$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa File: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (raw, json) Hash identifier: kRARa+uUzxbZ+NEb5MEJFAdFIet/TAzXthEijJD892g= Subject key identifier: 64:6C:BD:E8:ED:BD:CF:64:75:0A:E1:A8:CF:48:7F:EC:EB:28:17:CC Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0A0A Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa Signing time: Mon 22 Apr 2024 20:59:29 +0000 ROA not before: Mon 22 Apr 2024 20:59:29 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 140091 IP address blocks: 103.5.120.0/23 maxlen: 23 103.5.120.0/24 maxlen: 24 103.5.121.0/24 maxlen: 24 103.148.104.0/24 maxlen: 24 103.153.202.0/24 maxlen: 24 2001:df2:ce80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 20:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2570 (0xa0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Apr 22 20:59:29 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6626cfb1-cc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:39:89:1d:e0:02:3b:a3:cd:1a:08:6a:90: f5:42:af:91:70:65:ba:0b:3f:25:0a:ca:bb:ee:a8: 70:fc:e3:6f:68:38:47:af:04:04:6f:9b:a7:3a:ac: db:6f:fd:ee:73:10:90:3b:39:6d:dd:4e:8c:99:58: af:50:60:69:24:aa:05:9b:d5:ea:82:be:b2:ba:2d: f5:c4:19:51:6c:62:02:21:4b:7f:af:da:11:93:90: 30:94:01:bb:60:03:ab:5d:37:b1:9d:40:2d:a4:54: 95:11:a9:44:0c:d7:b4:9c:55:d1:d3:d1:1a:f0:68: 11:b5:8b:d5:08:09:47:07:46:7f:ef:a7:76:18:2b: a8:63:bb:20:19:87:5f:5b:ee:40:25:03:a5:6c:7a: 8a:0b:40:d4:34:4d:3b:43:b0:37:0f:e7:e3:bf:79: f7:63:f5:1b:00:88:6e:4e:54:63:46:ac:9f:f2:a5: 7f:ff:9b:e3:8f:05:58:ea:da:32:27:8a:a2:4b:64: 43:50:07:ac:1e:fb:11:9c:5b:3c:3b:8e:0d:2a:6f: 12:ca:43:88:e1:17:25:2c:eb:b2:00:89:d0:a7:0f: 62:65:48:7f:da:34:c6:ff:a4:ac:e1:66:d3:2f:d6: 14:2e:6b:eb:34:7e:63:76:d3:0a:37:9b:36:1a:94: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:BD:E8:ED:BD:CF:64:75:0A:E1:A8:CF:48:7F:EC:EB:28:17:CC X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.120.0/23 103.148.104.0/24 103.153.202.0/24 IPv6: 2001:df2:ce80::/48 Signature Algorithm: sha256WithRSAEncryption 19:5c:69:3c:20:99:be:4f:1c:8a:7d:9d:f9:2d:87:29:ae:d3: 78:4a:ca:f5:03:1f:63:b3:5b:5c:22:77:3b:1b:4d:c8:08:11: 47:3e:1d:52:bb:d0:fd:93:ad:54:ff:6e:b6:95:61:09:4a:33: 42:47:ef:92:60:fe:17:1b:5e:73:86:37:48:db:e1:fd:3f:74: cd:15:c1:a5:f1:72:e6:07:85:fe:70:2c:0c:cf:31:b4:ef:8d: 0e:2f:9d:ae:34:c8:31:f4:49:76:85:21:b1:d6:5e:70:60:52: 25:5b:bb:e4:cb:77:48:09:c3:fa:8a:5a:3b:fd:34:00:d4:28: 2c:24:9d:c9:c3:3e:16:e4:05:04:00:56:e4:72:f3:fe:7f:c0: 93:77:5c:a8:05:76:4d:99:fe:4d:37:55:28:ce:e2:aa:08:e5: e2:2b:6d:4f:cf:16:34:d8:09:44:d1:00:f7:ac:75:43:99:82: 47:ef:f1:de:a7:77:55:bd:e4:c0:de:73:b0:4d:c1:e3:c3:0a: 2a:06:a1:f2:16:f8:33:e8:5b:e6:12:79:d3:45:95:60:d3:1e: b0:7d:44:1d:f9:86:5d:a5:6e:90:04:e1:71:ea:1d:0a:1c:cb: 57:d0:3e:15:b0:38:91:9a:c6:df:11:b0:19:78:5b:2b:ec:24: c0:da:5d:6c -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjQwNDIyMjA1OTI5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjI2Y2ZiMS1jYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mY5iR3gAjujzRoIapD1Qq+RcGW6Cz8lCsq77qhw/ONvaDhHrwQEb5unOqzb b/3ucxCQOzlt3U6MmVivUGBpJKoFm9Xqgr6yui31xBlRbGICIUt/r9oRk5AwlAG7 YAOrXTexnUAtpFSVEalEDNe0nFXR09Ea8GgRtYvVCAlHB0Z/76d2GCuoY7sgGYdf W+5AJQOlbHqKC0DUNE07Q7A3D+fjv3n3Y/UbAIhuTlRjRqyf8qV//5vjjwVY6toy J4qiS2RDUAesHvsRnFs8O44NKm8SykOI4RclLOuyAInQpw9iZUh/2jTG/6Ss4WbT L9YULmvrNH5jdtMKN5s2GpSlEwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGRsvejt vc9kdQrhqM9If+zrKBfMMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhGRTgvMTJGOTZGQjI0RUZCMTFFQThENjk0RDBEQzRGOUFFMDIvNEFFRTVEMTQ0 RUZDMTFFQTlEMDAzMTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnBXgDBABnlGgDBABnmcowDwQCAAIwCQMHACABDfLOgDAN BgkqhkiG9w0BAQsFAAOCAQEAGVxpPCCZvk8cin2d+S2HKa7TeErK9QMfY7NbXCJ3 OxtNyAgRRz4dUrvQ/ZOtVP9utpVhCUozQkfvkmD+Fxtec4Y3SNvh/T90zRXBpfFy 5geF/nAsDM8xtO+NDi+drjTIMfRJdoUhsdZecGBSJVu75Mt3SAnD+opaO/00ANQo LCSdycM+FuQFBABW5HLz/n/Ak3dcqAV2TZn+TTdVKM7iqgjl4ittT88WNNgJRNEA 96x1Q5mCR+/x3qd3Vb3kwN5zsE3B48MKKgah8hb4M+hb5hJ500WVYNMesH1EHfmG XaVukAThceodChzLV9A+FbA4kZrG3xGwGXhbK+wkwNpdbA== -----END CERTIFICATE-----Generated at Sun Jun 2 22:48:29 2024 by rpki-client on console-ams.rpki-client.org