$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/CA86B0DEFC4D11ECA947C41FC4F9AE02.roa File: CA86B0DEFC4D11ECA947C41FC4F9AE02.roa (raw, json) Hash identifier: j39oIouyNt6HwKg9AT6DRdXmatC+dHV5URxElCtlOp4= Subject key identifier: A2:BA:2A:25:40:10:64:78:4B:81:18:7F:D6:6C:15:D7:7E:A3:09:7E Certificate issuer: /CN=A91C0C0C/serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD Certificate serial: 02B8 Authority key identifier: B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/CA86B0DEFC4D11ECA947C41FC4F9AE02.roa Signing time: Fri 01 Mar 2024 03:35:39 +0000 ROA not before: Fri 01 Mar 2024 03:35:39 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 142403 IP address blocks: 103.146.140.0/24 maxlen: 24 103.146.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.crl rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0C/serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD Validity Not Before: Mar 1 03:35:39 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65e14d0a-8137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:9c:1d:bd:f9:e3:ff:cc:85:54:cd:c3:ec: 12:4a:a7:fe:00:41:df:45:5d:2b:06:62:0e:38:17: 66:80:a8:20:d5:d9:e0:8a:8d:f1:8f:ac:bb:aa:50: 34:ea:ab:28:90:08:47:0d:25:5e:a6:0f:65:b4:b0: fc:f9:ed:72:a4:db:eb:39:f0:81:e6:7f:52:b5:c3: 64:70:9b:d6:31:31:5e:92:c5:b7:cc:37:db:ba:e4: fe:4a:5f:8c:9c:f8:e8:aa:d5:87:8b:4b:70:5c:7a: b1:6f:93:64:0d:b1:41:b9:56:89:5d:f8:e5:39:1b: b4:97:bd:45:d0:33:46:8f:55:45:e0:1e:f2:33:84: 0a:e1:36:9f:01:6f:8c:38:a8:77:c1:e2:6a:2a:40: 10:28:24:23:8b:ad:b2:17:c8:75:99:40:76:20:de: ac:40:b3:ae:ab:64:c9:4f:2c:13:31:b7:71:fd:7b: fd:d2:d0:63:12:b6:6e:d3:4e:85:57:9b:70:bf:4c: d8:84:ee:df:d4:61:64:06:bb:52:0d:37:65:36:33: 13:24:c8:ba:39:bd:31:ce:fb:12:9d:0c:c8:52:09: fe:41:e3:62:1f:b3:da:56:65:ed:23:41:ea:a4:20: b6:2d:da:69:03:a0:b7:44:2d:4d:a9:3e:79:dc:30: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BA:2A:25:40:10:64:78:4B:81:18:7F:D6:6C:15:D7:7E:A3:09:7E X509v3 Authority Key Identifier: keyid:B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/CA86B0DEFC4D11ECA947C41FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.140.0/23 Signature Algorithm: sha256WithRSAEncryption 89:57:3b:9c:29:d6:ea:33:f0:66:d0:be:87:34:3b:d7:de:30: 36:7d:dd:85:0f:16:27:68:db:d6:ad:38:87:71:71:57:b4:d9: 38:97:4c:fe:d8:31:67:f7:96:d5:70:d2:fc:ce:70:e7:52:cd: 3b:c2:55:81:7f:13:69:ea:85:9e:7a:3c:d6:77:1c:cd:77:8c: 7d:4e:16:f3:75:bc:ac:74:d0:0c:06:36:78:e6:53:b1:a8:2d: d1:d4:92:c7:d6:40:cf:5e:93:58:69:39:63:68:a5:f8:cf:e7: ed:49:2a:b7:ba:43:58:0d:0a:cf:7d:1e:e4:cc:0d:25:a9:46: 84:54:0b:5d:57:13:97:74:47:a2:89:3b:fb:64:5b:b7:75:c6: 50:ec:f4:82:46:b3:c1:13:c7:8f:93:d9:e3:e1:06:fa:5f:21: 03:98:a7:f2:bd:d5:bf:29:ca:88:d9:5a:a8:cd:82:91:e7:75: 47:99:0a:1f:05:95:6b:a4:3e:e3:76:ac:e5:71:e4:d1:78:bb: 4e:ab:c3:e2:e4:aa:eb:e9:0f:77:52:8a:53:20:4f:6e:c1:bf: 0c:28:e5:08:f6:18:fd:ae:ef:48:da:5e:7a:6d:c2:c3:44:d2: 34:60:09:33:a3:9c:6c:5e:c3:e8:c6:5b:13:bb:3d:d0:05:2a: 14:7f:b4:5f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEMxMTAvBgNVBAUTKEI5RENFN0E5OEJDRTdDMEUyODMyOEIxM0NCRUFCNTQz MUQwRjY2QkQwHhcNMjQwMzAxMDMzNTM5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUxNGQwYS04MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEmcHb354//MhVTNw+wSSqf+AEHfRV0rBmIOOBdmgKgg1dngio3xj6y7qlA0 6qsokAhHDSVepg9ltLD8+e1ypNvrOfCB5n9StcNkcJvWMTFeksW3zDfbuuT+Sl+M nPjoqtWHi0twXHqxb5NkDbFBuVaJXfjlORu0l71F0DNGj1VF4B7yM4QK4TafAW+M OKh3weJqKkAQKCQji62yF8h1mUB2IN6sQLOuq2TJTywTMbdx/Xv90tBjErZu006F V5twv0zYhO7f1GFkBrtSDTdlNjMTJMi6Ob0xzvsSnQzIUgn+QeNiH7PaVmXtI0Hq pCC2LdppA6C3RC1NqT553DCjgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKK6KiVA EGR4S4EYf9ZsFdd+owl+MB8GA1UdIwQYMBaAFLnc56mLznwOKDKLE8vqtUMdD2a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQy8zNTlCOEQzRTlE RkYxMUVDQTRBNTg4NDhDNEY5QUUwMi91ZHpucVl2T2ZBNG9Nb3NUeS1xMVF4MFBa cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vkem5xWXZPZkE0b01vc1R5LXExUXgwUFpyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBDMEMvMzU5QjhEM0U5REZGMTFFQ0E0QTU4ODQ4QzRGOUFFMDIvQ0E4NkIwREVG QzREMTFFQ0E5NDdDNDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkowwDQYJKoZIhvcNAQELBQADggEBAIlXO5wp1uoz8GbQ voc0O9feMDZ93YUPFido29atOIdxcVe02TiXTP7YMWf3ltVw0vzOcOdSzTvCVYF/ E2nqhZ56PNZ3HM13jH1OFvN1vKx00AwGNnjmU7GoLdHUksfWQM9ek1hpOWNopfjP 5+1JKre6Q1gNCs99HuTMDSWpRoRUC11XE5d0R6KJO/tkW7d1xlDs9IJGs8ETx4+T 2ePhBvpfIQOYp/K91b8pyojZWqjNgpHndUeZCh8FlWukPuN2rOVx5NF4u06rw+Lk quvpD3dSilMgT27Bvwwo5Qj2GP2u70jaXnptwsNE0jRgCTOjnGxew+jGWxO7PdAF KhR/tF8= -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:04 2024 by rpki-client on console-ams.rpki-client.org