$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa File: AE148B2A6BB911ED97343873C4F9AE02.roa (raw, json) Hash identifier: u6SVoGQGrtu5LIBqra8PV8OpxktuEo3Qc4ssotlBn0o= Subject key identifier: 34:D4:EA:44:F8:9F:03:3B:1E:8F:A1:1F:94:49:67:DF:BE:F6:B3:AB Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: D7 Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa Signing time: Sat 13 Jan 2024 04:34:54 +0000 ROA not before: Sat 13 Jan 2024 04:34:54 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150442 IP address blocks: 103.37.126.0/23 maxlen: 23 103.37.126.0/24 maxlen: 24 103.37.127.0/24 maxlen: 24 2001:df1:92c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Jan 13 04:34:54 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a212ee-2c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:d7:df:47:ac:3c:86:c8:0d:85:26:07:2d: e6:1c:35:0e:62:ff:33:84:ee:1b:15:8a:8b:42:46: 8f:48:40:76:55:89:d5:82:61:dd:5f:78:63:77:1a: d3:e0:fe:87:16:b7:c7:f9:b7:c0:61:d9:0d:fb:a5: b3:88:3f:22:eb:ac:6e:c5:66:ea:fc:10:ee:2d:67: af:5c:de:86:06:e2:3d:ab:cd:f0:48:ba:5f:ea:d2: 67:d2:ec:77:4b:3b:f8:a8:10:33:25:dd:2a:3d:53: 42:09:d1:52:eb:d9:ee:ab:38:41:26:18:08:38:b4: 7e:90:24:be:7e:aa:4f:40:0f:d6:f9:30:ae:25:d2: 9d:bc:fe:cb:8b:29:6c:9b:81:ce:38:53:68:08:43: a9:26:73:44:ba:8b:8b:3b:90:21:03:7f:87:d5:1c: 95:a7:54:9a:a7:5e:ca:a0:d4:98:df:87:a1:75:f5: e2:fe:38:f0:b4:7f:8d:39:5a:db:38:95:40:4a:be: 51:98:48:a6:15:6a:fa:8b:db:8a:35:14:d1:9f:35: 1d:3d:86:5d:d9:98:6f:d1:05:46:b4:fe:62:cf:99: 59:b4:89:14:46:b8:7f:d1:0c:29:00:dc:c8:ff:fb: 57:58:7f:bf:cd:8c:5a:02:66:0f:4f:01:b8:b3:20: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D4:EA:44:F8:9F:03:3B:1E:8F:A1:1F:94:49:67:DF:BE:F6:B3:AB X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.37.126.0/23 IPv6: 2001:df1:92c0::/48 Signature Algorithm: sha256WithRSAEncryption 27:76:3f:f1:95:25:d5:37:1b:7c:3d:a9:cb:0c:69:07:f7:1b: 3e:b9:7a:cf:39:a6:44:5b:6c:82:5b:b9:b4:80:32:4a:ee:97: b3:95:56:45:89:e8:9e:82:5b:d1:8d:a5:b0:e6:a0:6a:0b:d8: 4b:1e:70:03:62:c0:c6:b7:0c:50:77:35:53:6c:e4:d0:9f:12: ef:70:7c:46:ab:4a:f0:11:1b:60:5e:40:55:9f:b6:28:2f:78: 33:72:b1:1b:09:1e:5c:57:d1:18:d3:cd:67:27:53:47:8b:2f: 9d:04:1b:b4:91:63:cf:46:be:a4:26:cb:b7:88:ec:fc:97:b7: 59:b2:84:89:2f:6d:93:1c:30:fa:25:70:4e:6f:c8:60:02:7a: 5c:7e:48:51:e6:08:bc:1d:ca:01:48:22:c1:f2:e6:d0:f4:a4: de:61:c6:4a:74:10:6a:da:07:9c:43:fe:3a:17:fa:52:24:c1: 2c:86:7b:04:8a:53:14:2d:ec:35:79:30:c2:4b:59:0e:0a:b6: 43:e6:9e:55:af:6e:c4:ac:21:8a:94:c2:87:33:52:97:e0:44: ce:94:55:71:95:06:16:c6:a7:80:56:6e:ee:93:38:a6:ba:94: 21:48:2a:ec:10:0e:67:84:84:74:c9:27:e9:0a:b2:75:14:b1: 27:f0:9a:32 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjQwMTEzMDQzNDU0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWEyMTJlZS0yYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC/X30esPIbIDYUmBy3mHDUOYv8zhO4bFYqLQkaPSEB2VYnVgmHdX3hjdxrT 4P6HFrfH+bfAYdkN+6WziD8i66xuxWbq/BDuLWevXN6GBuI9q83wSLpf6tJn0ux3 Szv4qBAzJd0qPVNCCdFS69nuqzhBJhgIOLR+kCS+fqpPQA/W+TCuJdKdvP7Liyls m4HOOFNoCEOpJnNEuouLO5AhA3+H1RyVp1Sap17KoNSY34ehdfXi/jjwtH+NOVrb OJVASr5RmEimFWr6i9uKNRTRnzUdPYZd2Zhv0QVGtP5iz5lZtIkURrh/0QwpANzI //tXWH+/zYxaAmYPTwG4syD3cQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDTU6kT4 nwM7Ho+hH5RJZ9++9rOrMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEQ5QkUvNkZDRkI4NjY2QkI1MTFFREFCMDg1MzZGQzRGOUFFMDIvQUUxNDhCMkE2 QkI5MTFFRDk3MzQzODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnJX4wDwQCAAIwCQMHACABDfGSwDANBgkqhkiG9w0BAQsF AAOCAQEAJ3Y/8ZUl1TcbfD2pywxpB/cbPrl6zzmmRFtsglu5tIAySu6Xs5VWRYno noJb0Y2lsOagagvYSx5wA2LAxrcMUHc1U2zk0J8S73B8RqtK8BEbYF5AVZ+2KC94 M3KxGwkeXFfRGNPNZydTR4svnQQbtJFjz0a+pCbLt4js/Je3WbKEiS9tkxww+iVw Tm/IYAJ6XH5IUeYIvB3KAUgiwfLm0PSk3mHGSnQQatoHnEP+Ohf6UiTBLIZ7BIpT FC3sNXkwwktZDgq2Q+aeVa9uxKwhipTChzNSl+BEzpRVcZUGFsangFZu7pM4prqU IUgq7BAOZ4SEdMkn6QqydRSxJ/CaMg== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org