$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa File: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (raw, json) Hash identifier: IlatHUt1AsR9GufZuGQG0v+tb7N5if4iF2VnZgMXKRA= Subject key identifier: 5B:F6:02:A3:B1:86:BD:F2:E2:02:FB:94:3B:A6:79:34:EF:C6:74:4F Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Certificate serial: 02 Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa Signing time: Fri 16 Feb 2024 11:20:42 +0000 ROA not before: Fri 16 Feb 2024 11:20:42 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152481 IP address blocks: 157.20.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Validity Not Before: Feb 16 11:20:42 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65cf450a-ceee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:27:02:38:a8:95:75:cf:73:8c:89:9e:3a: 1b:1a:8c:00:4f:7e:92:37:cc:03:e8:b8:19:e9:37: 02:03:b6:70:4d:d1:87:7e:72:0e:c6:58:6b:b8:f7: 6f:1d:5d:dd:36:60:eb:e6:cb:a5:19:49:0e:88:2d: 75:eb:18:57:d9:99:a4:93:bb:87:ca:c7:47:cd:94: 6f:f4:7d:31:41:44:fa:b9:c2:50:83:f0:a4:86:3e: 8e:dc:2f:33:8b:1d:66:dd:21:6b:ef:2b:20:18:f4: e9:52:e7:21:73:e5:34:d0:c2:bd:7a:41:a8:b6:70: 2d:aa:11:0c:79:c5:9d:ee:a7:27:74:72:4e:e2:b4: 9a:ab:d0:5e:7d:7e:9e:f6:97:77:6a:70:5d:7c:fc: 7b:6d:d8:39:c0:61:1f:91:c6:58:55:17:18:2a:75: d0:d5:cd:8e:66:da:e7:fb:8c:2b:da:5d:51:fa:b2: 92:07:ca:70:da:1c:f8:4b:d0:85:54:2d:1b:5a:ae: ea:d3:82:bf:47:29:64:d5:61:c6:6e:90:b8:01:36: 43:2b:66:16:ec:6c:5b:e6:ac:58:31:64:ee:c1:a9: 45:e6:de:f5:64:6b:c2:0b:53:91:60:2e:57:54:25: f8:81:8d:58:96:24:c8:66:d2:9c:4f:39:06:a1:d9: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:02:A3:B1:86:BD:F2:E2:02:FB:94:3B:A6:79:34:EF:C6:74:4F X509v3 Authority Key Identifier: keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.56.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:38:a9:9d:10:b5:dd:42:ce:de:15:d5:28:26:59:c6:d3:45: 54:63:52:c5:84:af:8a:cc:b0:a9:9e:de:f2:17:dd:55:42:4c: c8:d9:52:09:40:de:69:cb:75:3d:42:34:9e:5a:8b:f6:c5:0e: af:0d:00:65:c1:b2:97:63:5f:72:02:ff:b4:b7:29:db:b8:22: 91:fc:4f:94:5a:90:f6:72:44:97:d6:f3:98:35:06:9e:01:4f: 71:04:7c:78:65:31:0b:2c:68:23:09:f2:18:dc:2f:f0:94:5c: 22:e0:95:ab:5b:4c:32:3e:61:0b:47:f4:4d:90:96:eb:62:15: a1:04:c8:43:b9:d2:c4:0b:aa:1b:59:09:8d:6e:19:6e:4d:46: 0f:25:b5:79:22:d4:0f:4f:5a:7f:d3:0e:b5:95:3b:ad:07:31: 3d:26:b5:3c:a5:1a:2d:27:a5:f5:43:07:90:2b:06:9a:94:cd: be:ab:0c:ac:f6:04:e4:26:fb:3c:0f:18:7f:eb:8a:b5:a8:2c: 01:a8:05:59:42:a5:95:cb:a7:7e:5e:8f:50:f8:92:c5:94:66: c9:4c:77:68:f7:2f:b3:4b:64:05:c2:3a:4a:10:72:c6:d3:73: 67:8b:89:23:af:28:60:9b:8b:f3:ac:36:a0:2e:dc:21:d8:ce: 8c:60:3a:96 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTRDMDExMC8GA1UEBRMoRDBGOEIwMDY1OTZDN0MwMzdDQjU0OTMwNUIzOTY5MDAw MEFBRThBNDAeFw0yNDAyMTYxMTIwNDJaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Y2Y0NTBhLWNlZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXticCOKiVdc9zjImeOhsajABPfpI3zAPouBnpNwIDtnBN0Yd+cg7GWGu4928d Xd02YOvmy6UZSQ6ILXXrGFfZmaSTu4fKx0fNlG/0fTFBRPq5wlCD8KSGPo7cLzOL HWbdIWvvKyAY9OlS5yFz5TTQwr16Qai2cC2qEQx5xZ3upyd0ck7itJqr0F59fp72 l3dqcF18/Htt2DnAYR+RxlhVFxgqddDVzY5m2uf7jCvaXVH6spIHynDaHPhL0IVU LRtarurTgr9HKWTVYcZukLgBNkMrZhbsbFvmrFgxZO7BqUXm3vVka8ILU5FgLldU JfiBjViWJMhm0pxPOQah2SOpAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUW/YCo7GG vfLiAvuUO6Z5NO/GdE8wHwYDVR0jBBgwFoAU0PiwBllsfAN8tUkwWzlpAACq6KQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NEMwL0ZFREY1NzJFQ0NC QjExRUU4QTBGNzc0OEM0RjlBRTAyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZL US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMFBpd0JsbHNmQU44dFVrd1d6bHBBQUNxNktRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDMC9GRURGNTcyRUNDQkIxMUVFOEEwRjc3NDhDNEY5QUUwMi82QkEzRkVBNEND QkQxMUVFQkFEREZDNEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJ0UODANBgkqhkiG9w0BAQsFAAOCAQEAjDipnRC13ULO3hXV KCZZxtNFVGNSxYSvisywqZ7e8hfdVUJMyNlSCUDeact1PUI0nlqL9sUOrw0AZcGy l2NfcgL/tLcp27gikfxPlFqQ9nJEl9bzmDUGngFPcQR8eGUxCyxoIwnyGNwv8JRc IuCVq1tMMj5hC0f0TZCW62IVoQTIQ7nSxAuqG1kJjW4Zbk1GDyW1eSLUD09af9MO tZU7rQcxPSa1PKUaLSel9UMHkCsGmpTNvqsMrPYE5Cb7PA8Yf+uKtagsAagFWUKl lcunfl6PUPiSxZRmyUx3aPcvs0tkBcI6ShByxtNzZ4uJI68oYJuL86w2oC7cIdjO jGA6lg== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:18 2024 by rpki-client on console-ams.rpki-client.org