$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa File: 2F70B33CABAC11EEBA0E8D79C4F9AE02.roa (raw, json) Hash identifier: /D0NywEMun0ppLvK7IunvmLWK6y9tUElxlBiLKzEm20= Subject key identifier: EB:3B:F4:D1:12:3C:ED:64:F4:DF:F4:96:B4:E7:C9:9E:E1:28:45:32 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 188B Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa Signing time: Fri 05 Jan 2024 09:24:12 +0000 ROA not before: Fri 05 Jan 2024 09:24:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151701 IP address blocks: 157.10.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6283 (0x188b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 5 09:24:12 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6597cabb-e0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:75:8f:ab:27:08:e6:6c:f4:57:cf:2d:43: be:d3:71:f7:22:8c:90:89:c7:c7:53:3d:3f:f2:55: da:5b:11:fe:1b:aa:db:f9:02:b7:9a:4f:a1:04:57: f9:0c:a1:18:4d:d3:bc:c6:32:18:89:22:08:bf:49: a7:07:45:11:dc:1c:6e:ee:39:f2:8b:c3:1e:50:59: 2d:b6:74:a8:87:3e:1b:e5:b9:69:44:d4:20:41:32: a7:fe:09:67:20:a1:32:5b:6b:f8:c5:df:a6:5e:ed: 79:e5:46:9f:ef:df:2f:ee:ec:ba:c3:2f:38:f9:5c: ff:a7:7f:61:df:70:dd:a2:18:f8:fd:79:24:9f:85: 25:e6:7e:11:3d:bc:82:87:e6:bc:3a:08:e7:a0:cb: 74:05:29:2b:9c:d5:29:70:53:3d:88:df:90:d8:e8: f4:87:2f:0f:f8:30:98:ff:8f:88:69:f1:26:90:95: ff:8a:7b:b9:c2:68:49:97:a9:2c:e3:5c:46:9b:49: 9e:38:c1:e3:6b:a6:03:77:ba:ad:d1:cc:45:96:29: 8f:88:8b:7a:7b:9d:1d:3d:01:26:a7:41:d4:95:5c: d8:70:2c:a5:74:01:ed:a0:d2:87:e5:ef:80:1a:38: d9:6c:96:04:01:59:8f:46:17:15:5e:80:6b:5c:9c: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3B:F4:D1:12:3C:ED:64:F4:DF:F4:96:B4:E7:C9:9E:E1:28:45:32 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.22.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:6b:69:e2:e0:49:30:94:64:6e:b7:f8:11:f4:2b:af:72:0d: 13:30:53:95:ee:96:51:b7:62:1f:02:76:46:61:83:d8:5f:bf: ea:bb:9a:86:1c:a1:7e:01:8e:56:b3:d7:fd:0e:a9:e1:8d:ac: f4:8d:a9:90:cf:8d:94:bd:83:01:ca:54:63:b5:10:c2:5f:07: 04:85:87:a6:e6:35:50:7b:3e:92:5a:65:ee:80:64:e9:80:c1: 47:d0:15:47:d8:d4:42:b0:da:28:0b:95:55:43:27:ef:14:e6: 08:7c:e1:c4:43:74:aa:10:a7:9a:36:0c:42:75:92:5a:c4:a7: 5a:cd:b3:e8:98:b2:ad:41:75:4d:40:a6:95:e7:bd:84:3e:64: d5:de:aa:54:7d:34:09:4e:34:61:58:92:36:bc:9f:72:d7:a6: 96:93:44:0b:a2:ff:ec:48:83:74:d1:68:a2:7a:42:65:5e:31: 6e:0d:af:24:6e:cd:41:8f:5c:b3:8d:9a:68:df:f2:52:2b:7e: 0f:ce:65:ba:f7:72:78:6e:b4:ef:b5:fb:04:a6:50:f6:8e:7d: 0c:48:9a:35:44:0c:cf:29:50:56:4a:e0:a4:6a:2c:98:33:cb: d3:f7:0f:a1:e8:3e:75:94:d7:37:32:c1:85:a9:65:91:64:34: 1b:a2:a8:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwMTA1MDkyNDEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk3Y2FiYi1lMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8R1j6snCOZs9FfPLUO+03H3IoyQicfHUz0/8lXaWxH+G6rb+QK3mk+hBFf5 DKEYTdO8xjIYiSIIv0mnB0UR3Bxu7jnyi8MeUFkttnSohz4b5blpRNQgQTKn/gln IKEyW2v4xd+mXu155Uaf798v7uy6wy84+Vz/p39h33Ddohj4/Xkkn4Ul5n4RPbyC h+a8OgjnoMt0BSkrnNUpcFM9iN+Q2Oj0hy8P+DCY/4+IafEmkJX/inu5wmhJl6ks 41xGm0meOMHja6YDd7qt0cxFlimPiIt6e50dPQEmp0HUlVzYcCyldAHtoNKH5e+A GjjZbJYEAVmPRhcVXoBrXJwTEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOs79NES PO1k9N/0lrTnyZ7hKEUyMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkY3MEIzM0NB QkFDMTFFRUJBMEU4RDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdChYwDQYJKoZIhvcNAQELBQADggEBAH1raeLgSTCUZG63 +BH0K69yDRMwU5XullG3Yh8CdkZhg9hfv+q7moYcoX4Bjlaz1/0OqeGNrPSNqZDP jZS9gwHKVGO1EMJfBwSFh6bmNVB7PpJaZe6AZOmAwUfQFUfY1EKw2igLlVVDJ+8U 5gh84cRDdKoQp5o2DEJ1klrEp1rNs+iYsq1BdU1AppXnvYQ+ZNXeqlR9NAlONGFY kja8n3LXppaTRAui/+xIg3TRaKJ6QmVeMW4NryRuzUGPXLONmmjf8lIrfg/OZbr3 cnhutO+1+wSmUPaOfQxImjVEDM8pUFZK4KRqLJgzy9P3D6HoPnWU1zcywYWpZZFk NBuiqHs= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org