$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa File: D52B5F46BB4E11EE9496B14FC4F9AE02.roa (raw, json) Hash identifier: anAo9b4LIiGPHNXFHfvC2DhOXlPORvs7NKpNFYPuhRA= Subject key identifier: 9A:6C:DE:30:E2:6B:F2:18:93:8D:EC:55:9A:94:BC:CA:01:70:48:C9 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1A01 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa Signing time: Thu 30 May 2024 15:52:52 +0000 ROA not before: Thu 30 May 2024 15:52:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151719 IP address blocks: 157.15.10.0/23 maxlen: 24 157.20.180.0/23 maxlen: 24 157.66.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 15:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6657 (0x1a01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 30 15:52:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a0d4-0f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:e3:ef:58:67:01:c9:35:39:45:d1:d5:c4: df:7b:72:ce:95:bc:1a:64:94:b7:78:95:2d:dc:e5: a3:58:ec:f9:64:0e:cb:10:45:bf:ed:59:8b:52:77: d4:10:35:4b:fe:f8:d1:00:b1:cf:75:08:19:47:fd: da:37:7d:fc:48:0b:33:37:66:18:53:b0:87:f0:01: de:7c:8e:95:f0:f1:e0:7d:e5:32:47:2d:80:80:25: 33:8f:42:40:34:57:a5:a2:92:94:60:98:0b:a2:34: b3:28:cb:df:30:65:2e:98:5c:c5:8c:68:eb:d3:ca: 1d:1d:85:69:b5:77:00:75:f5:54:b5:ff:99:03:8e: ca:29:18:3d:89:ef:1c:3e:46:fc:17:01:a2:24:e3: 19:bc:b1:1d:9b:7b:f3:f5:cb:28:3b:2d:f2:ef:bf: 62:7f:ad:dd:2f:f3:c8:5e:0f:b6:5f:3e:45:46:72: 3a:5c:7a:41:b8:ae:2d:f0:fc:3f:22:b3:83:13:7e: b6:87:41:e4:d8:60:58:0c:93:01:f0:d4:48:b0:f0: 84:33:2f:c1:25:38:dd:68:e4:8a:33:43:91:6d:1a: b0:7e:f6:c2:f7:ea:61:24:87:79:05:6c:fb:f8:d9: 11:1a:49:c4:7b:72:00:f7:ff:a4:4b:c9:1c:0a:14: b4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6C:DE:30:E2:6B:F2:18:93:8D:EC:55:9A:94:BC:CA:01:70:48:C9 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.10.0/23 157.20.180.0/23 157.66.118.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:33:02:0d:d2:b5:39:a2:ee:b5:2a:bf:65:4a:77:71:1f:90: b3:92:e7:32:35:bc:80:e9:5b:73:84:33:b7:05:c1:32:8f:fb: a5:90:fc:36:85:4f:e6:8c:24:2d:ba:7c:8e:a0:4c:37:53:aa: bf:d6:1f:b5:79:56:e4:b5:e6:46:25:a8:c4:f7:4b:85:c6:f4: 89:c6:d2:6c:e1:51:e1:dd:bd:ee:ac:be:f8:81:c7:a5:81:b2: 2a:d9:97:80:e9:97:2b:33:81:08:5d:1a:e7:db:d1:71:c7:97: 7f:11:72:c3:74:52:3f:34:45:8a:df:84:0e:59:ec:d0:fb:a2: 0a:18:7e:93:d9:5c:27:f8:e5:70:7a:4e:96:9a:d6:76:54:ab: f5:d1:1c:b3:cd:cb:94:72:15:c3:f8:5b:7f:1a:8d:dd:23:df: 18:c6:8f:e4:87:ac:ef:08:71:22:4c:ac:20:c6:4e:d4:4e:e2: bb:ff:78:cf:41:c3:b1:5c:01:a8:8a:d8:f3:4a:4c:67:f8:0a: b6:bb:62:32:2e:1c:f8:0e:0d:ce:09:e1:65:5c:a0:10:82:ec: 00:dd:93:02:07:b0:ee:28:e7:60:10:dc:da:85:1e:33:26:54: b5:d4:55:ec:87:2d:cb:0f:12:0b:f6:35:a0:33:4d:ad:9a:34: 0c:6b:bc:71 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTMwMTU1MjUyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YTBkNC0wZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4g3j71hnAck1OUXR1cTfe3LOlbwaZJS3eJUt3OWjWOz5ZA7LEEW/7VmLUnfU EDVL/vjRALHPdQgZR/3aN338SAszN2YYU7CH8AHefI6V8PHgfeUyRy2AgCUzj0JA NFelopKUYJgLojSzKMvfMGUumFzFjGjr08odHYVptXcAdfVUtf+ZA47KKRg9ie8c Pkb8FwGiJOMZvLEdm3vz9csoOy3y779if63dL/PIXg+2Xz5FRnI6XHpBuK4t8Pw/ IrODE362h0Hk2GBYDJMB8NRIsPCEMy/BJTjdaOSKM0ORbRqwfvbC9+phJId5BWz7 +NkRGknEe3IA9/+kS8kcChS0WwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJps3jDi a/IYk43sVZqUvMoBcEjJMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDUyQjVGNDZC QjRFMTFFRTk0OTZCMTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGdDwoDBAGdFLQDBAGdQnYwDQYJKoZIhvcNAQELBQADggEB AD0zAg3StTmi7rUqv2VKd3EfkLOS5zI1vIDpW3OEM7cFwTKP+6WQ/DaFT+aMJC26 fI6gTDdTqr/WH7V5VuS15kYlqMT3S4XG9InG0mzhUeHdve6svviBx6WBsirZl4Dp lyszgQhdGufb0XHHl38RcsN0Uj80RYrfhA5Z7ND7ogoYfpPZXCf45XB6Tpaa1nZU q/XRHLPNy5RyFcP4W38ajd0j3xjGj+SHrO8IcSJMrCDGTtRO4rv/eM9Bw7FcAaiK 2PNKTGf4Cra7YjIuHPgODc4J4WVcoBCC7ADdkwIHsO4o52AQ3NqFHjMmVLXUVeyH LcsPEgv2NaAzTa2aNAxrvHE= -----END CERTIFICATE-----Generated at Fri Jun 14 16:49:14 2024 by rpki-client on console-fra.rpki-client.org