$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/B52EA19A6E0B11ECA6057963C4F9AE02.roa File: B52EA19A6E0B11ECA6057963C4F9AE02.roa (raw, json) Hash identifier: sRAPrM6e/yJbsGZwUamXGzz2TWejjmVOjZsdsTU0i6Y= Subject key identifier: 54:E8:EE:87:44:75:0C:D0:C1:24:3A:10:D6:FA:1A:39:90:BA:51:A2 Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 04CB Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/B52EA19A6E0B11ECA6057963C4F9AE02.roa Signing time: Tue 03 Sep 2024 01:13:47 +0000 ROA not before: Tue 03 Sep 2024 01:13:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45237 IP address blocks: 202.170.64.0/24 maxlen: 24 202.170.65.0/24 maxlen: 24 202.170.66.0/24 maxlen: 24 202.170.67.0/24 maxlen: 24 202.170.68.0/24 maxlen: 24 202.170.69.0/24 maxlen: 24 202.170.70.0/24 maxlen: 24 202.170.71.0/24 maxlen: 24 202.170.72.0/24 maxlen: 24 202.170.73.0/24 maxlen: 24 202.170.74.0/24 maxlen: 24 202.170.75.0/24 maxlen: 24 202.170.76.0/24 maxlen: 24 202.170.77.0/24 maxlen: 24 202.170.78.0/24 maxlen: 24 202.170.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Sep 3 01:13:47 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d662ca-0395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:37:8a:a9:d0:e0:b7:27:97:53:92:03:7e: 32:2e:82:6b:5b:82:a5:cf:3d:5a:f7:41:06:82:7b: a8:04:9d:85:6c:0f:53:65:f0:77:31:0b:68:5d:b7: 9e:db:71:e1:ff:50:4b:e8:08:f6:f9:21:6a:fb:bf: a7:61:ac:22:0e:3a:69:ec:fb:9d:cd:61:e0:16:c9: 0e:99:7d:51:cb:38:5b:dd:07:70:09:af:26:05:f3: 99:5a:b2:0a:21:4e:36:46:56:71:48:78:5c:d4:9a: 62:cf:36:23:bb:c4:dc:e2:3c:ed:d2:f3:c1:97:a1: 75:6c:ce:5f:d7:41:a6:ee:ae:0e:e0:6f:63:be:e0: cb:17:2b:6b:13:81:d0:f5:ea:48:ef:5f:4e:c9:31: 2d:c6:39:31:9d:46:28:20:1d:33:3e:58:6c:47:59: 14:5a:12:f7:c2:27:93:43:d8:80:91:10:f0:5c:6a: df:f5:8a:18:5d:5e:72:80:9c:fe:13:28:68:01:c3: 5c:3b:ca:7d:21:a0:94:df:75:44:cc:bc:5c:94:50: 26:a4:8d:86:dc:4d:ed:c8:71:92:44:d6:c2:30:33: ec:95:db:11:26:2e:18:85:ad:43:bb:6c:9b:81:fc: a1:fc:61:d5:ee:6b:0c:93:60:9f:a1:a4:89:02:df: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E8:EE:87:44:75:0C:D0:C1:24:3A:10:D6:FA:1A:39:90:BA:51:A2 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/B52EA19A6E0B11ECA6057963C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.170.64.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:ed:82:dd:42:5c:67:d4:68:07:13:43:f3:c6:d8:4a:3e:9a: 54:e9:aa:dd:15:a2:8f:cd:84:18:c8:7c:33:e8:dc:eb:06:1f: e0:3e:14:1b:ae:82:07:2b:59:60:6c:71:fb:52:37:97:ae:5c: 8e:20:55:40:14:6c:6d:52:d2:4d:cb:69:b3:a0:cf:80:53:08: 44:37:3c:cf:67:22:1e:56:8c:f4:59:10:45:b6:db:6c:24:61: 34:2f:2a:54:78:53:6a:4b:69:c1:6d:f8:4f:25:22:67:ed:35: fc:2d:2a:d3:8c:70:70:f2:e6:46:16:6c:22:e1:97:f5:85:aa: be:8c:92:d8:5c:e8:8f:b4:50:b7:18:16:68:08:1d:88:c7:cb: 14:89:2a:9e:bd:25:be:98:9b:b7:79:ec:ba:4d:8c:f9:7a:43: 84:da:c8:eb:80:50:e4:1e:45:20:01:57:8c:ad:d9:83:8c:f9: a5:d2:af:7f:2a:85:c4:20:f7:ef:4f:69:54:9f:61:ca:1b:f2: 6c:5a:89:c7:7c:48:8a:52:b3:80:0f:70:ea:a5:ea:7d:58:9c: d0:0e:b6:53:27:09:d6:9e:b6:df:6f:54:ba:2f:91:af:4e:da: 63:7b:31:ac:e9:44:6e:d5:7f:f6:68:1e:4d:05:84:42:97:5c: 84:74:d6:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjQwOTAzMDExMzQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NjJjYS0wMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAye43iqnQ4Lcnl1OSA34yLoJrW4Klzz1a90EGgnuoBJ2FbA9TZfB3MQtoXbee 23Hh/1BL6Aj2+SFq+7+nYawiDjpp7PudzWHgFskOmX1Ryzhb3QdwCa8mBfOZWrIK IU42RlZxSHhc1JpizzYju8Tc4jzt0vPBl6F1bM5f10Gm7q4O4G9jvuDLFytrE4HQ 9epI719OyTEtxjkxnUYoIB0zPlhsR1kUWhL3wieTQ9iAkRDwXGrf9YoYXV5ygJz+ EyhoAcNcO8p9IaCU33VEzLxclFAmpI2G3E3tyHGSRNbCMDPsldsRJi4Yha1Du2yb gfyh/GHV7msMk2CfoaSJAt9xkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFTo7odE dQzQwSQ6ENb6GjmQulGiMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5NzIvOUJGNkM0NEVGMDMxMTFFQjk1Rjc2NzQ4QzRGOUFFMDIvQjUyRUExOUE2 RTBCMTFFQ0E2MDU3OTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATKqkAwDQYJKoZIhvcNAQELBQADggEBAEvtgt1CXGfUaAcT Q/PG2Eo+mlTpqt0Voo/NhBjIfDPo3OsGH+A+FBuuggcrWWBscftSN5euXI4gVUAU bG1S0k3LabOgz4BTCEQ3PM9nIh5WjPRZEEW222wkYTQvKlR4U2pLacFt+E8lImft NfwtKtOMcHDy5kYWbCLhl/WFqr6Mkthc6I+0ULcYFmgIHYjHyxSJKp69Jb6Ym7d5 7LpNjPl6Q4TayOuAUOQeRSABV4yt2YOM+aXSr38qhcQg9+9PaVSfYcob8mxaicd8 SIpSs4APcOql6n1YnNAOtlMnCdaett9vVLovka9O2mN7MazpRG7Vf/ZoHk0FhEKX XIR01iQ= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:53 2024 by rpki-client on console-ams.rpki-client.org