$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/C003531C10EB11ED9C882A38C4F9AE02.roa File: C003531C10EB11ED9C882A38C4F9AE02.roa (raw, json) Hash identifier: ET5LTKzqc2BM32oELN/6tYyeidfqadR/lTO694gxZxA= Subject key identifier: 3F:D3:7D:6A:FB:DA:94:EE:C1:38:5D:B6:4C:11:57:34:9D:93:6F:D3 Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Certificate serial: 0108 Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/C003531C10EB11ED9C882A38C4F9AE02.roa Signing time: Thu 29 Jun 2023 03:20:54 +0000 ROA not before: Thu 29 Jun 2023 03:20:54 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 139043 IP address blocks: 103.138.222.0/24 maxlen: 24 103.138.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Validity Not Before: Jun 29 03:20:54 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=649cf896-811c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:d9:7b:85:2f:90:ad:98:e6:20:3e:f2:e9: 44:dd:c6:09:8d:3d:06:ea:74:c0:15:30:0e:4c:07: 0b:e6:e9:9f:18:08:b0:0e:57:95:29:5b:e6:73:55: ae:50:c1:6d:ec:88:98:d1:3d:93:3b:b5:b3:f0:58: d2:3f:f9:89:d2:82:dd:4b:2c:ea:17:e2:d6:1f:30: 93:1c:af:96:63:8b:cf:a7:00:d9:06:4b:0b:f3:4f: 36:73:46:cc:18:31:8d:73:75:7e:cf:22:98:03:51: dc:be:66:7d:1a:11:01:f9:b2:e5:b6:e7:bc:46:64: 97:4f:e4:1c:a0:fd:f8:82:28:e9:ee:f3:29:83:66: 5d:26:07:46:a8:2a:d0:d7:a0:70:70:cc:1c:16:05: 2b:2f:ac:5e:9e:9f:db:65:cd:b7:21:a8:d8:3b:82: 80:01:d1:34:3d:57:c5:d2:da:c7:27:c6:62:b4:ea: 5b:31:78:db:46:03:75:28:95:88:f0:08:51:4c:a6: 7d:3a:b5:5a:e1:71:ec:e2:68:8b:e4:c6:0c:44:8a: 54:48:bf:e0:c0:b2:36:49:7f:c7:db:69:af:e1:6a: f9:fd:0a:46:e7:a3:3b:e3:f4:49:28:d1:ff:34:c8: b0:3f:83:f0:66:84:b0:35:37:ac:cb:de:ea:05:51: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:7D:6A:FB:DA:94:EE:C1:38:5D:B6:4C:11:57:34:9D:93:6F:D3 X509v3 Authority Key Identifier: keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/C003531C10EB11ED9C882A38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.222.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:b7:5f:d0:93:5b:50:2e:b9:1a:5c:a1:02:eb:aa:02:f7:b6: c1:da:c6:2b:01:44:35:9a:33:9a:22:5e:45:4c:c7:14:f4:a4: 3a:da:6a:51:d2:af:3d:33:19:18:3e:25:d3:81:72:51:6a:da: 4c:72:4c:1b:55:ba:c9:f8:83:9c:f6:57:2d:f8:6b:19:89:8c: 8d:ce:51:da:c6:d5:29:a8:eb:eb:0d:8f:15:d4:10:08:71:33: 4b:2c:fb:ac:74:ef:b4:78:20:6e:ad:9e:a4:6d:94:3b:e8:9d: 85:14:34:81:cf:23:ae:8f:47:b6:2b:e0:63:65:e0:3a:2e:9a: 8c:b8:da:fd:58:67:d4:d8:ca:5b:d6:15:3a:e7:32:e3:9e:47: 21:9d:fc:51:09:bf:b5:b9:9a:5c:45:b1:56:63:b6:cd:4e:c5: 86:a4:a0:f5:4f:38:38:12:8d:0e:03:00:d9:58:eb:86:a0:08: 1f:ff:6b:f5:da:ef:4e:f3:0d:55:51:92:e4:85:03:2d:1c:9b: 15:67:a8:41:89:db:f5:70:87:2d:4d:4f:e2:6b:36:b4:37:ab: 0f:77:4e:7f:a6:0e:cb:d9:e6:43:9d:8e:78:ad:ad:8c:15:0c: a8:36:de:26:3c:4a:46:a4:7f:1f:68:61:db:cc:be:89:16:19: 76:bd:ca:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUyRDcyMTczQ0E2 M0U5QzRFNTEwHhcNMjMwNjI5MDMyMDU0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDljZjg5Ni04MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/nZe4UvkK2Y5iA+8ulE3cYJjT0G6nTAFTAOTAcL5umfGAiwDleVKVvmc1Wu UMFt7IiY0T2TO7Wz8FjSP/mJ0oLdSyzqF+LWHzCTHK+WY4vPpwDZBksL8082c0bM GDGNc3V+zyKYA1HcvmZ9GhEB+bLltue8RmSXT+QcoP34gijp7vMpg2ZdJgdGqCrQ 16BwcMwcFgUrL6xenp/bZc23IajYO4KAAdE0PVfF0trHJ8ZitOpbMXjbRgN1KJWI 8AhRTKZ9OrVa4XHs4miL5MYMRIpUSL/gwLI2SX/H22mv4Wr5/QpG56M74/RJKNH/ NMiwP4PwZoSwNTesy97qBVHMxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD/TfWr7 2pTuwThdtkwRVzSdk2/TMB8GA1UdIwQYMBaAFICkuPyuzQEegqpOLXIXPKY+nE5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUQxRS9BOEQ4ODNFQTEw RTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFSNkNxazR0Y2hjOHBqNmNU bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dLUzRfSzdOQVI2Q3FrNHRjaGM4cGo2Y1RsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTVEMUUvQThEODgzRUExMEUzMTFFREFEQUZEOTA5QzRGOUFFMDIvQzAwMzUzMUMx MEVCMTFFRDlDODgyQTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnit4wDQYJKoZIhvcNAQELBQADggEBAFy3X9CTW1AuuRpc oQLrqgL3tsHaxisBRDWaM5oiXkVMxxT0pDraalHSrz0zGRg+JdOBclFq2kxyTBtV usn4g5z2Vy34axmJjI3OUdrG1Smo6+sNjxXUEAhxM0ss+6x077R4IG6tnqRtlDvo nYUUNIHPI66PR7Yr4GNl4Doumoy42v1YZ9TYylvWFTrnMuOeRyGd/FEJv7W5mlxF sVZjts1OxYakoPVPODgSjQ4DANlY64agCB//a/Xa707zDVVRkuSFAy0cmxVnqEGJ 2/Vwhy1NT+JrNrQ3qw93Tn+mDsvZ5kOdjnitrYwVDKg23iY8Skakfx9oYdvMvokW GXa9yvk= -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:16 2024 by rpki-client on console-ams.rpki-client.org