$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/33CFE442C07511EE980AEC0CC4F9AE02.roa File: 33CFE442C07511EE980AEC0CC4F9AE02.roa (raw, json) Hash identifier: o8EszhqBbS63QDwDle8oJR0ZCRZ42AQ9Rrdqe6ZMAPc= Subject key identifier: 1C:C9:EA:B9:49:EE:B7:B8:66:F6:88:93:92:E0:3F:12:D7:F0:4C:C7 Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 09E8 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/33CFE442C07511EE980AEC0CC4F9AE02.roa Signing time: Thu 22 Feb 2024 20:58:36 +0000 ROA not before: Thu 22 Feb 2024 20:58:36 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 134069 IP address blocks: 43.231.224.0/22 maxlen: 24 45.115.220.0/22 maxlen: 24 103.51.48.0/22 maxlen: 22 103.51.48.0/23 maxlen: 23 103.51.50.0/24 maxlen: 24 103.51.51.0/24 maxlen: 24 202.6.248.0/22 maxlen: 24 2402:1a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2536 (0x9e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Feb 22 20:58:36 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d7b57c-91a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:d6:7a:bd:78:ff:e9:82:54:c3:40:d1:57: 3b:41:7f:81:f1:e3:d7:dd:a9:5d:e4:81:56:4c:de: be:47:e0:ab:78:ec:16:a9:c6:a9:a6:1d:10:92:37: c3:46:69:2c:c0:1e:e4:ba:0d:9e:e4:41:4e:40:d4: e9:d6:6c:6c:2d:16:c2:be:e9:f0:f2:07:10:c1:7e: 00:c8:a9:dc:82:8d:d3:8d:e7:db:95:9e:ac:9c:96: 7c:58:03:48:75:82:66:30:95:3c:f0:76:53:a0:91: d8:3c:73:86:6a:89:63:87:41:c7:2c:0d:3c:c1:d7: ff:b7:da:6e:fc:02:13:2d:8d:af:b1:4f:5e:6e:b4: 2d:b2:21:60:b8:38:36:3a:97:eb:9a:a0:97:4e:62: 28:fc:d8:da:6b:9c:48:19:ac:d4:6a:f5:f4:e5:ad: 34:d5:46:b4:53:a9:57:c9:15:9e:e4:95:1d:63:6e: 64:49:41:6b:27:90:a5:81:db:21:6f:be:99:0a:27: 70:b9:e9:bc:7c:65:a4:d3:e6:54:26:ee:f3:f8:88: 5c:ee:1e:f8:88:1c:2b:61:93:f1:9e:b5:31:cd:76: bc:3a:f1:68:f6:b7:a3:50:98:31:ae:8b:e4:2f:98: ce:3a:b0:fa:02:0a:42:3b:b5:7b:18:0c:c8:ad:75: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C9:EA:B9:49:EE:B7:B8:66:F6:88:93:92:E0:3F:12:D7:F0:4C:C7 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/33CFE442C07511EE980AEC0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.224.0/22 45.115.220.0/22 103.51.48.0/22 202.6.248.0/22 IPv6: 2402:1a80::/32 Signature Algorithm: sha256WithRSAEncryption 98:af:51:44:2f:96:24:ec:eb:97:b9:7f:09:5e:fd:eb:15:cd: d1:af:66:bc:5f:69:5c:42:70:40:c3:73:77:4c:6e:0a:04:ca: 86:b2:02:ac:2d:d8:57:aa:3c:20:b4:c1:69:ac:5e:a5:9a:76: 1e:da:86:21:04:77:b7:35:86:1a:f4:27:82:4d:77:b9:4a:b3: be:5d:db:6c:5a:64:95:02:0b:e6:45:4f:c5:98:ff:bb:0f:3d: cd:32:b8:71:37:90:b2:9f:b6:a8:03:6b:ee:9b:5b:c1:7b:11: 64:13:2b:a7:be:10:ed:9c:c3:5e:75:36:28:22:41:6b:53:40: c1:95:51:9d:4d:a7:dc:ec:be:b4:20:d0:33:f2:87:a1:49:23: 79:85:f6:63:c7:40:04:7a:ae:7b:89:25:75:c9:1b:90:0f:94: 42:96:e1:0e:5c:14:57:a1:d2:29:46:85:00:89:aa:af:c6:32: f5:70:0d:99:3d:23:44:f5:b7:25:33:ec:8b:9e:38:71:6a:cb: f9:6b:d4:66:10:8b:cd:73:d7:4c:3d:15:c0:79:90:dc:00:9f: 35:7c:4e:b4:14:b9:78:f5:87:28:de:40:50:72:13:ac:92:f6: d3:31:99:4c:86:a6:a1:05:2c:f1:f2:1b:d5:80:4c:34:1d:42: 24:44:0b:05 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjQwMjIyMjA1ODM2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3YjU3Yy05MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnrWer14/+mCVMNA0Vc7QX+B8ePX3ald5IFWTN6+R+CreOwWqcapph0QkjfD RmkswB7kug2e5EFOQNTp1mxsLRbCvunw8gcQwX4AyKncgo3TjefblZ6snJZ8WANI dYJmMJU88HZToJHYPHOGaoljh0HHLA08wdf/t9pu/AITLY2vsU9ebrQtsiFguDg2 OpfrmqCXTmIo/Njaa5xIGazUavX05a001Ua0U6lXyRWe5JUdY25kSUFrJ5Clgdsh b76ZCidwuem8fGWk0+ZUJu7z+Ihc7h74iBwrYZPxnrUxzXa8OvFo9rejUJgxrovk L5jOOrD6AgpCO7V7GAzIrXXcwQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBzJ6rlJ 7re4ZvaIk5LgPxLX8EzHMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA4NzUvNkQ5MUFBQkM1OTMxMTFFQUFBMzFCNDBBQzRGOUFFMDIvMzNDRkU0NDJD MDc1MTFFRTk4MEFFQzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIr5+ADBAItc9wDBAJnMzADBALKBvgwDQQCAAIwBwMFACQC GoAwDQYJKoZIhvcNAQELBQADggEBAJivUUQvliTs65e5fwle/esVzdGvZrxfaVxC cEDDc3dMbgoEyoayAqwt2FeqPCC0wWmsXqWadh7ahiEEd7c1hhr0J4JNd7lKs75d 22xaZJUCC+ZFT8WY/7sPPc0yuHE3kLKftqgDa+6bW8F7EWQTK6e+EO2cw151Nigi QWtTQMGVUZ1Np9zsvrQg0DPyh6FJI3mF9mPHQAR6rnuJJXXJG5APlEKW4Q5cFFeh 0ilGhQCJqq/GMvVwDZk9I0T1tyUz7IueOHFqy/lr1GYQi81z10w9FcB5kNwAnzV8 TrQUuXj1hyjeQFByE6yS9tMxmUyGpqEFLPHyG9WATDQdQiRECwU= -----END CERTIFICATE-----Generated at Mon May 6 23:05:51 2024 by rpki-client on console-fra.rpki-client.org