$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221CA28E9CC111EF9A7F886BC4F9AE02.roa File: 221CA28E9CC111EF9A7F886BC4F9AE02.roa (raw, json) Hash identifier: C4jo0RjtjtuWRn9uH7CMyCDLIFubnV22geb1xvxiCyY= Subject key identifier: CA:B2:E4:47:E4:48:E5:AA:42:04:1E:C4:C1:6D:4A:A4:D8:35:5E:30 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1BDA Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221CA28E9CC111EF9A7F886BC4F9AE02.roa Signing time: Thu 07 Nov 2024 04:31:19 +0000 ROA not before: Thu 07 Nov 2024 04:31:19 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138778 IP address blocks: 157.20.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7130 (0x1bda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 7 04:31:19 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=672c4296-b8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:30:ee:ec:c4:96:32:5d:e4:5f:4e:ee:27: 2c:52:8a:cc:ff:d0:2a:79:b9:62:76:a2:82:11:b8: 94:8f:58:95:a8:f7:4a:64:84:29:b7:8b:e0:40:a5: d4:ca:7f:fd:4a:d0:d4:66:f6:f6:c1:e7:58:a2:19: 30:ae:ff:46:56:2b:90:bc:fb:3b:1e:31:f1:5f:1e: 6b:34:fc:88:03:d9:2b:de:31:04:9a:70:cc:90:3f: b9:b2:02:aa:3a:68:9a:41:67:5c:b7:2c:7e:f5:15: ac:f7:e8:8b:33:17:0f:98:de:f4:5a:0f:2b:0a:08: af:2c:12:da:ef:31:9e:dc:b3:77:05:8f:83:35:ef: 1d:24:89:eb:15:23:0c:1c:35:a7:68:80:f7:40:3c: 15:11:e3:95:05:84:70:3e:73:fb:17:47:43:b4:e2: f3:e7:25:27:92:05:68:d8:52:07:50:2f:77:e9:8a: 64:86:27:a6:2d:e6:bf:81:72:f6:aa:8c:55:3e:cf: 2d:33:9c:7a:c1:10:cc:c7:77:50:5d:70:65:c6:37: b3:b8:63:0c:f8:67:de:88:c0:bc:a0:87:8b:9e:3e: b1:05:20:d1:05:dd:62:99:76:fe:6c:d0:36:b0:79: e8:01:45:86:a0:30:ee:05:3b:a9:81:e2:20:b5:85: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:E4:47:E4:48:E5:AA:42:04:1E:C4:C1:6D:4A:A4:D8:35:5E:30 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/221CA28E9CC111EF9A7F886BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.138.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:ee:c4:4c:4a:51:f6:dd:0d:f0:49:c2:5c:37:02:3b:40:0b: 03:1e:70:f6:4b:b1:84:8e:51:ce:8e:ca:52:7f:a9:88:8b:67: 04:d5:a9:bf:31:0e:e3:98:e1:b7:36:ed:f1:dd:dc:cb:30:fa: cc:6d:3c:95:3f:4c:83:a7:eb:57:3b:2d:97:8f:6e:4c:7f:04: 50:58:e5:49:6e:f6:b1:e2:9b:ff:bc:c9:e0:52:b1:8c:c9:c1: c4:2a:f0:3e:7f:c9:12:01:cc:b0:4f:7d:d9:e4:d8:42:9b:28: fe:44:c7:20:ce:55:5e:91:15:c6:27:80:9b:7f:aa:c8:89:7c: e2:d0:65:c4:23:c1:a4:9f:88:ed:e5:5c:d2:a3:14:84:e3:f6: 51:5f:e4:69:d8:64:08:10:5f:f9:be:15:d3:71:8b:e1:62:b5: 12:2b:51:74:d4:69:f4:43:3b:d1:b5:10:22:b0:a2:74:6f:18: b3:9e:9f:5d:45:e9:24:8f:3d:e2:17:83:d8:80:53:d7:5b:8a: f7:da:d5:84:03:35:9d:3d:76:03:b3:49:31:5f:49:67:dc:20: 2d:83:75:79:3a:65:cb:3c:aa:f4:8b:ad:e1:e2:22:76:ea:46: ef:25:98:0d:18:ae:d7:06:5f:03:b0:27:d5:00:36:3d:50:13: 41:73:12:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQxMTA3MDQzMTE5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJjNDI5Ni1iOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFkw7uzEljJd5F9O7icsUorM/9AqeblidqKCEbiUj1iVqPdKZIQpt4vgQKXU yn/9StDUZvb2wedYohkwrv9GViuQvPs7HjHxXx5rNPyIA9kr3jEEmnDMkD+5sgKq OmiaQWdctyx+9RWs9+iLMxcPmN70Wg8rCgivLBLa7zGe3LN3BY+DNe8dJInrFSMM HDWnaID3QDwVEeOVBYRwPnP7F0dDtOLz5yUnkgVo2FIHUC936YpkhiemLea/gXL2 qoxVPs8tM5x6wRDMx3dQXXBlxjezuGMM+GfeiMC8oIeLnj6xBSDRBd1imXb+bNA2 sHnoAUWGoDDuBTupgeIgtYWC7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMqy5Efk SOWqQgQexMFtSqTYNV4wMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjIxQ0EyOEU5 Q0MxMTFFRjlBN0Y4ODZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFIowDQYJKoZIhvcNAQELBQADggEBAH3uxExKUfbdDfBJ wlw3AjtACwMecPZLsYSOUc6OylJ/qYiLZwTVqb8xDuOY4bc27fHd3Msw+sxtPJU/ TIOn61c7LZePbkx/BFBY5Ulu9rHim/+8yeBSsYzJwcQq8D5/yRIBzLBPfdnk2EKb KP5ExyDOVV6RFcYngJt/qsiJfOLQZcQjwaSfiO3lXNKjFITj9lFf5GnYZAgQX/m+ FdNxi+FitRIrUXTUafRDO9G1ECKwonRvGLOen11F6SSPPeIXg9iAU9dbivfa1YQD NZ09dgOzSTFfSWfcIC2DdXk6Zcs8qvSLreHiInbqRu8lmA0YrtcGXwOwJ9UANj1Q E0FzEqg= -----END CERTIFICATE-----Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org