$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/7BB181E201BA11EDA4103D0DC4F9AE02.roa File: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (raw, json) Hash identifier: yrcsrbjQfQ5uZo1Mtvcl1tB6W+p9IMWgvyoeS2ztVJg= Subject key identifier: DD:33:62:2E:F0:3D:53:1B:EC:AE:66:81:B2:21:1C:35:3D:85:45:F7 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 0184 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/7BB181E201BA11EDA4103D0DC4F9AE02.roa Signing time: Fri 01 Dec 2023 04:34:41 +0000 ROA not before: Fri 01 Dec 2023 04:34:41 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 18229 IP address blocks: 103.146.40.0/24 maxlen: 24 103.146.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Dec 1 04:34:41 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65696261-ac06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:1b:27:e8:34:4d:0b:55:40:d2:6b:17:94: fd:8f:e0:fc:d7:fa:cf:55:d3:27:4e:b5:d1:04:c3: 07:d3:65:33:c4:a1:94:38:7f:17:e0:0b:be:2a:1e: be:e9:15:6d:31:cc:b5:46:41:1c:d4:5b:7c:19:ab: a8:96:eb:b9:85:6d:7f:a3:2b:8f:e6:ae:d2:92:21: 54:c1:8a:07:ec:02:03:02:f4:45:fb:3c:68:f9:ac: a1:e9:68:64:99:ab:4b:42:db:cd:79:a8:21:4d:1d: 14:9d:41:e3:37:12:5b:ea:18:95:25:0d:ad:c6:cf: 94:ac:02:a1:ea:ba:4e:44:67:56:92:be:ab:31:30: 14:9a:58:e1:22:44:cf:f8:e8:17:40:35:e2:31:07: 29:48:57:37:bf:93:d6:05:4d:20:f6:4a:f5:66:2d: 0a:c4:bc:68:79:87:12:b4:8c:e0:9e:8b:0d:17:7c: 32:33:67:aa:ab:7a:8e:74:7b:f7:38:a3:02:61:e7: 8e:4a:34:15:b3:8a:95:e9:24:db:b3:ca:ed:4f:1c: 7e:af:15:c7:34:37:37:67:62:9a:2f:cf:3e:19:46: 66:0f:c4:fa:83:6e:43:ca:e2:9a:66:01:d6:2b:e6: 2d:7b:c6:e1:ae:44:32:c2:76:9f:51:72:e1:6d:06: 1e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:33:62:2E:F0:3D:53:1B:EC:AE:66:81:B2:21:1C:35:3D:85:45:F7 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/7BB181E201BA11EDA4103D0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.40.0/23 Signature Algorithm: sha256WithRSAEncryption f1:c5:42:46:07:1d:71:11:70:a9:2a:86:49:c0:61:28:ac:db: 40:db:23:3c:e9:f7:73:ba:7f:9c:b9:81:55:60:12:10:f1:d0: a7:86:57:39:b1:fc:69:7f:58:33:e0:41:08:21:7e:d7:25:a4: 88:c9:5f:13:5f:b3:31:30:ac:80:74:f0:dc:d6:bc:9d:5f:b1: 86:9d:a8:7e:25:a4:51:9c:4b:14:aa:e6:49:2c:f3:c3:fb:85: 05:2f:52:c1:50:e6:8a:f5:2a:28:31:11:b8:64:6f:ac:22:92: ec:b7:20:2f:d3:3c:53:46:ab:9c:2a:aa:e2:1e:a4:20:31:a0: 05:6e:2a:ec:24:64:ea:11:6a:93:e1:2d:d8:68:57:64:94:61: 27:e3:ed:a0:09:cc:85:2a:74:47:ea:be:4d:4b:fe:3c:ea:f0: b1:52:b0:e5:1c:44:66:65:45:54:c3:cf:85:76:9e:02:5f:31: d8:6a:75:75:c8:19:35:b5:85:38:41:fb:98:8a:b2:2f:37:38: f0:14:31:1b:90:2d:da:75:eb:29:e3:17:17:4b:b4:da:7d:7c: 81:ca:40:b3:44:a4:8d:4e:69:0b:e9:54:e0:ab:e3:a1:f6:5e: e5:df:25:90:7d:70:f5:46:a1:82:ba:cd:9d:df:7f:0c:8f:8d: 61:d5:ff:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjMxMjAxMDQzNDQxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5NjI2MS1hYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu10bJ+g0TQtVQNJrF5T9j+D81/rPVdMnTrXRBMMH02UzxKGUOH8X4Au+Kh6+ 6RVtMcy1RkEc1Ft8Gauoluu5hW1/oyuP5q7SkiFUwYoH7AIDAvRF+zxo+ayh6Whk matLQtvNeaghTR0UnUHjNxJb6hiVJQ2txs+UrAKh6rpORGdWkr6rMTAUmljhIkTP +OgXQDXiMQcpSFc3v5PWBU0g9kr1Zi0KxLxoeYcStIzgnosNF3wyM2eqq3qOdHv3 OKMCYeeOSjQVs4qV6STbs8rtTxx+rxXHNDc3Z2KaL88+GUZmD8T6g25DyuKaZgHW K+Yte8bhrkQywnafUXLhbQYeHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN0zYi7w PVMb7K5mgbIhHDU9hUX3MB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMxQjAvMTVDRjVBODgwMUI2MTFFREIxQTREMjgyQzRGOUFFMDIvN0JCMTgxRTIw MUJBMTFFREE0MTAzRDBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkigwDQYJKoZIhvcNAQELBQADggEBAPHFQkYHHXERcKkq hknAYSis20DbIzzp93O6f5y5gVVgEhDx0KeGVzmx/Gl/WDPgQQghftclpIjJXxNf szEwrIB08NzWvJ1fsYadqH4lpFGcSxSq5kks88P7hQUvUsFQ5or1KigxEbhkb6wi kuy3IC/TPFNGq5wqquIepCAxoAVuKuwkZOoRapPhLdhoV2SUYSfj7aAJzIUqdEfq vk1L/jzq8LFSsOUcRGZlRVTDz4V2ngJfMdhqdXXIGTW1hThB+5iKsi83OPAUMRuQ Ldp16ynjFxdLtNp9fIHKQLNEpI1OaQvpVOCr46H2XuXfJZB9cPVGoYK6zZ3ffwyP jWHV/7E= -----END CERTIFICATE-----Generated at Fri May 17 06:46:29 2024 by rpki-client on console-ams.rpki-client.org