$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3250ED2EF30A11EE97AC7B65C4F9AE02.roa File: 3250ED2EF30A11EE97AC7B65C4F9AE02.roa (raw, json) Hash identifier: 5v6HqRCewc513lZAiaUsH+btZgHuaOjcGVuFDqxZoh8= Subject key identifier: 22:A0:F3:29:A2:B2:C8:21:8C:5E:AB:25:6A:CE:54:B1:E7:41:B8:53 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1956 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3250ED2EF30A11EE97AC7B65C4F9AE02.roa Signing time: Fri 05 Apr 2024 05:06:02 +0000 ROA not before: Fri 05 Apr 2024 05:06:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 152494 IP address blocks: 157.66.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6486 (0x1956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Apr 5 05:06:02 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=660f86b9-891d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:85:ba:bb:f4:9a:69:28:6c:7c:4d:95:a0: f8:7d:36:eb:ba:aa:7d:01:da:cf:b6:97:56:84:e2: d7:b2:ec:12:37:74:5c:f6:40:00:58:64:98:dc:fd: 12:84:19:bd:f5:b3:8f:5c:c2:c1:0a:dd:d5:15:86: 92:9b:6c:1b:e3:69:53:c9:37:0e:82:f0:cd:81:72: 88:ae:0b:42:d4:18:fc:18:68:d7:a7:6f:2e:fb:d5: 2d:7e:54:64:89:a2:72:8a:12:bd:cc:ad:85:c4:7d: d5:cc:94:36:09:cb:1d:48:b9:df:ce:3c:05:4c:a9: 2e:89:e4:a1:85:9a:3a:55:7c:14:1e:77:36:21:9b: a7:c5:7e:ce:15:99:91:16:4b:d3:76:bc:aa:cd:2f: 1c:68:6f:a1:e6:42:32:28:fa:cd:92:5f:33:e4:55: 0b:ca:0a:f8:eb:8f:74:9a:7d:54:1d:d4:78:f4:42: 75:5c:cd:43:5e:19:37:fa:af:d8:7f:32:6b:23:07: db:64:c0:01:1c:f0:c5:a3:d2:f6:4e:21:3e:41:89: 98:04:66:b3:87:37:26:37:da:a2:73:ce:5a:9f:e7: c7:aa:b3:b5:61:be:5e:7a:55:90:0c:20:24:09:24: b4:8a:83:d2:c2:7c:85:5e:2a:54:33:3c:d8:7d:94: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A0:F3:29:A2:B2:C8:21:8C:5E:AB:25:6A:CE:54:B1:E7:41:B8:53 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3250ED2EF30A11EE97AC7B65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.44.0/23 Signature Algorithm: sha256WithRSAEncryption c6:8f:b7:a8:8e:19:ff:57:60:bb:16:20:84:6f:dd:27:d8:5b: 54:e4:e4:88:96:4e:d8:51:4e:31:ba:86:d9:c3:09:e8:d1:4a: 09:61:75:a1:18:f6:c0:e1:0b:cd:a5:c4:58:76:06:70:38:ef: 44:fc:c3:db:80:f9:42:b9:34:4e:f5:bd:5f:09:bb:0d:7a:36: 0e:7c:9c:c4:6f:25:aa:e4:58:1e:cd:e6:e0:13:26:31:4d:2e: c0:04:28:41:39:29:43:5d:10:23:25:72:94:32:32:3b:c8:44: 91:31:20:6e:07:a3:96:93:c7:18:ab:e0:0f:c7:32:88:24:24: f0:40:22:c9:e9:41:20:d3:55:4c:16:89:96:1f:f1:cc:f5:d4: 93:0d:7c:3e:ad:cb:c0:88:18:46:ba:fb:fa:f3:df:69:c3:93: bf:d3:4b:0b:d8:47:b0:86:4b:f9:7f:1e:7f:f4:df:ea:d6:da: 8f:b9:ef:01:65:7a:75:a7:be:89:4c:ef:d6:10:d5:03:03:08: 56:a5:53:cf:b9:ca:62:cb:54:e4:c6:a5:2d:94:5e:01:22:ca: e7:4c:c5:a9:61:4a:72:03:f7:43:be:c1:7b:48:80:9e:55:70: bc:22:87:eb:8a:72:27:4d:9a:3b:33:ee:5d:a4:be:31:a0:ed: ee:2e:e0:58 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNDA1MDUwNjAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBmODZiOS04OTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAiFurv0mmkobHxNlaD4fTbruqp9AdrPtpdWhOLXsuwSN3Rc9kAAWGSY3P0S hBm99bOPXMLBCt3VFYaSm2wb42lTyTcOgvDNgXKIrgtC1Bj8GGjXp28u+9UtflRk iaJyihK9zK2FxH3VzJQ2CcsdSLnfzjwFTKkuieShhZo6VXwUHnc2IZunxX7OFZmR FkvTdryqzS8caG+h5kIyKPrNkl8z5FULygr46490mn1UHdR49EJ1XM1DXhk3+q/Y fzJrIwfbZMABHPDFo9L2TiE+QYmYBGazhzcmN9qic85an+fHqrO1Yb5eelWQDCAk CSS0ioPSwnyFXipUMzzYfZRiVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCKg8ymi ssghjF6rJWrOVLHnQbhTMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzI1MEVEMkVG MzBBMTFFRTk3QUM3QjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQiwwDQYJKoZIhvcNAQELBQADggEBAMaPt6iOGf9XYLsW IIRv3SfYW1Tk5IiWTthRTjG6htnDCejRSglhdaEY9sDhC82lxFh2BnA470T8w9uA +UK5NE71vV8Juw16Ng58nMRvJarkWB7N5uATJjFNLsAEKEE5KUNdECMlcpQyMjvI RJExIG4Ho5aTxxir4A/HMogkJPBAIsnpQSDTVUwWiZYf8cz11JMNfD6ty8CIGEa6 +/rz32nDk7/TSwvYR7CGS/l/Hn/03+rW2o+57wFlenWnvolM79YQ1QMDCFalU8+5 ymLLVOTGpS2UXgEiyudMxalhSnID90O+wXtIgJ5VcLwih+uKcidNmjsz7l2kvjGg 7e4u4Fg= -----END CERTIFICATE-----Generated at Thu May 16 17:51:24 2024 by rpki-client on console-ams.rpki-client.org