$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa File: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (raw, json) Hash identifier: qicfoy/8cosxfApnnOippZ0PeEcv6bX+STnM2/SumVM= Subject key identifier: 5D:8C:49:AD:1C:4E:F4:2F:33:8F:CF:5C:16:F7:47:00:12:C2:A2:83 Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Certificate serial: 03CF Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa Signing time: Mon 21 Oct 2024 00:43:43 +0000 ROA not before: Mon 21 Oct 2024 00:43:43 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 10021 IP address blocks: 103.173.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Validity Not Before: Oct 21 00:43:43 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6715a3bf-e1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:63:60:5d:58:29:fa:87:43:b6:38:aa:76: ae:7c:38:b3:57:1f:e4:75:48:4d:64:cf:d0:a1:76: 98:16:c4:f0:ec:27:91:7f:15:6d:7e:7e:6a:15:9a: f3:9e:45:4d:87:55:c5:8e:9d:24:07:7e:28:12:de: ec:81:14:9e:cd:e7:43:e3:f5:5b:d5:40:d7:f3:29: e8:64:4f:6a:b1:c5:ba:16:dd:c7:6d:bd:7f:93:ac: 9b:34:f1:60:8a:fd:c7:53:2e:55:c8:34:91:fa:04: 72:cd:f7:87:ce:6c:f3:e0:79:41:12:40:50:a2:fc: ea:ec:17:04:14:e5:32:08:2f:24:f3:e6:6a:e2:ee: d8:f6:0f:ba:e3:01:25:b5:c1:71:c1:a7:cf:b6:56: 1a:81:38:9d:8c:34:a8:50:4a:be:da:e9:87:11:84: b6:b8:a7:72:81:42:94:ae:3a:ea:64:5a:46:95:58: 51:51:d7:80:06:9a:f1:84:83:75:8d:41:f1:c7:2e: 2f:e1:37:92:2b:2e:3f:a0:5b:cb:cb:ed:a0:78:0c: a6:a6:b2:42:10:c1:89:0f:07:dc:c3:ad:26:28:7f: 4c:ac:2d:5b:6a:5f:06:b8:76:14:e2:91:b4:c8:91: f7:84:77:9f:83:c3:13:24:73:9f:71:1c:06:34:ae: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8C:49:AD:1C:4E:F4:2F:33:8F:CF:5C:16:F7:47:00:12:C2:A2:83 X509v3 Authority Key Identifier: keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.237.0/24 Signature Algorithm: sha256WithRSAEncryption 08:e6:02:0c:eb:fe:97:f4:4a:0d:1f:f2:d6:3f:94:66:48:a6: 50:c1:83:63:75:02:23:30:94:21:b0:fc:b3:24:60:ba:76:69: e6:b1:b3:19:dd:88:81:b2:89:92:87:3e:4a:43:bf:ee:5c:8d: a4:46:4b:5a:e1:3e:44:ac:c1:10:f8:4b:17:2c:87:3c:88:63: c5:25:9b:2c:ff:ce:e8:95:62:c2:51:33:f9:6c:cc:fb:92:30: 0c:9b:40:1f:25:0a:8d:cf:c0:76:5f:8e:1e:06:25:3a:b0:c6: 6a:ba:bb:cc:4d:93:10:d6:3c:8c:fa:48:c7:76:b3:c0:5d:67: 0e:a7:81:42:da:ef:04:b9:1e:fd:e0:dd:ca:65:a2:9d:1f:bf: 88:94:53:37:01:db:10:3c:70:50:ef:2d:0a:93:2d:36:9a:66: 44:ec:9d:b7:3d:dd:fb:c2:20:d1:42:bc:ea:53:bd:d3:0c:05: e9:85:03:09:b9:9f:7d:0e:b8:3f:b1:0a:72:ed:30:9f:2c:60: c3:90:78:d5:17:cd:67:1b:6b:d2:95:77:6b:b2:32:b7:bb:00: db:95:c4:59:51:93:ef:a2:27:d1:86:3c:e7:74:e5:bd:6a:91: e5:c7:89:d3:a5:b3:d0:de:4b:34:2a:c4:8e:b9:ed:4f:33:2e: 32:2a:3e:e2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMzOUIxMTAvBgNVBAUTKEQ2N0JFMjE5NERCODYyNkE0M0QzOUFCRkE3NjA4RkJD NUFDQ0I1MjMwHhcNMjQxMDIxMDA0MzQzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE1YTNiZi1lMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEdjYF1YKfqHQ7Y4qnaufDizVx/kdUhNZM/QoXaYFsTw7CeRfxVtfn5qFZrz nkVNh1XFjp0kB34oEt7sgRSezedD4/Vb1UDX8ynoZE9qscW6Ft3Hbb1/k6ybNPFg iv3HUy5VyDSR+gRyzfeHzmzz4HlBEkBQovzq7BcEFOUyCC8k8+Zq4u7Y9g+64wEl tcFxwafPtlYagTidjDSoUEq+2umHEYS2uKdygUKUrjrqZFpGlVhRUdeABprxhIN1 jUHxxy4v4TeSKy4/oFvLy+2geAymprJCEMGJDwfcw60mKH9MrC1bal8GuHYU4pG0 yJH3hHefg8MTJHOfcRwGNK6VhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF2MSa0c TvQvM4/PXBb3RwASwqKDMB8GA1UdIwQYMBaAFNZ74hlNuGJqQ9Oav6dgj7xazLUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzM5Qi9ENEYzRjBCMDVD MDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFltcEQwNXFfcDJDUHZGck10 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFudmlHVTI0WW1wRDA1cV9wMkNQdkZyTXRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzMzOUIvRDRGM0YwQjA1QzAwMTFFQzlCMjMxMzREQzRGOUFFMDIvMEIzM0EzRDQ1 QzA0MTFFQzgzRjlCQjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnre0wDQYJKoZIhvcNAQELBQADggEBAAjmAgzr/pf0Sg0f 8tY/lGZIplDBg2N1AiMwlCGw/LMkYLp2aeaxsxndiIGyiZKHPkpDv+5cjaRGS1rh PkSswRD4SxcshzyIY8Ulmyz/zuiVYsJRM/lszPuSMAybQB8lCo3PwHZfjh4GJTqw xmq6u8xNkxDWPIz6SMd2s8BdZw6ngULa7wS5Hv3g3cplop0fv4iUUzcB2xA8cFDv LQqTLTaaZkTsnbc93fvCINFCvOpTvdMMBemFAwm5n30OuD+xCnLtMJ8sYMOQeNUX zWcba9KVd2uyMre7ANuVxFlRk++iJ9GGPOd05b1qkeXHidOls9DeSzQqxI657U8z LjIqPuI= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org