$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/52EFDBAE687D11ECBF82F558C4F9AE02.roa File: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (raw, json) Hash identifier: 0XxbYg4uCstUJEFDhott+JBOEPQI7s80e0CHwryGQr0= Subject key identifier: A6:01:45:36:48:A6:86:D0:24:88:51:D8:72:11:65:85:1E:3D:AE:D4 Certificate issuer: /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B Certificate serial: 0641 Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/52EFDBAE687D11ECBF82F558C4F9AE02.roa Signing time: Thu 22 Feb 2024 23:31:56 +0000 ROA not before: Thu 22 Feb 2024 23:31:56 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137000 IP address blocks: 103.159.192.0/24 maxlen: 24 103.159.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 23:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B Validity Not Before: Feb 22 23:31:56 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65d7d96c-ed3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:9e:78:98:fc:91:5a:c0:07:a8:01:0d:0a: d0:0e:30:f0:08:ac:1f:5c:a8:ec:32:96:83:98:38: df:31:d1:4d:17:e1:12:4d:08:52:9d:5d:02:ac:ca: 0e:30:fb:da:e0:7f:39:ba:b2:b5:4f:58:dd:ee:be: 48:63:6b:8c:2a:95:ee:f5:8c:15:16:a6:f0:16:ee: 2a:cd:89:ad:6f:86:54:94:2c:0c:b5:42:08:79:f1: 74:8a:b3:b0:c6:a2:2a:db:39:97:89:a5:8a:be:7f: be:04:dc:48:dd:62:53:6a:e9:16:5e:2c:c8:c7:5b: 5a:cf:2b:a0:1a:53:f4:a7:19:88:4e:0b:83:c6:57: 12:78:3f:f3:9e:f7:06:6d:14:02:f0:98:cd:e7:37: d4:8a:7c:45:1a:78:63:2e:6b:55:26:93:64:90:8c: ce:4f:6f:d1:1f:73:b7:02:a0:df:f0:94:5c:9f:32: f7:23:93:19:50:40:c7:f3:1d:a3:3f:11:4f:83:de: a7:9e:54:47:26:79:58:9e:71:73:19:29:db:87:54: 6c:1a:3e:23:69:5e:cb:76:8c:dc:e0:2e:54:15:e8: fd:0b:e3:68:69:6d:46:a6:f0:86:3e:27:e3:c6:55: 0a:9f:95:dc:47:15:c0:b7:45:ba:44:d5:11:23:a5: fc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:01:45:36:48:A6:86:D0:24:88:51:D8:72:11:65:85:1E:3D:AE:D4 X509v3 Authority Key Identifier: keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/52EFDBAE687D11ECBF82F558C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.192.0/23 Signature Algorithm: sha256WithRSAEncryption b9:f7:0e:f7:af:20:1c:1e:a9:7a:3e:53:d3:a9:65:82:c5:89: f9:0f:8f:7c:0c:71:ff:08:93:e4:4b:cc:ce:1e:ac:df:5b:ef: 0e:fa:8f:b5:03:08:82:06:24:9a:5e:fd:5b:23:40:23:51:1c: ac:ff:59:08:17:77:fd:e7:b0:d1:0a:46:3c:5c:64:90:c7:59: 3c:45:84:e0:1d:6f:41:5c:fb:b4:12:d4:ce:af:53:35:3a:74: e0:b6:05:98:d5:e6:8e:1e:43:1b:d4:37:84:47:e3:e4:73:c3: c0:7e:c9:10:8d:db:12:75:86:53:10:3c:f3:17:67:b3:a7:0d: dd:60:b0:47:cb:04:57:ee:91:e6:37:8a:ae:b9:2c:c4:ec:92: 3c:94:98:9a:66:8f:d3:c5:4d:c9:a1:f6:ec:49:47:82:17:44: df:9c:78:0e:9f:3e:b5:61:5e:8b:b5:16:44:49:b7:7f:7f:2d: 0f:74:44:97:12:20:6a:63:5a:cf:42:b5:fe:be:6d:99:5e:69: e3:62:d4:0f:d0:00:60:e2:93:3c:05:54:65:12:d5:85:95:90: 6c:69:f3:7e:3c:2f:b1:e5:cd:31:d1:10:6a:48:18:5f:3c:05: d2:26:90:42:6b:b0:96:e5:28:c5:4f:02:c1:cc:54:81:39:f4: 07:41:8b:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3MjYxMTAvBgNVBAUTKDREODQ3NTIzRTVCREQ5RTNCODk2OTgyOEEwNEJGRURB MkIwQzAzMUIwHhcNMjQwMjIyMjMzMTU2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3ZDk2Yy1lZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3CeeJj8kVrAB6gBDQrQDjDwCKwfXKjsMpaDmDjfMdFNF+ESTQhSnV0CrMoO MPva4H85urK1T1jd7r5IY2uMKpXu9YwVFqbwFu4qzYmtb4ZUlCwMtUIIefF0irOw xqIq2zmXiaWKvn++BNxI3WJTaukWXizIx1tazyugGlP0pxmITguDxlcSeD/znvcG bRQC8JjN5zfUinxFGnhjLmtVJpNkkIzOT2/RH3O3AqDf8JRcnzL3I5MZUEDH8x2j PxFPg96nnlRHJnlYnnFzGSnbh1RsGj4jaV7Ldozc4C5UFej9C+NoaW1GpvCGPifj xlUKn5XcRxXAt0W6RNURI6X8EQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKYBRTZI pobQJIhR2HIRZYUePa7UMB8GA1UdIwQYMBaAFE2EdSPlvdnjuJaYKKBL/torDAMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzcyNi85QzRGNTMwQTM4 QUYxMUVCODkxM0RFNDFDNEY5QUUwMi9UWVIxSS1XOTJlTzRscGdvb0V2LTJpc01B eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RZUjFJLVc5MmVPNGxwZ29vRXYtMmlzTUF4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUM3MjYvOUM0RjUzMEEzOEFGMTFFQjg5MTNERTQxQzRGOUFFMDIvNTJFRkRCQUU2 ODdEMTFFQ0JGODJGNTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnn8AwDQYJKoZIhvcNAQELBQADggEBALn3DvevIBweqXo+ U9OpZYLFifkPj3wMcf8Ik+RLzM4erN9b7w76j7UDCIIGJJpe/VsjQCNRHKz/WQgX d/3nsNEKRjxcZJDHWTxFhOAdb0Fc+7QS1M6vUzU6dOC2BZjV5o4eQxvUN4RH4+Rz w8B+yRCN2xJ1hlMQPPMXZ7OnDd1gsEfLBFfukeY3iq65LMTskjyUmJpmj9PFTcmh 9uxJR4IXRN+ceA6fPrVhXou1FkRJt39/LQ90RJcSIGpjWs9Ctf6+bZleaeNi1A/Q AGDikzwFVGUS1YWVkGxp8348L7HlzTHREGpIGF88BdImkEJrsJblKMVPAsHMVIE5 9AdBix0= -----END CERTIFICATE-----Generated at Fri May 17 00:19:44 2024 by rpki-client on console-ams.rpki-client.org