$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/3E734F70B9A311EE85D60B49C4F9AE02.roa File: 3E734F70B9A311EE85D60B49C4F9AE02.roa (raw, json) Hash identifier: rwWLgX0j1gAae5w6bqH0qLh9uyb80tM8QLuYgGiI8EU= Subject key identifier: EE:4D:9A:43:0E:4A:9B:81:B1:BF:E3:A9:36:3B:BE:66:55:23:F9:DA Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Certificate serial: 0108 Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/3E734F70B9A311EE85D60B49C4F9AE02.roa Signing time: Fri 25 Oct 2024 04:18:12 +0000 ROA not before: Fri 25 Oct 2024 04:18:12 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 17828 IP address blocks: 103.173.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Validity Not Before: Oct 25 04:18:12 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671b1c04-9bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d6:ec:03:5a:33:c9:dc:1e:50:f7:da:b7:bc: 7d:c3:31:3a:b9:fa:21:aa:2d:2d:75:65:7d:83:b2: d9:73:aa:6a:04:40:2d:2e:7c:07:ea:df:4e:30:30: b9:0b:4d:2f:91:d7:72:18:c0:2d:58:41:e7:22:67: 2c:31:2c:33:bf:6e:de:3f:8d:cc:a1:4b:37:67:4d: 76:67:e7:48:1a:7b:16:db:02:b3:73:d1:d5:df:6c: b3:bc:be:4c:cc:38:2a:7e:47:cd:35:69:86:db:4c: 56:83:47:4f:6e:ab:21:f9:ef:fb:77:3c:c7:9c:32: 8e:a0:ac:43:62:58:53:33:66:65:c0:bb:0e:c2:9d: 58:6b:40:21:82:2a:fc:cf:58:b5:43:5d:ed:f5:e0: 69:6a:7b:3d:c5:27:97:d3:94:74:82:4a:75:76:3c: 7c:96:2b:34:d7:20:78:76:4c:ed:c2:42:f9:ba:7c: 94:79:de:64:5d:77:d2:1d:59:ae:e8:3e:42:6d:e5: a0:98:42:0e:73:88:7d:43:db:c3:8f:40:26:54:1d: a5:79:4b:69:d4:98:f3:92:0c:77:1c:bf:4d:94:72: c6:94:90:2e:3c:7c:07:4d:64:b7:9d:b3:34:d9:4c: 22:a0:b7:71:fa:56:7f:c8:03:9f:b0:14:c6:b2:a0: 4e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4D:9A:43:0E:4A:9B:81:B1:BF:E3:A9:36:3B:BE:66:55:23:F9:DA X509v3 Authority Key Identifier: keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/3E734F70B9A311EE85D60B49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.32.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:e5:40:ba:52:43:00:22:18:7a:9c:1f:e9:3f:9f:bc:19:68: bd:af:e9:22:8f:0d:c8:97:4c:73:3b:f0:ef:5a:be:c6:fe:53: 03:b8:2e:e0:65:2a:eb:64:ed:41:f3:d4:71:17:f2:83:eb:cb: 87:96:53:18:c6:78:fe:1f:ae:2d:54:ce:97:10:43:13:d4:02: 20:a3:51:d1:46:f4:5b:2f:22:f5:de:03:a5:fd:74:94:2f:87: 4a:a3:64:5a:a0:a0:e6:d7:fd:bd:52:f2:1b:10:96:f2:ce:60: 6b:c5:9e:1d:a4:39:75:e6:a6:4b:62:41:fc:3d:07:23:ee:f5: 53:79:a7:d8:f0:26:1b:63:cb:d0:54:f3:86:69:0c:bc:ce:2d: 0f:a8:14:20:90:cd:11:53:96:b6:e9:3f:6c:c8:50:02:07:a1: ef:f2:2e:93:d6:ed:46:86:7f:f6:78:fb:ad:3c:46:75:1e:47: fd:0f:2a:03:86:4a:be:2c:39:5a:1d:61:5a:24:8b:1b:64:87: 7c:7a:23:76:5b:6f:ea:88:68:13:fa:28:e2:35:aa:9f:f3:5d: 90:5b:8f:8c:2a:96:6e:f8:b3:20:c0:40:7d:09:13:16:c5:fa: b4:82:90:6d:65:b7:71:a7:85:b9:e8:e5:1c:6a:f7:e4:c1:06: 27:86:77:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MkUxMTAvBgNVBAUTKEVGNjcwMkE3RDBBRUM4MzRERUZCOEY0MTY4QjJGRThG NEQ1ODQzRTgwHhcNMjQxMDI1MDQxODEyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFiMWMwNC05YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NbsA1ozydweUPfat7x9wzE6ufohqi0tdWV9g7LZc6pqBEAtLnwH6t9OMDC5 C00vkddyGMAtWEHnImcsMSwzv27eP43MoUs3Z012Z+dIGnsW2wKzc9HV32yzvL5M zDgqfkfNNWmG20xWg0dPbqsh+e/7dzzHnDKOoKxDYlhTM2ZlwLsOwp1Ya0Ahgir8 z1i1Q13t9eBpans9xSeX05R0gkp1djx8lis01yB4dkztwkL5unyUed5kXXfSHVmu 6D5CbeWgmEIOc4h9Q9vDj0AmVB2leUtp1Jjzkgx3HL9NlHLGlJAuPHwHTWS3nbM0 2UwioLdx+lZ/yAOfsBTGsqBO+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFO5NmkMO SpuBsb/jqTY7vmZVI/naMB8GA1UdIwQYMBaAFO9nAqfQrsg03vuPQWiy/o9NWEPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyRS9EQzMzNTk3QzBC NjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlEVGUtNDlCYUxMLWowMVlR LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyY0NwOUN1eURUZS00OUJhTEwtajAxWVEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTM1MkUvREMzMzU5N0MwQjYwMTFFRUIzMjIwNDFBQzRGOUFFMDIvM0U3MzRGNzBC OUEzMTFFRTg1RDYwQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnrSAwDQYJKoZIhvcNAQELBQADggEBAG/lQLpSQwAiGHqc H+k/n7wZaL2v6SKPDciXTHM78O9avsb+UwO4LuBlKutk7UHz1HEX8oPry4eWUxjG eP4fri1UzpcQQxPUAiCjUdFG9FsvIvXeA6X9dJQvh0qjZFqgoObX/b1S8hsQlvLO YGvFnh2kOXXmpktiQfw9ByPu9VN5p9jwJhtjy9BU84ZpDLzOLQ+oFCCQzRFTlrbp P2zIUAIHoe/yLpPW7UaGf/Z4+608RnUeR/0PKgOGSr4sOVodYVokixtkh3x6I3Zb b+qIaBP6KOI1qp/zXZBbj4wqlm74syDAQH0JExbF+rSCkG1lt3Gnhbno5Rxq9+TB BieGdyo= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:18 2024 by rpki-client on console-ams.rpki-client.org