$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/48233A50B41511EE96538481C4F9AE02.roa File: 48233A50B41511EE96538481C4F9AE02.roa (raw, json) Hash identifier: n8gZN53skv6mluh1WBWGFo77RkBdRF5WeWVdMVLx5AQ= Subject key identifier: 21:2C:EE:45:D5:10:57:F1:BB:2A:9B:1C:78:AA:5C:81:51:88:7D:85 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 43 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/48233A50B41511EE96538481C4F9AE02.roa Signing time: Thu 25 Jan 2024 02:26:32 +0000 ROA not before: Thu 25 Jan 2024 02:26:32 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150698 IP address blocks: 157.10.46.0/23 maxlen: 23 157.10.194.0/24 maxlen: 24 157.10.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Jan 25 02:26:32 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65b1c6d8-a0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:fb:6d:58:8e:09:45:29:a7:f2:40:ab:1f: 52:f0:d4:84:a6:52:28:81:b5:e9:f0:9d:63:a1:59: 43:01:f3:66:25:2b:75:bb:01:e5:b5:5b:52:5b:43: 6b:56:da:73:a2:86:a7:d1:fb:b9:37:3f:66:ed:ff: ad:10:3a:23:8d:94:ee:34:8f:01:dc:8b:c5:7c:8b: 00:90:a0:ca:72:c2:80:a3:3f:c1:a8:85:5c:49:77: 58:5a:e5:1b:a3:f1:8b:7d:df:c9:54:63:f1:af:c1: 92:6c:ea:07:7e:b2:ef:14:52:09:81:3b:52:16:08: 91:91:38:00:99:d1:10:53:df:32:e4:ea:75:39:ba: 36:17:9a:c6:5d:f5:4f:2d:08:ee:a9:b4:f5:2b:c3: 4a:6f:12:9a:0e:3a:11:97:43:ad:e7:de:82:ab:fa: 78:90:ac:74:41:c1:b9:8a:f4:5b:05:97:7b:35:85: b1:ad:19:f3:8f:92:5b:81:3c:a3:f8:0f:ff:28:e2: b2:d6:57:d5:8f:09:73:6e:e9:46:0a:59:5a:af:40: 32:0e:67:77:8c:15:fe:16:b9:02:93:91:05:c8:45: 5d:4b:32:c9:18:02:c2:54:c6:8b:7b:e9:e8:dc:ea: 0f:c6:5b:d6:a5:29:94:58:a1:59:75:c6:89:73:45: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2C:EE:45:D5:10:57:F1:BB:2A:9B:1C:78:AA:5C:81:51:88:7D:85 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/48233A50B41511EE96538481C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.46.0/23 157.10.194.0/23 Signature Algorithm: sha256WithRSAEncryption 69:17:8b:2b:26:73:c7:87:78:2e:77:b2:f0:50:eb:1c:08:64: c9:4b:7c:96:f6:06:7a:86:50:9c:c8:66:1a:f5:33:df:8b:39: f3:30:86:00:5f:ed:ac:af:1e:d8:70:ea:81:00:91:20:90:c8: d6:88:43:92:a8:21:d7:c4:99:e1:92:eb:db:73:e3:96:89:92: 43:97:68:50:5c:63:b0:e1:ae:82:af:da:4b:82:cb:9e:e3:e2: 0e:8e:14:7a:3f:ba:de:a3:24:49:4f:37:db:2d:04:87:5b:d6: 2d:ed:72:f4:18:bc:79:fa:74:fe:91:7f:84:3a:bd:6d:1f:97: fa:3f:01:78:e3:29:f8:98:3f:8f:90:16:fd:e5:54:a1:f2:f8: b7:00:49:5b:fa:bd:22:b7:80:1a:7a:7d:69:79:e5:08:8f:5c: 8a:af:41:0a:5d:82:26:2d:d7:7b:53:10:df:39:88:78:af:68: 55:e1:f8:10:5c:f9:2a:61:a6:ef:be:b3:c7:d9:84:78:fc:c9: 57:1b:7e:77:d6:ac:a3:cb:5f:4e:10:e0:74:f0:a3:d6:14:40: a8:a5:aa:20:47:2d:94:fa:1b:55:1d:6f:5a:03:33:fc:4e:5d: ca:0e:5f:3d:b5:50:72:38:d6:86:66:e1:99:51:3a:3b:92:5e: 50:10:75:d5 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTYwQTExMC8GA1UEBRMoOEFDNzIxMjk4RjkyRTEwQTJFRTMwNTFBRkJDOTExNDI4 NEY4MEUxMjAeFw0yNDAxMjUwMjI2MzJaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YjFjNmQ4LWEwYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdRPttWI4JRSmn8kCrH1Lw1ISmUiiBtenwnWOhWUMB82YlK3W7AeW1W1JbQ2tW 2nOihqfR+7k3P2bt/60QOiONlO40jwHci8V8iwCQoMpywoCjP8GohVxJd1ha5Ruj 8Yt938lUY/GvwZJs6gd+su8UUgmBO1IWCJGROACZ0RBT3zLk6nU5ujYXmsZd9U8t CO6ptPUrw0pvEpoOOhGXQ63n3oKr+niQrHRBwbmK9FsFl3s1hbGtGfOPkluBPKP4 D/8o4rLWV9WPCXNu6UYKWVqvQDIOZ3eMFf4WuQKTkQXIRV1LMskYAsJUxot76ejc 6g/GW9alKZRYoVl1xolzRek1AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUISzuRdUQ V/G7KpsceKpcgVGIfYUwHwYDVR0jBBgwFoAUischKY+S4Qou4wUa+8kRQoT4DhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NjBBLzIwOTU4NjE4QTlE RjExRUVBMzU2QTQzRUM0RjlBRTAyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXNjaEtZLVM0UW91NHdVYS04a1JRb1Q0RGhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS8yMDk1ODYxOEE5REYxMUVFQTM1NkE0M0VDNEY5QUUwMi80ODIzM0E1MEI0 MTUxMUVFOTY1Mzg0ODFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAZ0KLgMEAZ0KwjANBgkqhkiG9w0BAQsFAAOCAQEAaReLKyZz x4d4Lney8FDrHAhkyUt8lvYGeoZQnMhmGvUz34s58zCGAF/trK8e2HDqgQCRIJDI 1ohDkqgh18SZ4ZLr23PjlomSQ5doUFxjsOGugq/aS4LLnuPiDo4Uej+63qMkSU83 2y0Eh1vWLe1y9Bi8efp0/pF/hDq9bR+X+j8BeOMp+Jg/j5AW/eVUofL4twBJW/q9 IreAGnp9aXnlCI9ciq9BCl2CJi3Xe1MQ3zmIeK9oVeH4EFz5KmGm776zx9mEePzJ Vxt+d9aso8tfThDgdPCj1hRAqKWqIEctlPobVR1vWgMz/E5dyg5fPbVQcjjWhmbh mVE6O5JeUBB11Q== -----END CERTIFICATE-----Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org