$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/05CCDC6A4F1511EF9EC25A61C4F9AE02.roa File: 05CCDC6A4F1511EF9EC25A61C4F9AE02.roa (raw, json) Hash identifier: R5YNqKsqHJbTZKsyvLdi0Ff3wmlMu15f+GUnJ+/Agp8= Subject key identifier: 3F:1E:0F:C9:B1:8F:94:6E:D7:4D:E0:E7:99:41:31:70:A3:A1:8F:A1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1AF0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/05CCDC6A4F1511EF9EC25A61C4F9AE02.roa Signing time: Fri 09 Aug 2024 08:30:05 +0000 ROA not before: Fri 09 Aug 2024 08:30:05 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 139555 IP address blocks: 157.66.152.0/23 maxlen: 24 160.30.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6896 (0x1af0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Aug 9 08:30:05 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66b5d38d-55f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:11:9d:fe:36:a2:ec:83:54:0e:10:59:3d: 61:97:1c:17:5e:38:05:11:ba:29:ef:cb:27:3d:00: 46:31:27:38:9a:fd:98:eb:ca:0a:1b:e3:1e:05:42: 41:aa:e4:3a:50:b2:61:41:ac:e8:c9:38:41:cd:33: 25:e1:0b:99:45:d5:ed:0a:fa:fb:bc:5b:d7:16:24: 1b:a4:18:ff:ea:19:f1:67:2e:3b:5f:b5:46:26:2d: b1:f0:0a:01:a0:53:9d:58:df:5b:06:5d:2a:b8:00: c5:7c:ca:3e:dd:c8:cd:d5:3c:37:04:14:19:f9:70: dd:29:7a:bf:77:ad:63:f7:c1:3c:15:44:ed:38:c6: df:97:ae:8c:a8:65:6e:39:7a:16:5f:c9:7b:ab:bb: 4f:5e:ea:29:83:9f:b6:03:e7:6a:49:3f:54:55:60: d8:f3:0f:a4:6a:1e:4c:3a:b1:f8:31:01:6e:ed:b3: 2f:5f:2f:cd:c6:b8:82:ec:d4:cb:af:d3:f5:f3:d0: 14:e9:75:d6:7f:d1:e5:24:3d:c9:6d:96:c2:03:97: 67:14:9f:d3:b9:db:75:d1:45:03:d3:05:84:cf:4a: e8:82:22:30:97:6b:bd:1f:96:b2:98:96:ef:58:f6: 72:36:5f:26:31:42:72:1f:df:eb:5e:0c:53:af:e3: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1E:0F:C9:B1:8F:94:6E:D7:4D:E0:E7:99:41:31:70:A3:A1:8F:A1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/05CCDC6A4F1511EF9EC25A61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.152.0/23 160.30.38.0/23 Signature Algorithm: sha256WithRSAEncryption bf:c8:c8:b8:96:92:0e:ba:99:33:9d:ec:3a:d2:a6:50:65:78: 4d:17:20:26:99:a6:d2:44:62:d3:1f:20:c4:26:57:3d:98:e5: 73:73:89:51:a9:35:e2:22:d7:7f:0d:c9:e7:2d:a1:6f:f5:14: 5f:6f:0a:6e:c2:5d:ac:54:71:65:31:5e:bd:cc:29:fc:8a:f8: f0:3c:fd:64:45:da:1b:69:8f:78:f9:e4:52:4e:4b:67:2b:3c: 4c:f7:64:c0:54:82:b2:20:d4:e4:bb:2d:f6:2d:81:1a:c5:17: 8c:53:2b:47:ca:e2:e7:68:eb:30:0b:89:62:2a:e3:21:69:46: bc:93:db:41:aa:75:da:bb:66:59:c9:1a:55:19:65:63:ea:2c: b4:6e:dd:98:7c:5f:80:18:cd:29:9e:ae:a4:a1:ba:2f:55:15: b8:d2:c4:6e:8a:89:5c:8c:9f:8a:14:49:45:2e:f3:91:ac:8b: 31:7f:38:92:a0:4b:9d:ee:78:30:ec:25:38:72:41:60:78:46: f1:eb:92:a8:a7:00:dc:6c:df:7b:dd:1c:36:1f:98:57:63:3f: 01:98:47:5c:9f:0e:31:37:54:af:c7:f8:c8:51:50:16:75:03: 88:27:27:40:67:ef:48:52:54:3e:d0:af:2e:37:4a:aa:ab:e7: a7:0f:eb:fc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwODA5MDgzMDA1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI1ZDM4ZC01NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul4Rnf42ouyDVA4QWT1hlxwXXjgFEbop78snPQBGMSc4mv2Y68oKG+MeBUJB quQ6ULJhQazoyThBzTMl4QuZRdXtCvr7vFvXFiQbpBj/6hnxZy47X7VGJi2x8AoB oFOdWN9bBl0quADFfMo+3cjN1Tw3BBQZ+XDdKXq/d61j98E8FUTtOMbfl66MqGVu OXoWX8l7q7tPXuopg5+2A+dqST9UVWDY8w+kah5MOrH4MQFu7bMvXy/NxriC7NTL r9P189AU6XXWf9HlJD3JbZbCA5dnFJ/Tudt10UUD0wWEz0rogiIwl2u9H5aymJbv WPZyNl8mMUJyH9/rXgxTr+PCLwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFD8eD8mx j5Ru103g55lBMXCjoY+hMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDVDQ0RDNkE0 RjE1MTFFRjlFQzI1QTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGdQpgDBAGgHiYwDQYJKoZIhvcNAQELBQADggEBAL/IyLiW kg66mTOd7DrSplBleE0XICaZptJEYtMfIMQmVz2Y5XNziVGpNeIi138NyectoW/1 FF9vCm7CXaxUcWUxXr3MKfyK+PA8/WRF2htpj3j55FJOS2crPEz3ZMBUgrIg1OS7 LfYtgRrFF4xTK0fK4udo6zALiWIq4yFpRryT20Gqddq7ZlnJGlUZZWPqLLRu3Zh8 X4AYzSmerqShui9VFbjSxG6KiVyMn4oUSUUu85GsizF/OJKgS53ueDDsJThyQWB4 RvHrkqinANxs33vdHDYfmFdjPwGYR1yfDjE3VK/H+MhRUBZ1A4gnJ0Bn70hSVD7Q ry43Sqqr56cP6/w= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org