBoNMox8dxwFJifry92R a+jHBi0P5Z3WONjvh2H5htLUw1P+GhAvr0WQpOT4V1+xJiBZs8ntxsgr0cZ/m4/8 6sitg33CkARpqv9L8lxEkPKjmpeGhCKkGlAPpPS4dgtJYjlnaj9Cxd8hiBrHvNsq mTsXZ1IprfKMgpN2WyOL3iubMkx66F2Ne9L3fbD1uFRAZlxEo4Pha6jw12De/XHq E2CHRR+8zmkq+wmdqtCAo6nvglYmGoC3xAEa0P4kEjHkiPZ2y55FMv+pHmH8geMR bfW/F9ClyuqRY4u2UUL3CUjTtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNs7PEvC h+BjXMQlpJmQmeHa3tlRMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkQ1REVGRDAy MkE2MTFFQzkxQ0EyMjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpWgwDQYJKoZIhvcNAQELBQADggEBACMEb9l9Se7BWlxD hdGKM359ZCZDExGcuZD29Mt9saREMqXXxCi3oCM6sUlX9R3NhxUHrcT3Z0U34NM/ L2v8e41U+Z38lX+r3ROgO0dMNvzHr+XLc5MzQC2mepjF8byFLVjaxVVJrElliiXF EmOfx91g05b8VNal0LMS4QjEi4xnwPQxEsL7Sc/YS/unS90cJhg1AteCJC4COUQ6 cylPnlyCL1yWJ8EplgvA5MlLd/3PHJB92Tust9R1axcbVWXGQvXDFLPLjJJdfMtN UOHUOo+M6t+VqngVIwllWA2X5Jj1OaF4v/sGy7y+lSENs2/YIdPYVSpHfmy0l77i SDFukv8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org