$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/C635D41E611411EF9B00D029C4F9AE02.roa File: C635D41E611411EF9B00D029C4F9AE02.roa (raw, json) Hash identifier: OB7rtGPc0fkmD0lX/j5TtVMfzbTV8gxLM92j8j+P3vY= Subject key identifier: F9:3E:DA:D5:1D:87:A7:10:96:D9:9E:1F:19:AD:79:DF:35:D0:38:43 Certificate issuer: /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A Certificate serial: 86 Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/C635D41E611411EF9B00D029C4F9AE02.roa Signing time: Fri 23 Aug 2024 05:58:52 +0000 ROA not before: Fri 23 Aug 2024 05:58:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 45128 IP address blocks: 137.157.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A Validity Not Before: Aug 23 05:58:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66c8251c-5cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:5c:53:11:b7:97:4f:14:d0:89:49:b0:7b: ea:05:95:db:69:61:d2:a1:f7:5a:c4:d3:c4:4e:62: 9b:08:83:96:1f:de:8d:20:26:ae:f8:1d:dd:7b:d2: 90:12:3f:4b:3f:70:93:57:31:b9:8a:f6:54:ef:e4: 23:22:9f:01:fb:35:ea:63:2b:98:cb:85:c3:e6:39: 10:99:74:f0:93:d9:13:83:e4:79:56:cd:b8:c1:82: 76:0f:95:15:fc:2c:20:18:14:bb:85:e7:7a:ab:91: 98:97:e8:18:69:72:d7:4d:94:f1:0f:e6:e9:7a:85: 16:57:b9:f0:6e:59:87:f7:6a:b2:86:14:e4:ee:bb: ca:fb:63:3d:87:34:b6:99:b3:e9:ca:37:c3:53:15: 02:1b:12:87:7c:3f:97:a9:ab:e9:e2:85:af:e9:03: 9d:00:10:82:ce:8f:bf:23:a1:88:32:3d:b0:f8:d8: 66:05:d7:9a:f7:cc:b6:cd:c7:86:d4:44:eb:34:bb: 3b:83:99:1a:a3:36:e6:42:df:b2:d6:7f:18:8d:00: e5:2b:aa:69:de:a2:ce:fe:01:dc:ee:5c:4e:f0:1c: f5:5d:7c:08:02:a5:66:6a:ea:e7:d5:8c:93:98:85: b1:47:c2:84:fd:1b:d6:9e:6e:59:8a:5e:17:76:d1: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3E:DA:D5:1D:87:A7:10:96:D9:9E:1F:19:AD:79:DF:35:D0:38:43 X509v3 Authority Key Identifier: keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/C635D41E611411EF9B00D029C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5d:86:24:64:e9:23:a2:08:c5:96:68:2c:f2:eb:bd:51:8e:4a: 3e:25:d8:43:18:3a:6a:eb:a9:e9:28:2a:ce:d4:fe:bd:20:ff: fc:65:73:40:03:f0:be:0d:22:15:d0:a0:32:82:b8:9b:fc:91: 72:bd:a6:31:c6:bd:be:8f:98:12:70:03:a0:79:54:ed:54:86: b1:82:50:84:51:06:51:60:0a:a4:fc:13:68:73:78:2e:53:cc: b6:7c:28:4a:d1:51:3f:b3:ff:0d:ea:52:1d:9e:f3:6e:9f:e2: 21:56:7e:2e:b0:0e:a0:bb:e9:e0:92:93:6d:0b:4e:b4:ef:b7: d6:9d:97:5a:0d:8d:d1:fb:4b:83:31:d1:a2:76:9a:a2:04:79: d3:f8:19:e2:80:21:70:1a:6a:38:a0:9e:70:ec:6f:50:b7:50: ec:9e:79:9a:22:52:8c:d7:3f:23:98:88:74:e5:57:3f:e6:ff: e6:e7:a4:63:79:a6:99:08:0c:a7:ee:37:1e:75:28:2f:84:4b: 39:b8:f3:f1:f7:4c:2d:75:34:95:be:cc:c9:5b:a2:42:62:17: a8:05:1a:46:f5:0c:02:67:64:5b:c9:1c:bb:15:47:f4:ec:63: fc:7b:bd:5b:c1:18:23:29:47:aa:b0:ba:9f:05:89:38:60:ea: 9d:af:71:6f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDM5ODM3Q0I0QkVDQUY2QTYyNkM5MTZBRTk2MDI0MUI2 MDlFNkIyMEEwHhcNMjQwODIzMDU1ODUyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM4MjUxYy01Y2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmv1cUxG3l08U0IlJsHvqBZXbaWHSofdaxNPETmKbCIOWH96NICau+B3de9KQ Ej9LP3CTVzG5ivZU7+QjIp8B+zXqYyuYy4XD5jkQmXTwk9kTg+R5Vs24wYJ2D5UV /CwgGBS7hed6q5GYl+gYaXLXTZTxD+bpeoUWV7nwblmH92qyhhTk7rvK+2M9hzS2 mbPpyjfDUxUCGxKHfD+Xqavp4oWv6QOdABCCzo+/I6GIMj2w+NhmBdea98y2zceG 1ETrNLs7g5kaozbmQt+y1n8YjQDlK6pp3qLO/gHc7lxO8Bz1XXwIAqVmaurn1YyT mIWxR8KE/RvWnm5Zil4XdtHGPwIDAQABo4IClDCCApAwHQYDVR0OBBYEFPk+2tUd h6cQltmeHxmted810DhDMB8GA1UdIwQYMBaAFDmDfLS+yvamJskWrpYCQbYJ5rIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xNTlBNEFEMDkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3SzlxWW15UmF1bGdKQnRnbm1z Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09ZTjh0TDdLOXFZbXlSYXVsZ0pCdGdubXNnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEMzQjcvMTU5QTRBRDA5MzI1MTFFRUJFOTg3RjYwQzRGOUFFMDIvQzYzNUQ0MUU2 MTE0MTFFRjlCMDBEMDI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCJnTANBgkqhkiG9w0BAQsFAAOCAQEAXYYkZOkjogjFlmgs 8uu9UY5KPiXYQxg6auup6SgqztT+vSD//GVzQAPwvg0iFdCgMoK4m/yRcr2mMca9 vo+YEnADoHlU7VSGsYJQhFEGUWAKpPwTaHN4LlPMtnwoStFRP7P/DepSHZ7zbp/i IVZ+LrAOoLvp4JKTbQtOtO+31p2XWg2N0ftLgzHRonaaogR50/gZ4oAhcBpqOKCe cOxvULdQ7J55miJSjNc/I5iIdOVXP+b/5uekY3mmmQgMp+43HnUoL4RLObjz8fdM LXU0lb7MyVuiQmIXqAUaRvUMAmdkW8kcuxVH9Oxj/Hu9W8EYIylHqrC6nwWJOGDq na9xbw== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org