$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/6133230CEB3311EEA75DE77DC4F9AE02.roa File: 6133230CEB3311EEA75DE77DC4F9AE02.roa (raw, json) Hash identifier: Ro0WjrfgWaHXMYveHr1ptLiLsehp8t34UtftOvsWgq0= Subject key identifier: 48:9B:B3:E9:0F:CA:CA:FD:0D:63:8B:20:41:1C:81:42:78:C1:8B:3C Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 18 Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/6133230CEB3311EEA75DE77DC4F9AE02.roa Signing time: Tue 26 Mar 2024 05:40:40 +0000 ROA not before: Tue 26 Mar 2024 05:40:40 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 148968 IP address blocks: 157.10.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: Mar 26 05:40:40 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66025fd8-874b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:54:a6:df:b2:3a:55:93:e2:ad:50:70:22: eb:4a:7e:ba:06:14:a3:94:7c:cc:a9:be:f3:a8:12: ef:1b:d1:91:3b:9b:32:74:15:fd:bb:ba:d0:7f:4a: 89:72:b3:b2:63:f4:bf:94:e2:01:81:d4:43:bf:91: 58:e0:7f:e4:30:a5:eb:7f:67:7c:3c:e2:f7:58:e4: 5a:6c:66:b8:c1:b9:03:51:57:7e:ed:19:95:7b:f4: 59:fb:c6:44:65:f2:d4:6d:c2:3b:fb:8b:85:b8:e1: 5f:d0:d0:fd:92:12:af:99:b0:4c:df:f7:1b:db:b2: 74:f1:ca:4f:b9:e9:82:8b:25:5f:1f:14:61:9d:6d: b0:a9:c8:a0:7f:30:69:5f:0c:d1:27:e0:f6:a1:0e: 8b:c3:40:0d:a1:f1:79:70:b6:82:56:48:f4:a7:65: 0c:8d:22:a2:91:ac:aa:47:dc:0a:f2:cb:92:db:27: 83:bf:ea:42:56:f5:4e:2f:1c:40:b1:8c:4e:e6:e4: a2:bc:4d:5d:6d:41:b6:94:2a:73:2d:04:3b:49:27: 08:3f:02:6c:18:01:d9:4f:39:50:d8:be:af:dc:8f: 85:f7:72:db:b9:36:af:52:d7:73:fa:58:4b:e8:33: df:76:77:02:d4:45:8e:e4:19:68:c9:27:6f:91:c3: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9B:B3:E9:0F:CA:CA:FD:0D:63:8B:20:41:1C:81:42:78:C1:8B:3C X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/6133230CEB3311EEA75DE77DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.214.0/23 Signature Algorithm: sha256WithRSAEncryption 63:9b:8e:4c:1f:27:fa:c3:bc:45:86:fa:29:d2:2a:b1:43:a4: a8:8e:13:5e:24:40:a1:2c:ad:6b:60:a0:b4:1f:3a:73:f7:e1: 92:bd:41:06:ce:3e:bd:c5:6f:36:2f:e0:23:17:11:cd:3b:29: 44:07:cf:02:ea:85:91:4d:f5:b7:83:dc:01:6c:7d:d3:4b:fa: 80:82:2e:b6:aa:51:d0:4f:1f:f2:92:60:a6:0f:b1:cc:e1:8c: 98:4b:d8:61:f1:c7:61:95:a9:75:1e:01:4b:00:67:2d:fa:29: 18:26:b0:c3:17:40:9e:a4:2c:9a:17:a8:cf:f4:34:73:96:10: de:29:34:ee:a7:43:f2:ba:d4:f7:08:14:f4:57:6f:53:03:77: 78:34:bf:6c:46:36:52:2a:5d:70:97:34:85:fc:37:c7:44:32: ad:30:de:46:17:7d:c7:97:83:0e:0e:ae:ff:11:06:72:15:87: ed:9f:08:5a:3c:99:5d:47:9e:a6:8a:af:b6:0c:aa:f3:87:ad: d0:f1:60:4c:da:e4:01:61:90:2a:6c:dd:67:e2:21:3a:59:80: 66:bd:3e:0a:64:2f:c3:cb:7e:a3:08:a5:b0:08:ff:2a:20:81: b0:69:76:be:c4:4a:88:64:bf:eb:c5:d1:4a:1d:fd:d4:ee:f1: 6a:df:c6:b1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkE4MjExMC8GA1UEBRMoQkJEQTJBNTJCNTA0OEYxQThBQUJCRjVDMjQxNzI2MDEy NzdDQjJGMzAeFw0yNDAzMjYwNTQwNDBaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MDI1ZmQ4LTg3NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1tFSm37I6VZPirVBwIutKfroGFKOUfMypvvOoEu8b0ZE7mzJ0Ff27utB/Soly s7Jj9L+U4gGB1EO/kVjgf+Qwpet/Z3w84vdY5FpsZrjBuQNRV37tGZV79Fn7xkRl 8tRtwjv7i4W44V/Q0P2SEq+ZsEzf9xvbsnTxyk+56YKLJV8fFGGdbbCpyKB/MGlf DNEn4PahDovDQA2h8XlwtoJWSPSnZQyNIqKRrKpH3Aryy5LbJ4O/6kJW9U4vHECx jE7m5KK8TV1tQbaUKnMtBDtJJwg/AmwYAdlPOVDYvq/cj4X3ctu5Nq9S13P6WEvo M992dwLURY7kGWjJJ2+Rw/dzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUSJuz6Q/K yv0NY4sgQRyBQnjBizwwHwYDVR0jBBgwFoAUu9oqUrUEjxqKq79cJBcmASd8svMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCQTgyL0YyNjAxNEU4Q0U1 QTExRUU4QzNCRDAzQUM0RjlBRTAyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTlvcVVyVUVqeHFLcTc5Y0pCY21BU2Q4c3ZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi82MTMzMjMwQ0VC MzMxMUVFQTc1REU3N0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0K1jANBgkqhkiG9w0BAQsFAAOCAQEAY5uOTB8n+sO8RYb6 KdIqsUOkqI4TXiRAoSyta2CgtB86c/fhkr1BBs4+vcVvNi/gIxcRzTspRAfPAuqF kU31t4PcAWx900v6gIIutqpR0E8f8pJgpg+xzOGMmEvYYfHHYZWpdR4BSwBnLfop GCawwxdAnqQsmheoz/Q0c5YQ3ik07qdD8rrU9wgU9FdvUwN3eDS/bEY2UipdcJc0 hfw3x0QyrTDeRhd9x5eDDg6u/xEGchWH7Z8IWjyZXUeepoqvtgyq84et0PFgTNrk AWGQKmzdZ+IhOlmAZr0+CmQvw8t+owilsAj/KiCBsGl2vsRKiGS/68XRSh391O7x at/GsQ== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:09 2024 by rpki-client on console-ams.rpki-client.org