$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa File: 33DAC0AE640211EDA193F079C4F9AE02.roa (raw, json) Hash identifier: bVTzpK9T9o207F9qthG1GuGuZ+KEcGa/wwQ/ucbB/uU= Subject key identifier: 9A:7B:5E:B1:B8:95:62:DE:9D:D1:B5:0B:B8:B4:16:6A:94:0F:DB:C3 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0346 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa Signing time: Wed 27 Sep 2023 01:42:42 +0000 ROA not before: Wed 27 Sep 2023 01:42:42 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134732 IP address blocks: 103.121.216.0/23 maxlen: 23 103.121.216.0/24 maxlen: 24 103.121.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 00:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Sep 27 01:42:42 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65138892-bd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:23:22:cb:57:11:af:aa:89:13:44:4e:02: ec:97:33:c5:c1:68:d2:bd:ca:ab:6b:77:4a:1c:be: 73:ba:d0:3b:31:55:fc:aa:ce:62:1f:84:6f:a8:bc: 9f:d7:1e:e6:8c:34:ce:f6:5f:5d:9c:86:58:f4:f4: a7:06:db:0c:8c:37:cc:13:8a:ea:80:65:99:18:b4: a8:45:8d:27:a1:ff:ae:f6:d8:7c:9e:ad:a8:4d:28: 53:cc:f9:a9:00:c7:e4:47:46:65:73:23:c5:01:a6: e2:7f:9b:27:ff:6e:a2:5b:63:2a:19:4e:40:aa:20: e7:3a:e8:05:76:d8:76:33:e6:01:5e:4a:d3:45:16: 92:4b:f5:16:e6:f3:04:e7:7c:23:4d:1b:ba:d9:8e: b3:39:27:bc:fd:b9:b1:5c:7a:aa:8b:d6:6d:d8:98: a0:8a:bd:5a:71:45:ac:d8:fe:db:b4:b9:93:c8:9a: 63:06:5d:8d:32:4e:5b:05:3d:a4:8c:8b:3b:d5:5d: 97:c0:67:6d:fd:3b:63:07:fe:90:8d:3d:c6:1d:ab: 11:05:d5:63:05:d6:07:e0:e4:13:e3:c1:0d:4b:3f: d8:4e:3e:e2:95:63:4d:b0:50:6a:4d:34:51:f7:50: 6e:1a:5b:79:69:d1:ce:b9:29:74:c0:40:81:a4:b8: 97:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:5E:B1:B8:95:62:DE:9D:D1:B5:0B:B8:B4:16:6A:94:0F:DB:C3 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.216.0/23 Signature Algorithm: sha256WithRSAEncryption 65:fb:45:d7:9f:de:23:21:f4:78:26:6b:df:bf:82:a5:26:d6: ba:e2:f5:ac:d0:82:03:13:ec:12:89:f8:66:b0:d6:8c:48:46: 56:12:4b:d5:3c:b0:0c:34:c9:8e:17:be:71:90:5b:43:a6:5b: a4:cb:3f:95:32:b3:5d:7b:30:61:02:3a:bb:f4:20:1f:55:d1: 55:5f:8e:45:d0:d8:a2:6f:06:cc:37:cb:39:a6:af:99:94:92: f3:ee:55:e9:e9:cf:f3:ee:9d:98:42:41:b9:0f:a1:20:76:07: 57:5a:c8:eb:7b:94:8d:12:94:b5:86:15:67:fa:90:c6:d7:1b: fe:73:02:b3:e6:82:c4:83:64:42:97:c8:fb:1d:b5:25:f1:30: 70:57:d9:44:df:b0:2f:a5:ef:19:e7:8e:0c:77:11:32:cb:9a: 41:58:19:63:88:37:25:d4:40:37:28:a5:ee:7d:d3:d9:c6:92: ed:ef:32:84:fe:c1:8a:be:3e:58:ee:21:2a:67:51:ed:90:49: 97:72:31:46:66:39:6d:98:2f:84:fc:29:cf:8d:2c:09:cb:83: ac:9a:09:e4:c2:0f:fb:9c:cc:9f:36:55:c7:1d:94:94:c5:54: 24:b2:25:9b:9e:cc:f6:05:63:d0:ff:e2:03:77:c1:46:9e:44: 3b:f5:dc:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjMwOTI3MDE0MjQyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzODg5Mi1iZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyncjIstXEa+qiRNETgLslzPFwWjSvcqra3dKHL5zutA7MVX8qs5iH4RvqLyf 1x7mjDTO9l9dnIZY9PSnBtsMjDfME4rqgGWZGLSoRY0nof+u9th8nq2oTShTzPmp AMfkR0ZlcyPFAabif5sn/26iW2MqGU5AqiDnOugFdth2M+YBXkrTRRaSS/UW5vME 53wjTRu62Y6zOSe8/bmxXHqqi9Zt2Jigir1acUWs2P7btLmTyJpjBl2NMk5bBT2k jIs71V2XwGdt/TtjB/6QjT3GHasRBdVjBdYH4OQT48ENSz/YTj7ilWNNsFBqTTRR 91BuGlt5adHOuSl0wECBpLiXBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJp7XrG4 lWLendG1C7i0FmqUD9vDMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJDODkvOEZBOTdBRkU0NTEwMTFFQzhDODZFRDQ4QzRGOUFFMDIvMzNEQUMwQUU2 NDAyMTFFREExOTNGMDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnedgwDQYJKoZIhvcNAQELBQADggEBAGX7Rdef3iMh9Hgm a9+/gqUm1rri9azQggMT7BKJ+Gaw1oxIRlYSS9U8sAw0yY4XvnGQW0OmW6TLP5Uy s117MGECOrv0IB9V0VVfjkXQ2KJvBsw3yzmmr5mUkvPuVenpz/PunZhCQbkPoSB2 B1dayOt7lI0SlLWGFWf6kMbXG/5zArPmgsSDZEKXyPsdtSXxMHBX2UTfsC+l7xnn jgx3ETLLmkFYGWOINyXUQDcope5909nGku3vMoT+wYq+PljuISpnUe2QSZdyMUZm OW2YL4T8Kc+NLAnLg6yaCeTCD/uczJ82VccdlJTFVCSyJZuezPYFY9D/4gN3wUae RDv13AY= -----END CERTIFICATE-----Generated at Sat May 25 03:05:57 2024 by rpki-client on console-fra.rpki-client.org