$ rpki-client -vvf rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/149FB86C057511EC988EF77BC4F9AE02.roa File: 149FB86C057511EC988EF77BC4F9AE02.roa (raw, json) Hash identifier: K/5g4LbcV5JgwmzgpMURAj/bNGFQ2ixWTsmM0mwD96Q= Subject key identifier: 05:06:E5:6E:EF:93:D7:C6:67:4C:1C:1A:DF:CA:4D:84:84:2C:4A:42 Certificate issuer: /CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Certificate serial: 03C0 Authority key identifier: 1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/149FB86C057511EC988EF77BC4F9AE02.roa Signing time: Tue 01 Aug 2023 01:42:21 +0000 ROA not before: Tue 01 Aug 2023 01:42:21 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139265 IP address blocks: 103.140.150.0/23 maxlen: 23 103.140.150.0/24 maxlen: 24 103.140.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Validity Not Before: Aug 1 01:42:21 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c862fd-ca3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:04:b3:6d:24:7f:27:e6:7b:7e:39:e0:a4: ad:67:0c:92:8d:97:d8:64:cb:7e:ad:86:c1:9f:80: 33:75:df:15:1a:dc:fa:15:61:c5:ef:c0:6c:35:02: db:25:c1:3a:c1:b4:bd:49:c6:f1:e5:af:73:8b:b1: 42:a4:1f:da:1d:6a:15:1a:4b:c3:66:e7:51:1e:80: c7:a8:ee:e6:0c:d7:5e:17:bf:8d:35:08:88:c0:f1: 4d:12:8d:c7:25:d5:6c:fd:59:a5:8d:17:4e:67:b9: 7d:51:4e:73:86:c5:fa:54:7b:3a:3f:63:a4:76:91: f7:e1:81:c3:e3:9d:45:4c:b7:32:29:3d:6a:05:bf: 77:83:94:ef:2f:ff:96:b7:ec:b8:8e:c4:cf:11:04: 47:20:85:89:b8:b3:83:69:8d:c5:92:56:98:4c:b0: cd:6f:f1:bb:32:eb:7d:b6:e2:2e:bd:cc:5e:15:9d: fc:2a:94:08:f6:36:b5:92:ae:c6:a5:0a:32:08:2c: 1c:a0:fe:60:88:77:db:69:7d:95:67:17:ef:d0:b1: 14:8d:d0:e0:14:17:d7:40:12:3e:69:8d:37:1b:7f: 18:c3:14:bc:4b:39:4e:44:31:0d:e9:e2:03:ed:44: 8a:d8:1c:99:9d:f7:de:b7:3e:83:ce:39:c8:0f:13: e4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:06:E5:6E:EF:93:D7:C6:67:4C:1C:1A:DF:CA:4D:84:84:2C:4A:42 X509v3 Authority Key Identifier: keyid:1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/149FB86C057511EC988EF77BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.150.0/23 Signature Algorithm: sha256WithRSAEncryption 12:c2:7a:41:85:8b:0f:1d:c5:1f:cb:e1:6d:ca:d0:43:42:0d: f7:1f:91:5a:ba:c6:0f:80:de:1d:6c:48:35:a2:93:cc:3f:fb: ca:21:23:51:cb:1c:a5:c9:00:ef:5f:5a:a2:34:5f:8d:47:33: d7:ec:e1:51:7f:56:3a:19:fe:9f:d8:27:c3:11:00:1f:7f:89: b6:8d:eb:d4:b8:59:be:10:0b:1f:6e:0f:12:15:fc:f2:3b:d6: 0b:8d:01:d8:3e:5c:44:8e:4b:cd:c3:e8:d8:0c:3a:23:05:10: 96:84:3c:ea:42:48:9f:28:23:60:a0:8c:0c:70:ee:56:58:38: 68:03:9a:1f:e3:0e:88:21:59:36:d5:60:22:3e:d6:55:8d:bf: 7f:82:5a:60:8b:f3:76:bd:a5:ee:a0:57:8a:ee:28:cb:fd:22: d5:a2:84:94:ac:f4:ce:01:74:69:ff:7c:88:7e:95:d1:ae:e1: 23:c4:31:a4:ed:bb:5e:25:08:79:3e:6c:8f:e5:97:21:41:32: 1c:fc:bc:2c:60:89:b6:76:bc:49:2a:26:9a:42:e2:dd:fd:39: 58:40:1e:a0:86:b3:aa:42:12:0c:12:8f:78:fa:cb:84:85:2e: f2:ec:b8:74:76:f5:9b:bb:7f:e2:10:4e:08:a4:db:8b:de:c2: 68:de:59:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI0NkExMTAvBgNVBAUTKDFDMkU5OUZFNjFBNEZCNkZBMjg2NzM1RjhFMDY5MTk4 MzZBNDBGRjgwHhcNMjMwODAxMDE0MjIxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4NjJmZC1jYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprAEs20kfyfme3454KStZwySjZfYZMt+rYbBn4Azdd8VGtz6FWHF78BsNQLb JcE6wbS9Scbx5a9zi7FCpB/aHWoVGkvDZudRHoDHqO7mDNdeF7+NNQiIwPFNEo3H JdVs/VmljRdOZ7l9UU5zhsX6VHs6P2OkdpH34YHD451FTLcyKT1qBb93g5TvL/+W t+y4jsTPEQRHIIWJuLODaY3FklaYTLDNb/G7Mut9tuIuvcxeFZ38KpQI9ja1kq7G pQoyCCwcoP5giHfbaX2VZxfv0LEUjdDgFBfXQBI+aY03G38YwxS8SzlORDEN6eID 7USK2ByZnffetz6DzjnIDxPkBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAUG5W7v k9fGZ0wcGt/KTYSELEpCMB8GA1UdIwQYMBaAFBwumf5hpPtvooZzX44GkZg2pA/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQ2QS82OUMyRDM1MDA1 NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0yLWlobk5mamdhUm1EYWtE X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDNlpfbUdrLTItaWhuTmZqZ2FSbURha0RfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI0NkEvNjlDMkQzNTAwNTcxMTFFQzk0QTJFQzJDQzRGOUFFMDIvMTQ5RkI4NkMw NTc1MTFFQzk4OEVGNzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjJYwDQYJKoZIhvcNAQELBQADggEBABLCekGFiw8dxR/L 4W3K0ENCDfcfkVq6xg+A3h1sSDWik8w/+8ohI1HLHKXJAO9fWqI0X41HM9fs4VF/ VjoZ/p/YJ8MRAB9/ibaN69S4Wb4QCx9uDxIV/PI71guNAdg+XESOS83D6NgMOiMF EJaEPOpCSJ8oI2CgjAxw7lZYOGgDmh/jDoghWTbVYCI+1lWNv3+CWmCL83a9pe6g V4ruKMv9ItWihJSs9M4BdGn/fIh+ldGu4SPEMaTtu14lCHk+bI/llyFBMhz8vCxg ibZ2vEkqJppC4t39OVhAHqCGs6pCEgwSj3j6y4SFLvLsuHR29Zu7f+IQTgik24ve wmjeWQk= -----END CERTIFICATE-----Generated at Fri May 17 03:06:34 2024 by rpki-client on console-ams.rpki-client.org