$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/33A8447E3D0111EA9B37B256C4F9AE02.roa File: 33A8447E3D0111EA9B37B256C4F9AE02.roa (raw, json) Hash identifier: dhmOvv7uMkUQoCzxXTfQXJHUTAQuNuYH/MTOVQ2M8Fw= Subject key identifier: D7:F3:E5:94:1E:5F:47:17:20:AA:D0:12:D8:84:A1:A5:14:ED:7A:86 Certificate issuer: /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D Certificate serial: 0A7F Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/33A8447E3D0111EA9B37B256C4F9AE02.roa Signing time: Thu 04 Jul 2024 19:58:10 +0000 ROA not before: Thu 04 Jul 2024 19:58:10 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139227 IP address blocks: 103.140.24.0/23 maxlen: 24 2404:f640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D Validity Not Before: Jul 4 19:58:10 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6686fed2-2d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:47:85:09:fe:88:07:46:fd:c2:e4:a7:63: ad:b4:6c:19:12:14:9e:7f:cc:61:ba:53:7c:58:0a: 59:8d:8c:77:d6:1a:a4:0a:af:60:72:d7:84:b0:48: ff:2e:da:86:3e:6d:ab:d7:10:91:a2:45:69:1b:f8: 14:e2:58:11:95:a0:b9:c0:4f:0e:09:e7:dd:82:f8: 3b:e2:51:50:ff:03:ca:5e:03:24:b6:d7:77:77:8b: ba:5c:70:50:21:4c:f3:d3:77:bf:bf:95:be:5b:4e: 17:4c:72:81:3e:d2:8d:32:4a:22:6f:f7:cc:93:e8: 74:8a:e0:a6:8a:28:fd:51:07:aa:0e:97:75:91:90: b1:cc:d5:7d:02:ae:60:e2:33:e5:64:e6:04:11:cf: 4d:ef:af:43:af:ae:94:d1:3f:81:44:2b:72:fc:d1: ec:c1:b5:5c:25:34:34:1f:a0:46:03:55:ae:cd:6d: f2:72:45:1a:3b:2a:b8:39:c8:a3:10:f3:61:82:bf: 9c:0d:90:c3:c3:c0:97:bc:08:4e:e4:fc:76:76:84: 5e:ed:da:4d:bd:90:e0:a8:09:5e:88:93:02:2f:17: 7e:39:f6:bb:f4:ea:5c:ef:3b:d1:bb:7c:62:5d:ee: 3c:34:a3:dd:fb:02:ad:7a:a4:f4:2c:38:a0:0d:ef: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:E5:94:1E:5F:47:17:20:AA:D0:12:D8:84:A1:A5:14:ED:7A:86 X509v3 Authority Key Identifier: keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/33A8447E3D0111EA9B37B256C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.24.0/23 IPv6: 2404:f640::/32 Signature Algorithm: sha256WithRSAEncryption a0:14:94:80:2e:fe:c1:a2:70:d9:51:75:89:c6:cf:73:cd:45: 5b:0f:9b:2d:ec:e6:ff:70:78:60:06:1f:f4:c8:f0:a6:4b:7f: 2b:03:76:83:ef:e3:4e:d7:1c:32:a2:dc:35:79:61:39:f5:70: 0c:3e:fb:8d:f2:52:dd:9c:8a:56:8d:ee:92:b4:b3:30:64:6f: db:0f:76:18:49:89:b0:09:6a:37:11:45:82:e5:89:ce:df:f4: b0:fa:e5:fd:61:22:86:af:59:5e:29:f7:7a:3d:72:69:5d:bf: 26:6f:ab:4d:47:2e:d2:ae:a3:89:75:e3:b0:e2:3f:2e:31:c5: 01:55:c8:55:ae:29:e3:ac:30:c9:db:59:f1:b3:86:b7:6f:36: b5:e5:f9:3f:18:8a:a6:98:8f:6a:48:46:6b:e8:5c:65:b9:92: 87:44:9b:cb:ca:ce:c0:e3:3e:a7:bf:50:45:3f:2d:5a:c3:a0: 6e:8c:b0:9c:41:28:ff:f5:44:b5:5e:93:85:0d:87:0c:c2:7b: 46:03:73:c9:99:a5:7e:37:ec:d4:17:42:63:96:f5:02:59:1f: fd:e9:45:7d:4e:61:3c:27:ea:0a:e9:36:7f:c8:97:48:05:61: f7:33:a9:06:a1:36:40:a2:2f:63:d7:8e:d9:3f:06:16:a8:22: 59:d3:8b:df -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFBNjAxMTAvBgNVBAUTKDJFODIzRDU5NDk2Q0ZBQzczNzhGQTgyQkY4NERERjY4 NEQ5MzJCOUQwHhcNMjQwNzA0MTk1ODEwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg2ZmVkMi0yZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HVHhQn+iAdG/cLkp2OttGwZEhSef8xhulN8WApZjYx31hqkCq9gcteEsEj/ LtqGPm2r1xCRokVpG/gU4lgRlaC5wE8OCefdgvg74lFQ/wPKXgMkttd3d4u6XHBQ IUzz03e/v5W+W04XTHKBPtKNMkoib/fMk+h0iuCmiij9UQeqDpd1kZCxzNV9Aq5g 4jPlZOYEEc9N769Dr66U0T+BRCty/NHswbVcJTQ0H6BGA1WuzW3yckUaOyq4Ocij EPNhgr+cDZDDw8CXvAhO5Px2doRe7dpNvZDgqAleiJMCLxd+Ofa79Opc7zvRu3xi Xe48NKPd+wKteqT0LDigDe8P/QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNfz5ZQe X0cXIKrQEtiEoaUU7XqGMB8GA1UdIwQYMBaAFC6CPVlJbPrHN4+oK/hN32hNkyud MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUE2MC84MDMxNEY4NjND RkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1zYzNqNmdyLUUzZmFFMlRL NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvSTlXVWxzLXNjM2o2Z3ItRTNmYUUyVEs1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTFBNjAvODAzMTRGODYzQ0ZGMTFFQTgyMTA4MjUzQzRGOUFFMDIvMzNBODQ0N0Uz RDAxMTFFQTlCMzdCMjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnjBgwDQQCAAIwBwMFACQE9kAwDQYJKoZIhvcNAQELBQAD ggEBAKAUlIAu/sGicNlRdYnGz3PNRVsPmy3s5v9weGAGH/TI8KZLfysDdoPv407X HDKi3DV5YTn1cAw++43yUt2cilaN7pK0szBkb9sPdhhJibAJajcRRYLlic7f9LD6 5f1hIoavWV4p93o9cmldvyZvq01HLtKuo4l147DiPy4xxQFVyFWuKeOsMMnbWfGz hrdvNrXl+T8YiqaYj2pIRmvoXGW5kodEm8vKzsDjPqe/UEU/LVrDoG6MsJxBKP/1 RLVek4UNhwzCe0YDc8mZpX437NQXQmOW9QJZH/3pRX1OYTwn6grpNn/Il0gFYfcz qQahNkCiL2PXjtk/BhaoIlnTi98= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org