$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/220853047F2211EA8E730F35C4F9AE02.roa File: 220853047F2211EA8E730F35C4F9AE02.roa (raw, json) Hash identifier: xV0WLxYqqQFCLmI/y4DVLsG2EiamVNg0WSby5MmNSBE= Subject key identifier: 1F:B9:CE:EA:D5:68:1D:F5:EE:E9:26:37:9C:F2:A3:62:FC:6E:CD:32 Certificate issuer: /CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E Certificate serial: 090D Authority key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/220853047F2211EA8E730F35C4F9AE02.roa Signing time: Tue 30 Apr 2024 21:59:49 +0000 ROA not before: Tue 30 Apr 2024 21:59:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134105 IP address blocks: 103.52.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 21:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E Validity Not Before: Apr 30 21:59:49 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663169d5-6f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:8e:e3:30:94:8d:26:83:5f:6f:36:03:71: 39:56:01:2a:72:2c:6b:22:ca:a5:59:f4:85:18:7b: cf:ba:cf:2f:b0:84:d1:dd:98:7b:82:7c:d2:39:ea: 2b:7a:df:b1:ba:bd:2e:dc:13:9f:78:02:83:67:50: a0:6a:47:e3:b3:69:b1:b8:4a:c3:f2:99:a8:35:2c: 44:2d:64:f3:8e:83:3c:b7:d4:b2:ba:8b:85:00:00: 62:97:fd:93:51:e1:04:78:f3:99:76:35:f7:ba:9e: 27:63:59:fa:97:7c:92:e8:23:08:ee:7d:e9:fe:5b: 57:f4:3b:c0:ce:36:1d:08:32:72:21:1d:fa:2c:b5: eb:76:15:95:e6:99:c0:34:41:1a:ac:e3:8d:35:e6: fc:6b:35:ee:b7:3f:3d:ac:ac:c5:33:2c:15:7d:56: 71:9b:76:4d:af:e5:5c:da:5a:b8:a9:3c:31:4e:cd: b0:29:d5:f8:21:b1:44:2b:07:05:6d:5f:c7:05:7f: d0:e8:38:d0:31:28:05:34:be:4d:5e:8c:f2:41:1b: e0:cd:33:29:90:6f:9c:55:d4:c3:03:88:29:36:74: 6d:ab:0a:ad:96:2f:f3:f1:78:b1:3e:17:7f:33:c2: 24:01:81:cd:cb:88:85:b4:01:ca:a0:68:15:0f:66: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:CE:EA:D5:68:1D:F5:EE:E9:26:37:9C:F2:A3:62:FC:6E:CD:32 X509v3 Authority Key Identifier: keyid:D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/220853047F2211EA8E730F35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.52.228.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:4b:fa:53:cf:11:e1:98:cd:80:64:8b:81:a8:bf:c6:7f:ed: 98:5c:e5:7a:88:5c:48:93:9a:ba:02:e8:44:28:35:ec:af:43: 9e:50:f5:1f:c7:02:b1:cf:18:6b:2b:ca:f8:da:e9:36:f7:9e: b9:47:9f:c0:88:fd:64:12:af:c2:89:b2:bb:b7:72:a2:2d:13: 7f:08:56:84:c7:cf:1a:b8:f5:72:69:d2:aa:82:bf:8d:28:fe: 5c:de:1c:d4:05:b8:32:6a:ea:0d:a9:7d:5f:ce:81:dd:9c:96: c1:cd:a6:3c:7a:4b:fa:25:00:e1:d8:78:d4:d2:ef:df:12:e2: 1c:2a:2f:1d:ef:50:e9:cc:25:49:d8:bf:8e:8a:f7:8a:19:d5: 4b:f0:76:98:bb:08:97:38:a7:a3:09:cc:53:3d:9d:5c:4c:d5: e0:03:69:81:be:80:23:f2:4b:72:9c:c1:45:5f:84:6a:40:96: 36:42:24:41:92:bf:5b:de:46:53:71:fe:05:72:9a:90:28:51: 90:2e:73:88:fb:f1:91:36:e0:30:ad:e7:66:b1:94:46:f3:3c: 48:9c:58:e3:4e:a7:54:26:fe:68:53:12:fd:30:4c:53:57:8b: 91:d3:36:7f:0f:4f:ea:ab:6c:2c:e7:d2:d8:06:a3:0d:5c:54: 67:88:ec:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxQUExMTAvBgNVBAUTKEQ2NUFBMDk0QTUxRTI4Mzk3NTNCNTkyMTBCNkNGMkM1 NDkxNUMwMUUwHhcNMjQwNDMwMjE1OTQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxNjlkNS02ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFSO4zCUjSaDX282A3E5VgEqcixrIsqlWfSFGHvPus8vsITR3Zh7gnzSOeor et+xur0u3BOfeAKDZ1Cgakfjs2mxuErD8pmoNSxELWTzjoM8t9SyuouFAABil/2T UeEEePOZdjX3up4nY1n6l3yS6CMI7n3p/ltX9DvAzjYdCDJyIR36LLXrdhWV5pnA NEEarOONNeb8azXutz89rKzFMywVfVZxm3ZNr+Vc2lq4qTwxTs2wKdX4IbFEKwcF bV/HBX/Q6DjQMSgFNL5NXozyQRvgzTMpkG+cVdTDA4gpNnRtqwqtli/z8XixPhd/ M8IkAYHNy4iFtAHKoGgVD2aodwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB+5zurV aB317ukmN5zyo2L8bs0yMB8GA1UdIwQYMBaAFNZaoJSlHig5dTtZIQts8sVJFcAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFBQS82QzlEMjYzMDdG MjAxMUVBQjU3RDU3MzJDNEY5QUUwMi8xbHFnbEtVZUtEbDFPMWtoQzJ6eXhVa1Z3 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscWdsS1VlS0RsMU8xa2hDMnp5eFVrVndCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUMxQUEvNkM5RDI2MzA3RjIwMTFFQUI1N0Q1NzMyQzRGOUFFMDIvMjIwODUzMDQ3 RjIyMTFFQThFNzMwRjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnNOQwDQYJKoZIhvcNAQELBQADggEBAJxL+lPPEeGYzYBk i4Gov8Z/7Zhc5XqIXEiTmroC6EQoNeyvQ55Q9R/HArHPGGsryvja6Tb3nrlHn8CI /WQSr8KJsru3cqItE38IVoTHzxq49XJp0qqCv40o/lzeHNQFuDJq6g2pfV/Ogd2c lsHNpjx6S/olAOHYeNTS798S4hwqLx3vUOnMJUnYv46K94oZ1Uvwdpi7CJc4p6MJ zFM9nVxM1eADaYG+gCPyS3KcwUVfhGpAljZCJEGSv1veRlNx/gVympAoUZAuc4j7 8ZE24DCt52axlEbzPEicWONOp1Qm/mhTEv0wTFNXi5HTNn8PT+qrbCzn0tgGow1c VGeI7M8= -----END CERTIFICATE-----Generated at Mon May 20 22:11:05 2024 by rpki-client on console-ams.rpki-client.org