$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa File: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (raw, json) Hash identifier: tZFXSCyWL68XjydECjdTEwQZ8Np1J2KGOQbzVt6+//o= Subject key identifier: FA:80:A3:A1:10:F9:B9:24:32:65:C2:44:76:B9:CE:89:1A:0F:E0:CA Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 0861 Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa Signing time: Tue 30 Apr 2024 22:00:39 +0000 ROA not before: Tue 30 Apr 2024 22:00:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140669 IP address blocks: 103.151.182.0/23 maxlen: 23 103.151.182.0/24 maxlen: 24 103.151.183.0/24 maxlen: 24 2001:df3:d280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2145 (0x861) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: Apr 30 22:00:39 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66316a07-e3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:06:52:ee:8d:e0:33:76:64:08:b3:e2:81: 79:12:97:66:16:2d:4d:22:aa:d4:c4:aa:52:a5:6c: 19:65:77:14:1c:3a:79:5a:ad:a7:ae:64:58:2a:4e: 25:15:26:ec:61:54:11:29:d1:1e:75:37:4b:f7:41: 53:f5:ae:c0:aa:0b:48:89:a3:64:ac:04:3b:08:18: bd:5f:5d:b8:a0:4e:23:a0:c1:2b:f0:76:10:12:4f: c4:6b:f0:de:95:bc:95:87:3e:48:f8:64:12:a1:0d: 41:d6:ce:01:6f:73:42:d9:8e:eb:50:8f:6c:7f:a3: de:a9:c5:55:c3:d9:c0:de:24:07:c0:ff:5e:af:ad: de:e3:68:36:2d:b6:5b:8b:f4:76:48:35:fb:19:4d: 4d:0a:8c:97:d3:43:c0:5b:58:af:c5:da:50:8a:74: 2e:cc:9e:c0:14:63:cd:76:91:97:6d:56:e3:37:d5: e3:9c:4e:25:31:b1:78:a5:bb:80:16:04:56:c9:c6: aa:81:99:c1:b1:c2:67:ac:a3:4a:e7:57:b0:68:bf: a2:ff:f1:df:83:ea:e7:10:4a:1a:35:37:27:9f:22: ad:c1:80:36:52:3e:70:95:49:d1:6c:6c:29:c3:66: 8a:98:f5:66:51:46:f5:5f:48:1e:ed:4b:3b:68:57: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:80:A3:A1:10:F9:B9:24:32:65:C2:44:76:B9:CE:89:1A:0F:E0:CA X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.182.0/23 IPv6: 2001:df3:d280::/48 Signature Algorithm: sha256WithRSAEncryption 89:44:76:68:80:92:c0:8a:50:38:ad:6f:9e:a2:0d:46:03:99: 19:aa:cd:75:e7:4a:d9:34:a4:c7:1c:59:c8:36:13:8c:20:09: 53:ac:a3:2d:be:a8:1f:58:f8:b3:a5:ff:7c:4c:9a:be:5a:46: a4:88:20:f0:34:80:11:f8:dc:1c:95:49:12:99:5b:f8:66:32: c1:2b:5b:17:e1:d3:dc:4d:3f:15:0d:dc:1a:b6:f1:cd:c1:08: da:f9:0b:ba:c5:53:51:8e:7e:b0:0c:99:e3:b8:cb:3e:41:85: 7f:a6:4a:a6:37:74:db:a9:fe:3c:73:19:57:ec:05:51:4f:95: 16:52:21:ac:51:92:cc:a2:53:49:26:0e:89:86:1c:f4:2e:61: 9c:f9:5d:b9:50:6a:57:2c:1a:f1:cb:cd:a7:4e:71:c4:53:f2: 54:0c:12:8c:51:28:93:eb:60:f4:b7:73:ba:c1:a4:f6:f9:fc: 08:38:50:84:e2:71:0f:42:01:da:c2:25:62:0f:a6:26:04:8d: d0:5b:19:1a:c9:49:30:3e:57:7c:e7:5e:02:13:ba:3e:16:39: 97:44:f0:68:3a:99:2e:a9:ed:f9:f2:7b:fd:72:27:7d:bd:52: d9:ff:68:6e:03:57:23:73:b9:de:16:be:e9:e7:e9:1c:59:2c: 69:1f:9e:d9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjQwNDMwMjIwMDM5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxNmEwNy1lM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFkGUu6N4DN2ZAiz4oF5EpdmFi1NIqrUxKpSpWwZZXcUHDp5Wq2nrmRYKk4l FSbsYVQRKdEedTdL90FT9a7AqgtIiaNkrAQ7CBi9X124oE4joMEr8HYQEk/Ea/De lbyVhz5I+GQSoQ1B1s4Bb3NC2Y7rUI9sf6PeqcVVw9nA3iQHwP9er63e42g2LbZb i/R2SDX7GU1NCoyX00PAW1ivxdpQinQuzJ7AFGPNdpGXbVbjN9XjnE4lMbF4pbuA FgRWycaqgZnBscJnrKNK51ewaL+i//Hfg+rnEEoaNTcnnyKtwYA2Uj5wlUnRbGwp w2aKmPVmUUb1X0ge7Us7aFdJIwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPqAo6EQ +bkkMmXCRHa5zokaD+DKMB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZGOUQvQ0Y4NkQ1OEE5RkU1MTFFQUJCODYzQTgwQzRGOUFFMDIvMkExQUQzQkE5 RkU3MTFFQUFGQTk3QjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnl7YwDwQCAAIwCQMHACABDfPSgDANBgkqhkiG9w0BAQsF AAOCAQEAiUR2aICSwIpQOK1vnqINRgOZGarNdedK2TSkxxxZyDYTjCAJU6yjLb6o H1j4s6X/fEyavlpGpIgg8DSAEfjcHJVJEplb+GYywStbF+HT3E0/FQ3cGrbxzcEI 2vkLusVTUY5+sAyZ47jLPkGFf6ZKpjd026n+PHMZV+wFUU+VFlIhrFGSzKJTSSYO iYYc9C5hnPlduVBqVywa8cvNp05xxFPyVAwSjFEok+tg9LdzusGk9vn8CDhQhOJx D0IB2sIlYg+mJgSN0FsZGslJMD5XfOdeAhO6PhY5l0TwaDqZLqnt+fJ7/XInfb1S 2f9obgNXI3O53ha+6efpHFksaR+e2Q== -----END CERTIFICATE-----Generated at Thu May 16 22:23:37 2024 by rpki-client on console-fra.rpki-client.org