$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/A22C70A2601F11ED93695875C4F9AE02.roa File: A22C70A2601F11ED93695875C4F9AE02.roa (raw, json) Hash identifier: HeunICS+dfiqWVFVgqOPy6mgm5VWLlfn9G0WWrZlHRw= Subject key identifier: 6E:EE:67:AC:52:9E:69:7B:8B:B1:9F:DB:0D:E6:E1:EF:E7:F3:AD:A4 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: A9 Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/A22C70A2601F11ED93695875C4F9AE02.roa Signing time: Sun 01 Oct 2023 04:04:42 +0000 ROA not before: Sun 01 Oct 2023 04:04:42 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 150286 IP address blocks: 103.210.114.0/23 maxlen: 23 103.210.114.0/24 maxlen: 24 103.210.115.0/24 maxlen: 24 2001:df1:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Oct 1 04:04:42 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6518efd9-4162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7a:14:d1:1a:7a:51:c0:03:41:2e:d8:db:8f: 98:25:54:f7:4b:89:ec:da:e3:bd:42:7a:49:82:f5: aa:be:fa:66:ef:a2:95:d5:40:a1:bc:2f:65:f8:f6: 5c:68:3f:36:b5:f6:1f:f5:3e:e0:3c:0e:20:e5:de: fa:e0:ff:b7:b3:e2:0d:23:fb:0f:95:1f:82:89:09: 79:ce:aa:37:04:36:ee:68:f1:ed:99:cd:4c:7e:c3: fb:91:55:54:f4:20:0b:47:3d:59:5c:04:b1:e8:5a: c6:f7:96:36:67:6a:e8:95:ad:ed:08:0b:26:26:20: 57:51:b2:dd:b3:c4:0b:56:d6:aa:e8:bb:ba:22:bf: b2:66:80:a1:53:56:ad:50:59:45:7d:d1:8f:1e:be: 35:20:4d:0c:a8:e9:62:7a:f5:9d:01:ce:71:7f:96: e8:24:5a:79:2b:31:9d:fa:73:e5:59:d7:24:a1:1a: 8b:d4:f6:28:c6:dc:4a:bd:a7:9e:bb:74:b6:bd:15: 6b:6b:d3:cf:45:d5:26:b8:72:7d:b6:63:27:13:aa: 97:48:7e:ee:ff:4b:62:d8:fa:be:ed:2a:46:63:99: ec:62:6c:e5:b0:9d:07:53:7a:c9:9e:ed:11:37:be: 9c:40:8b:85:06:f3:5f:70:08:9d:d5:24:fb:d3:79: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EE:67:AC:52:9E:69:7B:8B:B1:9F:DB:0D:E6:E1:EF:E7:F3:AD:A4 X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/A22C70A2601F11ED93695875C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.210.114.0/23 IPv6: 2001:df1:3440::/48 Signature Algorithm: sha256WithRSAEncryption 07:c7:b1:46:b6:39:f7:cd:d8:76:d7:48:0a:fa:01:c6:7f:20: 9d:be:e8:28:d9:17:d3:cb:2d:a5:cf:b1:e2:7c:e5:0e:3d:6a: cd:e7:9f:37:68:f3:6e:a6:e5:71:6b:3c:2f:bb:02:08:6b:1b: cb:e3:ca:2b:64:01:a0:a3:37:cc:46:f6:e9:ce:b3:5a:90:71: 62:99:08:93:b6:c3:0b:db:18:e3:f9:e0:8a:2a:46:55:cf:f4: 49:d4:bd:a4:1f:2c:fe:1e:1f:c4:3a:54:a6:51:74:35:e7:f7: 4f:f3:91:33:bb:95:71:7c:1f:4c:44:fb:49:2a:d8:48:53:29: 9d:5b:3c:e5:bd:c6:7e:d3:c6:3e:6f:71:dd:d8:70:24:fb:5a: cd:93:53:63:c7:63:38:f1:3e:82:03:e2:27:b3:ae:0e:bd:d7: 55:84:79:cb:9f:ba:7c:2b:c1:b5:9e:dd:91:19:33:b2:64:d8: 6d:32:79:46:87:a3:47:1c:d0:f6:ec:98:f9:a5:1c:44:03:4f: 4f:cd:92:25:8f:71:50:8d:15:ca:d6:71:c0:b6:6d:0f:f0:72: 21:e2:49:5a:0f:51:37:89:7a:0e:88:aa:68:f5:cd:c9:b4:55: 4b:aa:55:6b:f4:39:53:3b:c8:b9:f9:d3:d5:63:03:fa:f4:99: b5:3e:f3:0e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjMxMDAxMDQwNDQyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE4ZWZkOS00MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43oU0Rp6UcADQS7Y24+YJVT3S4ns2uO9QnpJgvWqvvpm76KV1UChvC9l+PZc aD82tfYf9T7gPA4g5d764P+3s+INI/sPlR+CiQl5zqo3BDbuaPHtmc1MfsP7kVVU 9CALRz1ZXASx6FrG95Y2Z2rola3tCAsmJiBXUbLds8QLVtaq6Lu6Ir+yZoChU1at UFlFfdGPHr41IE0MqOlievWdAc5xf5boJFp5KzGd+nPlWdckoRqL1PYoxtxKvaee u3S2vRVra9PPRdUmuHJ9tmMnE6qXSH7u/0ti2Pq+7SpGY5nsYmzlsJ0HU3rJnu0R N76cQIuFBvNfcAid1ST703kdbwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG7uZ6xS nml7i7Gf2w3m4e/n862kMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhENjEvMjk1RTRDNzY2MDFCMTFFREE1QzcyNzZFQzRGOUFFMDIvQTIyQzcwQTI2 MDFGMTFFRDkzNjk1ODc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn0nIwDwQCAAIwCQMHACABDfE0QDANBgkqhkiG9w0BAQsF AAOCAQEAB8exRrY5983YdtdICvoBxn8gnb7oKNkX08stpc+x4nzlDj1qzeefN2jz bqblcWs8L7sCCGsby+PKK2QBoKM3zEb26c6zWpBxYpkIk7bDC9sY4/ngiipGVc/0 SdS9pB8s/h4fxDpUplF0Nef3T/ORM7uVcXwfTET7SSrYSFMpnVs85b3GftPGPm9x 3dhwJPtazZNTY8djOPE+ggPiJ7OuDr3XVYR5y5+6fCvBtZ7dkRkzsmTYbTJ5Roej RxzQ9uyY+aUcRANPT82SJY9xUI0VytZxwLZtD/ByIeJJWg9RN4l6DoiqaPXNybRV S6pVa/Q5UzvIufnT1WMD+vSZtT7zDg== -----END CERTIFICATE-----Generated at Fri May 17 06:46:22 2024 by rpki-client on console-ams.rpki-client.org