$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa File: A152FA389E2211E99CA85B6CC4F9AE02.roa (raw, json) Hash identifier: l0ylgCDZO+lWci1SHyFWiAvCy7GcuDTqjNekg+93CcM= Subject key identifier: 86:34:C1:28:FF:C1:4E:0D:E8:23:B0:C7:BA:DD:E8:B4:77:73:06:9F Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0D22 Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa Signing time: Mon 14 Aug 2023 18:35:39 +0000 ROA not before: Mon 14 Aug 2023 18:35:39 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139267 IP address blocks: 103.140.164.0/23 maxlen: 24 2404:ffc0::/32 maxlen: 32 2404:ffc0::/48 maxlen: 48 2404:ffc0:1::/48 maxlen: 48 2404:ffc0:2::/48 maxlen: 48 2404:ffc0:3::/48 maxlen: 48 2404:ffc0:4::/48 maxlen: 48 2404:ffc0:5::/48 maxlen: 48 2404:ffc0:6::/48 maxlen: 48 2404:ffc0:7::/48 maxlen: 48 2404:ffc0:8::/48 maxlen: 48 2404:ffc0:9::/48 maxlen: 48 2404:ffc0:a::/48 maxlen: 48 2404:ffc0:b::/48 maxlen: 48 2404:ffc0:c::/48 maxlen: 48 2404:ffc0:d::/48 maxlen: 48 2404:ffc0:e::/48 maxlen: 48 2404:ffc0:f::/48 maxlen: 48 2404:ffc0:10::/48 maxlen: 48 2404:ffc0:11::/48 maxlen: 48 2404:ffc0:12::/48 maxlen: 48 2404:ffc0:13::/48 maxlen: 48 2404:ffc0:14::/48 maxlen: 48 2404:ffc0:15::/48 maxlen: 48 2404:ffc0:16::/48 maxlen: 48 2404:ffc0:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3362 (0xd22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: Aug 14 18:35:39 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64da73fb-b0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c4:16:c2:a3:1b:f1:ce:fa:c3:aa:ad:c5:c6: 7c:01:16:9a:69:2d:2c:f5:79:16:71:58:3a:b5:f4: e0:d1:c5:f5:b3:30:ae:fb:1c:26:ba:e5:ef:70:b7: c0:02:d1:d2:1a:06:90:1a:be:b0:68:34:56:c6:98: 5c:e5:0a:2a:1e:a5:e7:47:97:3d:55:6d:c6:9e:52: b0:9c:8a:b5:11:2c:63:ae:0a:c6:3b:22:67:59:9b: b1:f6:ec:17:0c:12:88:b8:3c:6c:1b:95:6b:c1:e2: d2:2c:b7:b3:89:b3:b7:aa:4a:0d:eb:9b:6f:3d:c2: 6d:3a:56:49:a4:3d:a9:79:6b:03:69:a2:3b:36:56: 82:e1:6d:43:6e:28:44:c5:7c:ad:27:1d:cf:94:2b: a9:0e:37:13:8e:70:04:4a:95:41:0f:eb:8a:8a:dd: 7b:f4:0c:94:35:a0:a0:c2:44:3a:ed:ff:05:f8:6c: b4:43:80:99:0a:61:c4:79:8f:25:9d:7d:ee:71:b1: 71:9c:d9:ad:6a:fc:2e:ae:7d:76:76:a0:32:07:9a: 67:eb:06:0e:60:5d:a8:04:2d:34:fa:af:25:63:40: 46:c1:a8:34:c0:90:e3:7b:f8:01:48:30:09:25:5a: f7:59:0d:b4:69:9d:a2:da:7a:46:b5:5f:41:09:fb: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:34:C1:28:FF:C1:4E:0D:E8:23:B0:C7:BA:DD:E8:B4:77:73:06:9F X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.164.0/23 IPv6: 2404:ffc0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:56:9f:41:f8:4d:60:e5:d5:30:d7:3c:97:c6:a1:ce:7e:33: 2e:de:1e:8f:71:ae:be:d7:50:e2:ef:5e:e9:b1:c1:ca:2e:11: 8a:14:74:0f:01:53:56:5a:ff:a0:3b:bd:ab:06:d5:a7:db:7f: 36:d0:2d:aa:96:32:2e:30:1c:e8:12:72:96:1a:31:94:7e:8d: 61:fd:23:61:9b:14:63:c8:f3:40:c1:43:27:ad:ab:be:56:24: f2:40:b1:07:8a:e0:97:ab:d7:b8:35:ff:1c:38:2a:a5:c8:3b: 49:be:98:e3:a3:4a:4c:d5:99:db:e6:ba:cc:7e:fd:80:98:3c: 80:d8:a3:c0:9d:c6:6c:00:11:92:4b:2a:3f:b6:b2:a3:06:7a: 97:49:8d:fe:be:01:c8:72:5b:c0:33:1d:2d:29:5e:d0:82:e9: 1d:25:f6:3b:82:6a:f4:f5:5f:62:7c:7e:d1:8f:63:bd:63:af: d1:1c:dd:55:b4:48:6d:ec:8d:09:f6:38:c2:34:4b:7e:b3:d2: 76:bc:51:e6:89:46:b7:10:5f:10:45:f4:6b:02:aa:37:7b:e5: f0:93:fd:9f:5e:bf:a4:89:ba:c2:8d:9e:39:67:31:6c:eb:94: b3:51:d8:11:f7:cb:69:db:d6:c1:a0:b1:a9:ef:1f:61:35:e4: 4a:d6:76:14 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjMwODE0MTgzNTM5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRhNzNmYi1iMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48QWwqMb8c76w6qtxcZ8ARaaaS0s9XkWcVg6tfTg0cX1szCu+xwmuuXvcLfA AtHSGgaQGr6waDRWxphc5QoqHqXnR5c9VW3GnlKwnIq1ESxjrgrGOyJnWZux9uwX DBKIuDxsG5VrweLSLLezibO3qkoN65tvPcJtOlZJpD2peWsDaaI7NlaC4W1DbihE xXytJx3PlCupDjcTjnAESpVBD+uKit179AyUNaCgwkQ67f8F+Gy0Q4CZCmHEeY8l nX3ucbFxnNmtavwurn12dqAyB5pn6wYOYF2oBC00+q8lY0BGwag0wJDje/gBSDAJ JVr3WQ20aZ2i2npGtV9BCfvHKwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIY0wSj/ wU4N6COwx7rd6LR3cwafMB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VBRTYvN0JDMjkzMjY5QkY5MTFFOUFBNkQ4NDUzQzRGOUFFMDIvQTE1MkZBMzg5 RTIyMTFFOTlDQTg1QjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnjKQwDQQCAAIwBwMFACQE/8AwDQYJKoZIhvcNAQELBQAD ggEBAE1Wn0H4TWDl1TDXPJfGoc5+My7eHo9xrr7XUOLvXumxwcouEYoUdA8BU1Za /6A7vasG1afbfzbQLaqWMi4wHOgScpYaMZR+jWH9I2GbFGPI80DBQyetq75WJPJA sQeK4Jer17g1/xw4KqXIO0m+mOOjSkzVmdvmusx+/YCYPIDYo8CdxmwAEZJLKj+2 sqMGepdJjf6+AchyW8AzHS0pXtCC6R0l9juCavT1X2J8ftGPY71jr9Ec3VW0SG3s jQn2OMI0S36z0na8UeaJRrcQXxBF9GsCqjd75fCT/Z9ev6SJusKNnjlnMWzrlLNR 2BH3y2nb1sGgsanvH2E15ErWdhQ= -----END CERTIFICATE-----Generated at Thu May 16 19:10:54 2024 by rpki-client on console-fra.rpki-client.org