$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/F4F785D0D09C11EE94431F80C4F9AE02.roa File: F4F785D0D09C11EE94431F80C4F9AE02.roa (raw, json) Hash identifier: gAmtnMhOAhK0fAuYmhp1IcpgWCw5DClF8kvOob2UxoY= Subject key identifier: 13:D9:F7:4D:1D:82:9E:CD:21:3A:0C:A6:18:9C:60:B1:0C:18:33:5A Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 02 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/F4F785D0D09C11EE94431F80C4F9AE02.roa Signing time: Wed 21 Feb 2024 09:38:24 +0000 ROA not before: Wed 21 Feb 2024 09:38:24 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138032 IP address blocks: 157.20.74.0/24 maxlen: 24 157.20.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Feb 21 09:38:24 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65d5c490-eae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:31:1c:77:b2:c2:c5:8f:a3:93:8c:c8:19: cf:bf:bd:45:5c:11:7e:e7:b4:11:67:3b:6e:32:a7: 2e:f7:2e:63:c2:3a:1f:d9:66:a3:66:d9:a6:29:65: eb:1f:a9:8d:19:8f:27:73:f5:7f:52:4a:f8:c3:7e: be:99:25:c8:be:6c:c6:8c:35:b0:16:76:28:8f:8a: d0:2a:a7:72:db:d0:c3:47:6d:76:a0:0b:52:b5:ec: 7a:70:14:64:ac:3e:9c:a7:a4:e4:6e:aa:69:4c:8b: 14:ba:21:ee:39:2e:87:4f:fc:b7:56:1b:ce:ff:c4: 65:66:90:96:d2:42:f3:fe:60:67:d1:10:c6:3e:d4: b6:13:84:8d:21:25:57:0e:95:6a:e1:d8:f4:72:f7: 7a:f9:b2:e8:90:8e:3c:54:dd:29:9f:f1:93:41:21: 46:09:1c:7e:c6:47:59:0f:4e:cf:19:80:df:e0:1c: 86:d8:6b:11:82:0d:76:3e:d3:72:30:e0:54:28:b2: 0e:2a:e8:dd:2b:ac:5d:0d:c0:83:22:d2:30:7f:63: 03:5d:ec:f5:cb:d3:d0:14:66:4e:6d:95:ed:e3:35: b6:6a:25:35:0c:91:3b:be:55:0a:16:f2:4b:77:fc: b0:4d:87:b9:26:92:53:1d:41:3f:26:5e:14:d7:d2: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D9:F7:4D:1D:82:9E:CD:21:3A:0C:A6:18:9C:60:B1:0C:18:33:5A X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/F4F785D0D09C11EE94431F80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.74.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:04:2c:5a:dc:00:41:4f:98:67:f9:69:6f:d9:f6:39:25:65: 82:67:18:40:0f:86:d9:90:38:49:82:c0:6b:f9:61:ec:f4:60: 9f:80:7e:a7:02:70:63:7e:0d:1b:9e:3e:fd:68:f7:35:81:53: ae:29:98:19:6f:55:61:cf:9f:0b:2a:33:4e:65:c2:d8:97:b7: 00:d2:e8:f8:f8:43:c2:0f:fd:92:53:bb:88:84:a5:e0:5b:8b: 7b:97:fd:f7:04:b2:88:21:91:68:da:f9:2d:51:9b:d3:54:34: 70:40:ff:2f:2f:3c:fd:e6:a6:69:76:83:2a:0f:4b:74:a7:c8: d9:3c:a0:cb:94:ae:cc:9d:7f:ba:c9:50:0a:00:b2:46:6e:79: 56:69:c0:60:96:14:2e:ef:b6:e4:f6:c7:0e:69:6b:ed:bf:79: 8e:c9:67:1d:8d:ca:8e:4e:17:4d:e6:fa:51:6d:3d:0d:f3:89: 50:bd:c8:50:83:fe:d1:8a:c5:07:d0:22:56:6b:6f:b1:01:78: d0:79:5b:ae:d0:5b:1e:a6:34:55:1f:b1:64:b9:8c:19:9f:86: 31:73:00:ac:56:52:b3:23:f4:83:79:65:15:d0:37:12:9e:a9: 8b:76:c6:a1:34:ec:5d:34:ad:fe:aa:63:ad:68:12:52:16:65: c6:39:41:40 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OUI2RjExMC8GA1UEBRMoMTU4MzkzMzBBODFFRDg5OTIwNzNBMjM4MDRDOUY1OTA1 MzhGQjlEMjAeFw0yNDAyMjEwOTM4MjRaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZDVjNDkwLWVhZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSCDEcd7LCxY+jk4zIGc+/vUVcEX7ntBFnO24ypy73LmPCOh/ZZqNm2aYpZesf qY0Zjydz9X9SSvjDfr6ZJci+bMaMNbAWdiiPitAqp3Lb0MNHbXagC1K17HpwFGSs PpynpORuqmlMixS6Ie45LodP/LdWG87/xGVmkJbSQvP+YGfREMY+1LYThI0hJVcO lWrh2PRy93r5suiQjjxU3Smf8ZNBIUYJHH7GR1kPTs8ZgN/gHIbYaxGCDXY+03Iw 4FQosg4q6N0rrF0NwIMi0jB/YwNd7PXL09AUZk5tle3jNbZqJTUMkTu+VQoW8kt3 /LBNh7kmklMdQT8mXhTX0sn9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUE9n3TR2C ns0hOgymGJxgsQwYM1owHwYDVR0jBBgwFoAUFYOTMKge2Jkgc6I4BMn1kFOPudIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5QjZGLzJBRDVGNkQ4RDA5 QzExRUU4MEFCOEQ3RUM0RjlBRTAyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRllPVE1LZ2UySmtnYzZJNEJNbjFrRk9QdWRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GNEY3ODVEMEQw OUMxMUVFOTQ0MzFGODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0USjANBgkqhkiG9w0BAQsFAAOCAQEAHgQsWtwAQU+YZ/lp b9n2OSVlgmcYQA+G2ZA4SYLAa/lh7PRgn4B+pwJwY34NG54+/Wj3NYFTrimYGW9V Yc+fCyozTmXC2Je3ANLo+PhDwg/9klO7iISl4FuLe5f99wSyiCGRaNr5LVGb01Q0 cED/Ly88/eamaXaDKg9LdKfI2Tygy5SuzJ1/uslQCgCyRm55VmnAYJYULu+25PbH Dmlr7b95jslnHY3Kjk4XTeb6UW09DfOJUL3IUIP+0YrFB9AiVmtvsQF40HlbrtBb HqY0VR+xZLmMGZ+GMXMArFZSsyP0g3llFdA3Ep6pi3bGoTTsXTSt/qpjrWgSUhZl xjlBQA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:13 2024 by rpki-client on console-ams.rpki-client.org