$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/33CDE41E5A4711EFA5ED8487C4F9AE02.roa File: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (raw, json) Hash identifier: E+f0SdnPuYjXdcqeEk9/03VnnRNadS7Ituz6hla4mX0= Subject key identifier: B1:65:6D:68:32:25:3F:FE:DA:65:11:0C:65:5A:B6:5A:22:7A:4C:2C Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 08A1 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/33CDE41E5A4711EFA5ED8487C4F9AE02.roa Signing time: Wed 14 Aug 2024 14:12:13 +0000 ROA not before: Wed 14 Aug 2024 14:12:13 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 38084 IP address blocks: 45.113.36.0/22 maxlen: 24 103.9.60.0/22 maxlen: 24 2402:6c40::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Aug 14 14:12:13 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66bcbb3d-1e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:71:77:97:cf:6e:e3:f5:88:29:68:1d:43: 00:eb:dd:05:d5:66:f9:1d:8d:78:8f:d5:a6:b5:64: e9:b0:41:bc:58:46:04:94:89:85:c1:9e:66:c9:a6: e1:75:59:9f:7e:66:e7:58:42:03:fc:7c:82:0d:0b: 61:4b:8e:c8:a4:e0:df:cc:fc:89:96:ea:a2:fb:1c: 35:f6:44:1b:0c:cf:90:6a:68:d2:ea:af:d1:c6:a5: af:7c:8d:89:68:26:d8:04:0d:d9:36:3e:57:30:44: c6:ea:5d:45:da:fb:f0:a8:9c:66:c7:30:4d:31:1f: 5a:af:39:a6:6b:9a:e0:46:70:81:e0:1e:16:7c:d5: 09:df:8c:3e:8b:35:9f:1b:b4:d5:dc:31:c9:45:ff: fc:49:d1:8a:c5:16:e7:e4:05:f9:39:bb:c5:ea:8a: 85:1e:76:9a:4d:64:f2:9f:fb:af:18:93:8c:95:55: 7e:a1:f6:ae:04:12:98:ff:94:a9:bd:4f:67:19:e6: 34:11:ad:af:fd:89:ef:52:75:6f:e8:5c:b6:e5:cb: f9:e0:55:ed:1c:5f:ca:9e:0a:a5:d0:e1:8e:48:c4: 5a:07:27:a7:7a:8b:32:e3:e5:22:32:6c:63:8a:15: 19:43:3e:33:1e:22:b7:c4:ed:0b:13:04:4f:69:14: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:65:6D:68:32:25:3F:FE:DA:65:11:0C:65:5A:B6:5A:22:7A:4C:2C X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/33CDE41E5A4711EFA5ED8487C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.113.36.0/22 103.9.60.0/22 IPv6: 2402:6c40::/32 Signature Algorithm: sha256WithRSAEncryption 4b:c2:31:13:e4:0c:e3:ea:bd:9d:6a:00:cd:9d:73:91:6a:4d: b7:58:e9:d2:bf:52:11:0c:ec:f6:da:8e:78:51:f2:07:fb:12: 35:a1:99:f3:1c:af:11:ac:b6:21:56:35:75:fe:62:a0:3f:99: 22:91:fb:f4:84:de:6f:a7:0c:93:34:76:4d:08:e3:7e:8d:bf: cc:b0:bc:14:94:c7:82:94:a4:fa:c3:15:8d:42:ad:2a:f1:e9: ea:ff:c2:5f:28:23:cb:42:ba:7b:a2:9e:5f:77:a2:2a:6f:21: 81:82:36:74:fd:aa:e4:d9:6f:9f:6c:c5:a6:63:48:fa:aa:1c: 20:a8:f1:86:d3:52:87:ae:d5:cb:75:8f:a5:53:2e:88:4b:d9: c2:fe:3f:a1:19:51:08:f1:62:ae:6d:2a:b1:8c:91:b1:5f:77: c4:35:5c:80:cf:1a:8c:94:7b:28:f2:49:1b:45:9d:d6:d7:eb: 4b:7f:38:f8:d9:b1:b2:09:0c:10:e6:64:36:27:fd:c3:d3:5a: 10:3b:4b:71:ae:b0:98:14:c9:ef:4e:f8:8c:7f:8a:3c:c1:17: 6e:11:c1:30:1e:07:e0:1e:ea:b2:20:4f:5e:08:08:ac:63:19: 4a:93:21:39:07:e7:3d:c0:70:ec:c4:1e:dc:00:7b:81:af:66: bb:52:bf:b6 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjQwODE0MTQxMjEzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJjYmIzZC0xZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Stxd5fPbuP1iCloHUMA690F1Wb5HY14j9WmtWTpsEG8WEYElImFwZ5myabh dVmffmbnWEID/HyCDQthS47IpODfzPyJluqi+xw19kQbDM+QamjS6q/RxqWvfI2J aCbYBA3ZNj5XMETG6l1F2vvwqJxmxzBNMR9arzmma5rgRnCB4B4WfNUJ34w+izWf G7TV3DHJRf/8SdGKxRbn5AX5ObvF6oqFHnaaTWTyn/uvGJOMlVV+ofauBBKY/5Sp vU9nGeY0Ea2v/YnvUnVv6Fy25cv54FXtHF/Kngql0OGOSMRaByeneosy4+UiMmxj ihUZQz4zHiK3xO0LEwRPaRSF0wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLFlbWgy JT/+2mURDGVatloiekwsMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQ2ODcvNzZCNDNCNjQ5RjQ1MTFFQTlFNTIzNTYzQzRGOUFFMDIvMzNDREU0MUU1 QTQ3MTFFRkE1RUQ4NDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItcSQDBAJnCTwwDQQCAAIwBwMFACQCbEAwDQYJKoZIhvcN AQELBQADggEBAEvCMRPkDOPqvZ1qAM2dc5FqTbdY6dK/UhEM7PbajnhR8gf7EjWh mfMcrxGstiFWNXX+YqA/mSKR+/SE3m+nDJM0dk0I436Nv8ywvBSUx4KUpPrDFY1C rSrx6er/wl8oI8tCunuinl93oipvIYGCNnT9quTZb59sxaZjSPqqHCCo8YbTUoeu 1ct1j6VTLohL2cL+P6EZUQjxYq5tKrGMkbFfd8Q1XIDPGoyUeyjySRtFndbX60t/ OPjZsbIJDBDmZDYn/cPTWhA7S3GusJgUye9O+Ix/ijzBF24RwTAeB+Ae6rIgT14I CKxjGUqTITkH5z3AcOzEHtwAe4GvZrtSv7Y= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org