$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa File: 33B3C60425FD11EDA4097785C4F9AE02.roa (raw, json) Hash identifier: /lgRgsVbOk11+aR4zJT9E0tlRjbV/Z20R2zZnazcgxA= Subject key identifier: D3:E8:D4:1A:E1:EC:45:70:23:D4:4A:DB:64:74:BF:82:78:45:2E:58 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 0484 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa Signing time: Wed 19 Jul 2023 00:21:10 +0000 ROA not before: Wed 19 Jul 2023 00:21:10 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38254 IP address blocks: 103.167.250.0/24 maxlen: 24 2001:df6:c480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Jul 19 00:21:10 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b72c76-6c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:b5:46:22:02:ae:46:53:17:d2:53:a2:5b: eb:99:d6:47:78:6c:74:c7:2d:a0:b3:5b:e3:b9:c3: 6a:d4:39:c7:d9:c3:05:e0:d2:c2:6c:43:a7:9c:6f: 40:4a:32:ab:16:37:fe:ce:84:9f:dc:8c:f5:57:37: b1:b1:e7:ef:08:70:d8:62:d8:87:67:0e:24:18:e7: ce:f5:82:06:1a:4f:32:ad:a1:09:aa:2b:2f:cf:8b: 61:da:bf:ab:a0:7c:29:c2:69:bf:db:87:ed:fc:25: ab:b7:df:91:eb:f4:b8:52:e6:bc:b1:78:0b:d0:60: 23:35:e3:0b:75:db:ae:89:96:9f:e1:38:33:ce:bd: 36:51:f1:a5:18:d0:a8:4b:91:e6:97:89:b6:05:70: d5:4c:59:f2:f8:76:2f:f4:46:b8:62:07:2a:88:ae: ae:d3:1a:8c:ef:c1:c1:13:86:d3:a0:c9:92:9b:cf: 11:6f:48:41:d2:7f:62:59:2e:a1:05:72:91:8c:c3: 9b:9f:ae:bd:17:d0:c6:84:1e:e6:49:ea:cb:02:7f: 27:ef:9c:48:d2:3e:53:c7:cd:50:ca:ca:a9:da:78: 32:5c:5b:a2:35:c1:4c:36:ca:80:0a:72:2a:6a:da: 3e:a4:c2:29:11:3c:11:4b:78:fa:ad:d8:65:8c:31: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E8:D4:1A:E1:EC:45:70:23:D4:4A:DB:64:74:BF:82:78:45:2E:58 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.250.0/24 IPv6: 2001:df6:c480::/48 Signature Algorithm: sha256WithRSAEncryption d0:4a:98:e4:c1:80:3c:33:05:ad:15:a5:2a:a2:0d:4d:b6:e5: 5e:3f:a5:47:34:8d:16:88:b6:27:ad:f6:2d:90:55:db:15:3d: 1c:85:44:87:ae:ec:31:b7:67:0a:f3:41:91:09:66:b0:31:82: 7a:d6:64:c6:82:1c:d3:2e:c4:c6:56:ea:27:f1:00:7a:60:ce: d6:9f:ca:c2:47:ae:3e:d3:57:f4:f7:8a:2e:ef:6e:46:4b:56: 50:e1:23:6d:31:a9:40:02:79:80:04:e4:ba:b2:9e:f5:1a:29: 88:20:a8:3b:19:5c:a8:ae:57:f8:06:02:62:6d:e0:1b:16:f0: 02:57:cb:db:18:92:45:5d:be:f0:fe:dc:00:b0:84:4b:7b:2c: 36:f5:84:14:59:94:74:b0:13:ea:43:07:37:26:e4:31:5a:0b: 3c:0c:76:2e:e7:1d:cc:4d:5b:7b:20:61:b3:e5:b2:42:fe:63: e7:3b:58:33:05:99:fb:1e:c9:2d:e4:33:e0:8f:c0:7c:37:1a: 86:31:c6:7d:64:23:40:da:9f:aa:19:d3:1e:0e:03:13:9a:9f: 73:c2:e8:51:70:cd:32:2e:f0:af:30:14:12:9d:f7:35:04:21: f0:f2:97:05:2a:ee:09:d6:a4:e3:b0:5f:e2:5a:09:d9:a9:b1: 4a:0b:15:66 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjMwNzE5MDAyMTEwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI3MmM3Ni02YzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujC1RiICrkZTF9JTolvrmdZHeGx0xy2gs1vjucNq1DnH2cMF4NLCbEOnnG9A SjKrFjf+zoSf3Iz1VzexsefvCHDYYtiHZw4kGOfO9YIGGk8yraEJqisvz4th2r+r oHwpwmm/24ft/CWrt9+R6/S4Uua8sXgL0GAjNeMLdduuiZaf4Tgzzr02UfGlGNCo S5Hml4m2BXDVTFny+HYv9Ea4YgcqiK6u0xqM78HBE4bToMmSm88Rb0hB0n9iWS6h BXKRjMObn669F9DGhB7mSerLAn8n75xI0j5Tx81Qysqp2ngyXFuiNcFMNsqACnIq ato+pMIpETwRS3j6rdhljDH5nwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNPo1Brh 7EVwI9RK22R0v4J4RS5YMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBEMzkvN0YyNEZGRDBDODU4MTFFQkJFMEVGODM0QzRGOUFFMDIvMzNCM0M2MDQy NUZEMTFFREE0MDk3Nzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnp/owDwQCAAIwCQMHACABDfbEgDANBgkqhkiG9w0BAQsF AAOCAQEA0EqY5MGAPDMFrRWlKqINTbblXj+lRzSNFoi2J632LZBV2xU9HIVEh67s MbdnCvNBkQlmsDGCetZkxoIc0y7ExlbqJ/EAemDO1p/KwkeuPtNX9PeKLu9uRktW UOEjbTGpQAJ5gATkurKe9RopiCCoOxlcqK5X+AYCYm3gGxbwAlfL2xiSRV2+8P7c ALCES3ssNvWEFFmUdLAT6kMHNybkMVoLPAx2LucdzE1beyBhs+WyQv5j5ztYMwWZ +x7JLeQz4I/AfDcahjHGfWQjQNqfqhnTHg4DE5qfc8LoUXDNMi7wrzAUEp33NQQh 8PKXBSruCdak47Bf4loJ2amxSgsVZg== -----END CERTIFICATE-----Generated at Sun May 19 02:59:13 2024 by rpki-client on console-ams.rpki-client.org