$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa File: F5C23494BD0711EFB92D9250C4F9AE02.roa (raw, json) Hash identifier: 0In1Ey0g0mlVZO41RgsSKNA7ceryNLnNcRCPx4CIDC4= Subject key identifier: F1:C5:C4:92:62:39:DB:B5:44:67:BC:C4:26:70:24:80:63:51:29:5E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1C3F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa Signing time: Wed 18 Dec 2024 06:18:56 +0000 ROA not before: Wed 18 Dec 2024 06:18:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 153257 IP address blocks: 160.191.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7231 (0x1c3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Dec 18 06:18:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6762694f-4fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:9c:b1:03:49:0b:69:48:57:cc:b1:48:8b: 05:2a:17:a1:a0:f5:70:3b:20:1e:54:ba:5a:af:3b: 62:3b:92:b6:28:12:d1:fd:34:e9:7a:09:c4:27:46: 1a:76:4f:4d:e3:98:3f:f8:43:a5:a6:ee:53:93:36: 2c:65:aa:67:bb:61:1c:4e:c7:cb:7e:99:2b:cd:d0: 8d:8e:42:9d:a4:8c:4f:d1:02:0e:48:19:6c:bc:98: ae:44:41:91:c5:37:29:71:85:7a:f4:f3:1a:24:da: 1f:d3:ee:cc:72:6e:51:aa:a0:ab:61:48:1d:2d:30: ff:0f:15:9f:b0:86:fd:6a:2c:a7:4f:cb:98:6b:61: 3f:2e:35:2f:dc:c8:9f:aa:8a:50:d1:17:7c:5b:03: fb:53:71:56:46:14:5b:b9:03:43:c0:f6:09:ff:ae: dd:54:c8:b5:f4:f6:9a:12:96:ae:04:a1:e7:fe:12: 06:af:23:fa:d2:85:0e:a1:05:00:fa:ae:7c:0a:4c: 7c:02:be:0c:5b:ae:ae:99:39:cd:7c:3d:36:56:cd: 20:e7:96:ad:97:eb:04:a5:55:d7:f0:17:05:98:94: 84:02:a8:ac:0f:f3:cc:72:17:df:aa:bc:27:3d:77: 0f:ff:fb:16:42:d7:42:62:a7:43:0e:98:d4:01:af: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C5:C4:92:62:39:DB:B5:44:67:BC:C4:26:70:24:80:63:51:29:5E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.15.0/24 Signature Algorithm: sha256WithRSAEncryption bc:07:34:54:54:20:e6:9f:a0:2f:f2:8d:4d:eb:7e:cc:6b:c9: 5d:51:35:59:ef:5e:c9:0a:82:3e:00:51:92:4c:10:4f:9e:f4: ea:af:25:8f:05:00:aa:91:15:08:ea:4c:f6:db:28:88:76:0f: b7:39:33:62:93:e8:cb:27:9b:0f:8c:be:b1:c5:39:1a:7b:d4: 76:68:39:32:35:00:9b:d7:18:df:c2:9c:8a:f7:6a:5e:d5:2c: b9:12:b2:19:4f:b5:d3:eb:26:74:4a:51:f6:93:a5:69:09:ff: 2f:95:5a:5b:0d:5d:19:02:96:f2:eb:2f:01:7e:9e:08:ef:01: 4a:d2:3e:9c:14:96:a2:ca:ca:fa:53:97:aa:09:44:53:58:c7: f5:d7:83:e6:eb:fa:42:4b:dc:b5:39:57:86:ed:58:a8:32:3a: f2:ef:2e:33:40:b3:2a:25:70:7f:9c:5b:cf:1f:3f:ce:6e:61: 9a:6a:35:13:6f:c9:e1:4a:d8:15:e7:3e:87:95:f7:29:c0:44: 06:8d:4a:61:35:01:14:00:92:d5:1d:44:0d:63:1b:64:00:64: ae:8b:94:bb:9e:fb:b1:3e:ed:73:40:b3:07:5b:44:94:ed:1e: 26:bd:3f:ce:e5:d1:a4:39:ce:17:44:d2:8a:c4:95:6f:87:83: ee:80:34:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQxMjE4MDYxODU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYyNjk0Zi00ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BqcsQNJC2lIV8yxSIsFKhehoPVwOyAeVLparztiO5K2KBLR/TTpegnEJ0Ya dk9N45g/+EOlpu5TkzYsZapnu2EcTsfLfpkrzdCNjkKdpIxP0QIOSBlsvJiuREGR xTcpcYV69PMaJNof0+7Mcm5RqqCrYUgdLTD/DxWfsIb9aiynT8uYa2E/LjUv3Mif qopQ0Rd8WwP7U3FWRhRbuQNDwPYJ/67dVMi19PaaEpauBKHn/hIGryP60oUOoQUA +q58Ckx8Ar4MW66umTnNfD02Vs0g55atl+sEpVXX8BcFmJSEAqisD/PMchffqrwn PXcP//sWQtdCYqdDDpjUAa/nZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPHFxJJi Odu1RGe8xCZwJIBjUSleMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjVDMjM0OTRC RDA3MTFFRkI5MkQ5MjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgvw8wDQYJKoZIhvcNAQELBQADggEBALwHNFRUIOafoC/y jU3rfsxryV1RNVnvXskKgj4AUZJMEE+e9OqvJY8FAKqRFQjqTPbbKIh2D7c5M2KT 6Msnmw+MvrHFORp71HZoOTI1AJvXGN/CnIr3al7VLLkSshlPtdPrJnRKUfaTpWkJ /y+VWlsNXRkClvLrLwF+ngjvAUrSPpwUlqLKyvpTl6oJRFNYx/XXg+br+kJL3LU5 V4btWKgyOvLvLjNAsyolcH+cW88fP85uYZpqNRNvyeFK2BXnPoeV9ynARAaNSmE1 ARQAktUdRA1jG2QAZK6LlLue+7E+7XNAswdbRJTtHia9P87l0aQ5zhdE0orElW+H g+6ANNM= -----END CERTIFICATE-----Generated at Sat Apr 5 23:43:50 2025 by rpki-client