$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa File: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (raw, json) Hash identifier: Ox9R9PiD8T0HlZTCVj50DkgG3vmsXlU+75pqLoh4Z1Y= Subject key identifier: 8C:61:3D:CB:BA:15:A8:37:0A:FD:A5:1D:8A:ED:A8:BF:41:57:81:D3 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 0EBF Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa Signing time: Tue 26 Mar 2024 18:36:42 +0000 ROA not before: Tue 26 Mar 2024 18:36:42 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 18013 IP address blocks: 103.133.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3775 (0xebf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Mar 26 18:36:42 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=660315ba-9f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:1d:7e:bb:03:7c:f5:46:e8:b5:08:6e:ac: 3e:e4:0a:b8:63:86:cc:d6:ce:b3:ed:89:7f:dd:d4: f1:ab:6b:0d:b6:45:3c:f3:13:54:d3:c8:30:fe:af: 7c:a0:01:05:39:38:5e:10:b8:ff:3c:18:8a:15:23: 45:fe:bf:52:67:8f:49:02:39:8b:4f:54:28:1d:67: d0:0a:90:c7:97:0a:4c:5c:95:15:ea:8e:4b:ea:d0: 79:bb:44:a8:e3:16:bb:f0:ec:b8:ed:b1:2d:11:a3: 60:76:e9:4b:fc:11:0d:47:3b:17:17:66:f4:d8:a5: 50:6b:73:db:94:1b:9d:71:5e:ac:cd:29:20:57:a1: 70:3b:43:83:cc:40:ce:fe:7f:c2:f5:06:22:05:c1: 7d:f3:01:b3:c3:46:b5:c9:ba:b2:08:fe:f0:f8:bc: 9c:04:61:50:9f:9b:21:e3:3a:26:46:c9:3b:e1:7b: ab:69:08:5b:89:dc:33:65:ed:07:9a:8c:3b:fa:f5: 5b:7d:27:e3:03:0c:8e:78:4b:37:27:9f:d6:8d:43: b3:64:42:10:01:98:08:fa:d5:ed:b8:24:d4:d0:5c: 35:01:40:96:ce:7d:6e:ec:91:0e:2e:55:7e:da:82: e6:1c:a6:5f:f8:1d:d4:1f:ff:a4:83:14:33:4b:1e: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:61:3D:CB:BA:15:A8:37:0A:FD:A5:1D:8A:ED:A8:BF:41:57:81:D3 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.176.0/22 Signature Algorithm: sha256WithRSAEncryption b2:f9:bc:e5:c2:4b:85:ab:1b:76:57:8a:f4:99:27:1e:4b:a1: f2:61:e5:f1:89:5d:f4:d8:65:4c:bd:7f:00:15:6c:cd:e4:e8: 06:b7:a5:20:e4:2e:4c:fd:d6:ca:c4:cd:a7:14:b8:de:c5:4b: 61:81:e8:f5:c9:83:3b:b7:b4:27:a7:19:48:ee:8f:e4:ad:a7: b8:5a:cd:8c:77:6b:fd:d6:0b:c6:bd:b5:38:c2:98:ca:1e:c9: e6:3a:46:19:c3:e3:28:c0:30:10:af:9f:38:c1:8a:fd:69:7f: bb:1e:78:97:11:cf:63:b8:40:10:d7:cd:55:77:9b:45:ea:25: 3e:50:35:25:4d:2e:5f:2a:ec:28:86:9a:c6:ea:a1:0b:25:6b: 04:74:98:67:05:5f:0a:b6:29:7a:ff:ac:b9:ae:2a:fa:ec:28: 91:64:67:00:c6:b2:a6:e6:68:07:40:06:1e:18:0f:c9:25:69: 7b:7a:44:59:f6:1e:20:05:8f:68:f5:1a:cf:7e:19:10:9b:23: f4:2b:26:69:5e:2b:c5:a7:11:65:85:5a:8e:2b:58:1a:bc:a3: f0:b2:00:c9:8c:6a:bb:44:f4:cf:09:c9:7b:e6:79:82:52:c9: 0f:93:dd:64:c9:56:5b:49:28:d2:75:61:b2:2b:26:43:69:32: b9:67:cc:5c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjQwMzI2MTgzNjQyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjAzMTViYS05ZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumAdfrsDfPVG6LUIbqw+5Aq4Y4bM1s6z7Yl/3dTxq2sNtkU88xNU08gw/q98 oAEFOTheELj/PBiKFSNF/r9SZ49JAjmLT1QoHWfQCpDHlwpMXJUV6o5L6tB5u0So 4xa78Oy47bEtEaNgdulL/BENRzsXF2b02KVQa3PblBudcV6szSkgV6FwO0ODzEDO /n/C9QYiBcF98wGzw0a1ybqyCP7w+LycBGFQn5sh4zomRsk74XuraQhbidwzZe0H mow7+vVbfSfjAwyOeEs3J5/WjUOzZEIQAZgI+tXtuCTU0Fw1AUCWzn1u7JEOLlV+ 2oLmHKZf+B3UH/+kgxQzSx6atwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIxhPcu6 Fag3Cv2lHYrtqL9BV4HTMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE2OTAvMTVCNDFCODg2M0YzMTFFOUEwODU0QzQ3QzRGOUFFMDIvQjM2ODJGRUMy MUQ3MTFFQjlDRkFDNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnhbAwDQYJKoZIhvcNAQELBQADggEBALL5vOXCS4WrG3ZX ivSZJx5LofJh5fGJXfTYZUy9fwAVbM3k6Aa3pSDkLkz91srEzacUuN7FS2GB6PXJ gzu3tCenGUjuj+Stp7hazYx3a/3WC8a9tTjCmMoeyeY6RhnD4yjAMBCvnzjBiv1p f7seeJcRz2O4QBDXzVV3m0XqJT5QNSVNLl8q7CiGmsbqoQslawR0mGcFXwq2KXr/ rLmuKvrsKJFkZwDGsqbmaAdABh4YD8klaXt6RFn2HiAFj2j1Gs9+GRCbI/QrJmle K8WnEWWFWo4rWBq8o/CyAMmMartE9M8JyXvmeYJSyQ+T3WTJVltJKNJ1YbIrJkNp MrlnzFw= -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:18 2024 by rpki-client on console-fra.rpki-client.org