$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa File: 33A48584C92911EDAE3AB84EC4F9AE02.roa (raw, json) Hash identifier: eaj1x+LHWE1tayPFLAKmkFEzxsjJ2bVZZVDGPQjbtdM= Subject key identifier: 6A:02:51:9A:1A:6E:3A:AF:F7:87:F3:95:22:B4:74:3C:82:7A:59:22 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 4C Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa Signing time: Tue 15 Aug 2023 05:04:51 +0000 ROA not before: Tue 15 Aug 2023 05:04:51 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 8075 IP address blocks: 202.14.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Aug 15 05:04:51 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64db0773-eaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:7e:b4:d7:c3:b4:f1:0a:f6:27:f9:a9:0d: c8:b1:41:81:1c:18:55:5c:c9:4c:fa:1a:47:f1:33: f4:ce:78:72:76:16:e7:d2:46:ca:68:f1:40:95:b1: f8:77:a9:90:dd:0b:96:b4:fc:8f:2e:da:00:60:9c: 1a:a0:7e:f3:6d:55:22:ba:21:37:7a:07:e7:ba:19: 05:a6:dc:00:aa:5e:e8:e5:a2:aa:0f:54:39:f3:e6: b3:28:f3:ad:4c:ca:04:58:dd:16:d0:60:6e:4c:35: e1:b8:c5:3b:b2:ef:15:66:0e:a2:97:df:88:7a:f0: 43:9d:50:e4:22:39:34:7b:4b:02:b6:b2:d1:72:dd: 29:57:58:95:ce:ed:2f:d8:2f:d8:58:26:72:e4:eb: 92:eb:fe:1d:91:04:e9:8a:b8:c5:4b:40:7a:00:8c: b6:6e:c0:be:bd:8b:da:84:c5:78:55:ec:69:13:c2: 63:4a:7b:80:8f:24:94:8d:21:7c:5d:88:d8:8f:a3: b8:54:1a:c4:ac:14:c4:c3:88:b1:d0:59:8f:df:42: 9c:a8:87:2a:a0:13:23:78:b6:ae:b6:df:c6:16:15: 0c:58:3c:63:17:ee:98:b4:9b:d1:c8:7e:5b:fc:e0: b5:cd:ca:f4:fc:d4:58:bf:48:f9:f7:46:3d:8e:93: 99:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:02:51:9A:1A:6E:3A:AF:F7:87:F3:95:22:B4:74:3C:82:7A:59:22 X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.14.244.0/24 Signature Algorithm: sha256WithRSAEncryption 89:02:53:16:f3:00:0d:85:65:b7:08:0e:cf:90:80:97:20:2a: a2:f9:1e:02:2b:e6:28:ec:c4:3a:2c:fc:ca:a0:bf:ff:aa:9a: 06:07:31:c6:81:f8:4b:d0:8a:79:86:87:0a:28:5f:7c:ab:95: b3:a8:a6:f6:cc:a3:24:5d:6e:5d:9e:87:37:5c:60:7d:ab:a4: 23:06:bc:9a:54:fa:39:93:3a:a6:9e:0f:1b:1a:26:24:2e:ad: 1a:47:e5:10:69:35:39:65:af:5d:78:bf:10:0b:84:4e:bf:12: 4e:d9:e2:21:da:50:e4:38:16:7c:c7:b0:d7:97:d6:f0:e5:e3: ec:8c:29:0a:cf:76:d6:26:92:be:d3:91:78:f3:25:3c:6d:9f: de:cf:ad:00:dc:08:af:15:fe:41:75:b4:98:cd:d6:a7:00:9e: 31:7c:6b:2b:df:b3:0b:b4:20:50:cf:c8:ac:84:2c:a8:76:d0: e5:14:f9:77:8f:75:78:05:9a:a5:40:7a:68:dc:0b:65:0e:12: d1:cb:8b:4f:73:3c:b0:8a:c3:37:67:52:59:fc:e4:a5:f3:5a: a5:cc:41:43:b2:42:72:4f:25:ce:3f:22:09:67:22:b9:4f:b6: e5:21:a9:15:98:32:d0:16:32:c0:63:16:76:22:5d:3b:a9:d8: b7:4b:f6:4c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDkwMjExMC8GA1UEBRMoQTY3NEM2NzAxRTJCMENFM0QxMDdFOUYyMzZDNTVDRUZF Njg3NjhGMTAeFw0yMzA4MTUwNTA0NTFaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZGIwNzczLWVhYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQEH6018O08Qr2J/mpDcixQYEcGFVcyUz6GkfxM/TOeHJ2FufSRspo8UCVsfh3 qZDdC5a0/I8u2gBgnBqgfvNtVSK6ITd6B+e6GQWm3ACqXujloqoPVDnz5rMo861M ygRY3RbQYG5MNeG4xTuy7xVmDqKX34h68EOdUOQiOTR7SwK2stFy3SlXWJXO7S/Y L9hYJnLk65Lr/h2RBOmKuMVLQHoAjLZuwL69i9qExXhV7GkTwmNKe4CPJJSNIXxd iNiPo7hUGsSsFMTDiLHQWY/fQpyohyqgEyN4tq6238YWFQxYPGMX7pi0m9HIflv8 4LXNyvT81Fi/SPn3Rj2Ok5mFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUagJRmhpu Oq/3h/OVIrR0PIJ6WSIwHwYDVR0jBBgwFoAUpnTGcB4rDOPRB+nyNsVc7+aHaPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREOTAyLzU3MEIzRjhFQzky NjExRURBRjJCOUQ0REM0RjlBRTAyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcG5UR2NCNHJET1BSQi1ueU5zVmM3LWFIYVBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi8zM0E0ODU4NEM5 MjkxMUVEQUUzQUI4NEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMoO9DANBgkqhkiG9w0BAQsFAAOCAQEAiQJTFvMADYVltwgO z5CAlyAqovkeAivmKOzEOiz8yqC//6qaBgcxxoH4S9CKeYaHCihffKuVs6im9syj JF1uXZ6HN1xgfaukIwa8mlT6OZM6pp4PGxomJC6tGkflEGk1OWWvXXi/EAuETr8S TtniIdpQ5DgWfMew15fW8OXj7IwpCs921iaSvtORePMlPG2f3s+tANwIrxX+QXW0 mM3WpwCeMXxrK9+zC7QgUM/IrIQsqHbQ5RT5d491eAWapUB6aNwLZQ4S0cuLT3M8 sIrDN2dSWfzkpfNapcxBQ7JCck8lzj8iCWciuU+25SGpFZgy0BYywGMWdiJdO6nY t0v2TA== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:38 2024 by rpki-client on console-fra.rpki-client.org