$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa File: 33A48584C92911EDAE3AB84EC4F9AE02.roa (raw, json) Hash identifier: ZbC1fIWVYM0VLVl8rd4V+PKdCpSrgSM3tfi0uNsU2b0= Subject key identifier: 63:95:6D:37:11:3A:43:B0:8E:CA:F5:50:4F:3B:96:B0:87:A6:9E:C6 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: F4 Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa Signing time: Mon 01 Jul 2024 05:26:02 +0000 ROA not before: Mon 01 Jul 2024 05:26:02 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 8075 IP address blocks: 202.14.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Jul 1 05:26:02 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66823de9-339c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:aa:7c:15:33:7e:ae:66:8c:dc:19:01:a1: ef:1f:33:83:cb:2a:a7:01:98:7c:f3:fd:06:51:b8: d9:0e:e9:a2:84:dd:44:63:8e:b1:59:d5:86:72:04: 1d:67:5c:d9:ab:29:98:d6:bd:6b:8d:5d:5e:66:69: 57:7a:8a:b2:2d:26:d8:94:a4:c9:f8:39:11:f8:1c: b0:bb:fd:6d:51:24:e6:4e:8c:dd:d3:e7:19:1e:70: 88:6c:cc:95:bd:dd:f0:24:83:ee:17:fb:2c:0a:24: 34:24:96:d8:f3:e9:56:31:c0:8c:55:08:11:cf:c1: 4c:f5:4a:97:d5:ed:13:8e:b6:eb:53:60:c7:84:77: 9b:5d:50:a3:52:df:03:0f:15:76:20:13:68:32:94: f8:02:22:60:59:00:d5:d0:47:48:9f:98:5d:5d:b9: 5a:07:d9:d3:77:e4:66:f3:b0:85:96:d3:ce:cd:b6: 2b:df:90:91:d7:19:17:c4:23:48:a0:11:c3:4c:34: ff:ea:61:05:a4:31:eb:2f:86:b0:69:e4:da:f4:8c: 64:38:b6:43:ac:0c:e2:05:eb:e9:9c:3b:26:7a:c2: 0e:11:46:4f:4e:21:2c:6b:3d:87:a7:32:d8:43:f1: 2f:9f:72:3a:1d:3c:ed:5b:70:9b:a7:14:5e:2a:c4: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:95:6D:37:11:3A:43:B0:8E:CA:F5:50:4F:3B:96:B0:87:A6:9E:C6 X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.14.244.0/24 Signature Algorithm: sha256WithRSAEncryption 72:a5:89:aa:03:8f:53:8b:b6:a9:2b:26:75:6c:27:74:fd:a1: 4c:f9:d2:0b:df:b9:56:62:43:00:40:26:b3:8f:05:fe:56:74: 92:71:d1:93:f7:03:af:5c:c5:7d:1d:73:5e:f4:c8:3f:7d:7d: f5:17:68:83:64:2b:f7:3a:26:d1:5b:0c:93:c0:6f:df:68:fd: 5f:3e:78:15:bd:b4:41:21:b3:13:8d:b8:d0:1d:67:89:26:f4: 69:cb:2f:44:8a:df:26:19:f7:c1:d1:ec:2f:b4:1f:45:c1:cc: 33:ad:63:7e:a7:70:4a:10:40:5a:c6:e0:5c:0b:6e:2b:01:a4: e2:f5:18:63:0a:8e:26:49:98:48:96:58:b5:89:b8:b6:da:c9: b4:99:ce:1d:5e:cb:f9:73:4c:e3:b6:bb:93:f8:ae:db:1d:e9: 53:fc:c7:1d:b1:35:a9:fa:74:2b:b2:70:1e:95:75:ec:5d:2f: 01:bb:fa:c6:54:48:20:71:67:7a:f8:79:6a:e1:f5:a9:02:7f: b6:a3:4f:44:07:58:d0:1a:29:fc:72:a5:bc:56:39:bd:71:14: c9:17:e5:e2:97:9c:b0:34:81:7f:13:e7:e9:73:a7:3e:96:2f: 6e:8f:c5:bb:5b:95:41:86:dc:4d:56:24:c8:76:b2:cd:1b:04: f3:f1:58:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjQwNzAxMDUyNjAyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjgyM2RlOS0zMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi2qfBUzfq5mjNwZAaHvHzODyyqnAZh88/0GUbjZDumihN1EY46xWdWGcgQd Z1zZqymY1r1rjV1eZmlXeoqyLSbYlKTJ+DkR+Bywu/1tUSTmTozd0+cZHnCIbMyV vd3wJIPuF/ssCiQ0JJbY8+lWMcCMVQgRz8FM9UqX1e0TjrbrU2DHhHebXVCjUt8D DxV2IBNoMpT4AiJgWQDV0EdIn5hdXblaB9nTd+Rm87CFltPOzbYr35CR1xkXxCNI oBHDTDT/6mEFpDHrL4awaeTa9IxkOLZDrAziBevpnDsmesIOEUZPTiEsaz2HpzLY Q/Evn3I6HTztW3CbpxReKsSk9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGOVbTcR OkOwjsr1UE87lrCHpp7GMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQ5MDIvNTcwQjNGOEVDOTI2MTFFREFGMkI5RDREQzRGOUFFMDIvMzNBNDg1ODRD OTI5MTFFREFFM0FCODRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKDvQwDQYJKoZIhvcNAQELBQADggEBAHKliaoDj1OLtqkr JnVsJ3T9oUz50gvfuVZiQwBAJrOPBf5WdJJx0ZP3A69cxX0dc170yD99ffUXaINk K/c6JtFbDJPAb99o/V8+eBW9tEEhsxONuNAdZ4km9GnLL0SK3yYZ98HR7C+0H0XB zDOtY36ncEoQQFrG4FwLbisBpOL1GGMKjiZJmEiWWLWJuLbaybSZzh1ey/lzTOO2 u5P4rtsd6VP8xx2xNan6dCuycB6VdexdLwG7+sZUSCBxZ3r4eWrh9akCf7ajT0QH WNAaKfxypbxWOb1xFMkX5eKXnLA0gX8T5+lzpz6WL26PxbtblUGG3E1WJMh2ss0b BPPxWK4= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:18 2024 by rpki-client on console-ams.rpki-client.org