$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa File: 52F955A89B1511EA9BEFA53BC4F9AE02.roa (raw, json) Hash identifier: 5fp5xPdrf28AzhElrO+JWN/gejEYqnFXoStD/HGk1zI= Subject key identifier: B2:2B:57:02:D4:5C:9A:C8:58:28:D4:E7:8E:F5:FF:54:2D:17:02:90 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 08F1 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa Signing time: Wed 26 Jun 2024 21:14:21 +0000 ROA not before: Wed 26 Jun 2024 21:14:21 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 58627 IP address blocks: 43.242.236.0/22 maxlen: 22 43.242.236.0/24 maxlen: 24 43.242.237.0/24 maxlen: 24 43.242.238.0/24 maxlen: 24 43.242.239.0/24 maxlen: 24 103.1.32.0/22 maxlen: 22 103.1.32.0/24 maxlen: 24 103.1.33.0/24 maxlen: 24 103.1.34.0/24 maxlen: 24 103.1.35.0/24 maxlen: 24 103.9.244.0/22 maxlen: 22 103.9.244.0/24 maxlen: 24 103.9.245.0/24 maxlen: 24 103.9.246.0/24 maxlen: 24 103.9.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jun 26 21:14:21 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667c84ad-f2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:fd:15:84:a2:7f:0b:07:8e:2e:fb:77:b5: 95:cd:b7:fa:2f:c4:0e:5f:e9:82:4e:41:ac:cd:79: 0f:eb:5c:45:3a:4f:ec:8b:fc:14:3f:dc:81:8c:fb: c7:a0:5f:a3:7f:52:d2:a0:9d:a4:0f:27:6b:1a:de: 0f:e9:fb:36:50:a7:bf:86:ef:0a:60:57:56:95:74: 64:15:73:53:e9:cd:25:5d:53:71:98:0b:73:17:8d: 38:ef:c3:07:6c:de:a7:d4:09:c8:06:b2:d9:e5:f2: 36:04:e9:dd:a4:b0:88:2e:3a:b8:e5:60:fc:e4:c2: 4e:09:e9:b4:cb:3a:e4:e3:73:2d:9c:c1:cd:88:ce: 75:11:32:27:27:e4:02:83:67:ef:7f:fe:7e:45:98: 9d:14:73:ee:74:49:ef:d5:2e:51:89:f6:c9:ac:0e: eb:c9:a8:9d:b6:98:e6:ea:0e:d8:5e:24:7f:b9:72: ae:1b:96:9c:31:73:50:bc:19:98:d0:60:cc:bc:ac: 3d:2b:af:79:61:3b:9d:db:a9:43:f1:52:18:96:da: 0d:e4:9a:f9:26:ce:43:92:6d:e2:e4:a8:55:05:34: 2a:88:6d:c6:66:d7:88:c5:d5:64:3f:61:fe:b6:6f: b7:04:2e:bb:77:e8:f4:8c:be:30:74:22:d7:25:6c: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2B:57:02:D4:5C:9A:C8:58:28:D4:E7:8E:F5:FF:54:2D:17:02:90 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.242.236.0/22 103.1.32.0/22 103.9.244.0/22 Signature Algorithm: sha256WithRSAEncryption 25:f9:8e:44:d5:e6:4a:6a:4d:09:2b:23:3c:d3:c6:77:4b:28: 01:db:d1:7b:be:6a:31:f4:3f:ca:3c:0c:2b:03:24:77:4c:9d: 79:39:c5:62:f6:05:e5:e4:65:01:9e:9d:51:27:22:ec:8b:6e: ee:18:07:3e:3e:6c:c6:94:97:d9:eb:a0:ee:3c:62:e9:3c:2d: ec:4f:74:33:00:cb:23:51:d4:9e:00:71:6e:d2:c7:4b:ba:b5: 22:e5:0d:24:7f:38:42:ce:07:b3:4f:49:56:9a:3e:72:8a:86: fb:ed:e8:4a:ae:d7:dd:6c:9c:25:85:28:64:7f:93:58:6b:96: 57:c5:2c:04:43:19:39:86:eb:d6:c9:af:9e:b3:dd:8e:e0:d6: 90:9b:92:31:70:90:89:a1:f3:dc:1d:59:af:59:6d:16:6e:ca: 15:c5:e8:db:d9:8d:0f:75:6c:08:e0:26:83:79:01:d7:1d:07: 6c:1b:dd:56:a7:31:07:e9:b2:d2:3e:3c:29:0a:cd:0c:43:e7: a8:2e:0d:44:4b:bd:ee:9e:48:5d:56:1e:eb:7b:17:22:13:d4: 08:6f:5a:5d:89:89:7c:43:f9:ea:2e:9f:66:66:f6:51:1f:0a: 52:4c:92:e4:ed:25:dd:56:73:10:41:27:63:bb:cb:67:7f:d9: 80:17:82:04 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjQwNjI2MjExNDIxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjODRhZC1mMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhb9FYSifwsHji77d7WVzbf6L8QOX+mCTkGszXkP61xFOk/si/wUP9yBjPvH oF+jf1LSoJ2kDydrGt4P6fs2UKe/hu8KYFdWlXRkFXNT6c0lXVNxmAtzF40478MH bN6n1AnIBrLZ5fI2BOndpLCILjq45WD85MJOCem0yzrk43MtnMHNiM51ETInJ+QC g2fvf/5+RZidFHPudEnv1S5RifbJrA7ryaidtpjm6g7YXiR/uXKuG5acMXNQvBmY 0GDMvKw9K695YTud26lD8VIYltoN5Jr5Js5Dkm3i5KhVBTQqiG3GZteIxdVkP2H+ tm+3BC67d+j0jL4wdCLXJWyK8wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLIrVwLU XJrIWCjU5471/1QtFwKQMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvNTJGOTU1QTg5 QjE1MTFFQTlCRUZBNTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr8uwDBAJnASADBAJnCfQwDQYJKoZIhvcNAQELBQADggEB ACX5jkTV5kpqTQkrIzzTxndLKAHb0Xu+ajH0P8o8DCsDJHdMnXk5xWL2BeXkZQGe nVEnIuyLbu4YBz4+bMaUl9nroO48Yuk8LexPdDMAyyNR1J4AcW7Sx0u6tSLlDSR/ OELOB7NPSVaaPnKKhvvt6Equ191snCWFKGR/k1hrllfFLARDGTmG69bJr56z3Y7g 1pCbkjFwkImh89wdWa9ZbRZuyhXF6NvZjQ91bAjgJoN5AdcdB2wb3VanMQfpstI+ PCkKzQxD56guDURLve6eSF1WHut7FyIT1AhvWl2JiXxD+eoun2Zm9lEfClJMkuTt Jd1WcxBBJ2O7y2d/2YAXggQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org