$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CC239EAFE3211EE81256247C4F9AE02.roa File: 0CC239EAFE3211EE81256247C4F9AE02.roa (raw, json) Hash identifier: d0pOaVNiNNMyQtTa/3kwJLomup/tb9eNVeDoINSa9mo= Subject key identifier: 45:FD:AA:A0:EE:0E:E9:1D:C7:40:A0:17:C2:D1:E1:DC:A4:D4:00:1C Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1970 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CC239EAFE3211EE81256247C4F9AE02.roa Signing time: Fri 19 Apr 2024 09:49:01 +0000 ROA not before: Fri 19 Apr 2024 09:49:01 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138769 IP address blocks: 157.66.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6512 (0x1970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Apr 19 09:49:01 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=66223e0d-f911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:6f:71:ae:02:33:6f:c2:c0:3b:cd:d0:9d: db:26:0f:48:f4:cf:15:f9:dc:fe:8f:3a:ca:4a:07: cf:80:19:ab:dc:ba:f2:55:79:25:93:e5:8f:b4:64: 19:b1:e7:07:25:a3:1a:50:3b:a7:11:17:9c:df:75: b1:65:75:92:a6:81:5f:34:e2:82:d0:dd:84:9f:ce: d6:65:9f:02:fd:f6:4f:fd:02:2d:89:fd:59:bf:3d: 45:ad:dd:d2:24:10:e3:2f:7d:6e:a1:cb:7e:8b:ed: 03:bb:47:fe:95:59:83:f4:9d:63:61:d7:17:73:a0: a8:bc:9f:f3:32:6e:5c:60:06:1d:3f:35:78:8a:c9: 8a:4a:ab:09:b4:00:78:9a:39:cc:29:1e:3a:2a:7f: 76:9b:b1:79:41:84:09:12:7a:b8:6f:c7:2b:35:a1: 9f:51:43:93:7a:8a:cb:cb:63:05:5f:af:92:8a:e1: fa:ab:0f:1a:d7:42:56:70:4f:71:ed:be:5b:96:9d: c8:f0:b3:ac:6d:3c:e4:6c:5f:1d:20:0e:03:74:09: 76:a4:76:9e:0a:ff:5c:64:2e:02:33:ec:f8:10:cf: 47:48:55:84:53:3c:b2:02:02:a4:e3:f0:81:43:7b: a9:74:d7:a3:f9:35:d7:4f:e3:83:73:ca:4b:ea:e6: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FD:AA:A0:EE:0E:E9:1D:C7:40:A0:17:C2:D1:E1:DC:A4:D4:00:1C X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CC239EAFE3211EE81256247C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.104.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:62:61:cc:d8:d1:92:c1:d7:9c:77:f3:16:3d:7f:ca:c8:63: 80:70:86:98:a6:fa:14:79:b0:ed:1c:ee:2e:0d:fd:08:86:b4: c9:ee:ac:26:c2:ea:76:1b:8b:2d:3a:02:88:b4:01:ac:64:92: e4:dd:cd:7c:bc:a6:c8:e7:bf:65:85:38:01:51:a5:42:03:4d: 7c:07:72:33:6c:33:70:e3:ee:d6:ad:84:0b:94:60:11:8a:67: 29:df:d5:44:e7:4c:63:8e:6d:cb:89:15:ec:6a:03:bb:46:4c: a9:fe:81:11:01:24:f6:54:af:9f:80:a5:5e:dd:3d:b5:bf:06: 73:5c:ef:41:e4:cf:bf:3e:93:8c:ea:39:37:0b:35:55:00:41: 8c:ab:a8:25:58:6d:a3:ae:d5:1e:d2:58:8b:3d:03:d7:97:95: 54:1c:4c:7a:8c:5b:a3:60:b3:6d:cd:d4:a0:a7:13:94:05:95: 6c:98:0b:81:f2:ee:03:ee:83:55:5a:b9:8b:bd:a3:c2:61:cd: 1b:24:cb:6b:41:7e:c7:46:5e:0c:70:86:8c:ee:de:18:22:27: a3:78:50:28:e8:e8:b1:f5:fe:ba:06:08:6b:7c:f4:23:ed:04: 69:a7:78:9a:3e:5e:cf:50:22:42:b6:d9:e0:ed:76:c3:b6:c5: 64:01:03:a2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNDE5MDk0OTAxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIyM2UwZC1mOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJpvca4CM2/CwDvN0J3bJg9I9M8V+dz+jzrKSgfPgBmr3LryVXklk+WPtGQZ secHJaMaUDunERec33WxZXWSpoFfNOKC0N2En87WZZ8C/fZP/QItif1Zvz1Frd3S JBDjL31uoct+i+0Du0f+lVmD9J1jYdcXc6CovJ/zMm5cYAYdPzV4ismKSqsJtAB4 mjnMKR46Kn92m7F5QYQJEnq4b8crNaGfUUOTeorLy2MFX6+SiuH6qw8a10JWcE9x 7b5blp3I8LOsbTzkbF8dIA4DdAl2pHaeCv9cZC4CM+z4EM9HSFWEUzyyAgKk4/CB Q3updNej+TXXT+ODc8pL6ua1LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEX9qqDu Dukdx0CgF8LR4dyk1AAcMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMENDMjM5RUFG RTMyMTFFRTgxMjU2MjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdQmgwDQYJKoZIhvcNAQELBQADggEBAIpiYczY0ZLB15x3 8xY9f8rIY4Bwhpim+hR5sO0c7i4N/QiGtMnurCbC6nYbiy06Aoi0AaxkkuTdzXy8 psjnv2WFOAFRpUIDTXwHcjNsM3Dj7tathAuUYBGKZynf1UTnTGOObcuJFexqA7tG TKn+gREBJPZUr5+ApV7dPbW/BnNc70Hkz78+k4zqOTcLNVUAQYyrqCVYbaOu1R7S WIs9A9eXlVQcTHqMW6Ngs23N1KCnE5QFlWyYC4Hy7gPug1VauYu9o8JhzRsky2tB fsdGXgxwhozu3hgiJ6N4UCjo6LH1/roGCGt89CPtBGmneJo+Xs9QIkK22eDtdsO2 xWQBA6I= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org