$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/1396434EC90A11EF8577744AC4F9AE02.roa File: 1396434EC90A11EF8577744AC4F9AE02.roa (raw, json) Hash identifier: vv5/sNroDyn31EV1FuwDRkKZ1Ky/CQIEoorZo83v9h8= Subject key identifier: 49:40:40:86:0D:6A:A5:86:D1:27:D9:6A:72:1F:11:3F:91:DD:5C:57 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 0FCF Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/1396434EC90A11EF8577744AC4F9AE02.roa Signing time: Thu 02 Jan 2025 13:04:19 +0000 ROA not before: Thu 02 Jan 2025 13:04:19 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9730 IP address blocks: 152.52.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4047 (0xfcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3 Validity Not Before: Jan 2 13:04:19 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67768ed2-3fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:cc:50:66:07:fb:6a:31:e0:d9:a1:13:e1: 8f:f6:76:cc:a3:ed:08:06:19:5f:42:0e:96:f0:2f: a9:61:ec:ac:a7:25:51:dd:c0:dc:4f:48:50:a0:5a: ad:a8:cf:19:a6:00:9c:07:14:36:93:ad:f0:09:a9: c4:8b:62:c7:18:25:1f:2f:d1:88:fa:37:22:de:f4: a7:c7:97:3d:67:f5:75:b1:56:c6:73:ac:8d:c7:e0: 1c:27:52:ea:3a:22:96:d1:e4:dc:1b:b8:94:82:1f: 20:e1:91:cc:dd:2b:a1:61:fa:2f:38:ab:ff:6a:72: 26:f7:a9:4a:32:c4:89:8f:4d:18:6e:8b:c0:65:9d: 08:1a:80:04:10:65:29:dd:f4:a4:93:83:46:65:ba: 3c:c7:4f:1f:af:53:85:2c:d7:48:c1:28:95:86:75: c5:e8:7d:20:2a:0f:44:ca:4d:c0:77:34:75:39:f4: cc:38:8b:e9:b9:da:cc:b7:e1:83:81:5a:f9:fa:73: d7:d2:46:99:45:8f:58:45:0e:26:75:a6:bc:d3:a1: 01:06:46:fd:ec:0d:a9:4b:2c:88:8b:74:8c:2c:bf: 52:ac:f1:5e:8f:f1:f6:eb:7c:e4:cc:30:e6:e2:10: b5:12:0a:de:33:b4:e0:8e:bd:ee:ca:07:9b:41:54: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:40:40:86:0D:6A:A5:86:D1:27:D9:6A:72:1F:11:3F:91:DD:5C:57 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/1396434EC90A11EF8577744AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.52.48.0/24 Signature Algorithm: sha256WithRSAEncryption 31:ae:bc:ea:d5:0e:72:21:e0:39:f0:a6:2b:ed:6f:07:47:0c: ce:b0:91:28:bc:ba:07:e7:81:30:77:7c:5c:14:b2:c0:3a:bd: 70:e9:1b:36:20:4a:86:da:bb:90:1a:99:17:66:7d:29:f2:38: 12:0a:8f:67:b9:bc:a5:d4:af:e7:3b:fa:70:82:91:12:5f:4e: ff:03:9f:1b:b8:30:bf:cf:ee:f6:08:96:51:5f:7a:a7:30:93: 82:69:b9:f8:6f:03:58:06:8e:a8:81:7b:5e:8b:d5:05:01:86: e5:45:2e:e8:83:b6:a6:a9:21:a5:ba:2e:35:b7:53:a2:a0:a5: 45:92:5d:8e:e5:b1:ce:cd:70:2c:e8:76:a1:1b:1f:81:f2:9d: 8a:fa:8f:d7:a3:10:d8:9b:f4:27:49:53:0f:13:de:52:2d:da: 19:05:fb:c8:91:46:bb:9a:a6:eb:c7:44:41:dd:e3:8b:3e:c7: 83:0e:10:80:9f:f3:e0:a7:04:a7:7b:67:06:76:ea:8e:ac:43: eb:f0:23:06:d5:32:ba:e1:a4:78:a7:ea:87:eb:cf:c7:10:99: e3:90:85:3a:62:e9:7e:d1:c2:79:9d:b2:66:e4:6d:5e:12:cd: 12:c3:e4:2b:7e:12:64:ee:96:50:a0:58:7e:61:6a:73:9c:0f: 4f:29:ec:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjUwMTAyMTMwNDE5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc2OGVkMi0zZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjfMUGYH+2ox4NmhE+GP9nbMo+0IBhlfQg6W8C+pYeyspyVR3cDcT0hQoFqt qM8ZpgCcBxQ2k63wCanEi2LHGCUfL9GI+jci3vSnx5c9Z/V1sVbGc6yNx+AcJ1Lq OiKW0eTcG7iUgh8g4ZHM3SuhYfovOKv/anIm96lKMsSJj00YbovAZZ0IGoAEEGUp 3fSkk4NGZbo8x08fr1OFLNdIwSiVhnXF6H0gKg9Eyk3AdzR1OfTMOIvpudrMt+GD gVr5+nPX0kaZRY9YRQ4mdaa806EBBkb97A2pSyyIi3SMLL9SrPFej/H263zkzDDm 4hC1EgreM7Tgjr3uygebQVSUfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFElAQIYN aqWG0SfZanIfET+R3VxXMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvMkE1OTQwRjI0QkIzMTFFOUFCMTUxQzE3QzRGOUFFMDIvMTM5NjQzNEVD OTBBMTFFRjg1Nzc3NDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACYNDAwDQYJKoZIhvcNAQELBQADggEBADGuvOrVDnIh4Dnw pivtbwdHDM6wkSi8ugfngTB3fFwUssA6vXDpGzYgSobau5AamRdmfSnyOBIKj2e5 vKXUr+c7+nCCkRJfTv8Dnxu4ML/P7vYIllFfeqcwk4JpufhvA1gGjqiBe16L1QUB huVFLuiDtqapIaW6LjW3U6KgpUWSXY7lsc7NcCzodqEbH4HynYr6j9ejENib9CdJ Uw8T3lIt2hkF+8iRRruapuvHREHd44s+x4MOEICf8+CnBKd7ZwZ26o6sQ+vwIwbV MrrhpHin6ofrz8cQmeOQhTpi6X7RwnmdsmbkbV4SzRLD5Ct+EmTullCgWH5hanOc D08p7OE= -----END CERTIFICATE-----Generated at Wed Feb 19 20:38:22 2025 by rpki-client