$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa File: 8F1CEB52CFB011EEB0D03629C4F9AE02.roa (raw, json) Hash identifier: Kmg7kwDlvaIzsB0s1G2GeghqCGgTLA1XPI7Pe6WrX44= Subject key identifier: B4:C4:07:8F:FC:D7:90:21:99:E8:26:1E:68:C8:58:78:AD:2E:6F:E7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 19F6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa Signing time: Thu 30 May 2024 15:52:42 +0000 ROA not before: Thu 30 May 2024 15:52:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149537 IP address blocks: 157.20.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 20:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6646 (0x19f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 30 15:52:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a0ca-7b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:39:7f:2e:6b:d6:a1:5e:e2:1b:79:29:6b:67: f1:cb:a5:2c:b3:6d:97:14:f4:37:63:f1:4d:c2:4f: ce:36:d7:e3:fa:6c:fe:28:48:5c:5c:11:7b:71:91: 6f:67:0a:77:7e:09:76:91:90:05:97:44:63:67:a3: 8a:27:3f:9f:9f:e0:36:30:28:39:a1:45:46:ce:8f: 62:10:3a:8d:c0:56:6d:e2:7c:96:e2:2e:93:69:d8: 05:ad:d1:d5:94:4d:60:27:c3:bc:7d:1b:26:d2:33: 68:f1:7c:7e:a8:03:7c:21:f1:d9:97:5d:ff:e5:40: fb:39:9d:e6:d2:ad:21:be:da:4d:fd:b1:b9:95:d0: 46:3f:bd:6d:27:73:ed:c3:e1:98:57:75:88:e9:c6: 53:a4:5c:33:81:68:51:f4:5e:ef:71:96:2b:e2:ca: 13:7c:7a:28:06:2b:f7:b0:cb:75:18:63:45:9b:91: 25:73:38:0a:91:42:36:bf:58:c9:15:70:e5:67:3d: 4d:56:cf:5c:3b:65:5e:40:59:a2:56:3d:69:ad:c0: 82:37:ca:bd:82:f2:62:a7:19:fb:e3:db:e3:55:23: 6c:b7:33:e0:30:8a:40:bf:9c:38:ec:ae:71:a0:00: e2:d3:bf:98:f4:06:0b:de:ef:ea:64:98:b7:62:b4: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C4:07:8F:FC:D7:90:21:99:E8:26:1E:68:C8:58:78:AD:2E:6F:E7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.51.0/24 Signature Algorithm: sha256WithRSAEncryption 42:a9:09:e0:5e:2c:5d:b3:e2:17:e2:b3:d2:cc:f9:89:23:34: 62:8a:43:61:66:89:55:0c:cd:4b:73:ce:0c:b9:c2:99:07:b7: 49:4b:b3:af:b6:83:d4:f1:a3:0f:eb:43:06:a3:f9:0a:ea:f3: 86:17:27:d7:cb:2a:dd:69:48:b8:e1:ca:2d:0b:5d:7e:22:f7: 1a:fe:29:83:c5:6c:51:5e:38:a8:dd:ae:b4:99:67:7d:23:b3: 21:cc:0c:27:63:f9:b0:3b:53:a3:ec:1f:ea:44:38:7b:62:87: 9b:f0:66:74:eb:f5:3b:48:ac:4b:b8:c1:ea:a1:b1:6f:85:0a: 7c:0c:42:f1:91:4d:24:4f:a2:00:81:d8:d6:d8:d1:8b:dd:8c: 2e:98:8b:9b:66:84:90:5d:77:f5:a8:57:43:07:a8:f4:5e:4e: 99:b2:30:26:fd:79:60:e0:68:5f:4d:6a:84:b8:1e:75:a3:50: c5:ce:48:73:2a:3c:41:33:88:d6:3a:ad:3a:4a:04:5b:c6:a1: 6c:67:d4:12:d9:d4:0e:e4:67:1c:37:51:83:8a:d2:00:92:6e: c8:86:7c:29:14:3f:ac:5e:be:28:dd:31:5b:39:c4:9f:a4:1c: a6:9b:13:94:84:88:1c:71:92:54:5f:46:6f:e8:fd:37:ea:5c: 16:8b:de:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTMwMTU1MjQyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YTBjYS03YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Dl/LmvWoV7iG3kpa2fxy6Uss22XFPQ3Y/FNwk/ONtfj+mz+KEhcXBF7cZFv Zwp3fgl2kZAFl0RjZ6OKJz+fn+A2MCg5oUVGzo9iEDqNwFZt4nyW4i6TadgFrdHV lE1gJ8O8fRsm0jNo8Xx+qAN8IfHZl13/5UD7OZ3m0q0hvtpN/bG5ldBGP71tJ3Pt w+GYV3WI6cZTpFwzgWhR9F7vcZYr4soTfHooBiv3sMt1GGNFm5ElczgKkUI2v1jJ FXDlZz1NVs9cO2VeQFmiVj1prcCCN8q9gvJipxn749vjVSNstzPgMIpAv5w47K5x oADi07+Y9AYL3u/qZJi3YrRXcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLTEB4/8 15AhmegmHmjIWHitLm/nMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEYxQ0VCNTJD RkIwMTFFRUIwRDAzNjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdFDMwDQYJKoZIhvcNAQELBQADggEBAEKpCeBeLF2z4hfi s9LM+YkjNGKKQ2FmiVUMzUtzzgy5wpkHt0lLs6+2g9Txow/rQwaj+Qrq84YXJ9fL Kt1pSLjhyi0LXX4i9xr+KYPFbFFeOKjdrrSZZ30jsyHMDCdj+bA7U6PsH+pEOHti h5vwZnTr9TtIrEu4weqhsW+FCnwMQvGRTSRPogCB2NbY0YvdjC6Yi5tmhJBdd/Wo V0MHqPReTpmyMCb9eWDgaF9NaoS4HnWjUMXOSHMqPEEziNY6rTpKBFvGoWxn1BLZ 1A7kZxw3UYOK0gCSbsiGfCkUP6xevijdMVs5xJ+kHKabE5SEiBxxklRfRm/o/Tfq XBaL3rI= -----END CERTIFICATE-----Generated at Fri Jun 7 03:18:24 2024 by rpki-client on console-ams.rpki-client.org