$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CD5190081B11ED8C0F9244C4F9AE02.roa File: 52CD5190081B11ED8C0F9244C4F9AE02.roa (raw, json) Hash identifier: 3BV3qm2r61BARPjiJ0L4adQ1HgDopAGoBy+ujHCX2Xg= Subject key identifier: 1F:C7:1C:AB:8D:FC:5E:46:32:F3:DF:29:62:B5:54:C5:6D:35:1E:94 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7260 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CD5190081B11ED8C0F9244C4F9AE02.roa Signing time: Fri 19 May 2023 07:12:08 +0000 ROA not before: Fri 19 May 2023 07:12:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135760 IP address blocks: 103.75.160.0/24 maxlen: 24 103.75.161.0/24 maxlen: 24 103.75.162.0/24 maxlen: 24 103.75.163.0/24 maxlen: 24 103.144.173.0/24 maxlen: 24 103.176.117.0/24 maxlen: 24 103.189.130.0/23 maxlen: 24 2001:df0:d040::/48 maxlen: 48 2404:9740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29280 (0x7260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 19 07:12:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64672148-1d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:4f:7a:c3:44:c7:38:48:34:c9:0a:e1:7a: 1b:e6:26:49:47:1a:67:03:a4:94:d4:29:80:64:5c: 89:6e:e6:12:9e:fd:b2:b6:aa:ee:cd:ea:a7:51:9d: ec:d2:7d:f7:49:21:df:3d:fe:a6:24:31:78:bf:ad: 6a:31:31:80:9c:af:ea:1e:46:76:c3:87:ca:1b:66: 64:66:c6:fd:18:1d:be:38:2f:f6:ca:62:34:9a:2a: 94:97:70:c9:f0:63:e6:a3:f5:ea:96:41:2f:9a:d1: 18:bd:96:43:df:23:51:e8:f2:7b:6d:fc:12:e4:8b: b4:ca:a8:99:e7:f9:71:af:4c:75:8b:36:da:ca:d8: d0:b3:d5:f9:28:a5:2b:9c:d5:7d:0f:c5:dc:26:e7: a5:9b:d7:06:70:90:23:6e:f0:85:fb:90:c1:11:d0: 04:2e:fb:f5:61:28:05:3e:a4:2a:0c:ff:e1:90:75: 4f:e7:0b:d5:48:e1:f6:59:11:cd:a5:c8:15:28:d2: 8a:b8:ef:3e:f3:36:36:b3:4b:09:f4:a9:c7:b4:14: 6d:91:41:17:46:04:e7:fa:4d:0c:8c:13:ff:6d:0e: 6b:92:77:89:6e:56:ca:ee:3b:c1:bc:ba:34:ca:f9: 0a:d1:77:20:2a:6d:cd:c2:c6:8b:7f:22:ec:d9:02: 4e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C7:1C:AB:8D:FC:5E:46:32:F3:DF:29:62:B5:54:C5:6D:35:1E:94 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CD5190081B11ED8C0F9244C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.160.0/22 103.144.173.0/24 103.176.117.0/24 103.189.130.0/23 IPv6: 2001:df0:d040::/48 2404:9740::/32 Signature Algorithm: sha256WithRSAEncryption 02:94:68:b2:6d:21:db:b3:7b:71:3a:c4:68:1f:72:aa:d7:e5: 3a:0e:ac:36:be:f8:eb:e4:11:1c:4f:8b:f3:f6:f1:65:02:83: 11:55:e6:36:f7:64:d6:72:d9:4e:0c:1b:f8:d4:06:46:57:d5: 7b:2b:46:de:cf:79:75:e1:3d:19:4c:a0:ec:9d:f1:86:52:47: e5:c7:47:0f:af:dc:f3:c8:9d:6f:8b:69:a1:a2:2b:25:6b:ad: 67:30:fd:70:46:59:bc:8a:d5:c0:59:ba:e5:59:e2:ef:90:22: 0e:e7:35:8f:d8:05:de:6f:bd:3a:da:80:f3:a0:58:70:63:1c: fa:95:d9:69:95:00:6a:e1:78:28:cd:01:2a:90:9b:ce:f4:cd: 85:66:90:f0:64:2e:e4:ea:e1:c8:ae:93:46:93:de:48:92:ce: 29:89:63:a0:5b:a7:f2:05:92:96:18:1f:61:6a:52:e5:1f:9c: c8:83:73:71:13:56:54:5d:ba:ea:16:58:8b:b8:3c:f0:1e:fa: 19:bd:48:c1:4d:26:8d:86:82:29:d5:0e:4f:11:26:f6:c0:ad: ab:c2:8b:9d:25:1b:f8:9a:07:78:16:a2:e0:8a:47:21:0e:68: 41:d6:21:8c:28:8c:67:f2:26:fc:5d:01:fa:04:21:93:6c:28: f8:c0:1b:6d -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICcmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTE5MDcxMjA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDY3MjE0OC0xZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7V5PesNExzhINMkK4Xob5iZJRxpnA6SU1CmAZFyJbuYSnv2ytqruzeqnUZ3s 0n33SSHfPf6mJDF4v61qMTGAnK/qHkZ2w4fKG2ZkZsb9GB2+OC/2ymI0miqUl3DJ 8GPmo/XqlkEvmtEYvZZD3yNR6PJ7bfwS5Iu0yqiZ5/lxr0x1izbaytjQs9X5KKUr nNV9D8XcJuelm9cGcJAjbvCF+5DBEdAELvv1YSgFPqQqDP/hkHVP5wvVSOH2WRHN pcgVKNKKuO8+8zY2s0sJ9KnHtBRtkUEXRgTn+k0MjBP/bQ5rkneJblbK7jvBvLo0 yvkK0XcgKm3NwsaLfyLs2QJOawIDAQABo4ICvzCCArswHQYDVR0OBBYEFB/HHKuN /F5GMvPfKWK1VMVtNR6UMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTJDRDUxOTAw ODFCMTFFRDhDMEY5MjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MB4EAgABMBgDBAJnS6ADBABnkK0DBABnsHUDBAFnvYIwFgQCAAIwEAMHACAB DfDQQAMFACQEl0AwDQYJKoZIhvcNAQELBQADggEBAAKUaLJtIduze3E6xGgfcqrX 5ToOrDa++OvkERxPi/P28WUCgxFV5jb3ZNZy2U4MG/jUBkZX1XsrRt7PeXXhPRlM oOyd8YZSR+XHRw+v3PPInW+LaaGiKyVrrWcw/XBGWbyK1cBZuuVZ4u+QIg7nNY/Y Bd5vvTragPOgWHBjHPqV2WmVAGrheCjNASqQm870zYVmkPBkLuTq4ciuk0aT3kiS zimJY6Bbp/IFkpYYH2FqUuUfnMiDc3ETVlRduuoWWIu4PPAe+hm9SMFNJo2GginV Dk8RJvbAravCi50lG/iaB3gWouCKRyEOaEHWIYwojGfyJvxdAfoEIZNsKPjAG20= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:21 2024 by rpki-client on console-fra.rpki-client.org