$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/406024D079AA11EF98079743C4F9AE02.roa File: 406024D079AA11EF98079743C4F9AE02.roa (raw, json) Hash identifier: SGlfV/8i4HXZbngv0ruPhUndCdFWOutzZCXz5NAD7mw= Subject key identifier: 20:67:93:68:75:CF:3F:95:3F:2D:8D:33:90:B9:B1:72:9F:FE:88:E0 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 73 Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/406024D079AA11EF98079743C4F9AE02.roa Signing time: Mon 23 Sep 2024 12:49:20 +0000 ROA not before: Mon 23 Sep 2024 12:49:20 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 147006 IP address blocks: 157.20.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 02:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Sep 23 12:49:20 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66f163d0-c012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:05:88:d5:54:3e:e5:74:7e:c0:06:2e:5d: d0:21:51:41:c6:d4:5a:e5:bd:25:be:99:ca:be:5e: e9:53:f3:f5:bb:32:c3:1d:80:72:41:b7:d1:7d:29: a1:cd:42:2d:53:1a:57:5d:dd:80:54:77:b4:a6:0f: 1b:01:6e:90:62:ac:1a:df:3a:b0:ac:52:b1:b4:e1: 2b:f1:b1:7d:1a:b1:f9:09:3b:57:21:e4:17:a6:08: de:29:cb:31:8f:bb:02:07:6c:7a:20:4b:73:da:67: 6c:c6:57:26:dd:f4:78:4d:ac:09:58:6d:23:bd:53: 31:d8:63:d3:6d:ef:b2:77:17:a7:29:d3:b3:1b:87: ed:4f:94:f3:79:41:1f:8b:1f:97:31:6c:a8:5b:60: fa:c5:c5:dc:16:a9:bf:f3:9f:83:5b:90:a0:6c:31: 78:0a:98:48:c9:f9:a8:80:ef:30:3a:53:d1:5d:53: 6f:5a:b0:45:99:84:55:3f:84:99:c6:4e:5b:6e:43: f0:5b:32:f6:de:da:5b:cb:75:e4:8e:3f:cd:cb:13: c5:ff:fe:27:d0:be:5c:fa:a0:c4:df:0f:60:de:b9: 9c:52:3c:70:cd:18:4f:04:0c:99:8e:d4:8b:7a:bf: 65:80:92:6c:59:bc:a6:d3:ff:00:4a:e4:df:ad:a9: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:67:93:68:75:CF:3F:95:3F:2D:8D:33:90:B9:B1:72:9F:FE:88:E0 X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/406024D079AA11EF98079743C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.101.0/24 Signature Algorithm: sha256WithRSAEncryption 09:00:30:c9:b0:a7:bc:80:07:3e:86:f8:bf:06:be:79:ef:49: 4c:19:83:72:a4:d7:d1:ef:30:9c:c1:0c:19:16:64:ae:df:df: bf:ad:ec:a1:b7:0e:a2:9f:b7:bd:2c:35:b1:3f:42:ce:2f:80: 06:47:ef:74:52:a9:cc:15:0b:11:a5:2f:9b:7c:18:f0:91:83: 18:a2:a5:c2:4f:51:3f:6a:34:00:2b:42:4a:d2:9d:13:57:20: 0b:4c:76:58:5e:69:4c:6e:65:df:82:b3:2e:39:d0:04:f6:9c: b9:e8:0e:55:19:fa:02:38:71:6e:ce:f8:32:47:8f:0b:83:30: cc:42:ad:1e:83:eb:72:11:81:df:5b:c5:b5:a5:6e:35:e7:ea: 1c:84:4a:38:2c:c5:3f:18:f5:fc:02:a8:29:ea:1d:ef:69:5c: f9:06:55:e6:14:df:59:05:74:e6:bc:19:60:f8:c1:39:dc:04: e8:92:80:18:b4:b6:60:33:59:ac:6c:ae:d7:2d:aa:26:30:51: 70:c3:cd:6c:41:98:6f:e8:5d:52:2c:2a:7d:76:7e:41:87:59: 28:89:ca:53:47:a7:86:40:9c:d1:e1:c5:43:67:62:4a:f4:b9: 86:c3:36:6c:ae:57:bd:e7:2c:95:1f:fa:a1:55:ab:e2:c7:29: 5e:95:b2:54 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODZDQzExMC8GA1UEBRMoMEIxMEU1RUZFRjMwRjhDRTA0RUQ0QzVCOEY0OEE5Q0Qy NEJDQkExNDAeFw0yNDA5MjMxMjQ5MjBaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZjE2M2QwLWMwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt/AWI1VQ+5XR+wAYuXdAhUUHG1FrlvSW+mcq+XulT8/W7MsMdgHJBt9F9KaHN Qi1TGldd3YBUd7SmDxsBbpBirBrfOrCsUrG04SvxsX0asfkJO1ch5BemCN4pyzGP uwIHbHogS3PaZ2zGVybd9HhNrAlYbSO9UzHYY9Nt77J3F6cp07Mbh+1PlPN5QR+L H5cxbKhbYPrFxdwWqb/zn4NbkKBsMXgKmEjJ+aiA7zA6U9FdU29asEWZhFU/hJnG TltuQ/BbMvbe2lvLdeSOP83LE8X//ifQvlz6oMTfD2DeuZxSPHDNGE8EDJmO1It6 v2WAkmxZvKbT/wBK5N+tqdZJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUIGeTaHXP P5U/LY0zkLmxcp/+iOAwHwYDVR0jBBgwFoAUCxDl7+8w+M4E7Uxbj0ipzSS8uhQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NkNDLzUxMjE0MTVFRDVG NTExRUVCMEZBNjA1QkM0RjlBRTAyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVo US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3hEbDctOHctTTRFN1V4YmowaXB6U1M4dWhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi80MDYwMjREMDc5 QUExMUVGOTgwNzk3NDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJ0UZTANBgkqhkiG9w0BAQsFAAOCAQEACQAwybCnvIAHPob4 vwa+ee9JTBmDcqTX0e8wnMEMGRZkrt/fv63sobcOop+3vSw1sT9Czi+ABkfvdFKp zBULEaUvm3wY8JGDGKKlwk9RP2o0ACtCStKdE1cgC0x2WF5pTG5l34KzLjnQBPac uegOVRn6Ajhxbs74MkePC4MwzEKtHoPrchGB31vFtaVuNefqHIRKOCzFPxj1/AKo Keod72lc+QZV5hTfWQV05rwZYPjBOdwE6JKAGLS2YDNZrGyu1y2qJjBRcMPNbEGY b+hdUiwqfXZ+QYdZKInKU0enhkCc0eHFQ2diSvS5hsM2bK5XvecslR/6oVWr4scp XpWyVA== -----END CERTIFICATE-----Generated at Mon Nov 25 04:43:55 2024 by rpki-client on console-ams.rpki-client.org