$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa File: FFB4C24ADC4411EE9199B15EC4F9AE02.roa (raw, json) Hash identifier: 3kR9nkgdim8TqoB3RRktyPiOSSpqDRuugr/3Ompe5BM= Subject key identifier: 10:1A:35:02:C6:3A:D2:00:94:3C:38:72:CD:A6:C9:CB:34:C4:1B:F4 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1A13 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa Signing time: Thu 30 May 2024 15:53:10 +0000 ROA not before: Thu 30 May 2024 15:53:10 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152485 IP address blocks: 157.20.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 20:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6675 (0x1a13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 30 15:53:10 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a0e5-cd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:9e:8d:62:2f:0e:e7:4a:f9:c9:e5:ec:ee: 49:2f:9a:29:dd:8e:9f:7d:8c:90:11:80:31:59:ca: c3:a7:90:30:42:ce:93:3a:3e:c7:dd:d2:05:1e:a9: 35:15:d9:48:bf:55:74:94:d4:e9:29:4d:98:4c:f0: e8:99:ae:8d:92:74:72:01:05:af:95:91:37:ad:23: 44:96:36:da:35:fc:53:50:03:27:6a:0e:f1:d2:56: 3b:f9:58:9d:1e:03:27:b3:2f:99:a3:01:97:10:ac: 7a:74:f8:68:b3:76:bd:80:e8:c5:94:c3:db:d4:72: e9:ed:34:ef:52:93:46:28:6f:23:bf:87:2d:4f:5c: fc:0a:c1:fb:19:32:6e:57:e0:3b:a0:14:cd:44:87: af:6f:f6:7b:1d:eb:1e:c0:79:50:02:cb:14:fa:01: c1:aa:76:d1:d6:cd:74:1c:29:c8:fe:ed:f0:34:60: f6:ba:49:6d:0d:fb:01:67:4d:10:c6:d9:28:c9:1d: 8a:1b:78:a0:65:8b:4d:25:36:52:f5:fb:a2:52:be: 4a:cc:22:73:02:51:f5:43:d6:e2:18:ec:9e:43:cd: 13:64:7a:3a:3e:08:eb:1e:4f:de:35:3d:be:74:3a: 46:48:db:e6:1f:95:ba:9f:04:7c:34:45:19:2f:77: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1A:35:02:C6:3A:D2:00:94:3C:38:72:CD:A6:C9:CB:34:C4:1B:F4 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.182.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:89:f4:74:96:6b:93:0e:05:92:77:ec:68:8c:45:13:3e:86: 38:d1:a8:0c:67:e7:ce:4d:0d:b6:3a:41:25:6e:6b:04:1b:4f: 88:2b:d8:4d:b5:ff:3c:1e:0b:ed:52:02:b0:4d:95:cb:b7:be: 54:0a:f6:51:71:fb:3c:4b:b7:09:49:aa:89:37:e2:71:72:6a: 50:77:69:21:02:11:39:82:d8:a5:92:dc:6d:36:e0:e4:8c:7e: 70:0f:be:84:ea:df:13:08:29:10:d4:ac:e7:6e:a6:7d:31:01: 2c:41:65:e3:b0:66:34:e9:a0:8a:7a:89:2d:52:14:10:6b:2d: 72:99:25:bf:80:c6:f1:2e:c5:7f:4a:26:2c:3d:99:4f:ba:fe: 8e:e4:c3:f0:9d:52:f3:6a:5b:a3:ac:0a:9f:6e:60:26:fc:ba: 3f:a6:ee:65:1e:48:ea:e6:48:a7:7c:84:b6:4f:d1:04:44:2d: 2c:a7:5e:29:6a:ef:f6:fb:96:cd:da:04:b6:39:6b:02:ba:5f: 91:d4:43:3a:6a:76:28:b7:f4:d1:13:fc:ed:d0:dc:01:63:5a: 18:7e:2e:3f:3e:c8:90:b0:6b:d2:09:5c:ae:b6:66:90:dc:da: a1:03:09:f0:4b:39:3d:29:f9:80:40:e8:14:2a:dc:4d:76:ee: 5f:b7:be:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTMwMTU1MzEwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YTBlNS1jZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFmejWIvDudK+cnl7O5JL5op3Y6ffYyQEYAxWcrDp5AwQs6TOj7H3dIFHqk1 FdlIv1V0lNTpKU2YTPDoma6NknRyAQWvlZE3rSNEljbaNfxTUAMnag7x0lY7+Vid HgMnsy+ZowGXEKx6dPhos3a9gOjFlMPb1HLp7TTvUpNGKG8jv4ctT1z8CsH7GTJu V+A7oBTNRIevb/Z7HesewHlQAssU+gHBqnbR1s10HCnI/u3wNGD2ukltDfsBZ00Q xtkoyR2KG3igZYtNJTZS9fuiUr5KzCJzAlH1Q9biGOyeQ80TZHo6PgjrHk/eNT2+ dDpGSNvmH5W6nwR8NEUZL3epRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBAaNQLG OtIAlDw4cs2mycs0xBv0MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkZCNEMyNEFE QzQ0MTFFRTkxOTlCMTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFLYwDQYJKoZIhvcNAQELBQADggEBAByJ9HSWa5MOBZJ3 7GiMRRM+hjjRqAxn585NDbY6QSVuawQbT4gr2E21/zweC+1SArBNlcu3vlQK9lFx +zxLtwlJqok34nFyalB3aSECETmC2KWS3G024OSMfnAPvoTq3xMIKRDUrOdupn0x ASxBZeOwZjTpoIp6iS1SFBBrLXKZJb+AxvEuxX9KJiw9mU+6/o7kw/CdUvNqW6Os Cp9uYCb8uj+m7mUeSOrmSKd8hLZP0QRELSynXilq7/b7ls3aBLY5awK6X5HUQzpq dii39NET/O3Q3AFjWhh+Lj8+yJCwa9IJXK62ZpDc2qEDCfBLOT0p+YBA6BQq3E12 7l+3vp4= -----END CERTIFICATE-----Generated at Fri Jun 7 02:20:52 2024 by rpki-client on console-fra.rpki-client.org