$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/52333EB4CFAE11EEB928CD25C4F9AE02.roa File: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (raw, json) Hash identifier: rao6m+0CNNHk39UCfSySyHpZ6I8A/9rkFLhpDFmF54Q= Subject key identifier: 84:95:86:76:8A:64:F2:6D:14:12:E3:DE:A6:A2:C1:86:F3:6E:BF:6D Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 04 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/52333EB4CFAE11EEB928CD25C4F9AE02.roa Signing time: Tue 20 Feb 2024 12:53:56 +0000 ROA not before: Tue 20 Feb 2024 12:53:56 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 137846 IP address blocks: 103.191.110.0/23 maxlen: 23 103.191.110.0/24 maxlen: 24 103.191.111.0/24 maxlen: 24 2001:df0:fec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: Feb 20 12:53:56 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65d4a0e3-4490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:f1:ae:c8:06:60:76:fa:c2:54:3d:64:bd: a6:93:2d:8c:81:11:b5:b6:ea:8b:9b:f1:27:24:4e: 54:2f:f8:24:f0:fb:cd:62:47:d2:cf:61:41:50:86: e8:13:e0:04:48:a3:b9:ec:f7:68:19:57:a9:d3:c5: a0:86:9f:e2:f8:da:6b:64:5a:8a:e3:c9:c3:e4:f7: 48:d9:9d:b8:69:1c:69:1a:11:23:6f:1a:15:fc:65: ab:8a:d1:92:3f:14:b6:97:fc:01:7a:2c:56:97:9f: 87:fb:d4:48:70:53:fd:ce:01:66:51:3a:f5:7d:ed: 96:ce:41:cf:07:15:19:77:27:44:d7:bb:7b:5f:14: 98:9f:c9:6a:6f:2e:fb:f8:a5:c9:b4:da:04:03:d4: 56:59:a8:2f:90:98:02:f0:c4:ee:36:cc:51:90:cc: f6:b3:79:f9:c1:3e:52:7e:e2:7f:06:be:be:c6:95: 9c:2f:0f:50:45:c5:6d:7b:4a:45:b2:07:7e:7a:6f: 48:15:c5:59:8a:90:a3:3a:38:c2:7b:9b:15:62:c8: 7e:37:11:f8:69:42:f1:13:86:4f:10:84:70:69:3f: d4:bc:a2:af:0b:a4:97:70:c6:c3:e9:1f:ed:3e:73: 44:28:39:94:8a:d7:a3:49:1d:44:19:d3:06:01:3e: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:95:86:76:8A:64:F2:6D:14:12:E3:DE:A6:A2:C1:86:F3:6E:BF:6D X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/52333EB4CFAE11EEB928CD25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.110.0/23 IPv6: 2001:df0:fec0::/48 Signature Algorithm: sha256WithRSAEncryption 9e:94:6c:1d:ed:03:d3:b5:4b:9c:81:e0:3a:86:02:04:fb:fe: 13:fa:56:7c:87:aa:bd:f3:a8:95:f8:43:78:ea:60:f9:ec:e1: 95:66:c9:e1:52:64:6c:a9:de:23:e1:13:15:52:1e:2d:c7:4d: c6:24:78:9e:63:ab:bd:dc:d9:4f:1e:d8:19:5a:97:58:37:1e: c5:a0:a2:cb:af:db:1a:51:cc:f7:18:e1:eb:0f:4d:eb:ab:b3: 78:e2:5f:27:f5:e2:7b:2a:b9:fa:c6:cb:d1:38:2f:9a:a4:84: 44:6d:f4:f4:8d:6d:fd:79:3a:43:74:6a:38:30:6a:7c:ac:c4: 18:5a:62:d9:4b:6a:d3:54:32:fe:89:17:cf:fc:dd:c9:61:3d: e3:9f:39:e7:1b:26:16:49:00:99:0d:6a:2a:b3:77:6d:d0:f6: 2f:d3:fa:e8:9c:da:5f:06:07:8d:dd:a5:68:f1:5a:a2:03:eb: b4:04:3e:b6:52:86:95:ae:93:e7:a0:69:10:7c:bc:fb:f7:50: 1d:5e:77:15:f8:0a:85:b4:92:79:a1:11:04:1d:78:f3:b2:5c: be:9c:42:05:c3:ff:b8:af:bb:f8:dd:93:ef:ab:75:af:a7:00: ad:4e:c5:b4:d3:a5:02:3a:bd:01:90:95:57:c9:69:e2:53:c5: b4:ef:bb:71 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MEVERjExMC8GA1UEBRMoOEI2NDE5Njg2OTExN0I5OUI4NzlCNERDQkFGMDQyOTBC QzE2ODEwQzAeFw0yNDAyMjAxMjUzNTZaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZDRhMGUzLTQ0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM3fGuyAZgdvrCVD1kvaaTLYyBEbW26oub8SckTlQv+CTw+81iR9LPYUFQhugT 4ARIo7ns92gZV6nTxaCGn+L42mtkWorjycPk90jZnbhpHGkaESNvGhX8ZauK0ZI/ FLaX/AF6LFaXn4f71EhwU/3OAWZROvV97ZbOQc8HFRl3J0TXu3tfFJifyWpvLvv4 pcm02gQD1FZZqC+QmALwxO42zFGQzPazefnBPlJ+4n8Gvr7GlZwvD1BFxW17SkWy B356b0gVxVmKkKM6OMJ7mxViyH43EfhpQvEThk8QhHBpP9S8oq8LpJdwxsPpH+0+ c0QoOZSK16NJHUQZ0wYBPhRnAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUhJWGdopk 8m0UEuPepqLBhvNuv20wHwYDVR0jBBgwFoAUi2QZaGkRe5m4ebTcuvBCkLwWgQww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwRURGLzNERTM5RTgyQ0ZB RDExRUVBQ0ZBNDI2OEM0RjlBRTAyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dR dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaTJRWmFHa1JlNW00ZWJUY3V2QkNrTHdXZ1F3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi81MjMzM0VCNENG QUUxMUVFQjkyOENEMjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWe/bjAPBAIAAjAJAwcAIAEN8P7AMA0GCSqGSIb3DQEBCwUA A4IBAQCelGwd7QPTtUucgeA6hgIE+/4T+lZ8h6q986iV+EN46mD57OGVZsnhUmRs qd4j4RMVUh4tx03GJHieY6u93NlPHtgZWpdYNx7FoKLLr9saUcz3GOHrD03rq7N4 4l8n9eJ7Krn6xsvROC+apIREbfT0jW39eTpDdGo4MGp8rMQYWmLZS2rTVDL+iRfP /N3JYT3jnznnGyYWSQCZDWoqs3dt0PYv0/ronNpfBgeN3aVo8VqiA+u0BD62UoaV rpPnoGkQfLz791AdXncV+AqFtJJ5oREEHXjzsly+nEIFw/+4r7v43ZPvq3WvpwCt TsW006UCOr0BkJVXyWniU8W077tx -----END CERTIFICATE-----Generated at Fri May 31 10:02:42 2024 by rpki-client on console-ams.rpki-client.org