$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa File: A033FFB4F7F511ECADEAB528C4F9AE02.roa (raw, json) Hash identifier: AUauGFsDFbTkxG/ElUZSjeF53FqLNbIQuI1Fh9dzIQE= Subject key identifier: 3E:41:22:1E:85:F2:1C:FC:AA:46:06:96:DC:69:99:12:EF:90:1A:14 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 020C Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa Signing time: Mon 03 Jun 2024 05:21:34 +0000 ROA not before: Mon 03 Jun 2024 05:21:34 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149820 IP address blocks: 103.187.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Jun 3 05:21:34 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665d52de-62f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:4a:51:28:09:76:43:b2:d7:7f:b1:cf:6c: 96:99:1d:03:4c:4a:f6:7d:7a:42:a4:d8:67:4f:56: c3:40:1a:00:24:8d:59:88:fc:31:db:d5:e1:2f:73: 7e:2d:5b:3b:19:df:9e:9d:c9:8a:0b:b4:0b:84:e4: 37:66:e6:21:64:31:49:14:49:38:19:8f:85:5f:0f: 77:c7:73:ec:8e:54:ae:75:48:38:11:f3:3f:d9:4a: e2:06:f3:a6:fb:9c:1b:17:ce:a6:67:a2:02:cc:ba: 78:ca:73:da:d8:77:e9:f8:9b:58:d9:9f:0c:57:98: 91:21:6a:89:79:84:49:99:6e:73:91:36:10:94:ea: e7:ad:b1:f4:38:29:bb:93:16:32:c5:2d:31:28:86: df:71:49:89:ff:be:d4:01:b9:42:5a:26:1b:03:ad: 80:5c:1a:41:16:5e:5e:05:3f:e5:6a:df:ab:78:c8: cf:30:29:61:09:cf:16:88:16:50:2d:94:c2:36:ee: 08:3d:ab:49:6a:b9:cc:34:1a:98:72:c1:da:b8:38: 95:af:ce:dd:09:31:00:67:fc:6b:ca:55:3c:aa:ff: 7f:15:1d:c3:1e:ab:b4:82:a8:63:c5:9f:11:19:aa: f6:0c:00:bb:fa:66:66:f6:c8:da:6e:48:b6:7b:d6: 00:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:41:22:1E:85:F2:1C:FC:AA:46:06:96:DC:69:99:12:EF:90:1A:14 X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.32.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:b8:c2:3f:ec:82:35:d2:c5:cd:9f:b9:a1:1a:3d:33:f9:91: ee:ca:f1:87:47:ea:f3:bd:1e:d6:94:39:46:2c:c8:03:13:3a: ad:87:66:3e:06:e5:9a:61:fb:6b:fd:30:10:41:a9:75:0b:44: b5:64:be:10:c3:fa:c4:bd:8b:56:0d:55:0c:c0:42:2e:f1:57: 7c:77:4e:d9:1c:5a:6a:f7:b8:fe:29:fc:e7:c7:fd:ba:23:e5: 0d:76:4f:a1:09:e7:a1:5e:a9:a4:cc:16:31:f6:d9:96:ee:4f: 93:2a:dd:0e:35:5e:4f:70:91:88:a5:c7:74:bc:0a:34:28:0d: a4:1e:f7:dd:fe:2f:eb:c2:75:1f:35:1b:4e:82:27:64:cb:78: 8e:d9:2f:6d:44:73:d6:7f:35:00:58:15:2d:e0:ec:2c:7e:17: fd:f1:23:64:4d:c2:89:89:45:1c:12:e0:ab:bf:62:c5:81:d2: 5d:9c:f6:55:69:28:81:66:7a:26:8d:ca:fa:e8:95:04:2b:1c: a2:15:99:2a:5f:0f:7f:7a:36:1d:fd:82:d4:fa:a0:ac:88:db: 39:cd:92:ff:fc:ab:a6:7d:a7:10:a7:78:bc:84:a3:b3:92:02: 2b:1d:0e:8a:f5:b3:67:3e:fd:22:31:09:a7:3e:0e:9e:81:4b: 42:98:6e:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjQwNjAzMDUyMTM0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVkNTJkZS02MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/dKUSgJdkOy13+xz2yWmR0DTEr2fXpCpNhnT1bDQBoAJI1ZiPwx29XhL3N+ LVs7Gd+encmKC7QLhOQ3ZuYhZDFJFEk4GY+FXw93x3PsjlSudUg4EfM/2UriBvOm +5wbF86mZ6ICzLp4ynPa2Hfp+JtY2Z8MV5iRIWqJeYRJmW5zkTYQlOrnrbH0OCm7 kxYyxS0xKIbfcUmJ/77UAblCWiYbA62AXBpBFl5eBT/lat+reMjPMClhCc8WiBZQ LZTCNu4IPatJarnMNBqYcsHauDiVr87dCTEAZ/xrylU8qv9/FR3DHqu0gqhjxZ8R Gar2DAC7+mZm9sjabki2e9YAqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD5BIh6F 8hz8qkYGltxpmRLvkBoUMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNFMjEvQ0U0OEU3QzhGMTlFMTFFQ0E5RUU5QjNEQzRGOUFFMDIvQTAzM0ZGQjRG N0Y1MTFFQ0FERUFCNTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuyAwDQYJKoZIhvcNAQELBQADggEBAHy4wj/sgjXSxc2f uaEaPTP5ke7K8YdH6vO9HtaUOUYsyAMTOq2HZj4G5Zph+2v9MBBBqXULRLVkvhDD +sS9i1YNVQzAQi7xV3x3TtkcWmr3uP4p/OfH/boj5Q12T6EJ56FeqaTMFjH22Zbu T5Mq3Q41Xk9wkYilx3S8CjQoDaQe993+L+vCdR81G06CJ2TLeI7ZL21Ec9Z/NQBY FS3g7Cx+F/3xI2RNwomJRRwS4Ku/YsWB0l2c9lVpKIFmeiaNyvrolQQrHKIVmSpf D396Nh39gtT6oKyI2znNkv/8q6Z9pxCneLyEo7OSAisdDor1s2c+/SIxCac+Dp6B S0KYbo0= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org