$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa File: 52F955A89B1511EA9BEFA53BC4F9AE02.roa (raw, json) Hash identifier: 60fnGy4ykHRuVHRoZuKhXt5OezRQAHVvIOTXa0kGLPQ= Subject key identifier: 16:67:58:B7:12:89:99:02:85:0B:31:69:99:5C:B6:CF:9E:68:DC:53 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 0838 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa Signing time: Mon 10 Jul 2023 20:57:27 +0000 ROA not before: Mon 10 Jul 2023 20:57:27 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 58627 IP address blocks: 43.242.236.0/22 maxlen: 22 43.242.236.0/24 maxlen: 24 43.242.237.0/24 maxlen: 24 43.242.238.0/24 maxlen: 24 43.242.239.0/24 maxlen: 24 103.1.32.0/22 maxlen: 22 103.1.32.0/24 maxlen: 24 103.1.33.0/24 maxlen: 24 103.1.34.0/24 maxlen: 24 103.1.35.0/24 maxlen: 24 103.9.244.0/22 maxlen: 22 103.9.244.0/24 maxlen: 24 103.9.245.0/24 maxlen: 24 103.9.246.0/24 maxlen: 24 103.9.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jul 10 20:57:27 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64ac70b7-d490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:68:ca:92:4e:9d:cd:bb:a7:46:7e:33:d0: 10:c1:34:6a:59:8f:f3:1a:03:75:24:21:39:b5:f4: 57:05:c4:fc:a9:93:ec:65:a8:03:54:d3:ef:a7:38: 60:57:c4:29:cf:80:aa:15:ab:9b:27:d8:d0:d9:71: 22:b0:97:18:d5:fb:3a:cd:0a:8d:0e:66:b8:ca:d1: 02:24:16:ca:c5:6d:3b:f6:2a:64:ec:2f:96:88:2b: 43:ed:a9:ee:11:44:0c:82:bf:4f:27:fb:28:cd:e5: e1:6a:46:de:88:1a:63:ae:f4:ed:dc:81:a2:06:20: 78:ea:12:3b:70:5c:d7:04:ab:6f:5b:dc:47:52:e3: 0c:1d:0e:a5:d6:54:64:79:a2:80:48:94:13:54:0d: e2:dd:6f:6c:1c:d5:bc:4e:24:82:82:29:7b:9e:b1: d9:48:bb:35:d4:3f:2c:9c:d1:1d:19:bc:33:10:26: 39:fe:f8:76:72:93:73:04:4d:98:cb:d1:a8:cc:e7: 49:30:ef:51:26:d4:13:04:2f:aa:44:8b:88:77:8e: 32:22:ae:07:58:d9:a6:ce:00:60:23:5a:c8:3b:40: be:40:a4:45:09:53:f6:11:ae:6a:60:86:f0:63:54: c1:d0:59:35:d0:1a:6b:0c:a3:b8:8c:a3:df:6d:96: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:67:58:B7:12:89:99:02:85:0B:31:69:99:5C:B6:CF:9E:68:DC:53 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.242.236.0/22 103.1.32.0/22 103.9.244.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:b1:e9:84:53:51:4e:7a:ab:51:4d:57:e0:30:e7:81:d5:89: 2e:46:1c:47:b0:46:dc:16:e0:bf:16:0e:8c:29:5e:e6:d3:01: 03:ab:cd:7b:e4:20:da:ad:57:05:f1:2f:07:2e:45:46:31:0f: b4:6e:84:5d:46:6e:e3:fd:8f:ba:6a:c7:1e:dc:1f:94:72:48: ef:72:db:63:6d:a1:57:b9:50:9c:b8:1e:22:03:af:73:ac:9e: 35:f7:ef:ae:b5:93:1a:23:f4:04:2b:0a:88:7c:39:fc:fc:9d: 0b:91:69:87:fa:a3:65:a0:fa:43:ef:72:fe:8e:e5:64:0f:66: da:e0:6f:d3:44:5f:14:0a:45:81:66:f7:41:a6:a2:e9:d2:a4: 69:eb:23:60:9e:29:02:b4:c0:a8:d0:c8:83:06:dd:db:80:fe: 31:5e:be:65:0b:dd:78:35:cd:dc:23:60:e8:35:7a:dc:3d:de: 56:a3:f2:22:6d:74:d0:49:56:f8:4b:97:1f:ff:88:9d:4c:37: 96:12:4f:33:b3:bf:18:52:67:92:27:2e:89:f5:fd:72:2e:15: 7b:fc:5b:25:cd:e1:72:f2:6a:bd:1e:f4:35:02:99:01:55:89: 57:27:05:fb:ab:aa:ef:62:e8:15:53:fb:eb:d6:81:2d:27:2a: 90:00:e9:3e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjMwNzEwMjA1NzI3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFjNzBiNy1kNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+RoypJOnc27p0Z+M9AQwTRqWY/zGgN1JCE5tfRXBcT8qZPsZagDVNPvpzhg V8Qpz4CqFaubJ9jQ2XEisJcY1fs6zQqNDma4ytECJBbKxW079ipk7C+WiCtD7anu EUQMgr9PJ/sozeXhakbeiBpjrvTt3IGiBiB46hI7cFzXBKtvW9xHUuMMHQ6l1lRk eaKASJQTVA3i3W9sHNW8TiSCgil7nrHZSLs11D8snNEdGbwzECY5/vh2cpNzBE2Y y9GozOdJMO9RJtQTBC+qRIuId44yIq4HWNmmzgBgI1rIO0C+QKRFCVP2Ea5qYIbw Y1TB0Fk10BprDKO4jKPfbZYEnQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBZnWLcS iZkChQsxaZlcts+eaNxTMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvNTJGOTU1QTg5 QjE1MTFFQTlCRUZBNTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr8uwDBAJnASADBAJnCfQwDQYJKoZIhvcNAQELBQADggEB AC2x6YRTUU56q1FNV+Aw54HViS5GHEewRtwW4L8WDowpXubTAQOrzXvkINqtVwXx LwcuRUYxD7RuhF1GbuP9j7pqxx7cH5RySO9y22NtoVe5UJy4HiIDr3OsnjX37661 kxoj9AQrCoh8Ofz8nQuRaYf6o2Wg+kPvcv6O5WQPZtrgb9NEXxQKRYFm90GmounS pGnrI2CeKQK0wKjQyIMG3duA/jFevmUL3Xg1zdwjYOg1etw93laj8iJtdNBJVvhL lx//iJ1MN5YSTzOzvxhSZ5InLon1/XIuFXv8WyXN4XLyar0e9DUCmQFViVcnBfur qu9i6BVT++vWgS0nKpAA6T4= -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org