$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa File: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (raw, json) Hash identifier: O2w5N1Zod0RmjR73calT8+O57LgGjSnYZ9PGyMFvfv0= Subject key identifier: AC:66:07:14:D8:38:C7:F1:F1:00:EC:18:7E:A7:39:B6:18:E5:C1:9B Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 15DB Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa Signing time: Fri 26 May 2023 17:57:15 +0000 ROA not before: Fri 26 May 2023 17:57:15 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 135146 IP address blocks: 168.70.150.0/24 maxlen: 24 168.70.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5595 (0x15db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: May 26 17:57:15 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6470f2fa-d1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:c3:20:ad:b2:e4:13:f5:ff:87:b7:ac:39: 1a:e8:ad:3e:4b:f8:f4:d6:7c:0b:8b:ad:95:23:80: 1c:aa:cc:f3:8d:f0:e6:c7:a2:d1:fb:7b:04:49:6b: cf:f3:99:39:33:e3:2f:35:1d:75:fb:93:55:30:68: b3:9a:dd:4a:7c:f3:ce:c8:a8:94:53:c4:f6:a4:31: 45:4b:d5:3b:b0:32:85:3f:27:77:f1:e5:32:70:8c: a6:31:c8:09:85:46:a9:9a:f3:d3:d3:a2:76:fd:65: fa:be:86:dd:72:81:f8:70:04:23:6c:48:7d:36:0b: c6:c5:37:81:04:32:2e:93:72:c6:b1:26:54:7a:00: 7d:74:a1:34:39:28:b9:16:1e:4a:8d:9d:26:80:23: 49:ba:34:a6:77:de:37:f3:45:7c:38:66:94:2a:2f: b4:bc:58:ba:51:7a:82:28:d7:11:ef:67:ef:12:f2: 2b:46:b3:0e:62:e8:49:df:88:58:ca:75:e5:af:7e: 0c:1c:f0:52:03:a6:13:51:0f:0f:26:0e:73:10:8e: c6:e5:68:4e:05:7f:61:12:17:68:60:26:67:46:d1: a2:0f:f0:f5:74:46:1c:44:22:92:e3:23:cb:a7:02: 36:84:bf:b1:5b:79:0e:a1:ab:1c:f8:fb:7f:3a:4d: aa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:66:07:14:D8:38:C7:F1:F1:00:EC:18:7E:A7:39:B6:18:E5:C1:9B X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.70.150.0/24 168.70.171.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:14:cb:3f:5b:67:48:4d:45:27:98:50:b8:6c:2c:8d:9a:a1: 35:50:35:6b:27:35:4a:99:fb:8f:3d:64:3b:52:42:03:51:2f: d2:a2:d9:8d:eb:b2:0a:16:69:58:6d:ef:28:6c:cd:85:f4:fb: ba:f3:bd:70:6c:fd:8c:10:9f:86:06:06:e0:c4:6f:35:e6:80: 90:d2:26:2f:cf:b2:51:a2:dc:10:a0:06:ca:db:76:6e:e7:c0: 64:8f:f4:c0:a4:7f:a8:fd:a9:03:c8:b3:2e:9d:25:5d:a0:97: 67:74:d1:02:d4:93:ff:9e:69:01:e8:de:ff:e1:64:9f:da:5b: b0:52:27:88:04:42:4c:eb:0a:50:db:57:af:f4:5a:e5:ad:77: 2f:92:56:da:4a:7d:74:37:9a:fc:3a:08:f7:df:03:8a:18:86: b2:e7:f1:d6:47:bb:73:ea:56:6f:81:66:b3:12:6b:2e:ad:56: 85:ef:f3:b7:55:9e:a3:e7:5d:9d:95:16:2a:7e:19:45:21:e5: 90:62:8e:1c:f4:88:60:13:0a:c4:03:c0:ec:a1:cf:b0:d6:9b: ed:86:3f:a2:15:7f:a1:c3:84:c5:02:46:3a:60:34:3f:ab:58: cc:a7:f9:13:6e:20:ea:01:64:c5:b4:19:b7:3d:6b:0f:e7:9c: b3:4f:2f:0f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjMwNTI2MTc1NzE1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDcwZjJmYS1kMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjvDIK2y5BP1/4e3rDka6K0+S/j01nwLi62VI4AcqszzjfDmx6LR+3sESWvP 85k5M+MvNR11+5NVMGizmt1KfPPOyKiUU8T2pDFFS9U7sDKFPyd38eUycIymMcgJ hUapmvPT06J2/WX6vobdcoH4cAQjbEh9NgvGxTeBBDIuk3LGsSZUegB9dKE0OSi5 Fh5KjZ0mgCNJujSmd94380V8OGaUKi+0vFi6UXqCKNcR72fvEvIrRrMOYuhJ34hY ynXlr34MHPBSA6YTUQ8PJg5zEI7G5WhOBX9hEhdoYCZnRtGiD/D1dEYcRCKS4yPL pwI2hL+xW3kOoasc+Pt/Ok2qFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKxmBxTY OMfx8QDsGH6nObYY5cGbMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ5NUYvNzhENUQ4OTZERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvMDRBQjI5RDhE RkVFMTFFN0IwRTcxRDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACoRpYDBACoRqswDQYJKoZIhvcNAQELBQADggEBAE4Uyz9b Z0hNRSeYULhsLI2aoTVQNWsnNUqZ+489ZDtSQgNRL9Ki2Y3rsgoWaVht7yhszYX0 +7rzvXBs/YwQn4YGBuDEbzXmgJDSJi/PslGi3BCgBsrbdm7nwGSP9MCkf6j9qQPI sy6dJV2gl2d00QLUk/+eaQHo3v/hZJ/aW7BSJ4gEQkzrClDbV6/0WuWtdy+SVtpK fXQ3mvw6CPffA4oYhrLn8dZHu3PqVm+BZrMSay6tVoXv87dVnqPnXZ2VFip+GUUh 5ZBijhz0iGATCsQDwOyhz7DWm+2GP6IVf6HDhMUCRjpgND+rWMyn+RNuIOoBZMW0 Gbc9aw/nnLNPLw8= -----END CERTIFICATE-----Generated at Wed May 8 20:35:54 2024 by rpki-client on console-ams.rpki-client.org