$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/3833FD20D09711E987F73A60C4F9AE02.roa File: 3833FD20D09711E987F73A60C4F9AE02.roa (raw, json) Hash identifier: q9QaJpJcAgaUxI19STDbfcWDCm+iJARRkO8jzMuvblw= Subject key identifier: F6:15:1C:F4:F2:F5:CA:61:57:DA:7D:27:AD:01:83:FD:1B:B4:D6:94 Certificate issuer: /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Certificate serial: 0C3D Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/3833FD20D09711E987F73A60C4F9AE02.roa Signing time: Tue 28 Nov 2023 18:46:11 +0000 ROA not before: Tue 28 Nov 2023 18:46:11 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133142 IP address blocks: 103.101.215.0/24 maxlen: 24 2001:df6:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 18:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Validity Not Before: Nov 28 18:46:11 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65663572-2487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:9b:93:dc:db:31:a3:38:ec:c8:71:e0:85: e2:8a:e9:ff:0e:09:3d:fc:d6:e4:a0:09:1d:fb:c1: 72:95:7f:c4:91:2a:df:5a:90:61:34:a8:22:ec:21: 9e:ca:a8:61:40:65:e2:50:ce:21:69:31:06:6d:99: 61:e5:3f:4a:df:a4:a2:ce:85:73:e5:2f:68:6e:d2: 32:39:8f:de:11:15:3f:eb:f5:e4:25:99:84:d1:b1: f1:5a:77:4f:fa:db:9d:a7:90:1a:fb:c8:49:30:9c: 4e:dc:b3:0e:1c:22:8b:48:18:94:0f:bf:a9:68:bf: db:3c:61:6f:da:ef:47:5e:34:9c:f3:62:56:c2:08: 79:44:08:9c:26:40:3a:ee:79:a4:0b:04:9e:2d:49: d3:28:2e:b9:85:a1:0c:e8:15:36:b7:49:af:96:68: e5:d3:36:5f:b7:ba:6e:25:cc:b6:8c:da:08:2f:f3: 6b:94:9e:3f:6f:02:b4:9a:6b:97:32:ee:52:af:6f: eb:dc:dc:07:5e:4b:cd:18:ae:81:dc:6c:99:3a:34: aa:b4:74:ec:a9:02:c7:cd:74:b3:36:bd:39:48:3a: b2:74:0f:4f:5e:c5:35:2d:cd:4c:01:25:e1:2c:d6: 56:0b:90:12:ab:25:45:21:a8:98:97:f9:d1:0c:f5: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:15:1C:F4:F2:F5:CA:61:57:DA:7D:27:AD:01:83:FD:1B:B4:D6:94 X509v3 Authority Key Identifier: keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/3833FD20D09711E987F73A60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.215.0/24 IPv6: 2001:df6:f000::/48 Signature Algorithm: sha256WithRSAEncryption d1:a8:49:b2:c4:46:e6:8d:3c:6d:9b:f8:c4:30:da:03:6a:12: 70:b3:40:f8:8a:52:5d:2e:7f:36:ae:78:c0:98:68:88:9f:9c: 5c:e2:52:f8:f9:10:d0:2a:f8:bf:8e:af:59:cd:e2:49:dc:52: fa:96:82:40:54:ec:ad:90:70:57:60:51:49:29:6d:1a:d7:88: 95:66:7f:8f:6b:f5:8d:45:1e:93:27:e7:d9:1d:59:7e:03:25: c3:3d:63:89:fe:b2:07:5d:7c:ad:21:f4:0a:b4:eb:c4:eb:b1: 5b:dc:e0:c3:13:f0:11:13:b6:b9:39:9d:50:c1:59:21:7b:5f: 1a:3a:a3:e2:bf:e0:23:45:12:05:ca:d5:cf:e1:c2:e6:69:64: 67:10:9b:c7:4c:51:42:d3:bc:e5:77:f8:3c:a6:a7:fd:31:f6: 91:02:2a:bb:dd:56:03:39:01:61:7a:50:68:7e:f2:1e:0b:50: 63:c0:80:9a:b9:c9:3e:79:7e:58:5c:66:09:0d:1e:01:53:ca: 6b:53:d1:2d:e4:b6:c2:26:9c:ca:9a:76:54:3d:66:44:ad:41: da:20:86:6f:42:d0:03:9e:38:4c:18:ba:40:4e:5f:5b:32:53: 2a:44:0a:c2:c6:38:41:ca:bd:dc:93:62:36:ea:d8:7f:1f:54: 9f:26:ed:47 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQzODQ4REJENzY1 QkZCMjM1RDQwHhcNMjMxMTI4MTg0NjExWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2MzU3Mi0yNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY6bk9zbMaM47Mhx4IXiiun/Dgk9/NbkoAkd+8FylX/EkSrfWpBhNKgi7CGe yqhhQGXiUM4haTEGbZlh5T9K36SizoVz5S9obtIyOY/eERU/6/XkJZmE0bHxWndP +tudp5Aa+8hJMJxO3LMOHCKLSBiUD7+paL/bPGFv2u9HXjSc82JWwgh5RAicJkA6 7nmkCwSeLUnTKC65haEM6BU2t0mvlmjl0zZft7puJcy2jNoIL/NrlJ4/bwK0mmuX Mu5Sr2/r3NwHXkvNGK6B3GyZOjSqtHTsqQLHzXSzNr05SDqydA9PXsU1Lc1MASXh LNZWC5ASqyVFIaiYl/nRDPXu7QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPYVHPTy 9cphV9p9J60Bg/0btNaUMB8GA1UdIwQYMBaAFPJ/+HbkZec8mlL9OEjb12W/sjXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGRi9FMTc2RDY3QUQw OTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6eWFVdjA0U052WFpiLXlO ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuXzRkdVJsNXp5YVV2MDRTTnZYWmIteU5kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc1RkYvRTE3NkQ2N0FEMDk1MTFFOUIzNDVBMDVEQzRGOUFFMDIvMzgzM0ZEMjBE MDk3MTFFOTg3RjczQTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnZdcwDwQCAAIwCQMHACABDfbwADANBgkqhkiG9w0BAQsF AAOCAQEA0ahJssRG5o08bZv4xDDaA2oScLNA+IpSXS5/Nq54wJhoiJ+cXOJS+PkQ 0Cr4v46vWc3iSdxS+paCQFTsrZBwV2BRSSltGteIlWZ/j2v1jUUekyfn2R1ZfgMl wz1jif6yB118rSH0CrTrxOuxW9zgwxPwERO2uTmdUMFZIXtfGjqj4r/gI0USBcrV z+HC5mlkZxCbx0xRQtO85Xf4PKan/TH2kQIqu91WAzkBYXpQaH7yHgtQY8CAmrnJ Pnl+WFxmCQ0eAVPKa1PRLeS2wiacypp2VD1mRK1B2iCGb0LQA544TBi6QE5fWzJT KkQKwsY4Qcq93JNiNurYfx9UnybtRw== -----END CERTIFICATE-----Generated at Mon May 20 19:59:34 2024 by rpki-client on console-ams.rpki-client.org