$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/40569A6AC9AE11EAA7F2915BC4F9AE02.roa File: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (raw, json) Hash identifier: wgftKb4IInisu650djsPHH84sPf1yKI2QWeFmfVp8Yw= Subject key identifier: 23:1C:EE:8B:89:76:63:B7:E5:49:37:B6:1E:D9:10:1D:3A:52:39:E2 Certificate issuer: /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Certificate serial: 0A2A Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/40569A6AC9AE11EAA7F2915BC4F9AE02.roa Signing time: Sat 10 Feb 2024 20:28:24 +0000 ROA not before: Sat 10 Feb 2024 20:28:24 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 133938 IP address blocks: 103.148.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Validity Not Before: Feb 10 20:28:24 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c7dc68-907a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f3:67:48:1a:88:9d:45:4b:a9:2c:a2:35:ca: 5a:fd:14:87:b4:91:51:9c:08:a3:0d:9a:dd:d3:a0: cc:35:db:9d:7f:6c:85:dd:1c:2d:e6:e1:15:0f:2a: cb:8b:d5:a2:66:ef:54:d5:2b:f8:22:a1:28:23:70: 46:5d:0b:1d:43:29:97:63:78:0f:6b:69:0d:f5:72: d1:9b:5f:19:6f:0e:20:4a:92:26:4f:7a:b2:41:83: b5:52:2d:92:49:97:cd:3f:37:18:88:ac:0c:19:ec: 22:07:4d:82:75:96:a0:23:fa:a5:9d:57:b6:5f:4f: 50:b9:49:0c:b8:5a:cd:f1:d9:63:e6:92:64:6a:34: e7:27:bf:a2:85:3b:f3:ff:fb:20:b9:d3:ff:c6:f7: 2b:05:a6:d2:5c:78:e5:5a:fe:44:04:90:94:b8:43: c9:bd:0c:e6:9b:01:f2:30:45:16:ec:90:09:04:97: 8c:45:b1:de:e3:f4:d7:2b:f2:0c:11:14:6d:11:20: a2:42:45:66:2a:b1:01:e6:b2:30:6e:58:3a:06:6e: ea:90:53:e5:c2:aa:1e:d2:82:a3:d7:67:60:50:40: 5e:2b:34:e4:fb:54:9d:0b:9d:01:fb:21:0b:26:48: e8:2a:ef:9a:d3:f3:cc:07:25:3b:99:5e:bf:d3:50: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1C:EE:8B:89:76:63:B7:E5:49:37:B6:1E:D9:10:1D:3A:52:39:E2 X509v3 Authority Key Identifier: keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/40569A6AC9AE11EAA7F2915BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.14.0/24 Signature Algorithm: sha256WithRSAEncryption 74:54:ee:13:80:a3:bf:01:46:f1:9f:49:cb:a1:d2:a9:f9:39: d7:c4:76:0b:b6:41:75:b0:8e:84:50:e9:46:c1:4e:9e:dd:db: 41:97:34:31:57:98:e5:a2:e4:79:e8:cd:7b:de:ec:a3:9a:b8: d6:5c:f6:7c:fe:aa:93:35:31:b3:93:18:26:d8:5e:41:40:72: a9:50:28:a6:77:eb:55:bc:a6:49:58:cc:5d:e0:23:18:13:a7: f4:fc:4f:60:22:d2:e3:a9:72:06:ee:3a:73:3e:4a:2c:13:ea: c3:ac:a7:b3:f9:fd:1f:00:94:5d:73:a5:45:3d:5e:96:aa:a4: 6d:cd:29:21:9f:30:01:4f:b4:5a:23:ed:6f:bd:bb:68:9f:81: f8:f4:45:ce:da:82:4f:5b:56:fd:61:7d:96:49:d5:db:6e:8b: 9a:58:e2:a2:a0:80:87:c6:90:c8:a3:96:10:b6:51:02:cb:ea: 88:7b:a0:76:84:7d:41:0b:9a:06:79:6c:87:62:e7:96:36:43: bc:89:f3:b3:aa:1b:68:14:8f:b6:4a:8a:7d:39:1a:f1:88:22: 6a:68:ef:ac:7a:c5:d5:65:cd:e4:b1:25:4f:04:de:d9:ed:ea: d1:7c:d5:4e:44:ea:48:cc:9e:5d:02:ed:32:ca:57:0a:a5:83: f5:70:71:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMjQxMTAvBgNVBAUTKDZGMjY3RTQ1NjYwODNGRUIyMzZBMkMzOTIzQjcwMzk2 MDBCREU3OTQwHhcNMjQwMjEwMjAyODI0WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM3ZGM2OC05MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fNnSBqInUVLqSyiNcpa/RSHtJFRnAijDZrd06DMNdudf2yF3Rwt5uEVDyrL i9WiZu9U1Sv4IqEoI3BGXQsdQymXY3gPa2kN9XLRm18Zbw4gSpImT3qyQYO1Ui2S SZfNPzcYiKwMGewiB02CdZagI/qlnVe2X09QuUkMuFrN8dlj5pJkajTnJ7+ihTvz //sgudP/xvcrBabSXHjlWv5EBJCUuEPJvQzmmwHyMEUW7JAJBJeMRbHe4/TXK/IM ERRtESCiQkVmKrEB5rIwblg6Bm7qkFPlwqoe0oKj12dgUEBeKzTk+1SdC50B+yEL JkjoKu+a0/PMByU7mV6/01D3TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCMc7ouJ dmO35Uk3th7ZEB06UjniMB8GA1UdIwQYMBaAFG8mfkVmCD/rI2osOSO3A5YAveeU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyNC8xOEM4QjY5MjQ0 MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAtc2phaXc1STdjRGxnQzk1 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Wi1SV1lJUC1zamFpdzVJN2NEbGdDOTU1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBDMjQvMThDOEI2OTI0NDMyMTFFQTlDQURGRDFDQzRGOUFFMDIvNDA1NjlBNkFD OUFFMTFFQUE3RjI5MTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlA4wDQYJKoZIhvcNAQELBQADggEBAHRU7hOAo78BRvGf Scuh0qn5OdfEdgu2QXWwjoRQ6UbBTp7d20GXNDFXmOWi5HnozXve7KOauNZc9nz+ qpM1MbOTGCbYXkFAcqlQKKZ361W8pklYzF3gIxgTp/T8T2Ai0uOpcgbuOnM+SiwT 6sOsp7P5/R8AlF1zpUU9XpaqpG3NKSGfMAFPtFoj7W+9u2ifgfj0Rc7agk9bVv1h fZZJ1dtui5pY4qKggIfGkMijlhC2UQLL6oh7oHaEfUELmgZ5bIdi55Y2Q7yJ87Oq G2gUj7ZKin05GvGIImpo76x6xdVlzeSxJU8E3tnt6tF81U5E6kjMnl0C7TLKVwql g/VwcUI= -----END CERTIFICATE-----Generated at Thu May 16 22:34:54 2024 by rpki-client on console-ams.rpki-client.org