$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/3833FD20D09711E987F73A60C4F9AE02.roa File: 3833FD20D09711E987F73A60C4F9AE02.roa (raw, json) Hash identifier: IUQ+m8jWqnf3vf6hcCuC0VogjthEOWb1ceqBAZq2VPM= Subject key identifier: A1:48:13:26:C8:92:9C:42:57:8C:C3:36:D5:BE:2D:1D:D2:12:4D:28 Certificate issuer: /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Certificate serial: 0CF2 Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/3833FD20D09711E987F73A60C4F9AE02.roa Signing time: Wed 06 Nov 2024 18:26:02 +0000 ROA not before: Wed 06 Nov 2024 18:26:02 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 133142 IP address blocks: 103.101.215.0/24 maxlen: 24 2001:df6:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Validity Not Before: Nov 6 18:26:02 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bb4ba-0dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:ab:ee:19:b3:73:05:72:8e:63:68:6f:f5: 66:c4:55:48:ff:77:af:39:83:87:5e:4f:71:71:05: 6b:72:17:3f:e8:a3:36:a0:4f:f3:3d:12:d9:36:74: 8f:9f:a3:02:42:a6:e4:81:cb:cf:e0:3d:b3:6e:99: 9f:1d:7c:d0:4e:67:b4:1e:fc:71:9d:54:fb:73:a5: 81:21:63:f4:23:12:9b:47:68:b5:c8:b0:88:82:ab: 32:f8:40:c9:30:fa:6d:9b:fa:7b:3e:42:f2:4b:2c: 77:93:02:60:7b:8d:6f:63:99:c2:a7:ac:92:9c:ac: 1f:a8:7d:29:4a:eb:ab:85:e1:9c:48:2a:d2:23:6c: 9d:a5:b6:6c:99:ac:1f:e2:e7:04:7a:0b:2e:50:33: db:d9:ac:41:fe:57:48:23:36:cd:3f:50:6a:4d:11: 99:80:fd:81:88:ce:9b:81:67:db:2d:77:30:97:ce: 6b:75:5e:b4:ea:3b:7d:0c:e4:4f:a7:c3:33:90:82: c7:92:27:da:fe:6f:67:de:73:33:56:c4:23:01:14: ae:50:96:76:9e:a9:5c:ca:25:56:df:6e:5e:66:7b: dc:9c:49:09:fc:ea:fd:2b:d9:91:90:f6:27:f6:f0: c1:0e:83:4d:50:9e:6d:e3:e3:73:94:62:a2:0c:b7: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:48:13:26:C8:92:9C:42:57:8C:C3:36:D5:BE:2D:1D:D2:12:4D:28 X509v3 Authority Key Identifier: keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/3833FD20D09711E987F73A60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.215.0/24 IPv6: 2001:df6:f000::/48 Signature Algorithm: sha256WithRSAEncryption 1c:67:b9:52:71:2b:26:52:23:a5:99:02:70:97:ed:9f:23:c1: aa:81:18:20:54:55:7d:a7:11:3d:79:9e:6d:56:c9:25:51:95: 38:70:94:37:c2:db:26:58:31:7b:c4:3a:02:11:c2:3c:03:09: 39:b6:26:43:e9:70:a9:bc:6f:a5:fb:71:a8:fb:cc:3d:d8:cf: 20:79:59:c4:81:3b:d6:fb:46:7b:d1:8e:bd:e2:21:94:1c:9c: 7e:db:4b:25:a5:b9:95:68:3b:ef:e1:fa:16:30:c1:6b:7e:c4: 53:47:74:95:7e:b9:e5:0f:34:32:40:7c:01:f3:e7:01:c8:30: 11:1a:4c:85:68:74:e1:32:d4:7a:b5:31:45:57:7b:ca:7a:e0: 92:f5:d6:92:96:7a:3d:fa:cf:e7:f9:7a:cc:fc:b3:4a:e7:5a: 1a:65:f2:a7:f9:e2:37:54:0d:ad:d7:ca:49:1d:21:c8:bd:a3: 0b:cc:e6:cc:43:2d:76:c3:21:67:63:10:d9:34:00:be:4a:f2: 67:64:56:32:e8:c1:ac:fb:d1:96:c5:69:72:aa:2e:c2:b2:71: 8d:27:36:ef:2f:40:df:4f:52:95:bf:a7:30:e6:7c:19:da:d5: f0:88:51:56:a2:2a:84:59:ef:42:f4:ef:ad:9b:8e:3f:8b:b7: 9d:96:98:28 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQzODQ4REJENzY1 QkZCMjM1RDQwHhcNMjQxMTA2MTgyNjAyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYjRiYS0wZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmy+r7hmzcwVyjmNob/VmxFVI/3evOYOHXk9xcQVrchc/6KM2oE/zPRLZNnSP n6MCQqbkgcvP4D2zbpmfHXzQTme0HvxxnVT7c6WBIWP0IxKbR2i1yLCIgqsy+EDJ MPptm/p7PkLySyx3kwJge41vY5nCp6ySnKwfqH0pSuurheGcSCrSI2ydpbZsmawf 4ucEegsuUDPb2axB/ldIIzbNP1BqTRGZgP2BiM6bgWfbLXcwl85rdV606jt9DORP p8MzkILHkifa/m9n3nMzVsQjARSuUJZ2nqlcyiVW325eZnvcnEkJ/Or9K9mRkPYn 9vDBDoNNUJ5t4+NzlGKiDLfynQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKFIEybI kpxCV4zDNtW+LR3SEk0oMB8GA1UdIwQYMBaAFPJ/+HbkZec8mlL9OEjb12W/sjXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGRi9FMTc2RDY3QUQw OTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6eWFVdjA0U052WFpiLXlO ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuXzRkdVJsNXp5YVV2MDRTTnZYWmIteU5kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc1RkYvRTE3NkQ2N0FEMDk1MTFFOUIzNDVBMDVEQzRGOUFFMDIvMzgzM0ZEMjBE MDk3MTFFOTg3RjczQTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnZdcwDwQCAAIwCQMHACABDfbwADANBgkqhkiG9w0BAQsF AAOCAQEAHGe5UnErJlIjpZkCcJftnyPBqoEYIFRVfacRPXmebVbJJVGVOHCUN8Lb Jlgxe8Q6AhHCPAMJObYmQ+lwqbxvpftxqPvMPdjPIHlZxIE71vtGe9GOveIhlByc fttLJaW5lWg77+H6FjDBa37EU0d0lX655Q80MkB8AfPnAcgwERpMhWh04TLUerUx RVd7ynrgkvXWkpZ6PfrP5/l6zPyzSudaGmXyp/niN1QNrdfKSR0hyL2jC8zmzEMt dsMhZ2MQ2TQAvkryZ2RWMujBrPvRlsVpcqouwrJxjSc27y9A309Slb+nMOZ8GdrV 8IhRVqIqhFnvQvTvrZuOP4u3nZaYKA== -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org