$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/33B566F2E80811EEB4888B0FC4F9AE02.roa File: 33B566F2E80811EEB4888B0FC4F9AE02.roa (raw, json) Hash identifier: NoXuOW0Fxe9kbmt2KuqfmbmSgijDj9PUL7XzIgwj6mw= Subject key identifier: 7A:C9:3F:11:60:DA:8A:CB:CF:B7:2F:AF:10:58:1E:D7:47:EF:EF:54 Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 03 Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/33B566F2E80811EEB4888B0FC4F9AE02.roa Signing time: Fri 22 Mar 2024 04:54:02 +0000 ROA not before: Fri 22 Mar 2024 04:54:02 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 133894 IP address blocks: 43.230.209.0/24 maxlen: 24 103.46.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 09:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Mar 22 04:54:02 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65fd0eea-5ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:65:61:9c:30:55:7e:c9:e0:3b:5c:6f:5a: 84:f2:f9:1a:8e:6b:16:8a:f6:2d:b3:fb:47:e3:d1: c8:14:b5:f4:db:c3:d8:26:03:91:ca:c1:c4:2f:ac: 54:d4:4f:d2:55:72:d0:99:a8:a8:d3:dd:35:c2:68: c2:d7:73:f8:4d:8b:7b:6e:87:f3:8b:f4:67:aa:d6: cc:ea:e4:4d:a2:c7:61:1c:db:dc:e0:94:cf:81:4c: a3:ee:5d:59:b9:46:67:05:90:d5:7b:4b:ac:82:83: a0:76:06:fc:f3:53:35:f0:d8:0b:e1:11:fa:66:09: 7e:12:fd:e8:18:3b:f9:47:8d:d1:f2:8e:f2:68:0e: 95:03:b9:d0:1e:7c:2e:33:39:32:93:7f:05:de:91: 2a:0a:ac:3e:bc:be:ae:4e:0a:b0:3a:39:e8:a7:a6: 4e:da:c5:81:3e:11:6a:b2:3c:5d:4c:81:a9:43:21: 03:47:20:91:09:ce:8f:df:cc:98:33:8f:b0:00:3a: 0e:28:ce:cb:b9:5e:87:3c:03:d7:f4:73:4d:72:06: 62:a4:80:4a:4e:8b:3f:e2:0b:1e:bd:09:13:24:15: b8:37:36:d0:74:2e:71:9a:20:38:f1:16:d4:c7:20: 95:0a:f8:59:7e:90:12:14:4b:f0:ba:77:e2:19:54: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C9:3F:11:60:DA:8A:CB:CF:B7:2F:AF:10:58:1E:D7:47:EF:EF:54 X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/33B566F2E80811EEB4888B0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.209.0/24 103.46.208.0/22 Signature Algorithm: sha256WithRSAEncryption 93:74:fe:ed:d6:72:c3:3f:e0:06:44:ca:f1:40:9a:39:8b:e3: 04:c9:6e:5e:e6:64:51:d5:8f:60:f7:a8:10:2f:40:0c:59:86: 92:ad:cd:33:f9:d6:1c:65:40:ad:e4:a8:8e:67:79:55:6c:0a: e6:a0:6a:4f:c5:3e:af:96:48:cb:16:7c:94:39:9d:ba:89:26: 82:b9:af:98:f4:64:fd:d0:d2:f7:b0:af:e7:56:7b:93:15:45: a6:c9:b3:46:bd:8c:df:f1:76:35:a6:2f:54:44:62:67:39:e2: 66:d0:c6:7b:18:b1:dd:d4:07:15:5e:23:8a:22:87:9f:2a:68: 2f:52:64:1b:0d:80:61:08:f8:63:7b:8c:38:d8:85:24:52:c0: 30:73:dc:12:26:6c:4d:b6:0a:93:5d:ac:a5:b6:fb:fe:9e:f5: 7e:c1:cc:23:6c:17:c9:b8:71:ba:4d:08:68:a5:37:6c:0a:fe: 3e:20:89:37:2a:21:37:53:53:04:c0:7c:6c:94:0b:d8:b1:20: e7:4b:87:d0:32:7b:65:7e:9b:33:11:4f:47:12:35:bd:2b:1f: ec:8a:79:11:ff:81:b2:d4:dd:6e:b7:87:71:f4:92:fb:28:86: fd:78:91:c3:5d:55:40:ac:1f:40:9a:15:b8:7e:a8:25:ca:4e: 43:37:8b:09 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QUQyRDExMC8GA1UEBRMoOTRBOTUwQjMwM0I0NjkwMERENUEzMDYxMDMwQzg5QTQ4 OTY4MDNBRjAeFw0yNDAzMjIwNDU0MDJaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZmQwZWVhLTVjZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd7WVhnDBVfsngO1xvWoTy+RqOaxaK9i2z+0fj0cgUtfTbw9gmA5HKwcQvrFTU T9JVctCZqKjT3TXCaMLXc/hNi3tuh/OL9Geq1szq5E2ix2Ec29zglM+BTKPuXVm5 RmcFkNV7S6yCg6B2BvzzUzXw2AvhEfpmCX4S/egYO/lHjdHyjvJoDpUDudAefC4z OTKTfwXekSoKrD68vq5OCrA6Oeinpk7axYE+EWqyPF1MgalDIQNHIJEJzo/fzJgz j7AAOg4ozsu5Xoc8A9f0c01yBmKkgEpOiz/iCx69CRMkFbg3NtB0LnGaIDjxFtTH IJUK+Fl+kBIUS/C6d+IZVGKhAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUesk/EWDa isvPty+vEFge10fv71QwHwYDVR0jBBgwFoAUlKlQswO0aQDdWjBhAwyJpIloA68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBRDJELzkwODhFRTVBRTgw MTExRUVBRDZDNTAzMEM0RjlBRTAyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEtsUXN3TzBhUURkV2pCaEF3eUpwSWxvQTY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUQyRC85MDg4RUU1QUU4MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi8zM0I1NjZGMkU4 MDgxMUVFQjQ4ODhCMEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEACvm0QMEAmcu0DANBgkqhkiG9w0BAQsFAAOCAQEAk3T+7dZy wz/gBkTK8UCaOYvjBMluXuZkUdWPYPeoEC9ADFmGkq3NM/nWHGVAreSojmd5VWwK 5qBqT8U+r5ZIyxZ8lDmduokmgrmvmPRk/dDS97Cv51Z7kxVFpsmzRr2M3/F2NaYv VERiZzniZtDGexix3dQHFV4jiiKHnypoL1JkGw2AYQj4Y3uMONiFJFLAMHPcEiZs TbYKk12spbb7/p71fsHMI2wXybhxuk0IaKU3bAr+PiCJNyohN1NTBMB8bJQL2LEg 50uH0DJ7ZX6bMxFPRxI1vSsf7Ip5Ef+BstTdbreHcfSS+yiG/XiRw11VQKwfQJoV uH6oJcpOQzeLCQ== -----END CERTIFICATE-----Generated at Wed May 29 10:43:59 2024 by rpki-client on console-ams.rpki-client.org