$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa File: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (raw, json) Hash identifier: WJmU3zKS7DC5uhWTazUvcz+uUKMvCoTZtIvTzFzwxGo= Subject key identifier: DF:86:E5:2D:4B:A9:E8:A5:9E:9A:25:29:9F:A3:88:B4:92:5B:C3:BE Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Certificate serial: 69 Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa Signing time: Tue 12 Dec 2023 08:15:10 +0000 ROA not before: Tue 12 Dec 2023 08:15:10 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 142631 IP address blocks: 103.208.66.0/24 maxlen: 24 103.229.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Validity Not Before: Dec 12 08:15:10 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6578168e-34eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:d4:78:89:6f:94:45:00:e7:a5:20:99:4f: fd:b4:96:14:16:67:3c:82:ed:8d:eb:b6:ad:ae:06: a8:81:cd:02:ee:11:ba:1e:df:4a:69:f2:c5:5f:ef: f9:e4:45:03:ad:a5:1c:f4:3d:ed:e3:9e:c3:81:29: cd:f0:3e:0f:e1:e4:1b:3a:0d:7f:5c:41:45:80:4b: d0:07:27:c4:71:3b:e1:a8:4f:8e:d6:b3:3b:68:5e: 70:e2:6b:c4:66:2b:1f:bd:63:03:4e:07:e1:b0:7c: 2c:56:ee:74:9e:f2:bd:ae:42:07:31:fd:f0:63:17: 24:d1:22:3e:86:0f:43:ae:90:5c:46:fc:e6:28:8d: 0d:da:be:40:0a:46:74:f1:a6:32:18:3d:fb:7b:cc: 97:eb:e4:c5:40:c9:6d:7b:4d:eb:d3:8c:36:db:c3: 8a:d8:5c:16:e3:18:33:13:39:06:1b:8c:ee:58:19: 5a:f3:41:67:f9:9a:7b:93:4b:c6:ee:25:53:a6:09: ba:31:cd:ed:1d:24:39:81:a6:39:3f:93:ab:34:6f: 1a:14:7e:1f:4b:ac:6d:73:df:ac:7f:b5:e6:91:93: 6d:1a:c2:66:0e:97:6a:94:f3:f9:e9:bf:f6:81:19: 28:f0:d2:3a:90:ae:7a:27:9b:0c:81:ea:79:6c:fe: 9e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:86:E5:2D:4B:A9:E8:A5:9E:9A:25:29:9F:A3:88:B4:92:5B:C3:BE X509v3 Authority Key Identifier: keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.66.0/24 103.229.232.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ee:45:81:73:04:23:be:7a:8d:a3:74:8a:bb:e7:ec:14:12: db:98:e8:f2:d5:0f:c9:7d:93:5f:26:38:65:ca:84:20:b3:a2: 9d:3f:dc:37:84:40:c5:80:0d:b8:65:8e:8f:4d:17:49:98:02: 5a:82:98:89:31:58:48:a5:3b:8e:68:1b:6b:24:e8:20:da:b7: 8a:5e:e7:b9:39:ba:a1:72:86:e0:8e:1f:82:6a:99:c0:13:d9: 8a:67:4a:c5:06:89:fe:79:26:53:66:3c:7c:1f:aa:f1:8f:91: d7:d3:39:03:09:ab:1c:5a:6e:67:23:81:27:c9:87:e8:70:4a: 22:85:fe:8b:b8:af:00:8b:fd:f9:fa:8b:74:d9:b7:99:d8:cb: 61:cb:43:01:92:b0:49:82:3a:09:ac:72:48:d7:49:f3:65:da: 5d:86:c7:78:36:0f:56:37:12:75:be:b2:fc:cd:f6:9a:52:d6: 18:55:ea:6e:1e:72:a6:64:23:27:be:80:9d:db:89:e1:d8:3b: b3:48:19:00:46:f7:16:27:a7:d5:e7:3d:45:6e:a7:3f:43:c7: 6d:88:62:0f:71:b6:bc:a8:af:f4:b4:7b:6b:1e:73:47:35:ed: 6e:a7:c2:99:f6:17:bc:04:02:b4:0c:79:e8:ac:4f:7b:a6:18: d0:e9:88:d4 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0I2MjExMC8GA1UEBRMoRDNBRTYyNjQ0OUMzQTlERDBFNzc5OEJDRThCQ0JCMzk2 NjJBMjdGRjAeFw0yMzEyMTIwODE1MTBaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NzgxNjhlLTM0ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9u9R4iW+URQDnpSCZT/20lhQWZzyC7Y3rtq2uBqiBzQLuEboe30pp8sVf7/nk RQOtpRz0Pe3jnsOBKc3wPg/h5Bs6DX9cQUWAS9AHJ8RxO+GoT47WsztoXnDia8Rm Kx+9YwNOB+GwfCxW7nSe8r2uQgcx/fBjFyTRIj6GD0OukFxG/OYojQ3avkAKRnTx pjIYPft7zJfr5MVAyW17TevTjDbbw4rYXBbjGDMTOQYbjO5YGVrzQWf5mnuTS8bu JVOmCboxze0dJDmBpjk/k6s0bxoUfh9LrG1z36x/teaRk20awmYOl2qU8/npv/aB GSjw0jqQrnonmwyB6nls/p5DAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU34blLUup 6KWemiUpn6OItJJbw74wHwYDVR0jBBgwFoAU065iZEnDqd0Od5i86Ly7OWYqJ/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzQjYyLzRFOUI3NkQyRkJE MjExRURBMDg2NDM0NUM0RjlBRTAyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpf OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDY1aVpFbkRxZDBPZDVpODZMeTdPV1lxSl84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi81MkNBNUZBNEZC REExMUVEQkM1QzJCNTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGfQQgMEAGfl6DANBgkqhkiG9w0BAQsFAAOCAQEAfu5FgXME I756jaN0irvn7BQS25jo8tUPyX2TXyY4ZcqEILOinT/cN4RAxYANuGWOj00XSZgC WoKYiTFYSKU7jmgbayToINq3il7nuTm6oXKG4I4fgmqZwBPZimdKxQaJ/nkmU2Y8 fB+q8Y+R19M5AwmrHFpuZyOBJ8mH6HBKIoX+i7ivAIv9+fqLdNm3mdjLYctDAZKw SYI6CaxySNdJ82XaXYbHeDYPVjcSdb6y/M32mlLWGFXqbh5ypmQjJ76AnduJ4dg7 s0gZAEb3Fien1ec9RW6nP0PHbYhiD3G2vKiv9LR7ax5zRzXtbqfCmfYXvAQCtAx5 6KxPe6YY0OmI1A== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:32 2024 by rpki-client on console-fra.rpki-client.org