$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/190AC86A33FF11EDB747A054C4F9AE02.roa File: 190AC86A33FF11EDB747A054C4F9AE02.roa (raw, json) Hash identifier: V/ZK9abZhv1DDg/8AcYcL8nf+YshLfES9DN9TUeFvoo= Subject key identifier: 8B:EA:14:90:BA:44:67:F4:D9:75:1E:3C:0C:68:6A:1F:85:C4:B1:8F Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 3399 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/190AC86A33FF11EDB747A054C4F9AE02.roa Signing time: Thu 10 Aug 2023 14:30:27 +0000 ROA not before: Thu 10 Aug 2023 14:30:27 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 18222 IP address blocks: 45.117.152.0/23 maxlen: 24 103.250.132.0/23 maxlen: 24 202.51.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13209 (0x3399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Aug 10 14:30:27 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64d4f483-83d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:35:4a:1e:38:f0:0d:22:b2:a3:4f:3f:89: 18:0f:4b:29:fa:65:16:ff:78:7a:b4:ef:3b:68:d2: e6:fb:98:c6:c7:a5:86:51:46:25:04:9b:58:fa:75: ae:7d:fe:54:29:dc:08:a2:ce:9d:9b:72:eb:c5:a8: a7:2b:34:cb:33:56:b8:13:47:74:5a:38:98:f6:0a: 07:7e:ad:49:38:ed:dc:1d:dc:74:a4:15:5e:ac:9e: 01:a3:71:91:59:32:0d:3d:91:8f:b6:cf:e2:0d:c0: ea:72:02:16:c7:85:02:6c:55:79:05:e9:36:9f:de: 9c:c5:70:ea:2a:14:6c:3f:78:2d:ae:16:be:5d:c3: 7b:39:03:1d:09:94:be:9d:29:c3:a3:9e:8e:4b:52: 7c:50:eb:91:6a:7a:14:f6:c8:ae:c7:79:50:66:3f: 7d:52:eb:13:fd:e4:eb:3b:60:75:9e:d6:d1:d1:c9: 99:d7:13:d4:e3:68:fe:ce:70:4a:80:e2:b8:22:ce: 74:cb:b2:80:30:95:74:e3:ed:f1:18:0c:5c:82:ea: 9a:1a:33:9b:9a:47:82:ec:bb:ed:09:3e:3b:3c:c2: bb:30:dc:b3:6b:ba:28:1a:78:f8:43:f6:60:75:b5: 5b:5a:2a:f6:d2:15:ad:1f:b3:cb:c4:96:1f:c7:c4: 82:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EA:14:90:BA:44:67:F4:D9:75:1E:3C:0C:68:6A:1F:85:C4:B1:8F X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/190AC86A33FF11EDB747A054C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.152.0/23 103.250.132.0/23 202.51.82.0/23 Signature Algorithm: sha256WithRSAEncryption a0:c8:31:9f:84:50:e1:7d:44:d4:cf:1e:66:41:03:56:bd:67: 35:2f:b6:32:3e:c4:42:3a:e4:54:71:bb:19:3d:2d:2b:81:3c: af:a5:97:87:44:bf:e5:2f:43:8d:85:0d:b0:02:c2:c5:5f:f9: f3:64:89:da:5c:b6:12:bb:f9:4b:3c:41:95:bd:ce:5a:91:fb: 0e:88:10:a4:e4:14:10:48:ca:26:92:cb:8b:08:dc:84:51:5b: db:fd:e9:73:e7:de:09:3c:12:57:ba:57:06:c7:a7:8f:c7:86: c1:f3:19:1c:50:8d:96:2f:d3:26:22:0a:15:b7:80:37:89:61: 8b:50:81:3d:19:5b:07:72:b6:00:cf:ff:ff:23:2b:0d:88:d6: a0:e5:60:68:0a:47:2f:91:22:e8:46:4a:fa:5c:7a:bb:57:f1: 3a:43:93:9d:31:9a:ff:2c:b5:7e:69:d2:97:ae:2f:d2:9b:e8: 39:35:45:9b:e5:3b:82:c2:d5:95:b6:ee:56:77:73:e0:22:36: 9b:0d:ef:d5:93:ee:16:c7:3f:af:70:d6:33:14:c9:4d:8f:69: 4e:b6:d1:c4:f3:43:8c:c0:28:64:0c:3d:2d:04:93:ef:35:1f: 09:0a:d4:a1:02:c3:93:c5:91:7d:27:89:0f:09:20:ad:fa:45: 4a:50:36:69 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICM5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjMwODEwMTQzMDI3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQ0ZjQ4My04M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDM1Sh448A0isqNPP4kYD0sp+mUW/3h6tO87aNLm+5jGx6WGUUYlBJtY+nWu ff5UKdwIos6dm3LrxainKzTLM1a4E0d0WjiY9goHfq1JOO3cHdx0pBVerJ4Bo3GR WTINPZGPts/iDcDqcgIWx4UCbFV5Bek2n96cxXDqKhRsP3gtrha+XcN7OQMdCZS+ nSnDo56OS1J8UOuRanoU9siux3lQZj99UusT/eTrO2B1ntbR0cmZ1xPU42j+znBK gOK4Is50y7KAMJV04+3xGAxcguqaGjObmkeC7LvtCT47PMK7MNyza7ooGnj4Q/Zg dbVbWir20hWtH7PLxJYfx8SCowIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIvqFJC6 RGf02XUePAxoah+FxLGPMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvMTkwQUM4NkEz M0ZGMTFFREI3NDdBMDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEtdZgDBAFn+oQDBAHKM1IwDQYJKoZIhvcNAQELBQADggEB AKDIMZ+EUOF9RNTPHmZBA1a9ZzUvtjI+xEI65FRxuxk9LSuBPK+ll4dEv+UvQ42F DbACwsVf+fNkidpcthK7+Us8QZW9zlqR+w6IEKTkFBBIyiaSy4sI3IRRW9v96XPn 3gk8Ele6VwbHp4/HhsHzGRxQjZYv0yYiChW3gDeJYYtQgT0ZWwdytgDP//8jKw2I 1qDlYGgKRy+RIuhGSvpcertX8TpDk50xmv8stX5p0peuL9Kb6Dk1RZvlO4LC1ZW2 7lZ3c+AiNpsN79WT7hbHP69w1jMUyU2PaU620cTzQ4zAKGQMPS0Ek+81HwkK1KEC w5PFkX0niQ8JIK36RUpQNmk= -----END CERTIFICATE-----Generated at Thu May 16 16:14:57 2024 by rpki-client on console-fra.rpki-client.org