$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/1B2031C645B911EFB15BD970C4F9AE02.roa File: 1B2031C645B911EFB15BD970C4F9AE02.roa (raw, json) Hash identifier: PQ4Ssq+Ml8hmTHrL6ieO63nOlhOMCKY3mNtsZnVazsA= Subject key identifier: F9:20:D1:54:71:C7:86:F3:C1:FA:92:EA:C0:8C:DB:C9:20:49:15:E8 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 05 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/1B2031C645B911EFB15BD970C4F9AE02.roa Signing time: Fri 19 Jul 2024 10:24:40 +0000 ROA not before: Fri 19 Jul 2024 10:24:40 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Jul 19 10:24:40 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=669a3ee8-b710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:2d:31:2c:81:87:96:cc:ea:f9:c2:83:63: 74:d8:12:85:8c:d0:b2:90:2f:50:eb:75:4b:29:b6: 58:3b:ce:2f:c8:d2:9c:6e:27:bc:26:1b:b8:d3:2f: b7:e3:34:27:40:d4:e0:83:00:c5:f3:c1:0a:5a:fb: 0c:ad:59:69:96:e9:49:86:1a:12:82:85:52:97:01: a5:9a:ac:88:95:f1:40:fc:4c:95:e8:88:3b:04:ac: e6:48:13:69:9b:af:c0:08:e8:54:f9:12:67:d4:0e: 72:17:9c:85:31:6d:64:b1:e2:74:36:7d:15:ff:00: 9a:9c:1d:66:d0:79:f5:14:c2:ef:c5:fa:ab:0b:7f: 6f:d0:8e:d5:31:86:bd:14:b9:ff:92:58:47:e4:0e: b4:63:fb:7e:f6:81:cb:8d:88:5e:5a:ad:1a:b2:90: 5b:76:30:ba:8a:08:98:45:88:8a:46:b3:f8:cb:1a: c9:e8:b0:2b:f8:0c:25:de:63:a8:ac:54:96:7d:63: 09:b9:3c:b1:a2:2e:a9:e6:f5:b3:43:53:c4:88:0e: 78:c4:91:f9:44:e3:0e:65:f2:89:84:68:35:e8:cc: 9f:f0:53:1f:96:6f:79:86:41:2d:0c:86:47:2e:6f: 31:b1:81:08:a7:ed:b0:09:d3:85:99:d6:30:c0:b4: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:20:D1:54:71:C7:86:F3:C1:FA:92:EA:C0:8C:DB:C9:20:49:15:E8 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/1B2031C645B911EFB15BD970C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.144.0/23 Signature Algorithm: sha256WithRSAEncryption 02:84:6d:83:f9:58:df:9b:14:9a:83:5b:8f:ca:61:5b:2d:37: ff:43:cd:bf:79:a2:17:c4:d4:3d:c5:cb:4e:b9:cc:ac:c9:0b: cc:10:77:2e:a7:67:49:ab:48:a8:e1:2a:5a:cd:fe:ae:b5:86: be:3b:a9:21:71:44:29:6f:84:3f:77:c1:5e:e6:8a:15:e2:2f: 5d:c0:7a:c9:9f:f4:e9:e5:d0:2d:d7:52:95:e8:b4:31:0f:46: 98:bd:2f:29:41:59:39:36:e1:cf:81:58:2b:98:4f:52:49:5f: 76:c4:2f:7e:40:73:fd:5f:bb:39:f0:5e:85:74:08:fc:76:30: 26:e5:5e:b5:53:74:76:69:65:27:7c:c3:a3:11:96:d4:62:5d: 22:fb:12:41:99:62:c4:4d:9f:22:fd:0e:bb:3b:d4:a9:2a:b4: d1:7e:7f:a3:c4:aa:e4:66:0f:a4:44:d2:db:cf:75:d3:fd:d9: a7:27:14:b3:28:1d:01:ee:48:b6:36:f0:80:88:36:2b:77:0f: 93:16:5b:32:7d:4f:92:4d:42:77:45:cf:bb:06:01:5d:00:05: 97:aa:bc:ad:71:24:11:dc:88:1e:f3:52:69:e1:7c:f5:74:d5: 29:1c:89:ba:a6:15:3c:f3:08:f6:34:9d:61:98:f2:b5:ba:6b: 62:e2:6e:3b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEQ1QjExMC8GA1UEBRMoQ0VEMEFEQjk5RjgwM0Y0NDFGNTBEQ0NCODNDRUU3MjA3 NkRDMzI4ODAeFw0yNDA3MTkxMDI0NDBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OWEzZWU4LWI3MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ4C0xLIGHlszq+cKDY3TYEoWM0LKQL1DrdUsptlg7zi/I0pxuJ7wmG7jTL7fj NCdA1OCDAMXzwQpa+wytWWmW6UmGGhKChVKXAaWarIiV8UD8TJXoiDsErOZIE2mb r8AI6FT5EmfUDnIXnIUxbWSx4nQ2fRX/AJqcHWbQefUUwu/F+qsLf2/QjtUxhr0U uf+SWEfkDrRj+372gcuNiF5arRqykFt2MLqKCJhFiIpGs/jLGsnosCv4DCXeY6is VJZ9Ywm5PLGiLqnm9bNDU8SIDnjEkflE4w5l8omEaDXozJ/wUx+Wb3mGQS0Mhkcu bzGxgQin7bAJ04WZ1jDAtDxzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+SDRVHHH hvPB+pLqwIzbySBJFegwHwYDVR0jBBgwFoAUztCtuZ+AP0QfUNzLg87nIHbcMogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RDVCLzdDQzhGMTlFNDVC NzExRUZBNkRGRDAzMkM0RjlBRTAyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01v Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenRDdHVaLUFQMFFmVU56TGc4N25JSGJjTW9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi8xQjIwMzFDNjQ1 QjkxMUVGQjE1QkQ5NzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0KkDANBgkqhkiG9w0BAQsFAAOCAQEAAoRtg/lY35sUmoNb j8phWy03/0PNv3miF8TUPcXLTrnMrMkLzBB3LqdnSatIqOEqWs3+rrWGvjupIXFE KW+EP3fBXuaKFeIvXcB6yZ/06eXQLddSlei0MQ9GmL0vKUFZOTbhz4FYK5hPUklf dsQvfkBz/V+7OfBehXQI/HYwJuVetVN0dmllJ3zDoxGW1GJdIvsSQZlixE2fIv0O uzvUqSq00X5/o8Sq5GYPpETS28910/3ZpycUsygdAe5ItjbwgIg2K3cPkxZbMn1P kk1Cd0XPuwYBXQAFl6q8rXEkEdyIHvNSaeF89XTVKRyJuqYVPPMI9jSdYZjytbpr YuJuOw== -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:11 2024 by rpki-client on console-ams.rpki-client.org