$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa File: 5B0AD104DBB711EE9697432FC4F9AE02.roa (raw, json) Hash identifier: C3O5aJsV6Hyye7D7q1+B/H3/kbmX186Nv5rwr/19ftc= Subject key identifier: 02:DA:A7:88:95:E7:BC:69:EC:CD:29:10:3D:BA:29:2C:4D:40:10:14 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0119 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa Signing time: Mon 13 May 2024 08:28:53 +0000 ROA not before: Mon 13 May 2024 08:28:53 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150820 IP address blocks: 157.15.38.0/23 maxlen: 23 157.20.62.0/23 maxlen: 23 157.66.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 04:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: May 13 08:28:53 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6641cf45-e8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:70:1b:49:3d:b9:dd:fc:f7:6c:7c:c1:21: f2:c8:3f:77:51:b1:59:99:82:66:d0:d9:98:22:47: 5c:8f:25:6a:74:68:64:4b:c4:9e:a0:e4:6d:87:14: 68:28:89:bb:56:0f:b6:9b:82:49:a9:ac:c1:4c:d6: 2f:de:66:87:5e:3c:2d:6f:6b:60:2e:ed:45:d4:44: 05:2e:7e:13:b1:b4:62:d5:f3:06:1c:bd:c4:e1:0c: 50:5d:34:b4:b4:a7:eb:fd:4c:69:fa:73:47:e5:e0: af:97:b2:ba:e4:eb:11:8c:02:ba:ee:e5:ad:50:d2: f1:8d:75:b4:ba:30:d0:7c:cf:81:5b:8f:9e:35:a9: 4f:38:d7:86:1a:b9:d9:bb:6a:cf:b3:d6:a6:41:3b: 18:eb:7a:a8:b5:8f:2a:fe:75:ff:c4:76:9a:7f:7b: c2:ca:20:18:c9:df:43:44:59:da:54:93:d3:09:8e: 40:a2:41:29:3b:be:1b:b4:ac:84:83:d9:e9:63:a4: 78:37:23:27:9b:d6:19:ba:88:e2:29:cd:63:72:31: a2:8c:bc:f0:8b:5c:90:c4:0b:40:e0:4a:20:32:1a: 04:09:c0:c6:d1:56:13:d2:05:77:9c:38:61:48:66: 4c:06:88:6d:3c:ed:41:17:e8:1b:95:c0:8f:aa:f7: ec:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DA:A7:88:95:E7:BC:69:EC:CD:29:10:3D:BA:29:2C:4D:40:10:14 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.38.0/23 157.20.62.0/23 157.66.252.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:91:01:a7:37:eb:03:c4:08:76:69:e8:79:b7:0b:12:c8:0f: e2:46:b3:3a:af:06:07:2f:9e:4f:3c:1c:da:bf:63:51:e9:a1: ff:e9:b1:d3:41:7c:7c:ee:78:8e:5b:f2:38:6a:14:d1:f4:4f: db:da:45:8c:7f:d0:f3:92:0a:b8:bb:8d:1c:0c:e9:e9:ca:56: 78:2a:b5:ae:92:72:45:01:2d:d1:69:36:f5:57:7e:06:5c:da: 92:c0:1f:c9:c4:f6:e0:3d:19:54:62:9a:42:13:43:b1:73:2d: d1:71:c8:78:fe:08:da:13:d6:f4:d3:7a:67:7d:86:72:b9:56: 19:7b:79:36:64:bc:b1:bd:7f:bb:d1:d7:ac:95:e6:85:c6:62: 8b:0a:a3:cc:a9:f7:25:2c:92:a1:ee:48:41:8a:83:d8:0e:0e: 09:f6:a9:2c:74:c8:57:7f:80:9f:27:e6:7a:bf:72:68:bc:7e: d9:15:13:74:87:f7:24:d1:26:cf:3f:c6:68:fa:49:68:e9:22: 95:da:1d:12:7f:ec:d5:0e:06:08:64:91:7a:27:d0:ce:05:1e: 09:ac:27:04:6d:d2:6f:e4:8a:1a:04:41:25:47:e9:2f:d4:b8: ae:34:db:5e:6a:23:93:05:8d:65:f7:ef:2e:f3:ca:5d:44:de: 2e:f4:d7:e8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwNTEzMDgyODUzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxY2Y0NS1lOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i9wG0k9ud3892x8wSHyyD93UbFZmYJm0NmYIkdcjyVqdGhkS8SeoORthxRo KIm7Vg+2m4JJqazBTNYv3maHXjwtb2tgLu1F1EQFLn4TsbRi1fMGHL3E4QxQXTS0 tKfr/Uxp+nNH5eCvl7K65OsRjAK67uWtUNLxjXW0ujDQfM+BW4+eNalPONeGGrnZ u2rPs9amQTsY63qotY8q/nX/xHaaf3vCyiAYyd9DRFnaVJPTCY5AokEpO74btKyE g9npY6R4NyMnm9YZuojiKc1jcjGijLzwi1yQxAtA4EogMhoECcDG0VYT0gV3nDhh SGZMBohtPO1BF+gblcCPqvfsZwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFALap4iV 57xp7M0pED26KSxNQBAUMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUIwQUQxMDRE QkI3MTFFRTk2OTc0MzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGdDyYDBAGdFD4DBAGdQvwwDQYJKoZIhvcNAQELBQADggEB AG+RAac36wPECHZp6Hm3CxLID+JGszqvBgcvnk88HNq/Y1Hpof/psdNBfHzueI5b 8jhqFNH0T9vaRYx/0POSCri7jRwM6enKVngqta6SckUBLdFpNvVXfgZc2pLAH8nE 9uA9GVRimkITQ7FzLdFxyHj+CNoT1vTTemd9hnK5Vhl7eTZkvLG9f7vR16yV5oXG YosKo8yp9yUskqHuSEGKg9gODgn2qSx0yFd/gJ8n5nq/cmi8ftkVE3SH9yTRJs8/ xmj6SWjpIpXaHRJ/7NUOBghkkXon0M4FHgmsJwRt0m/kihoEQSVH6S/UuK40215q I5MFjWX37y7zyl1E3i701+g= -----END CERTIFICATE-----Generated at Tue Jun 18 10:45:18 2024 by rpki-client on console-ams.rpki-client.org