$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/20E7CCE2595D11EF90E23670C4F9AE02.roa File: 20E7CCE2595D11EF90E23670C4F9AE02.roa (raw, json) Hash identifier: RHyAoxJQkvm3rwIX0Ie7pVxPWutbacOCPpnryVxRc/c= Subject key identifier: 5B:FF:33:B4:75:55:1B:15:FA:3C:09:C4:6F:CA:3B:2A:4A:D5:7E:96 Certificate issuer: /CN=A91EB9FC/serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03 Certificate serial: 09 Authority key identifier: 79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/20E7CCE2595D11EF90E23670C4F9AE02.roa Signing time: Fri 16 Aug 2024 03:14:08 +0000 ROA not before: Fri 16 Aug 2024 03:14:08 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152725 IP address blocks: 103.52.4.0/23 maxlen: 23 103.52.4.0/24 maxlen: 24 103.52.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9FC/serialNumber=793F34B6A97AB75035581BFDD080838933AB3F03 Validity Not Before: Aug 16 03:14:08 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66bec3ff-a1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:4b:2c:15:32:28:40:40:ce:91:39:be:ba: 60:38:d3:91:e3:17:fc:25:97:59:c0:0f:a8:cc:77: 80:4e:52:5b:ca:60:fa:8d:9e:48:24:c8:8d:85:0a: 0a:29:59:88:fb:a4:42:a5:5d:cc:10:8e:63:b3:6c: 6d:67:e7:17:0c:c9:2d:7e:6e:c5:3d:c1:be:91:35: a9:c1:4f:08:2b:61:fc:22:20:ae:d2:d8:d3:5e:a9: 0f:a4:26:93:09:78:9e:13:2b:5d:79:c4:1b:44:b3: b3:16:48:a6:c7:e9:34:33:8f:f0:86:60:57:1f:ec: 0a:af:db:c5:e3:cb:ae:90:a7:32:61:23:44:d6:97: de:e8:64:59:5c:80:3c:c7:e9:8a:12:41:71:3a:5e: 63:1d:93:db:aa:e8:8d:e9:ed:3f:d9:28:b2:ab:dc: 32:6e:64:24:7e:56:67:cc:a0:b2:f3:cd:a7:45:49: df:7b:40:f1:64:0b:2b:5f:35:b1:89:70:91:47:c9: b6:c7:18:fc:02:76:3f:75:b1:58:bd:b4:fd:98:78: b7:fa:c7:af:4a:fd:ed:3a:c7:ae:97:c6:c6:76:6f: 8c:8e:1f:d8:5e:06:4d:2a:7f:9a:d8:61:3f:27:cc: 4c:96:bd:c3:c6:5c:cf:9c:96:fb:61:8e:fc:fa:9a: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FF:33:B4:75:55:1B:15:FA:3C:09:C4:6F:CA:3B:2A:4A:D5:7E:96 X509v3 Authority Key Identifier: keyid:79:3F:34:B6:A9:7A:B7:50:35:58:1B:FD:D0:80:83:89:33:AB:3F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/eT80tql6t1A1WBv90ICDiTOrPwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eT80tql6t1A1WBv90ICDiTOrPwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9FC/2D1AB836595C11EFBB07C44FC4F9AE02/20E7CCE2595D11EF90E23670C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.52.4.0/23 Signature Algorithm: sha256WithRSAEncryption 04:e5:48:bc:ce:ef:a8:e1:ee:a3:a5:fe:a2:39:18:d2:ea:d3: cd:07:0f:5b:a7:bc:1e:c4:c6:fe:0c:e9:08:52:e3:f9:48:f7: 98:9e:95:a5:f1:6f:cd:f4:97:9b:85:7d:ae:0b:e1:b5:34:69: f5:4a:da:ed:8f:be:d4:4f:8c:a8:7c:cb:08:19:f8:a3:bb:9f: 59:d5:5e:65:d8:8e:a1:a0:c2:23:68:5b:2a:f6:39:fd:1c:2a: 5a:eb:69:23:fe:62:e3:82:4f:89:11:b8:c7:dd:22:2b:19:a8: 30:51:83:1e:52:e9:e3:d3:6f:0d:16:52:ad:52:06:a2:03:e3: d3:01:93:eb:d8:5d:9f:7d:4c:9d:bf:3a:f5:e1:33:7f:f0:14: 75:fa:87:6c:a4:eb:a5:df:9d:81:c3:82:01:c4:b2:e8:88:26: 8c:df:30:90:7a:a7:55:85:fe:26:19:03:b6:91:c0:aa:19:ad: 0f:8d:31:b9:58:7a:89:c2:99:be:73:e8:65:e0:07:51:e9:89: fa:5f:ae:08:05:41:6f:56:bc:a6:79:66:3f:0c:8b:fa:db:b1: ca:9f:96:34:1b:c1:6b:12:98:76:09:e6:79:eb:dc:9b:82:49: d5:b9:cf:0a:d9:8f:aa:c3:58:a7:67:7c:4d:e7:23:b1:c3:37: cc:ea:f1:0a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjlGQzExMC8GA1UEBRMoNzkzRjM0QjZBOTdBQjc1MDM1NTgxQkZERDA4MDgzODkz M0FCM0YwMzAeFw0yNDA4MTYwMzE0MDhaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmVjM2ZmLWExYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa70ssFTIoQEDOkTm+umA405HjF/wll1nAD6jMd4BOUlvKYPqNnkgkyI2FCgop WYj7pEKlXcwQjmOzbG1n5xcMyS1+bsU9wb6RNanBTwgrYfwiIK7S2NNeqQ+kJpMJ eJ4TK115xBtEs7MWSKbH6TQzj/CGYFcf7Aqv28Xjy66QpzJhI0TWl97oZFlcgDzH 6YoSQXE6XmMdk9uq6I3p7T/ZKLKr3DJuZCR+VmfMoLLzzadFSd97QPFkCytfNbGJ cJFHybbHGPwCdj91sVi9tP2YeLf6x69K/e06x66XxsZ2b4yOH9heBk0qf5rYYT8n zEyWvcPGXM+clvthjvz6mgSHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUW/8ztHVV GxX6PAnEb8o7KkrVfpYwHwYDVR0jBBgwFoAUeT80tql6t1A1WBv90ICDiTOrPwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOUZDLzJEMUFCODM2NTk1 QzExRUZCQjA3QzQ0RkM0RjlBRTAyL2VUODB0cWw2dDFBMVdCdjkwSUNEaVRPclB3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVQ4MHRxbDZ0MUExV0J2OTBJQ0RpVE9yUHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlGQy8yRDFBQjgzNjU5NUMxMUVGQkIwN0M0NEZDNEY5QUUwMi8yMEU3Q0NFMjU5 NUQxMUVGOTBFMjM2NzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWc0BDANBgkqhkiG9w0BAQsFAAOCAQEABOVIvM7vqOHuo6X+ ojkY0urTzQcPW6e8HsTG/gzpCFLj+Uj3mJ6VpfFvzfSXm4V9rgvhtTRp9Ura7Y++ 1E+MqHzLCBn4o7ufWdVeZdiOoaDCI2hbKvY5/RwqWutpI/5i44JPiRG4x90iKxmo MFGDHlLp49NvDRZSrVIGogPj0wGT69hdn31Mnb869eEzf/AUdfqHbKTrpd+dgcOC AcSy6IgmjN8wkHqnVYX+JhkDtpHAqhmtD40xuVh6icKZvnPoZeAHUemJ+l+uCAVB b1a8pnlmPwyL+tuxyp+WNBvBaxKYdgnmeevcm4JJ1bnPCtmPqsNYp2d8TecjscM3 zOrxCg== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org