$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa File: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (raw, json) Hash identifier: Xx/j33V2abaEtkV0aKfmFr3cMW7aDKDlom4xDnkcRPM= Subject key identifier: 7E:58:90:D2:A9:74:23:B8:C1:C8:49:04:9B:D2:14:73:A8:12:A9:7F Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0AE2 Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa Signing time: Fri 30 Jun 2023 19:09:09 +0000 ROA not before: Fri 30 Jun 2023 19:09:09 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 10148 IP address blocks: 128.250.0.0/16 maxlen: 24 192.43.207.0/24 maxlen: 24 192.43.208.0/24 maxlen: 24 192.43.209.0/24 maxlen: 24 192.101.254.0/24 maxlen: 24 192.231.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: Jun 30 19:09:09 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=649f2855-fae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:30:9b:a7:e6:4e:49:bf:ce:35:23:31:9e: 18:57:e4:85:6e:3b:5c:29:40:c0:20:9b:38:2a:81: 76:34:c2:13:c9:75:f0:7c:e3:53:34:eb:6e:99:05: 7e:12:22:7a:5f:cf:e5:1e:6f:52:11:8b:bb:8d:4e: 11:e0:c9:cf:e2:41:1c:d4:a8:de:24:39:6e:eb:58: 62:8d:17:af:5f:bf:15:a0:f7:d6:d7:66:39:a4:77: 93:f9:5e:1c:fd:05:5c:e0:65:33:9b:b2:ec:a2:6e: 09:69:ab:2e:fe:18:b6:ec:ca:30:24:f6:4f:ed:48: 90:74:9a:e4:72:a1:b9:5b:24:87:80:14:df:18:03: bf:26:67:64:8a:d1:88:16:47:e0:0f:45:a7:07:f1: 14:94:15:da:44:35:d4:87:15:d2:0b:4b:d6:1f:b1: 6f:16:08:7a:e7:47:be:c7:d0:e1:85:24:aa:62:a3: 48:c3:8f:8e:72:8a:e6:4d:12:dc:f7:3a:80:6d:75: ea:d6:01:0c:3b:05:67:1e:a9:5d:07:08:7c:c8:2f: 08:a6:71:64:96:fd:52:dd:6b:b7:d6:f8:e0:ee:46: ec:99:65:fb:f5:b2:24:49:2f:ae:8e:8a:85:98:aa: ab:07:d6:1b:f6:14:5b:c6:76:e8:04:90:59:7c:25: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:58:90:D2:A9:74:23:B8:C1:C8:49:04:9B:D2:14:73:A8:12:A9:7F X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.250.0.0/16 192.43.207.0-192.43.209.255 192.101.254.0/24 192.231.127.0/24 Signature Algorithm: sha256WithRSAEncryption 13:d5:bb:c2:89:cd:cb:e0:7a:f0:c8:8d:1d:80:ca:1e:ad:59: 8b:93:c1:01:6e:49:a1:54:2e:10:2c:72:07:db:6c:cd:58:04: 9c:c0:dc:b2:7d:c8:7a:2b:ed:a9:35:63:a7:9b:0b:17:4f:ab: 1a:75:42:02:7c:2e:33:ba:58:87:20:2a:e6:34:50:4a:b7:3b: 7f:7e:ff:e7:9f:ee:79:d8:ba:2e:46:01:fb:04:f2:a0:26:8e: 91:f2:47:1b:35:f0:6f:21:04:7c:41:c1:1f:ca:8f:c7:6b:1d: 7f:60:0c:bb:52:a3:e3:ec:ab:c9:44:e8:93:3d:36:42:64:08: 3e:b4:f0:63:09:91:0b:15:3d:e4:ea:50:39:7b:7b:26:be:ca: fb:36:4a:75:e3:5e:9a:78:25:19:3d:6a:bf:fe:d8:82:48:30: 78:45:a9:02:9c:a0:43:65:e0:95:d4:a0:f6:c7:af:ff:15:43: e8:07:d0:63:4f:cb:e2:36:69:9c:4a:d7:bf:ca:56:cb:09:59: e4:a8:cb:c5:b2:59:00:2e:33:f0:c1:35:18:86:ff:47:f9:29: 8f:20:1f:18:ac:1c:fc:17:b5:4e:e7:78:b8:13:9a:65:47:84: c3:fc:07:60:9e:33:d2:9c:55:1a:d7:3c:bf:93:21:ff:81:90: f9:82:13:57 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjMwNjMwMTkwOTA5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDlmMjg1NS1mYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LYwm6fmTkm/zjUjMZ4YV+SFbjtcKUDAIJs4KoF2NMITyXXwfONTNOtumQV+ EiJ6X8/lHm9SEYu7jU4R4MnP4kEc1KjeJDlu61hijRevX78VoPfW12Y5pHeT+V4c /QVc4GUzm7Lsom4Jaasu/hi27MowJPZP7UiQdJrkcqG5WySHgBTfGAO/JmdkitGI FkfgD0WnB/EUlBXaRDXUhxXSC0vWH7FvFgh650e+x9DhhSSqYqNIw4+OcormTRLc 9zqAbXXq1gEMOwVnHqldBwh8yC8IpnFklv1S3Wu31vjg7kbsmWX79bIkSS+ujoqF mKqrB9Yb9hRbxnboBJBZfCXNzwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFH5YkNKp dCO4wchJBJvSFHOoEql/MB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU3QkEvNjgxMkRGOTIwNEVCMTFFQUE3MkZBMzYzQzRGOUFFMDIvMTU3QTFCRkM1 OUVFMTFFQkEzOThBQTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMCUEAgABMB8DAwCA+jAMAwQAwCvPAwQBwCvQAwQAwGX+AwQAwOd/MA0GCSqG SIb3DQEBCwUAA4IBAQAT1bvCic3L4HrwyI0dgMoerVmLk8EBbkmhVC4QLHIH22zN WAScwNyyfch6K+2pNWOnmwsXT6sadUICfC4zuliHICrmNFBKtzt/fv/nn+552Lou RgH7BPKgJo6R8kcbNfBvIQR8QcEfyo/Hax1/YAy7UqPj7KvJROiTPTZCZAg+tPBj CZELFT3k6lA5e3smvsr7Nkp1416aeCUZPWq//tiCSDB4RakCnKBDZeCV1KD2x6// FUPoB9BjT8viNmmcSte/ylbLCVnkqMvFslkALjPwwTUYhv9H+SmPIB8YrBz8F7VO 53i4E5plR4TD/AdgnjPSnFUa1zy/kyH/gZD5ghNX -----END CERTIFICATE-----Generated at Sun May 12 20:26:24 2024 by rpki-client on console-ams.rpki-client.org