$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDDB80A2CD0111EC95344785C4F9AE02.roa File: FDDB80A2CD0111EC95344785C4F9AE02.roa (raw, json) Hash identifier: mw4Bs653D0416eQNNfBt5kWRNqhXZ0P86+UbYjHCZhM= Subject key identifier: 9C:38:A2:29:54:51:A3:74:15:21:69:5E:FF:68:5A:AE:2B:27:01:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BFF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDDB80A2CD0111EC95344785C4F9AE02.roa Signing time: Wed 10 May 2023 16:22:24 +0000 ROA not before: Wed 10 May 2023 16:22:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135774 IP address blocks: 103.182.124.0/24 maxlen: 24 103.182.125.0/24 maxlen: 24 2001:df0:79c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27647 (0x6bff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:22:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc4c0-574c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:27:66:20:80:83:6b:19:37:d8:a7:f9:7b: 03:dc:9c:2f:b8:d7:61:08:07:7e:d7:32:a3:a4:9b: 45:2f:84:d4:2e:2c:0c:1c:42:29:6c:8a:47:f4:a3: 29:5e:15:63:de:46:23:57:28:a1:4e:52:05:eb:a7: e9:11:4d:f4:61:a4:4f:1c:5b:17:ca:3d:2e:ce:d1: 7d:a0:34:cf:21:09:ff:47:7d:7e:ae:e6:cb:5a:b0: 2f:9c:1a:7a:d2:05:e3:31:91:94:dc:04:66:ac:77: ab:41:c9:59:df:a1:3f:f1:71:0b:5f:af:68:e9:07: 01:70:47:21:d8:2d:04:18:db:51:ed:d9:6b:e6:d8: 46:11:9d:4b:82:44:b0:96:c2:d9:9f:b7:89:a0:36: 3a:98:40:2b:d4:21:ea:01:e8:0e:56:62:b9:b3:3e: cf:a7:07:5f:16:b8:15:74:26:98:27:1d:9f:0d:17: 90:32:95:a7:fb:d5:9e:4c:ec:96:82:d0:25:a4:43: 63:7d:17:b9:68:f4:ae:d8:a5:30:e0:7c:33:83:04: 90:23:22:0f:34:d1:07:8a:e3:88:13:b3:5f:0f:da: 72:9b:03:23:eb:bc:15:23:5b:e5:69:41:f0:19:a6: 8d:34:fa:e8:e9:44:e8:11:30:0a:96:7d:cc:f1:25: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:38:A2:29:54:51:A3:74:15:21:69:5E:FF:68:5A:AE:2B:27:01:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDDB80A2CD0111EC95344785C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.124.0/23 IPv6: 2001:df0:79c0::/48 Signature Algorithm: sha256WithRSAEncryption b4:7a:e8:33:44:b5:f4:b7:ab:e5:ad:1e:77:90:72:ea:3f:37: e7:87:68:b3:eb:1a:03:76:83:6c:10:26:02:0a:56:da:d6:d1: f8:b0:cc:94:92:07:ed:01:a4:88:f0:ce:af:21:0a:17:d8:69: dc:8a:07:9c:c0:3a:e2:e2:13:a3:04:f7:35:80:da:f9:59:60: 16:42:93:46:47:90:04:e8:db:6c:e1:ca:2b:4a:5e:74:70:ae: 32:6f:30:28:6c:0a:d8:c4:8d:14:66:78:9e:a6:32:db:78:a5: ec:c8:e7:a5:80:c1:8f:c2:23:7c:3a:9d:93:66:76:51:71:13: 1a:07:22:c5:77:42:c5:4e:25:b8:64:65:07:a6:d9:9a:bb:d3: 86:f5:39:b5:50:43:be:17:3b:5e:5a:e6:7e:ba:69:a8:8a:a3: f4:c5:fd:94:91:0a:7b:85:cc:21:32:09:7a:2c:75:48:12:2e: 94:44:58:d4:5b:a5:44:14:d2:e7:71:ed:d6:a4:0f:a2:d7:16: 2b:fc:68:6e:57:19:42:e9:35:fa:88:a7:7d:fe:3d:86:08:94: c4:49:83:29:c7:98:f7:7e:ed:50:02:a4:6a:99:eb:fc:a4:b3: cf:f4:4d:c4:03:b2:bc:dc:c4:84:84:34:7b:16:28:75:69:d1: c2:f4:63:03 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICa/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMjI0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzRjMC01NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSInZiCAg2sZN9in+XsD3JwvuNdhCAd+1zKjpJtFL4TULiwMHEIpbIpH9KMp XhVj3kYjVyihTlIF66fpEU30YaRPHFsXyj0uztF9oDTPIQn/R31+rubLWrAvnBp6 0gXjMZGU3ARmrHerQclZ36E/8XELX69o6QcBcEch2C0EGNtR7dlr5thGEZ1LgkSw lsLZn7eJoDY6mEAr1CHqAegOVmK5sz7PpwdfFrgVdCaYJx2fDReQMpWn+9WeTOyW gtAlpENjfRe5aPSu2KUw4HwzgwSQIyIPNNEHiuOIE7NfD9pymwMj67wVI1vlaUHw GaaNNPro6UToETAKln3M8SUD/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJw4oilU UaN0FSFpXv9oWq4rJwEWMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkREQjgwQTJD RDAxMTFFQzk1MzQ0Nzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntnwwDwQCAAIwCQMHACABDfB5wDANBgkqhkiG9w0BAQsF AAOCAQEAtHroM0S19Ler5a0ed5By6j8354dos+saA3aDbBAmAgpW2tbR+LDMlJIH 7QGkiPDOryEKF9hp3IoHnMA64uITowT3NYDa+VlgFkKTRkeQBOjbbOHKK0pedHCu Mm8wKGwK2MSNFGZ4nqYy23il7MjnpYDBj8IjfDqdk2Z2UXETGgcixXdCxU4luGRl B6bZmrvThvU5tVBDvhc7XlrmfrppqIqj9MX9lJEKe4XMITIJeix1SBIulERY1Ful RBTS53Ht1qQPotcWK/xoblcZQuk1+oinff49hgiUxEmDKceY937tUAKkapnr/KSz z/RNxAOyvNzEhIQ0exYodWnRwvRjAw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org