$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa File: D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa (raw, json) Hash identifier: 7ulyk1BEVO7SLl9/nv+cH7TUYvvRxvfObneEVzCEi5U= Subject key identifier: A6:C2:FF:A5:2A:F9:BF:C3:AF:13:7C:33:49:5C:75:B5:89:4D:C0:4C Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Certificate serial: 04 Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa Signing time: Fri 16 Feb 2024 11:23:32 +0000 ROA not before: Fri 16 Feb 2024 11:23:32 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138585 IP address blocks: 157.20.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Validity Not Before: Feb 16 11:23:32 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65cf45b4-b22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:73:bb:3c:a7:4d:6f:78:f5:eb:45:b9:89: fc:4d:6d:a5:11:ba:55:71:b6:f5:89:ef:49:50:b1: db:4a:e5:56:8b:a5:23:34:0f:5a:a4:4e:e9:5e:95: d0:4e:4c:2e:8c:e4:7a:8a:a1:6e:4b:48:9a:3f:21: 3d:35:a3:be:21:3f:01:f6:5f:00:34:f0:c7:24:41: 31:96:d5:a6:e9:14:a7:32:6d:3a:7b:bc:4c:43:8c: 05:d7:90:76:37:ad:08:2b:33:33:fc:39:7e:c4:51: d2:c1:6d:3c:5c:08:4b:50:8d:37:a7:41:58:ed:c3: 8d:c4:73:f7:3e:52:d1:eb:bf:90:fd:a6:89:fe:fd: f7:90:ec:30:9f:b4:80:16:a0:a7:fe:e2:2c:1b:a3: 8b:46:08:90:56:77:e1:cd:55:dd:18:a7:39:23:5a: 8a:7e:11:93:cc:3d:6f:e2:30:60:82:93:de:ed:86: 6c:ce:4e:39:c2:4c:93:3c:24:d5:c8:71:5c:f6:c7: 95:b8:74:10:fe:fb:a0:83:c3:9e:7f:e4:e2:11:b5: be:1a:f5:3f:9a:55:52:16:44:f8:f6:c8:df:35:5b: a5:b1:6b:5f:63:0a:ab:64:3b:09:6e:58:5c:fb:0c: 3f:79:f9:80:5a:62:0e:74:f0:c9:7d:04:78:e1:71: 0c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C2:FF:A5:2A:F9:BF:C3:AF:13:7C:33:49:5C:75:B5:89:4D:C0:4C X509v3 Authority Key Identifier: keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.57.0/24 Signature Algorithm: sha256WithRSAEncryption ce:55:1a:14:87:a8:e5:fe:8e:24:85:b3:f7:aa:03:0f:41:c2: d2:a4:78:27:0a:a4:bb:f6:d9:05:41:c4:32:95:bf:5e:76:06: 94:42:5f:32:3f:f6:1a:61:e9:ea:d0:b1:c7:34:d4:08:53:88: 66:35:df:d2:10:3f:7a:24:08:f3:01:d5:a2:a5:60:23:38:b4: 5f:f2:9c:be:c6:3d:9b:56:3a:c7:dc:78:50:22:b5:cc:d9:e7: 17:f9:c5:13:3b:3b:8b:2c:be:5c:b8:61:69:88:a2:10:a2:1d: b9:e8:51:8d:87:f6:62:24:e2:47:57:41:97:27:2a:31:da:1f: d7:76:99:aa:c6:f5:89:88:57:d5:ad:3d:3b:a9:e6:38:01:bb: 04:f9:aa:58:ba:28:6d:40:f1:63:17:66:44:03:e9:60:80:08: e9:56:d7:d6:34:4f:a9:a1:64:dd:4e:67:95:af:e2:93:e2:1d: f5:e1:96:24:76:ec:d2:71:28:c4:cb:6c:15:75:79:8a:16:cd: 4e:63:cb:ac:cf:fd:dd:d0:2d:18:63:0e:49:f9:75:2d:a9:2e: c1:6c:6b:43:e6:20:67:36:d4:81:98:4d:f1:a2:1b:92:e9:23: 74:42:b2:95:d3:14:d4:15:bf:91:5c:d9:b4:59:bc:73:80:18: 30:5b:b8:8b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTRDMDExMC8GA1UEBRMoRDBGOEIwMDY1OTZDN0MwMzdDQjU0OTMwNUIzOTY5MDAw MEFBRThBNDAeFw0yNDAyMTYxMTIzMzJaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Y2Y0NWI0LWIyMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs8nO7PKdNb3j160W5ifxNbaURulVxtvWJ70lQsdtK5VaLpSM0D1qkTuleldBO TC6M5HqKoW5LSJo/IT01o74hPwH2XwA08MckQTGW1abpFKcybTp7vExDjAXXkHY3 rQgrMzP8OX7EUdLBbTxcCEtQjTenQVjtw43Ec/c+UtHrv5D9pon+/feQ7DCftIAW oKf+4iwbo4tGCJBWd+HNVd0YpzkjWop+EZPMPW/iMGCCk97thmzOTjnCTJM8JNXI cVz2x5W4dBD++6CDw55/5OIRtb4a9T+aVVIWRPj2yN81W6Wxa19jCqtkOwluWFz7 DD95+YBaYg508Ml9BHjhcQwfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUpsL/pSr5 v8OvE3wzSVx1tYlNwEwwHwYDVR0jBBgwFoAU0PiwBllsfAN8tUkwWzlpAACq6KQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NEMwL0ZFREY1NzJFQ0NC QjExRUU4QTBGNzc0OEM0RjlBRTAyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZL US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMFBpd0JsbHNmQU44dFVrd1d6bHBBQUNxNktRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDMC9GRURGNTcyRUNDQkIxMUVFOEEwRjc3NDhDNEY5QUUwMi9EMENCMDBENEND QkQxMUVFQUM0QkNENEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJ0UOTANBgkqhkiG9w0BAQsFAAOCAQEAzlUaFIeo5f6OJIWz 96oDD0HC0qR4Jwqku/bZBUHEMpW/XnYGlEJfMj/2GmHp6tCxxzTUCFOIZjXf0hA/ eiQI8wHVoqVgIzi0X/KcvsY9m1Y6x9x4UCK1zNnnF/nFEzs7iyy+XLhhaYiiEKId uehRjYf2YiTiR1dBlycqMdof13aZqsb1iYhX1a09O6nmOAG7BPmqWLoobUDxYxdm RAPpYIAI6VbX1jRPqaFk3U5nla/ik+Id9eGWJHbs0nEoxMtsFXV5ihbNTmPLrM/9 3dAtGGMOSfl1LakuwWxrQ+YgZzbUgZhN8aIbkukjdEKyldMU1BW/kVzZtFm8c4AY MFu4iw== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:18 2024 by rpki-client on console-ams.rpki-client.org