$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1F5DC028E03D11EE97D9C02BC4F9AE02.roa File: 1F5DC028E03D11EE97D9C02BC4F9AE02.roa (raw, json) Hash identifier: 73SHr7EkiIgkCC4sZDlD/JVFwCJOM1OWBMSCtizM7LE= Subject key identifier: 6E:27:0A:F1:DB:80:F7:90:AA:06:F5:7F:4D:0C:62:F9:E7:3F:D0:1C Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1926 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1F5DC028E03D11EE97D9C02BC4F9AE02.roa Signing time: Tue 12 Mar 2024 06:52:42 +0000 ROA not before: Tue 12 Mar 2024 06:52:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 152578 IP address blocks: 157.20.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6438 (0x1926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Mar 12 06:52:42 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65effbba-3a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:4b:35:52:3d:6c:d6:ff:c2:e1:f8:9a:54: 91:44:ec:cf:82:6a:1b:aa:f0:97:0a:e8:c1:ff:aa: 5d:0c:90:f6:cb:7e:40:d0:bf:79:3c:2c:da:56:c6: a9:fe:1b:c7:ae:3b:fc:03:e9:4f:02:38:29:7c:7c: ef:05:d9:f4:6a:03:24:f9:34:bd:cc:d2:5d:ed:09: e2:0a:91:97:be:0e:01:5e:03:b7:25:0a:6c:ee:17: 86:11:2f:9d:c8:cd:7b:8b:d6:e3:d0:bf:b8:aa:99: af:6c:68:9b:d6:31:f9:a8:17:fa:74:fb:d6:79:ff: 0e:3b:b4:26:eb:15:9a:ec:40:b6:40:72:80:07:b8: 82:47:30:5d:31:ee:9c:67:17:1c:47:51:8e:67:fc: f7:cd:eb:df:55:07:74:09:b4:5b:b4:34:1f:b7:3e: 22:fc:cb:97:5c:29:09:17:55:94:71:b2:c9:e1:35: a9:58:7c:3b:ae:1a:99:f4:78:2f:c3:f9:6f:1d:bb: 8c:ef:c5:51:ac:7e:ad:70:6d:63:2f:26:ed:bf:54: c7:02:92:8c:30:72:2d:c0:a2:80:40:57:60:42:1c: e3:7d:a5:5e:5d:a0:97:55:82:a7:64:90:db:e3:19: d7:39:65:fe:8d:29:6b:b0:3a:95:35:8f:82:86:a0: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:27:0A:F1:DB:80:F7:90:AA:06:F5:7F:4D:0C:62:F9:E7:3F:D0:1C X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1F5DC028E03D11EE97D9C02BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.168.0/23 Signature Algorithm: sha256WithRSAEncryption 21:de:37:80:60:cd:98:cb:40:b3:6c:6d:84:1f:4f:a3:ef:3b: ac:43:d3:a1:4b:97:39:23:74:5b:d7:e7:0c:b0:a2:69:61:b0: b2:25:19:df:35:66:ce:91:ca:12:00:53:2f:64:47:d3:a2:9e: 7d:d4:5d:d2:58:a8:52:2d:78:9e:b0:50:28:bf:44:57:ca:10: e8:83:bd:36:94:ce:2e:64:4b:b1:da:1f:0c:8a:a2:0f:b8:e2: b4:1b:4b:d1:21:4d:5d:cd:31:59:c2:41:6d:a5:eb:61:99:93: 5b:e9:29:43:c4:52:26:02:c1:27:90:09:e1:ed:52:77:c5:8b: af:7f:2d:a4:fc:8f:50:0c:90:67:18:dd:7e:11:29:52:cc:b2: 4f:b2:6f:7f:40:7c:d6:0f:19:6d:cb:1e:ab:41:5d:27:27:83: a1:b7:6a:ff:2d:ac:38:59:c7:ff:fc:6d:3d:e0:97:be:f0:46: fa:b2:c1:df:f6:6b:48:90:0a:ed:0f:fd:d7:ef:97:ab:49:fd: 86:3f:55:4f:69:97:69:a1:0e:ed:8c:f6:52:57:51:a4:8b:23: 7f:8e:28:4c:8d:4c:cc:04:45:14:2a:b6:61:2c:2b:98:d4:6c: 71:2d:35:de:fa:42:e6:af:ff:df:4e:80:36:50:c3:56:bd:ce: ff:09:72:8b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwMzEyMDY1MjQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWVmZmJiYS0zYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhxLNVI9bNb/wuH4mlSRROzPgmobqvCXCujB/6pdDJD2y35A0L95PCzaVsap /hvHrjv8A+lPAjgpfHzvBdn0agMk+TS9zNJd7QniCpGXvg4BXgO3JQps7heGES+d yM17i9bj0L+4qpmvbGib1jH5qBf6dPvWef8OO7Qm6xWa7EC2QHKAB7iCRzBdMe6c ZxccR1GOZ/z3zevfVQd0CbRbtDQftz4i/MuXXCkJF1WUcbLJ4TWpWHw7rhqZ9Hgv w/lvHbuM78VRrH6tcG1jLybtv1THApKMMHItwKKAQFdgQhzjfaVeXaCXVYKnZJDb 4xnXOWX+jSlrsDqVNY+ChqBFYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG4nCvHb gPeQqgb1f00MYvnnP9AcMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUY1REMwMjhF MDNEMTFFRTk3RDlDMDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFKgwDQYJKoZIhvcNAQELBQADggEBACHeN4BgzZjLQLNs bYQfT6PvO6xD06FLlzkjdFvX5wywomlhsLIlGd81Zs6RyhIAUy9kR9Oinn3UXdJY qFIteJ6wUCi/RFfKEOiDvTaUzi5kS7HaHwyKog+44rQbS9EhTV3NMVnCQW2l62GZ k1vpKUPEUiYCwSeQCeHtUnfFi69/LaT8j1AMkGcY3X4RKVLMsk+yb39AfNYPGW3L HqtBXScng6G3av8trDhZx//8bT3gl77wRvqywd/2a0iQCu0P/dfvl6tJ/YY/VU9p l2mhDu2M9lJXUaSLI3+OKEyNTMwERRQqtmEsK5jUbHEtNd76Quav/99OgDZQw1a9 zv8Jcos= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org