$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/4FB5C8F4C43D11EE973ADE48C4F9AE02.roa File: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (raw, json) Hash identifier: V1EudKad5ciqiLAx0vFe4QNo4i7JkuqWv1jedSoHcts= Subject key identifier: 7A:46:D5:94:41:91:35:4D:1C:48:69:39:4F:A6:29:E1:10:2F:CE:83 Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Certificate serial: 04 Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/4FB5C8F4C43D11EE973ADE48C4F9AE02.roa Signing time: Mon 05 Feb 2024 15:43:31 +0000 ROA not before: Mon 05 Feb 2024 15:43:31 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152455 IP address blocks: 157.15.114.0/23 maxlen: 23 157.15.114.0/24 maxlen: 24 157.15.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 07:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9 Validity Not Before: Feb 5 15:43:31 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65c10222-6ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:21:5a:39:47:49:90:23:58:e2:da:8c:9a: 31:b9:3e:a4:f0:9a:24:51:38:15:07:97:b8:3d:30: a9:16:16:78:52:f4:49:dc:7a:ab:45:a5:bb:23:2c: 87:5b:f3:a0:7a:12:61:0b:93:36:62:bc:df:12:52: 5b:d0:08:d2:cd:43:6c:f5:13:03:07:9a:ad:a9:56: b3:25:bb:ab:4c:ec:ba:cd:f6:08:d4:a5:a6:31:67: cf:1c:3a:50:2e:ba:a0:c1:7c:a6:9e:00:60:7d:a0: b1:13:d0:7f:eb:7e:0c:b4:e3:8b:86:b0:6e:da:66: f0:f3:54:a5:17:c9:7b:cc:c1:2d:f2:09:1a:e1:2f: bc:3e:26:b0:1f:6f:d4:15:36:95:f5:35:87:c2:fe: 1c:27:d1:1f:fd:43:c6:29:58:a1:0d:d4:63:dd:5f: a4:22:f3:25:d0:6d:3d:1a:00:72:d5:e8:36:e9:4c: bb:12:dc:5b:a5:85:a2:49:a6:e7:56:2f:7f:43:fb: 19:b1:e1:14:c4:1e:d5:ab:cf:9a:9e:78:6e:8d:c8: 0e:a8:c4:c4:e4:e9:6e:d8:c6:73:4d:d2:1f:f3:d7: cc:22:61:98:3b:8a:a2:67:8f:78:ed:70:f8:06:5b: 8e:e6:98:ad:be:a3:07:88:48:de:fb:9c:58:c4:4f: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:46:D5:94:41:91:35:4D:1C:48:69:39:4F:A6:29:E1:10:2F:CE:83 X509v3 Authority Key Identifier: keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/4FB5C8F4C43D11EE973ADE48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.114.0/23 Signature Algorithm: sha256WithRSAEncryption a7:8f:33:b4:a9:c8:c9:52:e1:ee:5e:2b:2e:bc:45:b5:17:ab: d0:e6:38:a3:f8:9d:fb:61:a6:4b:fd:63:33:27:1c:18:b6:40: 08:d0:e1:b4:53:16:e2:ab:d0:e8:45:d9:9c:ef:99:37:08:ba: 6a:8d:cd:7f:92:2c:46:ba:e4:73:70:67:bb:91:cd:51:8d:d7: e6:d4:21:29:5b:dd:72:71:ba:fc:e9:a6:22:dd:c1:4b:e9:b8: b2:57:80:a0:b1:e4:19:81:81:67:76:da:f7:92:df:11:5c:26: 89:db:aa:8c:97:81:8e:6e:fe:46:6d:e1:84:76:24:87:32:62: ad:8b:fe:bf:22:7b:55:d1:ef:93:30:ac:83:d8:19:73:6f:65: 3d:56:f7:9d:ea:3c:5b:00:17:86:9a:02:56:7b:7c:76:5f:65: 27:1a:8d:bc:c9:34:8e:48:2f:28:b4:f3:d9:9e:fe:64:a2:b9: ae:a1:f2:6b:28:32:47:58:3f:91:29:6e:ed:40:e1:7a:6f:02: a2:31:9c:26:80:4b:05:b5:53:e8:98:fa:51:de:55:96:e0:f8: b9:71:cb:74:64:70:b8:9e:08:11:0d:fb:17:fe:52:ba:a6:cf: b0:d8:05:33:a4:b5:8e:07:b1:6e:a9:77:c3:3a:04:4b:78:6c: f0:a4:d3:9d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzJCOTExMC8GA1UEBRMoNzAxMDdCRUNCODRBQzRDRTVFOTVDQzYxRDExMEE2NzIz RjkwQzlDMzAeFw0yNDAyMDUxNTQzMzFaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YzEwMjIyLTZmZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsdCFaOUdJkCNY4tqMmjG5PqTwmiRROBUHl7g9MKkWFnhS9EnceqtFpbsjLIdb 86B6EmELkzZivN8SUlvQCNLNQ2z1EwMHmq2pVrMlu6tM7LrN9gjUpaYxZ88cOlAu uqDBfKaeAGB9oLET0H/rfgy044uGsG7aZvDzVKUXyXvMwS3yCRrhL7w+JrAfb9QV NpX1NYfC/hwn0R/9Q8YpWKEN1GPdX6Qi8yXQbT0aAHLV6DbpTLsS3FulhaJJpudW L39D+xmx4RTEHtWrz5qeeG6NyA6oxMTk6W7YxnNN0h/z18wiYZg7iqJnj3jtcPgG W47mmK2+oweISN77nFjET1lXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUekbVlEGR NU0cSGk5T6Yp4RAvzoMwHwYDVR0jBBgwFoAUcBB77LhKxM5elcxh0RCmcj+QycMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDMkI5LzMwNjY5OUNBQzJB MjExRUU5MUQ5NTM1Q0M0RjlBRTAyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXlj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY0JCNzdMaEt4TTVlbGN4aDBSQ21jai1ReWNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zMDY2OTlDQUMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi80RkI1QzhGNEM0 M0QxMUVFOTczQURFNDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0PcjANBgkqhkiG9w0BAQsFAAOCAQEAp48ztKnIyVLh7l4r LrxFtRer0OY4o/id+2GmS/1jMyccGLZACNDhtFMW4qvQ6EXZnO+ZNwi6ao3Nf5Is Rrrkc3Bnu5HNUY3X5tQhKVvdcnG6/OmmIt3BS+m4sleAoLHkGYGBZ3ba95LfEVwm iduqjJeBjm7+Rm3hhHYkhzJirYv+vyJ7VdHvkzCsg9gZc29lPVb3neo8WwAXhpoC Vnt8dl9lJxqNvMk0jkgvKLTz2Z7+ZKK5rqHyaygyR1g/kSlu7UDhem8CojGcJoBL BbVT6Jj6Ud5VluD4uXHLdGRwuJ4IEQ37F/5SuqbPsNgFM6S1jgexbql3wzoES3hs 8KTTnQ== -----END CERTIFICATE-----Generated at Wed Feb 19 20:36:40 2025 by rpki-client