$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa File: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (raw, json) Hash identifier: cIVUE+RHP6rif8Wd67K4ZpYK/J6GHtr54/xW7v8taNg= Subject key identifier: F5:F5:45:72:A7:02:18:9F:BE:C4:25:7E:A4:7C:E8:46:96:67:62:CA Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 85 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa Signing time: Sun 03 Dec 2023 05:36:17 +0000 ROA not before: Sun 03 Dec 2023 05:36:17 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 38186 IP address blocks: 103.145.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 04:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: Dec 3 05:36:17 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656c13d0-fb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:03:43:97:28:96:0a:44:5b:f3:98:1f:8e: 32:b0:50:9e:15:39:66:dc:3e:5c:6e:b6:a1:6f:13: 2c:97:cb:d0:7b:9f:d5:0f:b4:1c:5c:e6:3f:31:3c: cf:f4:83:11:22:c8:72:42:b1:a6:c7:7b:ca:67:b6: 39:1d:b0:3b:92:d4:21:52:0f:b4:a0:bc:b1:51:53: 96:c6:30:22:4c:90:44:0b:88:5e:fe:14:6c:fa:63: eb:6a:a4:f7:5c:cf:f0:51:6e:27:b1:62:e4:44:e3: 21:e8:c5:a7:24:ef:19:79:c5:52:33:bf:9c:06:0c: 56:09:e8:6d:d8:a1:cb:44:6a:da:ac:05:5b:9c:3a: 15:4f:cc:5c:60:d9:81:96:3c:6f:a6:21:40:a7:9c: 83:cf:2e:43:96:ca:63:56:82:06:95:d4:ba:28:17: 64:72:c1:9b:57:76:81:8b:78:7d:f7:d1:a8:43:91: 72:ba:61:f7:c8:6c:27:23:00:22:61:f5:74:58:17: aa:a0:33:76:c4:2d:73:66:db:1d:d2:7b:bd:9b:b3: af:04:85:b0:17:d0:c3:9d:d4:f6:47:52:87:44:10: aa:74:da:77:2f:62:c2:1b:7a:4e:13:f2:99:ec:55: ea:b5:e3:ec:14:fa:2e:5b:eb:cc:6b:7a:a3:cf:cd: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F5:45:72:A7:02:18:9F:BE:C4:25:7E:A4:7C:E8:46:96:67:62:CA X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.190.0/23 Signature Algorithm: sha256WithRSAEncryption a9:54:fe:3c:48:74:ba:a4:3c:6d:1f:41:3a:0b:4c:61:d9:47: db:15:67:d7:f1:06:b1:86:4b:d3:cf:c9:48:34:c1:9f:c4:6a: 97:55:10:73:a3:cc:f5:51:f7:73:db:79:2c:e2:94:e4:7e:0f: e0:2b:a5:e0:62:7e:3a:e5:b2:48:85:b5:12:6b:e4:14:49:bf: 01:3f:0f:1e:b9:15:68:02:cb:8f:4d:04:ca:91:bc:e8:5d:04: 30:86:59:fe:07:09:e5:d3:08:86:6a:4d:8f:36:04:7f:b1:60: 48:ed:24:89:b9:c4:76:23:c2:bc:33:51:18:82:50:36:31:98: db:f3:75:2c:af:d1:c8:90:d0:f2:20:69:d5:c0:0f:c3:3b:f4: fd:61:cb:6c:00:e0:99:c1:70:7c:fc:3e:ab:e5:b4:0a:4f:b1: 0b:ad:5c:88:2f:2b:e5:65:14:c2:f7:9e:97:e0:2d:0a:b7:67: d9:a6:9d:d5:93:8f:5a:fd:5e:97:b0:98:cc:24:00:26:6f:d8: 67:e9:7a:20:92:cb:1a:64:19:53:47:42:9d:86:c4:8a:43:58: 61:4b:9c:19:2c:ce:9c:cb:fc:c1:8d:bf:9b:d2:c8:bc:e7:6b: 7d:2b:cc:e1:2e:05:fd:a5:f7:1e:ed:9f:26:13:9b:9f:ed:17: a0:95:17:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjMxMjAzMDUzNjE3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZjMTNkMC1mYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw0DQ5colgpEW/OYH44ysFCeFTlm3D5cbrahbxMsl8vQe5/VD7QcXOY/MTzP 9IMRIshyQrGmx3vKZ7Y5HbA7ktQhUg+0oLyxUVOWxjAiTJBEC4he/hRs+mPraqT3 XM/wUW4nsWLkROMh6MWnJO8ZecVSM7+cBgxWCeht2KHLRGrarAVbnDoVT8xcYNmB ljxvpiFAp5yDzy5DlspjVoIGldS6KBdkcsGbV3aBi3h999GoQ5FyumH3yGwnIwAi YfV0WBeqoDN2xC1zZtsd0nu9m7OvBIWwF9DDndT2R1KHRBCqdNp3L2LCG3pOE/KZ 7FXqtePsFPouW+vMa3qjz81fGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPX1RXKn AhifvsQlfqR86EaWZ2LKMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhDMjAvQTVBNENEMTBDQzc2MTFFRDkzQ0VBRDdFQzRGOUFFMDIvQThDQ0YyRDRD QzdBMTFFREE5NDMwRTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkb4wDQYJKoZIhvcNAQELBQADggEBAKlU/jxIdLqkPG0f QToLTGHZR9sVZ9fxBrGGS9PPyUg0wZ/EapdVEHOjzPVR93PbeSzilOR+D+ArpeBi fjrlskiFtRJr5BRJvwE/Dx65FWgCy49NBMqRvOhdBDCGWf4HCeXTCIZqTY82BH+x YEjtJIm5xHYjwrwzURiCUDYxmNvzdSyv0ciQ0PIgadXAD8M79P1hy2wA4JnBcHz8 PqvltApPsQutXIgvK+VlFML3npfgLQq3Z9mmndWTj1r9XpewmMwkACZv2GfpeiCS yxpkGVNHQp2GxIpDWGFLnBkszpzL/MGNv5vSyLzna30rzOEuBf2l9x7tnyYTm5/t F6CVFzs= -----END CERTIFICATE-----Generated at Thu May 23 06:54:43 2024 by rpki-client on console-fra.rpki-client.org