$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C384D79CEB5811EE9EDEBA53C4F9AE02.roa File: C384D79CEB5811EE9EDEBA53C4F9AE02.roa (raw, json) Hash identifier: N/Spgk2LFDwBFsfokVi2zV/FZ+trXF1Hr2BSvCDgTrs= Subject key identifier: EF:A8:9E:76:2B:A8:1C:2A:B1:FC:5F:70:E8:B8:E4:FF:05:58:95:7C Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1A34 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C384D79CEB5811EE9EDEBA53C4F9AE02.roa Signing time: Thu 30 May 2024 15:53:40 +0000 ROA not before: Thu 30 May 2024 15:53:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 58898 IP address blocks: 157.20.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6708 (0x1a34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 30 15:53:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a103-933d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:c9:ba:83:99:cb:d2:62:6a:53:f4:90:0b: d9:f5:f6:08:aa:78:b1:50:31:3c:5b:2c:69:e6:87: 2b:77:6e:8c:bb:e9:52:9f:37:1a:b4:4e:f2:1d:da: 3b:93:4b:5c:5c:cd:6e:be:ce:d0:da:3c:d3:75:b6: 6d:6b:76:6c:cc:55:e9:7f:7d:51:20:ff:1b:56:fa: 41:ef:44:eb:97:e7:a9:69:be:9a:69:ea:30:15:f0: 88:d7:ce:11:bb:12:1b:63:84:24:6c:32:49:7e:5d: 5e:7a:0d:9a:12:2d:c9:3e:30:90:2f:74:55:0f:1f: df:73:02:e7:6a:44:1d:31:b2:f5:db:0a:47:63:d5: ff:91:c4:68:53:bd:0f:c8:9d:94:f8:ab:a7:d2:cd: 18:7b:9a:5d:3a:01:a1:82:b9:b1:b6:57:02:71:ef: d6:85:c5:ad:ac:3b:7e:d3:07:77:d7:af:8e:48:c1: d1:0c:0b:a5:f2:c7:5f:43:a5:63:82:38:2c:5c:20: 7b:47:15:09:48:a7:6c:03:48:e9:8d:37:61:2f:35: 63:fe:f8:02:8e:b1:e3:0d:d7:47:26:a2:1e:66:59: a5:18:b4:eb:b8:6e:fd:d8:4d:64:2e:ee:e1:d5:2f: 75:a2:5f:59:b5:91:6b:f3:36:ef:1b:11:7e:ce:21: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A8:9E:76:2B:A8:1C:2A:B1:FC:5F:70:E8:B8:E4:FF:05:58:95:7C X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C384D79CEB5811EE9EDEBA53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.250.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:d4:3e:af:c8:69:14:43:ea:3a:e6:52:81:fe:58:ec:30:b6: 4a:53:6a:89:d4:4f:23:f6:8f:cc:af:b9:bc:78:67:d4:0f:b2: 33:c9:10:69:2e:6e:93:0a:9b:df:ed:16:1c:32:73:98:35:35: 31:34:70:d1:82:c4:96:24:82:bf:3b:6e:52:30:0c:75:24:7f: 88:3a:99:35:8c:a6:8d:92:54:2a:f7:af:c2:96:e8:1a:77:ef: f5:1d:8a:55:c4:72:45:dd:64:3a:7e:4e:dc:bb:d3:80:e7:11: 05:d5:92:f6:08:ef:a0:ba:0f:13:b4:de:42:1a:02:cb:84:74: c7:c5:4a:e4:b0:8d:8a:e9:a7:17:96:10:3d:b5:e7:eb:c4:6a: 71:e3:4c:28:c8:0e:8f:d0:16:2a:58:68:8b:a9:e5:0f:20:c1: 56:48:f0:82:df:04:53:73:9b:b7:6a:44:7c:18:15:da:f2:48: b8:74:65:72:9c:ea:98:30:20:2b:25:64:47:b9:44:4f:9a:13: e3:b1:09:0f:5e:1c:11:50:33:3c:e9:78:7a:d0:57:a3:df:88: 7b:62:fd:7f:b8:fc:b7:5f:f7:80:2f:5e:25:c5:3b:73:10:27: 9c:4b:c9:49:98:2f:0d:9a:e6:70:33:91:49:0e:8a:b9:41:cc: 0d:3f:28:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTMwMTU1MzQwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YTEwMy05MzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+bJuoOZy9JialP0kAvZ9fYIqnixUDE8Wyxp5ocrd26Mu+lSnzcatE7yHdo7 k0tcXM1uvs7Q2jzTdbZta3ZszFXpf31RIP8bVvpB70Trl+epab6aaeowFfCI184R uxIbY4QkbDJJfl1eeg2aEi3JPjCQL3RVDx/fcwLnakQdMbL12wpHY9X/kcRoU70P yJ2U+Kun0s0Ye5pdOgGhgrmxtlcCce/WhcWtrDt+0wd316+OSMHRDAul8sdfQ6Vj gjgsXCB7RxUJSKdsA0jpjTdhLzVj/vgCjrHjDddHJqIeZlmlGLTruG792E1kLu7h 1S91ol9ZtZFr8zbvGxF+ziEo0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFO+onnYr qBwqsfxfcOi45P8FWJV8MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzM4NEQ3OUNF QjU4MTFFRTlFREVCQTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFPowDQYJKoZIhvcNAQELBQADggEBADzUPq/IaRRD6jrm UoH+WOwwtkpTaonUTyP2j8yvubx4Z9QPsjPJEGkubpMKm9/tFhwyc5g1NTE0cNGC xJYkgr87blIwDHUkf4g6mTWMpo2SVCr3r8KW6Bp37/UdilXEckXdZDp+Tty704Dn EQXVkvYI76C6DxO03kIaAsuEdMfFSuSwjYrppxeWED215+vEanHjTCjIDo/QFipY aIup5Q8gwVZI8ILfBFNzm7dqRHwYFdrySLh0ZXKc6pgwICslZEe5RE+aE+OxCQ9e HBFQMzzpeHrQV6PfiHti/X+4/Ldf94AvXiXFO3MQJ5xLyUmYLw2a5nAzkUkOirlB zA0/KEg= -----END CERTIFICATE-----Generated at Fri May 31 16:40:59 2024 by rpki-client on console-ams.rpki-client.org