$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/D6406BBCD7A311EE8B9C577CC4F9AE02.roa File: D6406BBCD7A311EE8B9C577CC4F9AE02.roa (raw, json) Hash identifier: WIfVvZT+V2Z1akkMsXQjkEbJurR3SnLoQoZ+2ME8w24= Subject key identifier: B4:1B:AF:23:BE:26:50:3D:D6:60:20:6A:3C:33:1E:C0:16:5C:FE:32 Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Certificate serial: 03 Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/D6406BBCD7A311EE8B9C577CC4F9AE02.roa Signing time: Fri 01 Mar 2024 08:15:17 +0000 ROA not before: Fri 01 Mar 2024 08:15:17 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 135607 IP address blocks: 157.20.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Validity Not Before: Mar 1 08:15:17 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65e18e95-8ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:f5:8f:d5:5d:41:fb:c9:b9:ae:e4:39:b0: c9:e1:f9:13:14:a1:9a:b9:e7:3e:bf:1a:17:bc:bc: bb:58:b5:c8:39:e0:5d:42:72:41:e8:8c:27:9f:87: a8:48:0a:4e:1f:07:28:dc:6f:c6:ac:2f:53:39:97: 5c:19:64:05:b6:58:e4:8b:68:d2:00:b7:57:8e:97: aa:3e:38:83:2c:e9:65:6f:6d:31:65:52:1e:b7:89: 98:fd:2f:43:77:8e:5c:9d:47:26:9d:90:13:3b:e3: 8b:e7:ff:fe:89:b3:18:46:58:a0:fe:ea:68:d0:13: fa:45:3d:69:1b:43:ca:1c:9d:34:51:58:af:05:6c: d5:c5:7a:71:59:86:94:a1:89:8c:b0:5d:37:c0:d2: ab:d9:37:3d:d4:47:35:98:bf:98:65:ee:4c:2c:d2: c1:29:96:07:9d:fc:9d:b5:eb:1c:45:ba:de:fd:4c: f9:19:3d:ae:6c:38:7f:fa:1b:13:95:73:19:e6:1b: 7e:91:7e:d7:be:83:a0:98:ba:be:3c:54:e9:61:ab: e8:24:c9:5c:19:88:36:66:de:d2:e3:5a:e1:ae:9e: 9f:bb:eb:c7:08:e6:1d:e5:d0:96:f7:11:20:28:7b: 01:1a:c0:8e:57:6e:8e:39:f1:c8:56:73:32:25:9b: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1B:AF:23:BE:26:50:3D:D6:60:20:6A:3C:33:1E:C0:16:5C:FE:32 X509v3 Authority Key Identifier: keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/D6406BBCD7A311EE8B9C577CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.142.0/24 Signature Algorithm: sha256WithRSAEncryption 57:f3:b2:a8:06:83:18:0d:31:bb:4d:85:07:e8:fb:9d:cc:ce: 30:4f:66:eb:1c:a6:37:0d:42:fa:1b:40:11:d0:72:9f:6f:44: 4c:19:a3:42:ee:8c:c2:16:ed:ba:5c:58:d6:00:29:ee:05:62: 4e:b0:a7:fb:3a:3d:46:b8:89:1c:31:ca:cb:0c:50:76:c1:3a: a0:99:37:79:03:ba:bb:d5:4d:46:2a:03:f0:7e:bf:2d:8b:0f: 74:70:c3:c4:b6:6e:60:83:1d:38:2c:5a:de:ab:7c:24:8e:fe: a8:2d:76:ea:d2:03:d1:08:b1:39:79:2c:5d:76:d3:a5:5b:b5: 0b:24:ab:77:3d:ee:60:75:bb:72:67:9e:9e:fd:3c:fa:9c:bb: ac:22:bd:5f:b2:f0:0b:ad:7e:c7:4b:7c:89:67:61:f8:7c:dd: a3:d9:b2:63:76:c4:02:e1:f3:77:f3:7a:69:f4:28:92:19:ec: 20:f4:3f:e6:80:a5:ec:ea:06:91:1c:2e:ad:0e:24:35:a5:0c: f0:1d:c0:09:07:4d:05:8d:3a:51:8b:2c:18:73:11:eb:a2:9f: 9b:3c:b7:b8:4a:df:08:1b:4d:c8:5e:6e:d9:60:ae:70:23:20: f2:fd:17:da:37:72:85:73:95:43:0d:10:36:97:d4:cd:2a:b8: b7:4c:5c:b9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RTA1NjExMC8GA1UEBRMoN0MxOTRGRURCOEE1QzhDOTc2RUJERUM4NDkzREYzQzNG MDhDQzhFMjAeFw0yNDAzMDEwODE1MTdaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZTE4ZTk1LThlYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGyfWP1V1B+8m5ruQ5sMnh+RMUoZq55z6/Ghe8vLtYtcg54F1CckHojCefh6hI Ck4fByjcb8asL1M5l1wZZAW2WOSLaNIAt1eOl6o+OIMs6WVvbTFlUh63iZj9L0N3 jlydRyadkBM744vn//6JsxhGWKD+6mjQE/pFPWkbQ8ocnTRRWK8FbNXFenFZhpSh iYywXTfA0qvZNz3URzWYv5hl7kws0sEplged/J216xxFut79TPkZPa5sOH/6GxOV cxnmG36Rfte+g6CYur48VOlhq+gkyVwZiDZm3tLjWuGunp+768cI5h3l0Jb3ESAo ewEawI5Xbo458chWczIlm81FAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUtBuvI74m UD3WYCBqPDMewBZc/jIwHwYDVR0jBBgwFoAUfBlP7bilyMl2697IST3zw/CMyOIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFMDU2LzAwM0UxMTU4RDc4 QjExRUVBMkVCRDcxMkM0RjlBRTAyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlP SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkJsUDdiaWx5TWwyNjk3SVNUM3p3X0NNeU9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9ENjQwNkJCQ0Q3 QTMxMUVFOEI5QzU3N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJ0UjjANBgkqhkiG9w0BAQsFAAOCAQEAV/OyqAaDGA0xu02F B+j7nczOME9m6xymNw1C+htAEdByn29ETBmjQu6MwhbtulxY1gAp7gViTrCn+zo9 RriJHDHKywxQdsE6oJk3eQO6u9VNRioD8H6/LYsPdHDDxLZuYIMdOCxa3qt8JI7+ qC126tID0QixOXksXXbTpVu1CySrdz3uYHW7cmeenv08+py7rCK9X7LwC61+x0t8 iWdh+Hzdo9myY3bEAuHzd/N6afQokhnsIPQ/5oCl7OoGkRwurQ4kNaUM8B3ACQdN BY06UYssGHMR66Kfmzy3uErfCBtNyF5u2WCucCMg8v0X2jdyhXOVQw0QNpfUzSq4 t0xcuQ== -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:05 2024 by rpki-client on console-fra.rpki-client.org