$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa File: 8120226CBEE111ECBFC4F882C4F9AE02.roa (raw, json) Hash identifier: cKv5ZDuMTRB1GZ6qDVjyr/DKInN5ROhN7fMypCO2t9o= Subject key identifier: 21:F0:5F:01:7B:87:81:71:6A:F6:3B:CC:78:11:92:EF:62:C8:BB:CD Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 03C2 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa Signing time: Wed 05 Jun 2024 03:38:46 +0000 ROA not before: Wed 05 Jun 2024 03:38:46 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 56224 IP address blocks: 103.150.152.0/23 maxlen: 23 103.150.152.0/24 maxlen: 24 103.150.153.0/24 maxlen: 24 202.12.80.0/22 maxlen: 22 202.12.80.0/23 maxlen: 23 202.12.80.0/24 maxlen: 24 202.12.81.0/24 maxlen: 24 202.12.82.0/23 maxlen: 23 202.12.82.0/24 maxlen: 24 202.12.83.0/24 maxlen: 24 2405:3e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 22:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 962 (0x3c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Jun 5 03:38:46 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665fddc6-9905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:2e:25:f9:0f:e0:91:15:91:fd:9c:a9:da: cb:a5:4a:f0:89:fd:b5:81:ea:c4:62:b3:47:44:88: 5a:7d:b0:25:3d:26:64:02:97:dd:5e:a2:b1:78:9f: 41:18:20:f7:01:24:1a:0a:c2:5f:3c:c5:2d:f3:57: d6:2b:cb:7e:bb:b5:59:c8:b0:ee:5b:35:7a:38:12: 43:b2:f6:87:95:ef:7e:87:9d:80:6a:c6:a7:df:c0: 47:2d:6c:db:66:2a:9d:c2:e3:78:2c:34:3b:61:79: f9:79:eb:f8:1c:61:51:5b:35:ce:9b:a8:d3:cf:2b: f2:d3:b9:eb:21:e2:e7:a6:80:59:af:87:e5:cb:24: 8e:b6:66:36:db:5f:d9:e0:90:26:df:71:b1:1c:79: 95:ea:2b:3a:2e:6f:b9:60:5b:38:ba:37:b0:8b:fa: df:88:fd:a1:53:65:88:89:ae:be:69:38:9b:6c:a3: d7:75:73:a5:1c:c9:f5:86:bd:99:d1:ee:81:ed:d2: 85:b7:0f:d0:87:41:e6:7f:dc:05:e9:47:64:e6:bd: 9a:4b:80:0b:3d:45:0e:e6:b5:7d:82:e3:bd:df:9b: 8e:ce:42:a3:bd:09:da:cb:e5:86:73:70:5c:9b:9f: 31:a7:68:19:5f:04:99:1c:94:c7:ff:ba:5a:a1:96: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:5F:01:7B:87:81:71:6A:F6:3B:CC:78:11:92:EF:62:C8:BB:CD X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.152.0/23 202.12.80.0/22 IPv6: 2405:3e40::/32 Signature Algorithm: sha256WithRSAEncryption 03:d0:08:19:f3:bd:13:09:a1:37:47:2f:e7:d6:35:81:63:48: 35:70:b3:27:23:85:71:5a:3d:33:6c:03:ee:5b:14:ac:7c:4d: f4:7e:e8:c7:ef:c8:00:85:c5:74:73:10:28:42:87:8f:e1:a5: 03:69:15:c4:6f:28:1f:78:73:50:1c:e5:68:35:ab:74:a5:98: 5c:0b:e0:3c:79:2d:97:9f:8a:b4:b5:6f:46:8b:f6:6a:06:b7: 8e:a5:bf:7e:60:12:5b:1f:c9:15:c3:82:bf:9a:c8:12:99:7e: 2c:e7:86:b3:b3:8d:5f:d1:3e:82:25:6b:cb:fc:e9:f7:d5:5e: 1c:31:9b:43:e0:91:c6:f1:b1:9e:cb:e4:52:77:28:e2:13:90: 1c:26:8d:e1:02:ba:83:b3:ea:5e:52:b0:c7:1f:9b:7b:8d:80: 61:71:e0:3e:28:b6:a7:8f:3f:a9:11:ba:85:88:35:5d:2e:d3: 42:f7:42:1f:7b:7b:1b:ab:bf:fd:30:e7:f8:78:68:f7:65:d7: 94:df:ec:4e:41:19:12:1a:a1:ee:76:df:ce:e5:48:c0:39:bb: 7a:86:74:13:1d:f3:1c:b9:20:10:9a:a5:51:41:3c:60:bd:85: 09:c4:3a:4f:0e:83:82:06:ae:69:b8:5d:0a:b9:b3:8a:12:36: 26:05:e6:3a -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICA8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjQwNjA1MDMzODQ2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVmZGRjNi05OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYIuJfkP4JEVkf2cqdrLpUrwif21gerEYrNHRIhafbAlPSZkApfdXqKxeJ9B GCD3ASQaCsJfPMUt81fWK8t+u7VZyLDuWzV6OBJDsvaHle9+h52Aasan38BHLWzb ZiqdwuN4LDQ7YXn5eev4HGFRWzXOm6jTzyvy07nrIeLnpoBZr4flyySOtmY221/Z 4JAm33GxHHmV6is6Lm+5YFs4ujewi/rfiP2hU2WIia6+aTibbKPXdXOlHMn1hr2Z 0e6B7dKFtw/Qh0Hmf9wF6Udk5r2aS4ALPUUO5rV9guO935uOzkKjvQnay+WGc3Bc m58xp2gZXwSZHJTH/7paoZY+lwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCHwXwF7 h4FxavY7zHgRku9iyLvNMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0NjcvNzcwQjRGMUE1MjZGMTFFQ0JDNTBFQjE3QzRGOUFFMDIvODEyMDIyNkNC RUUxMTFFQ0JGQzRGODgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnlpgDBALKDFAwDQQCAAIwBwMFACQFPkAwDQYJKoZIhvcN AQELBQADggEBAAPQCBnzvRMJoTdHL+fWNYFjSDVwsycjhXFaPTNsA+5bFKx8TfR+ 6MfvyACFxXRzEChCh4/hpQNpFcRvKB94c1Ac5Wg1q3SlmFwL4Dx5LZefirS1b0aL 9moGt46lv35gElsfyRXDgr+ayBKZfiznhrOzjV/RPoIla8v86ffVXhwxm0Pgkcbx sZ7L5FJ3KOITkBwmjeECuoOz6l5SsMcfm3uNgGFx4D4otqePP6kRuoWINV0u00L3 Qh97exurv/0w5/h4aPdl15Tf7E5BGRIaoe52387lSMA5u3qGdBMd8xy5IBCapVFB PGC9hQnEOk8Og4IGrmm4XQq5s4oSNiYF5jo= -----END CERTIFICATE-----Generated at Thu Jun 13 03:15:49 2024 by rpki-client on console-ams.rpki-client.org