$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa File: AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa (raw, json) Hash identifier: xVEJPm+31bLznblOWhCpwIQYSTvCz1YQ0x0L0sMQxuU= Subject key identifier: 99:1A:C6:E0:51:EA:E9:FC:83:74:D4:41:67:08:63:32:08:5E:82:6C Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Certificate serial: 02 Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa Signing time: Mon 04 Mar 2024 18:26:13 +0000 ROA not before: Mon 04 Mar 2024 18:26:13 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152605 IP address blocks: 157.20.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Validity Not Before: Mar 4 18:26:13 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65e61245-ebef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:02:a2:44:b4:ca:a8:e6:8b:06:40:b4:2c: 13:c7:6f:a6:39:15:fc:a0:11:29:4f:d0:60:e3:9e: f1:77:50:99:2b:ea:a4:29:e1:68:a2:8d:37:a1:bb: 52:81:a9:63:aa:a3:9e:f8:cd:02:a4:7f:47:73:67: 2b:16:92:56:7e:09:e3:21:e8:77:f6:4c:9e:ec:2b: 62:ad:b8:e1:b3:fe:c3:35:c0:08:bd:24:29:5a:63: 53:2b:e5:5c:2d:a4:d6:0f:e1:01:52:58:38:c0:3d: 0f:16:69:fb:98:64:34:d0:67:5d:82:de:7d:15:91: be:68:47:e2:03:22:19:f6:f1:f8:49:98:4f:fd:61: 57:69:7e:46:4a:b7:90:de:bc:8d:dd:7f:93:ae:a6: c2:88:a6:ed:ec:a8:34:94:f9:ef:80:42:94:33:28: e7:d2:d2:9a:e9:1d:6c:55:c5:89:c3:9c:71:71:02: 4a:ba:d8:e5:a5:1e:e3:c2:a5:82:28:64:45:0e:0e: 91:d2:a6:d8:e3:4f:03:d2:c5:64:c4:ed:1a:80:ec: 5a:56:34:18:f3:60:13:21:c7:8c:d6:1b:82:b4:d4: 7a:37:2d:3a:2a:e5:c9:3a:e4:4d:7d:de:30:28:24: 24:8f:47:a1:ac:ba:ed:7b:b2:92:29:c9:4c:6c:d6: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1A:C6:E0:51:EA:E9:FC:83:74:D4:41:67:08:63:32:08:5E:82:6C X509v3 Authority Key Identifier: keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.146.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:9b:06:19:84:5c:5b:98:0c:5a:ce:78:ed:5e:ff:21:1e:ba: 1d:f3:f4:f2:17:2d:d4:5e:54:d5:ce:8c:e7:8a:ea:7f:4f:77: 3a:0e:be:7b:1e:9b:32:f5:76:b6:a3:91:51:b5:95:44:ba:2c: 88:bd:0f:7a:82:4f:97:21:db:85:58:50:11:79:d5:ca:88:42: 3b:37:35:27:c4:79:5c:1d:cd:93:15:c5:08:56:cd:5f:3b:4b: 91:64:3d:1e:dd:e2:fe:b0:4b:de:c8:a5:43:12:40:e7:88:98: 8e:2a:c8:30:ce:1d:de:48:25:7d:9f:aa:09:9d:48:1e:07:24: ab:21:2b:79:b6:93:78:be:d1:02:fa:4d:bd:22:f7:0b:68:80: cc:31:1a:4c:25:d5:26:80:93:ab:8d:d9:81:eb:51:0e:54:8a: 5c:28:9c:11:1a:ce:bb:79:21:38:26:ed:2c:89:73:08:2b:73: 0c:1e:3c:df:da:a0:cc:23:89:b5:b4:ba:ef:50:bb:63:ba:55: ea:a8:6c:28:e2:b0:e5:5d:63:76:70:a3:c2:7e:20:42:f7:3c: 6b:ec:ee:28:ed:d9:c1:4e:4d:a1:1c:b7:80:45:fa:54:c2:ef: b4:c6:5a:ea:ff:88:ab:4e:fd:fb:88:73:54:0d:b3:17:1b:ef: ce:1d:5d:37 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlEQTExMC8GA1UEBRMoMkZEMjRCNkZENzk4MDQ0NTczNTQzODY2NjJDRTMwRERB M0IyMDBCNTAeFw0yNDAzMDQxODI2MTNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZTYxMjQ1LWViZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7DAKiRLTKqOaLBkC0LBPHb6Y5FfygESlP0GDjnvF3UJkr6qQp4WiijTehu1KB qWOqo574zQKkf0dzZysWklZ+CeMh6Hf2TJ7sK2KtuOGz/sM1wAi9JClaY1Mr5Vwt pNYP4QFSWDjAPQ8WafuYZDTQZ12C3n0Vkb5oR+IDIhn28fhJmE/9YVdpfkZKt5De vI3df5OupsKIpu3sqDSU+e+AQpQzKOfS0prpHWxVxYnDnHFxAkq62OWlHuPCpYIo ZEUODpHSptjjTwPSxWTE7RqA7FpWNBjzYBMhx4zWG4K01Ho3LToq5ck65E193jAo JCSPR6Gsuu17spIpyUxs1hQhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmRrG4FHq 6fyDdNRBZwhjMghegmwwHwYDVR0jBBgwFoAUL9JLb9eYBEVzVDhmYs4w3aOyALUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOURBLzM0QjVCNTE0REE1 NDExRUU4MjdDQTU3REM0RjlBRTAyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTDlKTGI5ZVlCRVZ6VkRobVlzNHczYU95QUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9BRTJGRDlDNERB NTQxMUVFODNFOUU2N0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0UkjANBgkqhkiG9w0BAQsFAAOCAQEAO5sGGYRcW5gMWs54 7V7/IR66HfP08hct1F5U1c6M54rqf093Og6+ex6bMvV2tqORUbWVRLosiL0PeoJP lyHbhVhQEXnVyohCOzc1J8R5XB3NkxXFCFbNXztLkWQ9Ht3i/rBL3silQxJA54iY jirIMM4d3kglfZ+qCZ1IHgckqyErebaTeL7RAvpNvSL3C2iAzDEaTCXVJoCTq43Z getRDlSKXCicERrOu3khOCbtLIlzCCtzDB4839qgzCOJtbS671C7Y7pV6qhsKOKw 5V1jdnCjwn4gQvc8a+zuKO3ZwU5NoRy3gEX6VMLvtMZa6v+Iq079+4hzVA2zFxvv zh1dNw== -----END CERTIFICATE-----Generated at Thu Jun 13 10:45:31 2024 by rpki-client on console-fra.rpki-client.org