$ rpki-client -vvf rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1E8E348E94AC11EE9DC7D24AC4F9AE02.roa File: 1E8E348E94AC11EE9DC7D24AC4F9AE02.roa (raw, json) Hash identifier: u/c9m2EvxXRq1q/Pb9LaUIktNo1bXTmNZnS1p4xkJio= Subject key identifier: A5:99:CE:51:38:F9:3E:63:2A:16:1E:3D:CB:99:46:BA:A8:CD:BD:5D Certificate issuer: /CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Certificate serial: 0B1C Authority key identifier: 81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1E8E348E94AC11EE9DC7D24AC4F9AE02.roa Signing time: Thu 07 Dec 2023 02:55:47 +0000 ROA not before: Thu 07 Dec 2023 02:55:47 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 7496 IP address blocks: 113.20.0.0/20 maxlen: 24 202.93.4.0/23 maxlen: 24 203.2.122.0/24 maxlen: 24 203.8.188.0/23 maxlen: 23 203.19.190.0/23 maxlen: 23 203.31.198.0/23 maxlen: 24 203.210.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2844 (0xb1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Validity Not Before: Dec 7 02:55:47 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65713432-4610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:0a:99:35:e8:e2:f9:e4:7c:7b:bc:3b:65: 5b:c4:9c:f9:ce:a8:81:83:16:3b:f6:1d:03:90:68: 27:36:1e:e1:04:b4:a8:66:7f:f8:06:74:1f:83:f5: 43:95:d9:22:f7:64:2b:8d:a3:8d:b5:de:a1:78:a0: d5:81:40:c3:25:91:89:69:01:64:4d:cf:3e:0f:d8: be:11:88:a2:2b:26:f3:21:b1:aa:a6:cb:a5:f0:80: 60:08:ef:d5:79:a5:24:8b:18:16:c7:3e:10:cb:75: 23:b2:f5:08:06:b2:bd:85:de:0f:03:26:fc:cb:e9: 95:0b:bc:e2:96:74:db:82:4f:64:17:52:43:69:9c: e7:30:bb:6c:4c:45:e2:d6:94:0b:52:30:d1:ca:b8: ce:4b:5c:d3:6a:65:0f:a8:22:fb:ab:95:18:e0:49: d7:62:a8:0f:cc:fa:e4:65:a7:9d:4c:15:3c:44:d0: 2a:53:38:37:8d:a7:0a:50:19:05:86:ea:75:9c:63: cd:66:29:da:77:23:b2:dd:7d:ae:b0:0f:9c:f6:04: 40:b2:5c:5f:10:7b:fd:87:a1:a7:d7:32:b4:c9:02: 85:5e:eb:a4:ea:f9:49:12:3e:2a:91:e1:12:24:1b: 0c:e6:45:d8:5a:cc:f7:b2:2f:5c:2d:2d:e1:b4:42: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:99:CE:51:38:F9:3E:63:2A:16:1E:3D:CB:99:46:BA:A8:CD:BD:5D X509v3 Authority Key Identifier: keyid:81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1E8E348E94AC11EE9DC7D24AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.0.0/20 202.93.4.0/23 203.2.122.0/24 203.8.188.0/23 203.19.190.0/23 203.31.198.0/23 203.210.96.0/19 Signature Algorithm: sha256WithRSAEncryption 89:57:7c:ab:c5:a8:2f:55:71:fd:c5:23:97:a0:d5:8c:c2:46: 51:75:06:4e:af:e0:5a:ea:8b:8b:9c:31:3a:60:1f:85:b8:20: 71:a3:a0:b7:a3:08:4e:2c:69:17:fa:c3:a9:5f:2a:88:78:80: c4:db:ea:91:c3:23:b2:8a:3b:78:79:63:75:63:c5:1b:79:88: 84:52:fa:57:3d:67:69:53:e8:4f:cf:65:9e:ae:aa:1a:2f:f4: 71:7c:24:c3:85:4f:b9:39:83:21:69:ba:79:30:15:2c:24:61: bd:7f:79:20:76:b8:06:cf:2c:82:38:7a:71:74:94:7c:61:ab: 61:2b:20:90:de:b4:f5:db:6f:6d:88:ec:a0:14:f4:27:2a:38: 51:0b:ce:83:39:35:e1:3c:a4:ad:ec:eb:27:3a:31:db:d3:80: 34:27:86:a2:5b:37:78:56:15:db:cb:20:66:b1:dc:83:87:bb: d2:32:bd:8a:52:a4:b6:10:37:5d:6b:a5:72:ab:89:35:e2:e9: 1f:0d:77:5b:a8:49:51:b7:5f:81:ab:f8:37:e9:6c:07:33:37: 55:79:6d:82:ec:56:6c:13:dd:e8:5c:df:1f:fe:de:3d:d9:15: 01:56:75:2a:6c:ed:ab:aa:90:4e:6f:3e:0f:a8:7f:79:ef:58: ec:fe:9d:29 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJGNTIxMTAvBgNVBAUTKDgxNDI4QTAxQzUxNjkxRTdBOEM1RDg0M0VDQjZCMUQz RDlBRTQyNEUwHhcNMjMxMjA3MDI1NTQ3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTcxMzQzMi00NjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NoKmTXo4vnkfHu8O2VbxJz5zqiBgxY79h0DkGgnNh7hBLSoZn/4BnQfg/VD ldki92QrjaONtd6heKDVgUDDJZGJaQFkTc8+D9i+EYiiKybzIbGqpsul8IBgCO/V eaUkixgWxz4Qy3UjsvUIBrK9hd4PAyb8y+mVC7zilnTbgk9kF1JDaZznMLtsTEXi 1pQLUjDRyrjOS1zTamUPqCL7q5UY4EnXYqgPzPrkZaedTBU8RNAqUzg3jacKUBkF hup1nGPNZinadyOy3X2usA+c9gRAslxfEHv9h6Gn1zK0yQKFXuuk6vlJEj4qkeES JBsM5kXYWsz3si9cLS3htELvFwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFKWZzlE4 +T5jKhYePcuZRrqozb1dMB8GA1UdIwQYMBaAFIFCigHFFpHnqMXYQ+y2sdPZrkJO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkY1Mi84OEVCQ0ZEQzFE NDkxMUVBQUU3NzVCMzRDNEY5QUUwMi9nVUtLQWNVV2tlZW94ZGhEN0xheDA5bXVR azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVS0tBY1VXa2Vlb3hkaEQ3TGF4MDltdVFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJGNTIvODhFQkNGREMxRDQ5MTFFQUFFNzc1QjM0QzRGOUFFMDIvMUU4RTM0OEU5 NEFDMTFFRTlEQzdEMjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBARxFAADBAHKXQQDBADLAnoDBAHLCLwDBAHLE74DBAHLH8YD BAXL0mAwDQYJKoZIhvcNAQELBQADggEBAIlXfKvFqC9Vcf3FI5eg1YzCRlF1Bk6v 4Frqi4ucMTpgH4W4IHGjoLejCE4saRf6w6lfKoh4gMTb6pHDI7KKO3h5Y3VjxRt5 iIRS+lc9Z2lT6E/PZZ6uqhov9HF8JMOFT7k5gyFpunkwFSwkYb1/eSB2uAbPLII4 enF0lHxhq2ErIJDetPXbb22I7KAU9CcqOFELzoM5NeE8pK3s6yc6MdvTgDQnhqJb N3hWFdvLIGax3IOHu9IyvYpSpLYQN11rpXKriTXi6R8Nd1uoSVG3X4Gr+DfpbAcz N1V5bYLsVmwT3ehc3x/+3j3ZFQFWdSps7auqkE5vPg+of3nvWOz+nSk= -----END CERTIFICATE-----Generated at Thu May 16 22:34:45 2024 by rpki-client on console-ams.rpki-client.org