$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa File: 0B2E53E422B711EFB2B15160C4F9AE02.roa (raw, json) Hash identifier: QOXN1nndvSK1AATByodPTKJLPtXr2Sr2FzfqtSOzir4= Subject key identifier: 22:53:C5:90:7D:24:3F:EB:12:B3:05:AF:E5:6D:09:89:4E:96:6F:08 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: 2E Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa Signing time: Tue 04 Jun 2024 21:11:43 +0000 ROA not before: Tue 04 Jun 2024 21:11:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150142 IP address blocks: 203.26.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: Jun 4 21:11:43 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=665f830f-fa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:00:7a:c9:cb:78:73:ca:dd:84:32:b7:40:d0: 6a:25:c9:25:da:e1:3c:3e:b8:7c:0a:8c:88:a1:80: af:e7:c1:35:ee:3e:8c:35:dd:aa:51:9f:78:62:73: 61:ac:1b:2e:47:9b:0a:55:de:be:01:6e:be:a0:27: fa:39:c7:0c:0f:5c:32:88:1f:25:56:85:ce:60:20: 44:62:7b:11:f2:98:46:3b:92:60:70:52:3e:bd:66: fd:cc:fe:14:8e:42:3f:e7:c8:b0:04:b8:f8:1c:26: 79:a8:9e:9c:47:da:c8:dd:af:2b:af:9b:95:7a:3c: ff:75:09:04:e2:66:5a:4c:fd:39:67:13:4e:70:9a: a7:48:3b:70:37:2a:04:87:53:f5:e8:c3:52:da:fe: e9:9f:14:09:03:db:c9:75:c5:a2:5f:44:83:0b:cd: 33:30:a0:6c:1f:01:db:b8:45:16:2c:01:d8:3e:4a: 82:00:2a:0a:f1:1f:33:89:50:05:0c:36:7c:f5:6a: 25:eb:60:de:93:c5:4d:2c:9c:f4:68:31:16:9b:91: fc:c4:e3:00:3b:90:5f:b2:85:10:69:34:9e:d4:d1: df:5d:92:10:25:28:83:6c:fa:db:61:b5:98:53:73: 64:8f:a0:f8:aa:82:0e:87:61:10:7d:9c:9e:76:b4: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:53:C5:90:7D:24:3F:EB:12:B3:05:AF:E5:6D:09:89:4E:96:6F:08 X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.26.151.0/24 Signature Algorithm: sha256WithRSAEncryption 24:6c:b5:a7:39:9e:0f:42:73:00:84:4b:71:26:2c:af:d7:67: e5:9d:a7:f4:86:ef:18:8a:8d:74:e0:4e:00:16:59:84:76:26: 0a:0f:9c:4a:66:ed:cc:3b:98:a1:64:d1:2b:1f:9e:85:f0:81: f2:d8:89:14:be:d5:ee:64:9c:0f:ce:12:0c:ba:7c:56:fd:8e: 0c:5f:76:f4:f8:e2:10:c2:5f:33:09:0e:f1:78:63:c3:06:b0: b4:df:63:18:da:31:88:92:e1:a3:21:84:8e:9a:3f:da:69:fa: 27:74:35:c5:c9:82:d1:0a:37:66:f1:a8:81:e2:0b:62:25:bd: 14:5c:aa:18:d2:c4:85:c1:f3:82:c1:9f:fc:b7:30:04:c2:ac: 49:dd:7b:e3:cd:83:8b:9e:3a:e4:3e:13:ec:08:25:f3:66:09: 70:d4:47:bd:a3:2b:4a:93:af:5e:43:49:6b:9c:68:75:fc:a2: 6d:62:c7:d8:89:8a:0b:a5:28:e8:8f:b0:f4:92:8f:2b:6c:7e: 64:5d:c4:97:f2:97:8f:06:20:52:f3:6c:3c:0f:4c:7d:8a:9d: 03:ac:68:0e:bf:78:00:ea:70:80:41:f3:cb:e0:29:00:e1:2d: 14:23:ff:ff:19:b5:2c:df:96:e6:c8:76:15:2d:c0:27:b0:1a: 8a:98:56:04 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjhEMDExMC8GA1UEBRMoMjU0RUFGNjQ5MDc1NEY1MDdEQjgxQ0U5MEREQjYyOUI2 MjJGNDY2MDAeFw0yNDA2MDQyMTExNDNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NWY4MzBmLWZhNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRAHrJy3hzyt2EMrdA0GolySXa4Tw+uHwKjIihgK/nwTXuPow13apRn3hic2Gs Gy5HmwpV3r4Bbr6gJ/o5xwwPXDKIHyVWhc5gIERiexHymEY7kmBwUj69Zv3M/hSO Qj/nyLAEuPgcJnmonpxH2sjdryuvm5V6PP91CQTiZlpM/TlnE05wmqdIO3A3KgSH U/Xow1La/umfFAkD28l1xaJfRIMLzTMwoGwfAdu4RRYsAdg+SoIAKgrxHzOJUAUM Nnz1aiXrYN6TxU0snPRoMRabkfzE4wA7kF+yhRBpNJ7U0d9dkhAlKINs+tthtZhT c2SPoPiqgg6HYRB9nJ52tIULAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUIlPFkH0k P+sSswWv5W0JiU6WbwgwHwYDVR0jBBgwFoAUJU6vZJB1T1B9uBzpDdtim2IvRmAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCOEQwLzQxRTJCRTI4RUI2 RTExRUU4M0UzQUU1MUM0RjlBRTAyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlU2dlpKQjFUMUI5dUJ6cERkdGltMkl2Um1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi8wQjJFNTNFNDIy QjcxMUVGQjJCMTUxNjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsalzANBgkqhkiG9w0BAQsFAAOCAQEAJGy1pzmeD0JzAIRL cSYsr9dn5Z2n9IbvGIqNdOBOABZZhHYmCg+cSmbtzDuYoWTRKx+ehfCB8tiJFL7V 7mScD84SDLp8Vv2ODF929PjiEMJfMwkO8XhjwwawtN9jGNoxiJLhoyGEjpo/2mn6 J3Q1xcmC0Qo3ZvGogeILYiW9FFyqGNLEhcHzgsGf/LcwBMKsSd17482Di5465D4T 7Agl82YJcNRHvaMrSpOvXkNJa5xodfyibWLH2ImKC6Uo6I+w9JKPK2x+ZF3El/KX jwYgUvNsPA9MfYqdA6xoDr94AOpwgEHzy+ApAOEtFCP//xm1LN+W5sh2FS3AJ7Aa iphWBA== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org