$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa File: 0386A52403A911EF851C9E18C4F9AE02.roa (raw, json) Hash identifier: MXeUkkuB0/YmFbLzK5wMGGkGNckzkET6qVj1cSCQht0= Subject key identifier: 56:FE:60:14:09:6C:47:45:89:47:33:0F:56:34:72:42:F2:E3:A3:03 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1A2A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa Signing time: Thu 30 May 2024 15:53:31 +0000 ROA not before: Thu 30 May 2024 15:53:31 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152582 IP address blocks: 157.20.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6698 (0x1a2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 30 15:53:31 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a0fb-5251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:dc:68:b2:af:2e:24:00:1f:65:01:63:f2: 88:cf:df:89:74:50:b2:90:a1:2d:f6:34:56:dc:2c: d8:f2:f0:b4:0f:17:70:2b:89:99:d5:24:df:5b:05: 84:27:4e:2f:52:b7:60:84:53:4c:4d:2d:48:b1:e5: 12:ff:2b:84:b3:de:ec:2c:82:3e:ad:83:df:35:a8: 82:f6:ed:09:dc:2d:53:ad:fb:25:f5:0b:ff:f5:f6: d5:d2:10:89:b9:49:11:95:fc:3e:3c:b3:0d:3b:63: 93:09:87:57:36:dd:d5:66:35:ca:fb:07:fd:00:3f: b4:90:b9:7b:bf:bc:ef:28:52:f5:aa:51:60:74:83: a3:59:bd:60:46:d4:b5:dc:07:92:1d:94:24:2e:29: 13:69:9e:28:2b:70:2f:c4:14:03:41:64:f0:2f:ba: ac:99:2c:f2:20:de:89:95:34:d5:43:96:42:27:a5: 4b:68:ab:14:42:aa:c8:39:82:3b:cd:f3:9a:fd:1e: 99:d8:3b:20:ff:46:cd:7e:8a:08:95:25:56:ad:4d: 7e:c0:c9:59:b4:7e:b9:8d:51:ff:c6:f7:08:e8:e6: 30:ea:55:a9:5d:ed:a9:b3:ef:f6:b4:2c:3b:fb:83: 6e:12:8e:8f:76:ac:07:41:64:27:ae:f2:0a:e8:02: a5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FE:60:14:09:6C:47:45:89:47:33:0F:56:34:72:42:F2:E3:A3:03 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.202.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:9f:8e:ab:2f:fc:f8:e5:6e:c9:51:6f:2c:e6:2b:f0:b1:09: 7d:fc:58:3a:c2:58:96:ce:64:5a:c5:c3:be:b1:0f:dd:36:95: 2e:cc:58:77:96:f6:3b:e7:8c:f0:ab:9f:50:d7:87:86:f7:27: 2b:76:89:fc:63:6a:ba:ae:0f:76:37:4f:a2:0f:5e:41:ce:2e: a4:a5:d2:2d:f3:ed:7b:bc:5c:04:7a:c4:c5:c8:70:4d:2a:d0: 83:a5:ba:a4:a9:39:b5:39:81:cb:dc:1e:19:84:4e:d1:bb:9a: 01:25:15:d8:69:a8:07:58:af:34:b8:f0:48:4e:a2:58:cb:b0: de:ec:dc:84:6d:0a:f0:8d:35:df:03:2d:78:2e:91:f3:ed:00: f8:2f:61:e3:6a:c4:dd:ae:bb:3a:b5:bf:65:c6:54:2a:f7:48: bf:cb:30:b3:aa:bb:96:d4:ec:f1:2d:ec:43:11:3f:fa:08:88: 9d:dd:f8:49:3b:56:3e:3b:09:19:06:b4:0b:2b:f2:3f:0d:a3: 38:f7:16:37:bd:19:03:04:ce:c1:b4:3d:1d:a1:3f:6d:3d:8d: 0b:ab:35:67:3c:02:aa:2a:86:76:9a:c5:a3:10:ff:be:a9:53: 20:ce:cc:ee:89:63:72:09:2b:be:75:ca:e8:a3:97:5b:c0:d0: e1:7a:61:0a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTMwMTU1MzMxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YTBmYi01MjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosfcaLKvLiQAH2UBY/KIz9+JdFCykKEt9jRW3CzY8vC0DxdwK4mZ1STfWwWE J04vUrdghFNMTS1IseUS/yuEs97sLII+rYPfNaiC9u0J3C1Trfsl9Qv/9fbV0hCJ uUkRlfw+PLMNO2OTCYdXNt3VZjXK+wf9AD+0kLl7v7zvKFL1qlFgdIOjWb1gRtS1 3AeSHZQkLikTaZ4oK3AvxBQDQWTwL7qsmSzyIN6JlTTVQ5ZCJ6VLaKsUQqrIOYI7 zfOa/R6Z2Dsg/0bNfooIlSVWrU1+wMlZtH65jVH/xvcI6OYw6lWpXe2ps+/2tCw7 +4NuEo6PdqwHQWQnrvIK6AKlYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFb+YBQJ bEdFiUczD1Y0ckLy46MDMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDM4NkE1MjQw M0E5MTFFRjg1MUM5RTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFMowDQYJKoZIhvcNAQELBQADggEBAE+fjqsv/PjlbslR byzmK/CxCX38WDrCWJbOZFrFw76xD902lS7MWHeW9jvnjPCrn1DXh4b3Jyt2ifxj arquD3Y3T6IPXkHOLqSl0i3z7Xu8XAR6xMXIcE0q0IOluqSpObU5gcvcHhmETtG7 mgElFdhpqAdYrzS48EhOoljLsN7s3IRtCvCNNd8DLXgukfPtAPgvYeNqxN2uuzq1 v2XGVCr3SL/LMLOqu5bU7PEt7EMRP/oIiJ3d+Ek7Vj47CRkGtAsr8j8Nozj3Fje9 GQMEzsG0PR2hP209jQurNWc8AqoqhnaaxaMQ/76pUyDOzO6JY3IJK751yuijl1vA 0OF6YQo= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org