$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa File: 899B070834D511ED99B1921FC4F9AE02.roa (raw, json) Hash identifier: 7pcQuTEhjqxzsVESEjdE9p+cLZXrm70IhPYei5kG7XQ= Subject key identifier: 84:B5:42:8C:01:E7:34:E6:4B:07:DD:0B:02:8E:58:56:FB:D8:AD:44 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 0136 Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa Signing time: Tue 21 Nov 2023 04:15:15 +0000 ROA not before: Tue 21 Nov 2023 04:15:15 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 141723 IP address blocks: 103.146.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Nov 21 04:15:15 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=655c2ed3-3225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:eb:89:25:3f:b7:20:cc:81:63:24:80:03: b9:9b:8c:5c:df:02:5c:07:fb:1b:e7:84:34:c4:a9: a7:01:58:44:5e:65:b1:9c:c7:0a:95:0a:cd:5d:74: 9b:b1:88:6f:16:3e:0d:d4:4e:cd:09:69:9d:26:2a: d4:ad:db:91:90:3d:40:89:47:03:b8:78:51:dd:d6: 5a:6f:f3:a6:3c:66:21:3f:af:7d:04:c9:27:3a:ac: 40:6c:0d:67:7b:ab:1a:b0:eb:b8:21:42:3f:ab:70: fe:30:b5:2f:d5:82:67:77:c7:f2:bd:30:0c:24:84: ca:97:64:ad:2f:71:f7:b9:01:7b:d9:e1:26:b8:69: cc:09:8e:54:5e:bf:63:01:a3:6d:73:a0:6c:65:50: ca:29:20:e4:a5:a4:07:11:71:b9:9b:d1:f6:fc:43: 71:b1:56:37:16:2e:79:e0:00:a6:78:fa:27:fe:99: c8:df:ed:88:ef:f6:8f:1d:2f:3e:d6:5b:c1:48:3e: 23:cb:79:36:f6:81:69:19:9b:69:0f:ba:c8:0d:8e: 34:f0:ea:34:e3:c3:5b:ee:d0:b6:e4:2e:eb:37:48: c3:26:b5:3e:e0:ff:81:c0:5e:0f:e1:10:dc:92:90: ea:42:1e:ee:65:29:2c:b4:a0:2c:bb:49:0c:12:ff: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:42:8C:01:E7:34:E6:4B:07:DD:0B:02:8E:58:56:FB:D8:AD:44 X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.57.0/24 Signature Algorithm: sha256WithRSAEncryption 47:25:69:29:04:21:b9:86:12:3e:01:f9:be:12:40:88:24:54: fd:4e:d5:25:e7:c1:fa:57:0d:3d:4d:0a:af:29:75:75:e7:f5: 35:d7:e0:67:ad:57:43:fe:c7:79:7d:24:43:d1:d8:59:62:e1: 1a:1d:96:b7:45:51:de:17:15:5e:9c:6e:dc:a7:14:d8:ad:a8: 4a:56:dd:a2:ae:9b:ec:a2:27:eb:19:a7:1e:96:ff:f0:91:5b: 05:cc:d7:98:91:80:b1:67:95:a4:1f:0e:04:15:b7:fe:27:6a: ea:db:b9:99:aa:2e:69:6e:b1:54:45:f4:16:ab:29:5a:44:6a: 71:44:4a:29:64:dd:86:38:29:49:7f:a2:d9:bd:77:16:ab:d4: 7d:16:44:35:42:a9:a6:41:23:f0:69:4a:ab:92:a1:b1:82:e3: 22:57:9f:f8:0c:d7:30:99:aa:03:35:63:5b:6c:59:7f:bc:4a: 77:89:c5:13:a1:8b:73:2a:21:81:e4:e8:c8:b4:b3:e1:24:de: e3:ef:e5:42:b9:f4:f3:c6:b7:63:3e:eb:81:92:f4:c5:69:b3: 0a:7f:92:ae:3e:40:b8:5f:e3:34:2f:e4:ec:1b:4e:c0:c5:2d: 51:b7:fb:0a:73:e4:fb:75:52:f7:45:38:d4:17:fe:61:43:bd: 57:5d:72:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjMxMTIxMDQxNTE1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVjMmVkMy0zMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bbriSU/tyDMgWMkgAO5m4xc3wJcB/sb54Q0xKmnAVhEXmWxnMcKlQrNXXSb sYhvFj4N1E7NCWmdJirUrduRkD1AiUcDuHhR3dZab/OmPGYhP699BMknOqxAbA1n e6sasOu4IUI/q3D+MLUv1YJnd8fyvTAMJITKl2StL3H3uQF72eEmuGnMCY5UXr9j AaNtc6BsZVDKKSDkpaQHEXG5m9H2/ENxsVY3Fi554ACmePon/pnI3+2I7/aPHS8+ 1lvBSD4jy3k29oFpGZtpD7rIDY408Oo048Nb7tC25C7rN0jDJrU+4P+BwF4P4RDc kpDqQh7uZSkstKAsu0kMEv/YLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIS1QowB 5zTmSwfdCwKOWFb72K1EMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0RGMUUvQ0M2NUE2NkExRjlBMTFFRDgzNUNBQTNGQzRGOUFFMDIvODk5QjA3MDgz NEQ1MTFFRDk5QjE5MjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkjkwDQYJKoZIhvcNAQELBQADggEBAEclaSkEIbmGEj4B +b4SQIgkVP1O1SXnwfpXDT1NCq8pdXXn9TXX4GetV0P+x3l9JEPR2Fli4RodlrdF Ud4XFV6cbtynFNitqEpW3aKum+yiJ+sZpx6W//CRWwXM15iRgLFnlaQfDgQVt/4n aurbuZmqLmlusVRF9BarKVpEanFESilk3YY4KUl/otm9dxar1H0WRDVCqaZBI/Bp SquSobGC4yJXn/gM1zCZqgM1Y1tsWX+8SneJxROhi3MqIYHk6Mi0s+Ek3uPv5UK5 9PPGt2M+64GS9MVpswp/kq4+QLhf4zQv5OwbTsDFLVG3+wpz5Pt1UvdFONQX/mFD vVddcmc= -----END CERTIFICATE-----Generated at Fri May 17 06:46:21 2024 by rpki-client on console-ams.rpki-client.org