$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/A4F1EAECC09211EC8950E57AC4F9AE02.roa File: A4F1EAECC09211EC8950E57AC4F9AE02.roa (raw, json) Hash identifier: Kkj3qBW9Wp24vJ3Ekg42ms/3vIOl6ql8CuIT0eW6LEI= Subject key identifier: F3:53:FC:96:1A:FE:71:71:93:AE:52:29:75:D9:2D:82:42:FF:CA:8B Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 01C8 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/A4F1EAECC09211EC8950E57AC4F9AE02.roa Signing time: Wed 03 May 2023 05:46:22 +0000 ROA not before: Wed 03 May 2023 05:46:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135325 IP address blocks: 103.186.138.0/23 maxlen: 23 103.186.138.0/24 maxlen: 24 103.186.139.0/24 maxlen: 24 2001:df0:a940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: May 3 05:46:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6451f52e-499d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:7d:0f:53:01:58:3d:b4:ae:37:d7:c4:a4: 8f:b3:57:74:cd:f0:04:6a:70:9f:7f:e1:4c:80:28: bb:aa:11:39:ef:5d:c4:b9:94:70:3d:33:98:3f:33: 64:e1:ea:dd:01:e2:38:07:66:07:b1:93:40:56:cc: 4c:ed:a8:15:c3:19:67:39:70:26:4f:0f:5b:de:b3: b0:77:1f:78:44:9d:ca:3d:53:d1:fa:bf:fe:0b:25: 0e:9d:10:02:0d:e6:fd:54:eb:4e:3e:1e:e6:d4:ab: e5:0b:24:fb:10:dd:23:18:8e:af:d7:6d:9d:5c:b5: a6:8e:a2:f9:8a:d8:f5:fb:aa:33:40:98:06:43:32: 50:3d:28:21:71:43:84:69:b7:c5:ef:dd:71:c3:ec: c6:15:70:0e:8c:52:8b:5b:d8:b2:50:40:d7:c8:c0: 5e:0c:76:1e:8d:0e:6e:62:23:07:0e:dc:20:12:c2: f0:44:05:07:3a:c9:c6:4a:2f:2c:03:a8:e1:4b:38: f0:89:64:8b:65:46:35:e5:b9:8a:6b:45:8f:35:3f: 72:bf:1c:95:59:21:90:b3:5b:25:9b:a0:a8:ee:46: 1b:03:d5:1b:6c:e7:88:c3:98:fb:ea:35:c7:dc:32: 4a:2a:05:b7:67:3a:1d:d6:35:fc:58:2b:b0:91:0e: a4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:53:FC:96:1A:FE:71:71:93:AE:52:29:75:D9:2D:82:42:FF:CA:8B X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/A4F1EAECC09211EC8950E57AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.138.0/23 IPv6: 2001:df0:a940::/48 Signature Algorithm: sha256WithRSAEncryption 4c:ba:b6:be:71:e7:f4:46:c7:1c:9c:ee:ed:36:8d:6f:89:dd: f4:8e:be:70:4c:c8:25:67:07:b0:7c:15:c9:c0:46:45:45:f2: e6:60:1d:0d:18:c9:3d:ef:13:70:d7:ec:aa:61:79:4f:4c:f8: b0:52:be:6b:a9:c5:7a:c7:1b:e0:db:67:ac:ee:27:f2:a1:43: e3:09:2b:93:96:53:be:ff:47:69:0f:0d:c2:50:81:d1:80:60: eb:b2:b5:85:d5:a3:10:75:c0:98:2e:8b:34:0c:53:1d:f5:22: b8:fc:69:7f:6d:0c:d2:75:72:27:1a:ca:5e:f7:24:14:94:43: e6:ad:81:9b:03:b1:f0:24:7b:f7:f1:5d:22:46:19:98:de:cc: e6:af:2f:95:b4:e8:ce:5b:24:34:2d:c2:21:32:57:8b:4a:73: ef:cc:44:a8:40:22:15:db:89:c1:81:30:ea:78:05:cd:75:77: 44:d8:b1:6c:14:c2:ad:90:35:0a:3b:b9:32:27:b3:34:9c:db: 7d:0f:4a:aa:cb:c7:ba:ce:ee:69:2c:ce:a6:cc:d8:2c:57:25: 44:58:61:70:24:c3:e8:11:f7:0a:16:c3:ba:f3:e7:e3:09:ee: 68:22:5e:cb:41:3e:08:1b:8c:29:20:ad:95:fb:9e:a8:18:e9: ce:2f:0d:ad -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjMwNTAzMDU0NjIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDUxZjUyZS00OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpN9D1MBWD20rjfXxKSPs1d0zfAEanCff+FMgCi7qhE5713EuZRwPTOYPzNk 4erdAeI4B2YHsZNAVsxM7agVwxlnOXAmTw9b3rOwdx94RJ3KPVPR+r/+CyUOnRAC Deb9VOtOPh7m1KvlCyT7EN0jGI6v122dXLWmjqL5itj1+6ozQJgGQzJQPSghcUOE abfF791xw+zGFXAOjFKLW9iyUEDXyMBeDHYejQ5uYiMHDtwgEsLwRAUHOsnGSi8s A6jhSzjwiWSLZUY15bmKa0WPNT9yvxyVWSGQs1slm6Co7kYbA9UbbOeIw5j76jXH 3DJKKgW3Zzod1jX8WCuwkQ6kcQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPNT/JYa /nFxk65SKXXZLYJC/8qLMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFCRDcvNUY0OUFBNjhCRUM0MTFFQzg3OENDMTY2QzRGOUFFMDIvQTRGMUVBRUND MDkyMTFFQzg5NTBFNTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnuoowDwQCAAIwCQMHACABDfCpQDANBgkqhkiG9w0BAQsF AAOCAQEATLq2vnHn9EbHHJzu7TaNb4nd9I6+cEzIJWcHsHwVycBGRUXy5mAdDRjJ Pe8TcNfsqmF5T0z4sFK+a6nFescb4NtnrO4n8qFD4wkrk5ZTvv9HaQ8NwlCB0YBg 67K1hdWjEHXAmC6LNAxTHfUiuPxpf20M0nVyJxrKXvckFJRD5q2BmwOx8CR79/Fd IkYZmN7M5q8vlbTozlskNC3CITJXi0pz78xEqEAiFduJwYEw6ngFzXV3RNixbBTC rZA1Cju5MiezNJzbfQ9KqsvHus7uaSzOpszYLFclRFhhcCTD6BH3ChbDuvPn4wnu aCJey0E+CBuMKSCtlfueqBjpzi8NrQ== -----END CERTIFICATE-----Generated at Sat May 25 06:05:09 2024 by rpki-client on console-ams.rpki-client.org