$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa File: 52EF768073C511EB98AF9867C4F9AE02.roa (raw, json) Hash identifier: kPeE1AHZkd7OO5F+ewgy++bxikXMgf1xKMFWLugt2aA= Subject key identifier: FB:E2:70:C6:45:17:05:33:F3:E1:92:62:CF:65:DE:CA:71:92:AC:9B Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 0557 Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa Signing time: Mon 02 Oct 2023 23:21:07 +0000 ROA not before: Mon 02 Oct 2023 23:21:07 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132347 IP address blocks: 43.224.120.0/24 maxlen: 24 43.224.121.0/24 maxlen: 24 43.224.122.0/24 maxlen: 24 43.224.123.0/24 maxlen: 24 103.14.140.0/24 maxlen: 24 103.14.141.0/24 maxlen: 24 103.14.142.0/24 maxlen: 24 103.14.143.0/24 maxlen: 24 2404:ab00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Oct 2 23:21:07 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651b5063-ef00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:2f:c8:12:67:88:c2:3f:8e:13:1c:35:63: 18:ce:2d:66:11:c7:39:db:97:87:3f:d3:97:08:8f: 60:dd:61:32:2b:6d:f1:0f:88:d8:28:0d:b9:37:e6: 01:e1:da:2e:1e:74:f9:7e:87:7a:ef:68:f5:f1:d4: c8:df:db:8a:24:6a:67:ee:57:ec:59:24:4d:3e:dd: 0e:70:78:24:d6:2d:70:25:64:b7:d7:5e:2e:af:30: 9b:56:15:ed:89:b2:c0:f7:f5:50:3c:b6:73:37:a2: 95:72:e3:c7:a3:b6:82:3d:99:15:90:92:77:c8:85: fe:ca:78:de:ce:af:63:7b:db:f1:4e:4e:d4:28:a6: fa:ec:ce:96:ce:ee:0e:7c:40:9b:ee:da:9f:0f:f5: dc:3e:cb:9d:6d:29:a2:6c:33:6c:a7:b5:b3:45:2a: 1e:33:6e:a1:5c:23:fc:52:5c:56:bb:97:ff:83:9b: 85:2f:0d:8c:54:ed:ad:19:08:21:4f:73:ed:47:f2: e1:6a:24:80:cb:1b:78:f8:85:49:c5:11:bf:a1:96: 8a:b4:9e:74:3d:9c:2b:e9:cc:34:a0:b9:b6:89:f9: 54:7d:82:7d:13:41:c5:4f:d4:b1:d0:5d:09:b9:b2: 70:13:bd:94:57:2b:59:bb:97:f6:27:7c:ab:5a:48: d9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:70:C6:45:17:05:33:F3:E1:92:62:CF:65:DE:CA:71:92:AC:9B X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.120.0/22 103.14.140.0/22 IPv6: 2404:ab00::/32 Signature Algorithm: sha256WithRSAEncryption 57:13:7c:7b:2d:64:e7:95:d4:33:9b:10:8f:4f:d0:55:29:6a: e6:80:9d:8d:55:2c:14:37:2e:4b:86:14:ab:7f:4d:80:20:97: 29:fe:0a:6f:80:b0:d2:02:f6:9e:f0:bc:b7:93:17:05:7d:1d: 41:31:72:5b:f3:55:e6:69:dc:09:29:a3:0e:fa:ff:20:de:57: e5:76:90:59:c9:89:50:96:e7:cd:78:42:8f:b8:dd:12:5a:35: 8a:ad:5e:59:81:dd:43:27:04:15:17:7b:67:ff:08:91:3c:ab: 9b:2d:60:96:3a:c8:19:02:09:bd:e8:08:64:ae:79:4c:92:3c: 04:3e:56:5b:d9:5b:54:f4:f6:3b:af:c2:56:96:cd:89:c1:a6: 4b:4e:cd:85:e5:2f:2e:89:00:e8:ea:7f:48:fb:14:41:32:28: b1:2a:26:df:d8:cf:fd:da:6b:dd:f5:48:ef:7b:8b:17:09:27: bc:40:fb:16:dd:f9:be:2d:04:dc:7a:b9:b2:db:0d:01:ac:1a: 35:1a:96:97:f5:32:06:d7:b4:a7:92:6f:1f:38:41:8a:b8:e0: b1:36:f7:51:d8:61:36:9b:26:92:89:bd:07:06:c8:c9:de:5f: 3a:2d:67:74:3e:35:59:c5:b5:13:54:f2:6d:79:cf:a4:d7:2a: e0:19:b7:38 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjMxMDAyMjMyMTA3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFiNTA2My1lZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSUvyBJniMI/jhMcNWMYzi1mEcc525eHP9OXCI9g3WEyK23xD4jYKA25N+YB 4douHnT5fod672j18dTI39uKJGpn7lfsWSRNPt0OcHgk1i1wJWS3114urzCbVhXt ibLA9/VQPLZzN6KVcuPHo7aCPZkVkJJ3yIX+ynjezq9je9vxTk7UKKb67M6Wzu4O fECb7tqfD/XcPsudbSmibDNsp7WzRSoeM26hXCP8UlxWu5f/g5uFLw2MVO2tGQgh T3PtR/LhaiSAyxt4+IVJxRG/oZaKtJ50PZwr6cw0oLm2iflUfYJ9E0HFT9Sx0F0J ubJwE72UVytZu5f2J3yrWkjZ2wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPvicMZF FwUz8+GSYs9l3spxkqybMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVGODIvNDA5MUJDNzA3M0MzMTFFQkI4MzlFNjY0QzRGOUFFMDIvNTJFRjc2ODA3 M0M1MTFFQjk4QUY5ODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4HgDBAJnDowwDQQCAAIwBwMFACQEqwAwDQYJKoZIhvcN AQELBQADggEBAFcTfHstZOeV1DObEI9P0FUpauaAnY1VLBQ3LkuGFKt/TYAglyn+ Cm+AsNIC9p7wvLeTFwV9HUExclvzVeZp3Akpow76/yDeV+V2kFnJiVCW5814Qo+4 3RJaNYqtXlmB3UMnBBUXe2f/CJE8q5stYJY6yBkCCb3oCGSueUySPAQ+VlvZW1T0 9juvwlaWzYnBpktOzYXlLy6JAOjqf0j7FEEyKLEqJt/Yz/3aa931SO97ixcJJ7xA +xbd+b4tBNx6ubLbDQGsGjUalpf1MgbXtKeSbx84QYq44LE291HYYTabJpKJvQcG yMneXzotZ3Q+NVnFtRNU8m15z6TXKuAZtzg= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org