$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F715FBE610FF11EF85135A6AC4F9AE02.roa File: F715FBE610FF11EF85135A6AC4F9AE02.roa (raw, json) Hash identifier: UhSDFHVjLTFV9Pl+OboFsTZy6+dDs7qSOu0JmDdR9ZQ= Subject key identifier: 99:A5:7D:88:08:75:91:90:C3:70:33:7D:03:4F:0E:2A:ED:60:25:51 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0115 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F715FBE610FF11EF85135A6AC4F9AE02.roa Signing time: Mon 13 May 2024 08:08:22 +0000 ROA not before: Mon 13 May 2024 08:08:22 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 151932 IP address blocks: 157.66.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: May 13 08:08:22 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6641ca76-eea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cb:47:19:77:c8:3c:bf:eb:21:51:be:39:07: 65:65:0e:fc:89:e6:cc:f4:63:9d:f2:e5:e2:1e:b1: b0:a6:5a:97:a4:2b:b8:c9:a0:6c:62:78:c8:a5:ad: 5e:8b:7f:6c:ff:64:56:7b:54:51:03:d2:12:a5:41: bb:ab:03:4a:42:4e:c1:94:e9:83:b4:08:45:37:9a: 0d:cf:15:48:f8:05:9f:8e:f6:13:59:eb:5d:3e:59: 48:80:23:66:e9:bf:4a:84:f8:24:0a:ee:92:fa:71: 1a:d6:8e:92:46:15:29:7f:c4:05:09:e7:cd:9d:ec: 89:c2:0e:60:9f:34:dd:db:97:c1:ce:44:2e:ee:aa: 2a:fc:d0:a8:93:ea:d5:84:ab:c9:01:b1:bd:ad:54: 06:dd:17:1b:b6:3f:b2:84:0a:e9:7e:cb:df:f4:70: d0:75:6c:70:f1:af:5f:38:bc:6a:4f:f5:95:93:0a: 47:1b:35:7f:3c:b4:a4:25:f9:1a:9e:89:99:8c:09: e8:b8:89:28:b2:b3:63:6c:a7:f7:c5:03:22:df:1b: 50:5e:89:55:30:d1:cd:21:9b:76:84:9d:39:07:55: a2:e1:37:b6:9b:00:01:01:8a:1a:d6:4e:df:f3:48: 93:ec:ce:7b:7f:f3:f2:03:ef:29:7d:d8:26:a5:2e: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A5:7D:88:08:75:91:90:C3:70:33:7D:03:4F:0E:2A:ED:60:25:51 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F715FBE610FF11EF85135A6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.222.0/23 Signature Algorithm: sha256WithRSAEncryption b3:f2:93:17:5f:02:72:4a:14:91:9b:b9:e4:e2:d9:f9:8c:5e: f3:79:62:29:70:5b:83:c3:2c:b5:f3:a7:4b:f9:e0:1b:cd:d8: fe:d1:93:10:eb:10:a0:94:3a:49:80:94:85:db:51:8c:dd:f2: 01:27:a7:9e:e8:ac:51:24:60:e3:79:f0:08:ce:46:52:88:85: 92:d1:23:d3:6e:74:77:d3:30:8b:d9:61:88:aa:d2:f2:a0:55: a5:ec:0e:d9:95:1f:a8:d8:94:2e:00:fa:8e:ae:e9:15:d3:88: 9f:06:60:c6:30:c5:9e:90:7b:0c:1d:1a:35:6e:5d:c5:8d:cc: 84:8f:b0:13:de:d3:95:aa:f5:4a:19:49:0d:18:3a:94:90:50: 1c:91:e1:5a:f9:56:35:0d:f4:b7:47:01:74:92:7b:36:f0:a8: ae:f5:ec:1d:e0:66:dd:52:0d:3c:4a:c9:12:9e:de:ea:9d:42: dd:9d:63:0a:a0:8a:72:03:52:7e:21:d5:ea:c1:41:6e:7b:c1: 7e:0d:f0:e8:f0:0e:3c:f1:5b:d1:4f:ab:35:b2:b1:55:1d:86: ed:6c:e6:16:ac:cd:8e:19:09:c5:70:06:f6:74:5e:4a:97:db: b1:4c:79:f5:7b:02:b2:02:e2:27:92:22:83:d3:50:41:9c:85: ad:8c:8f:55 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwNTEzMDgwODIyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxY2E3Ni1lZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5stHGXfIPL/rIVG+OQdlZQ78iebM9GOd8uXiHrGwplqXpCu4yaBsYnjIpa1e i39s/2RWe1RRA9ISpUG7qwNKQk7BlOmDtAhFN5oNzxVI+AWfjvYTWetdPllIgCNm 6b9KhPgkCu6S+nEa1o6SRhUpf8QFCefNneyJwg5gnzTd25fBzkQu7qoq/NCok+rV hKvJAbG9rVQG3Rcbtj+yhArpfsvf9HDQdWxw8a9fOLxqT/WVkwpHGzV/PLSkJfka nomZjAnouIkosrNjbKf3xQMi3xtQXolVMNHNIZt2hJ05B1Wi4Te2mwABAYoa1k7f 80iT7M57f/PyA+8pfdgmpS5OMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJmlfYgI dZGQw3AzfQNPDirtYCVRMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRjcxNUZCRTYx MEZGMTFFRjg1MTM1QTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQt4wDQYJKoZIhvcNAQELBQADggEBALPykxdfAnJKFJGb ueTi2fmMXvN5YilwW4PDLLXzp0v54BvN2P7RkxDrEKCUOkmAlIXbUYzd8gEnp57o rFEkYON58AjORlKIhZLRI9NudHfTMIvZYYiq0vKgVaXsDtmVH6jYlC4A+o6u6RXT iJ8GYMYwxZ6QewwdGjVuXcWNzISPsBPe05Wq9UoZSQ0YOpSQUByR4Vr5VjUN9LdH AXSSezbwqK717B3gZt1SDTxKyRKe3uqdQt2dYwqginIDUn4h1erBQW57wX4N8Ojw DjzxW9FPqzWysVUdhu1s5haszY4ZCcVwBvZ0XkqX27FMefV7ArIC4ieSIoPTUEGc ha2Mj1U= -----END CERTIFICATE-----Generated at Fri May 31 15:08:32 2024 by rpki-client on console-fra.rpki-client.org