$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/A97CBD42A06611EFA888B57DC4F9AE02.roa File: A97CBD42A06611EFA888B57DC4F9AE02.roa (raw, json) Hash identifier: 2eDNp0VKihD/HV+NCqOt2diAhbK7NfILsaTbYn0bFks= Subject key identifier: BC:51:EE:A2:35:BB:9F:2D:FE:E8:E4:B1:A6:13:AC:69:6D:DF:AB:6F Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: A6 Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/A97CBD42A06611EFA888B57DC4F9AE02.roa Signing time: Tue 19 Nov 2024 12:49:23 +0000 ROA not before: Tue 19 Nov 2024 12:49:23 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 152333 IP address blocks: 157.10.226.0/24 maxlen: 24 157.10.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Nov 19 12:49:23 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=673c8952-c924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b4:01:00:a4:ab:c9:5a:95:25:a4:f1:ae:f9: 69:03:cd:6c:a3:c1:a3:c5:86:0e:c4:22:c7:51:cc: 6b:cf:66:65:bd:91:64:a9:1b:29:59:d0:f4:24:de: 63:1d:72:31:75:11:34:97:75:bc:a7:70:c7:17:db: f6:ac:1e:70:85:b6:18:3c:2f:8a:57:ca:e8:93:ed: c0:9f:62:91:f6:5b:cf:10:be:df:83:a0:e4:a1:c1: b9:d9:3b:0d:f9:3f:66:cb:0b:85:c0:8d:4d:78:c7: 3f:f6:06:16:f5:ed:a2:c8:7d:34:5c:fe:aa:a5:9c: de:96:2b:f3:21:a6:42:3b:20:5c:2f:e8:87:9e:78: e2:27:b1:6f:0d:cb:ee:02:f0:07:81:27:a0:c7:26: 98:11:c2:1d:f6:5c:8b:fc:2a:e6:1b:84:55:60:a4: 64:65:8d:10:f7:c5:be:f9:6c:a9:15:07:75:83:01: 96:1c:b0:16:88:93:33:98:38:85:98:ea:98:34:88: b7:7f:a1:83:4d:1c:a4:5a:90:78:ce:39:7b:1f:55: 8e:e9:f9:8b:48:d3:e3:89:ca:4b:ac:ce:42:95:15: 8d:57:59:5a:2c:6c:c5:26:35:36:fb:c0:56:73:cb: 5f:a5:10:53:ff:74:65:c0:cd:cc:fd:34:5a:81:73: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:51:EE:A2:35:BB:9F:2D:FE:E8:E4:B1:A6:13:AC:69:6D:DF:AB:6F X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/A97CBD42A06611EFA888B57DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.226.0/23 Signature Algorithm: sha256WithRSAEncryption a2:86:55:39:95:69:40:0d:e4:b5:c4:07:be:19:13:1e:27:a3: 28:12:fc:66:a4:b7:ce:7d:33:7e:0f:59:0a:ea:92:f0:59:b8: 76:ec:7b:8c:35:26:61:0f:29:d8:b1:0f:bc:af:0d:a2:0b:6c: b2:e4:05:3d:40:c2:30:89:a6:6c:50:f7:e3:38:75:7f:fe:07: b0:22:89:26:3c:ee:7c:6c:63:61:56:a3:d3:2b:1c:db:32:71: 4c:34:08:b7:30:d3:4e:8a:1d:b3:32:5f:a2:81:8e:fb:cb:67: 76:3e:ae:bb:d3:3d:9c:f9:ee:9e:55:d4:d4:91:61:9c:94:44: fd:b4:25:db:0a:1f:6a:70:1c:55:ec:0c:95:c7:9b:30:59:c1: 7c:06:4e:68:2f:3e:9c:cd:8f:0b:b1:f7:29:55:47:eb:7b:b7: 25:70:54:35:cc:93:d9:fa:14:8b:0a:c2:db:ac:df:b1:d9:2d: eb:d1:81:7d:cb:16:72:0d:14:97:8d:20:bb:f2:59:dc:5c:86: b9:cf:25:58:60:99:40:69:a4:f1:dc:11:ab:87:c6:25:2d:96: c9:90:5e:41:37:73:1c:bb:ab:d4:d2:8d:c4:28:1a:db:d3:d3: bd:c7:6c:9d:25:61:35:28:dc:da:18:43:4d:ab:11:89:d5:22: 13:e3:9e:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjQxMTE5MTI0OTIzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNjODk1Mi1jOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rQBAKSryVqVJaTxrvlpA81so8GjxYYOxCLHUcxrz2ZlvZFkqRspWdD0JN5j HXIxdRE0l3W8p3DHF9v2rB5whbYYPC+KV8rok+3An2KR9lvPEL7fg6DkocG52TsN +T9mywuFwI1NeMc/9gYW9e2iyH00XP6qpZzelivzIaZCOyBcL+iHnnjiJ7FvDcvu AvAHgSegxyaYEcId9lyL/CrmG4RVYKRkZY0Q98W++WypFQd1gwGWHLAWiJMzmDiF mOqYNIi3f6GDTRykWpB4zjl7H1WO6fmLSNPjicpLrM5ClRWNV1laLGzFJjU2+8BW c8tfpRBT/3RlwM3M/TRagXNXgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLxR7qI1 u58t/ujksaYTrGlt36tvMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUzMEQvREQ3RTA5MUNCNjRCMTFFRTkxNDYzNzYwQzRGOUFFMDIvQTk3Q0JENDJB MDY2MTFFRkE4ODhCNTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCuIwDQYJKoZIhvcNAQELBQADggEBAKKGVTmVaUAN5LXE B74ZEx4noygS/Gakt859M34PWQrqkvBZuHbse4w1JmEPKdixD7yvDaILbLLkBT1A wjCJpmxQ9+M4dX/+B7AiiSY87nxsY2FWo9MrHNsycUw0CLcw006KHbMyX6KBjvvL Z3Y+rrvTPZz57p5V1NSRYZyURP20JdsKH2pwHFXsDJXHmzBZwXwGTmgvPpzNjwux 9ylVR+t7tyVwVDXMk9n6FIsKwtus37HZLevRgX3LFnINFJeNILvyWdxchrnPJVhg mUBppPHcEauHxiUtlsmQXkE3cxy7q9TSjcQoGtvT073HbJ0lYTUo3NoYQ02rEYnV IhPjnog= -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org