$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0252B276D10711EE80DDFA5FC4F9AE02.roa File: 0252B276D10711EE80DDFA5FC4F9AE02.roa (raw, json) Hash identifier: ljpVfhGkQcqyCyy6QYs7XJYkpqPOcl6hX7xoxsXnqVs= Subject key identifier: BE:26:32:3D:38:FC:9B:A7:64:0A:23:89:BC:BC:8D:16:65:E3:1A:E1 Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0343 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0252B276D10711EE80DDFA5FC4F9AE02.roa Signing time: Sun 07 Apr 2024 03:05:02 +0000 ROA not before: Sun 07 Apr 2024 03:05:02 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136454 IP address blocks: 116.204.240.0/24 maxlen: 24 116.204.241.0/24 maxlen: 24 2400:e640:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Apr 7 03:05:02 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66120d5e-3d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:ad:a0:8c:e6:06:36:f9:2d:32:16:3d:d2: c7:1a:85:17:43:44:9a:c8:54:88:17:5f:ee:a7:37: 41:8b:11:fc:f5:ca:6d:04:7d:3f:74:5d:68:08:4e: d5:ad:08:1d:4b:6d:c4:50:46:05:27:c6:28:84:3c: 81:1f:38:6b:61:d1:d7:3f:b5:6f:24:7f:c7:d3:da: 80:b6:33:9f:6c:ef:4d:a4:e1:59:53:73:b8:62:41: b4:5f:c8:d5:0d:e2:93:83:00:30:72:f9:4a:bf:11: 7a:7a:6a:5d:25:37:4c:19:82:c5:a5:ea:86:d3:52: 60:8c:b6:c7:b4:1d:35:3a:53:37:b7:51:d8:4b:d6: d6:df:97:b7:7c:54:55:de:fb:cd:e8:44:e4:36:52: b2:4a:8c:c6:e9:a2:2e:51:8b:56:f8:13:92:a8:24: 82:c6:34:d4:26:5e:5c:bb:c8:dc:6e:0c:4a:a8:cb: 2b:ef:ac:90:45:53:f7:24:09:f1:a8:f4:db:d5:3f: c7:db:66:f2:e2:3b:6e:81:ea:7e:d6:36:2e:8b:0d: 81:e6:9e:fc:92:ed:64:46:5d:91:a3:ca:41:9d:27: 21:c9:e5:f1:27:6e:18:78:41:4b:9a:2a:43:e3:4f: 0f:8b:ca:40:81:fb:50:32:11:28:fa:4f:7d:0e:fb: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:26:32:3D:38:FC:9B:A7:64:0A:23:89:BC:BC:8D:16:65:E3:1A:E1 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0252B276D10711EE80DDFA5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.204.240.0/23 IPv6: 2400:e640:1000::/36 Signature Algorithm: sha256WithRSAEncryption 4a:92:dc:f3:41:9c:2d:fe:5e:01:f5:68:cb:5b:3b:eb:61:43: e4:a0:11:23:56:51:8a:e4:d2:b3:14:bd:90:2e:a6:63:ab:4f: 4b:d3:68:68:50:0f:75:30:c0:0b:65:49:4a:09:26:a4:e3:a6: 35:36:86:e0:af:71:34:78:e8:41:19:a6:67:fa:d2:fd:7e:46: fa:42:4a:86:c2:c5:3d:b1:f3:73:5d:2e:f6:20:34:75:fc:f5: 8b:a4:aa:4a:b4:eb:43:ad:d4:4a:b5:26:e8:54:86:a4:89:94: 63:60:9c:12:8d:30:d5:ad:6f:7f:12:36:c3:f5:29:06:ba:24: 14:79:2b:d0:d3:1f:3e:35:e3:60:d6:7f:58:e6:6d:98:37:cc: ca:06:27:a4:2b:a9:b8:7b:eb:46:1e:7c:e5:00:7d:ea:fc:de: 29:c8:fb:8e:c3:6b:34:cd:96:da:fd:ae:d2:28:0d:82:9e:39: 67:02:9b:14:a1:ad:ba:94:45:35:b0:0c:76:d5:50:f8:55:5d: db:6b:6d:37:b6:38:ce:1c:7d:5c:6e:69:6d:0a:82:ae:8e:16: 39:3f:a3:d5:14:19:a5:ab:40:05:18:86:62:0d:eb:02:c5:c4: e9:93:54:5e:da:7a:66:91:9c:01:cc:13:dd:c0:50:a3:41:20: ae:77:01:de -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjQwNDA3MDMwNTAyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjEyMGQ1ZS0zZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0itoIzmBjb5LTIWPdLHGoUXQ0SayFSIF1/upzdBixH89cptBH0/dF1oCE7V rQgdS23EUEYFJ8YohDyBHzhrYdHXP7VvJH/H09qAtjOfbO9NpOFZU3O4YkG0X8jV DeKTgwAwcvlKvxF6empdJTdMGYLFpeqG01JgjLbHtB01OlM3t1HYS9bW35e3fFRV 3vvN6ETkNlKySozG6aIuUYtW+BOSqCSCxjTUJl5cu8jcbgxKqMsr76yQRVP3JAnx qPTb1T/H22by4jtugep+1jYuiw2B5p78ku1kRl2Ro8pBnSchyeXxJ24YeEFLmipD 408Pi8pAgftQMhEo+k99DvvZWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL4mMj04 /JunZAojiby8jRZl4xrhMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvMDI1MkIyNzZE MTA3MTFFRTgwRERGQTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAF0zPAwDgQCAAIwCAMGBCQA5kAQMA0GCSqGSIb3DQEBCwUA A4IBAQBKktzzQZwt/l4B9WjLWzvrYUPkoBEjVlGK5NKzFL2QLqZjq09L02hoUA91 MMALZUlKCSak46Y1Nobgr3E0eOhBGaZn+tL9fkb6QkqGwsU9sfNzXS72IDR1/PWL pKpKtOtDrdRKtSboVIakiZRjYJwSjTDVrW9/EjbD9SkGuiQUeSvQ0x8+NeNg1n9Y 5m2YN8zKBiekK6m4e+tGHnzlAH3q/N4pyPuOw2s0zZba/a7SKA2CnjlnApsUoa26 lEU1sAx21VD4VV3ba203tjjOHH1cbmltCoKujhY5P6PVFBmlq0AFGIZiDesCxcTp k1Re2npmkZwBzBPdwFCjQSCudwHe -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:07 2024 by rpki-client on console-fra.rpki-client.org