$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa File: 5222D5DE9AA011EFA29FDF65C4F9AE02.roa (raw, json) Hash identifier: dYw32Bb35nDMNmBZz9vNJixfFqjLVkciRIVibdh07Ko= Subject key identifier: F2:F2:5C:87:04:38:89:E9:A9:78:D0:1F:4B:66:FF:A5:4A:8C:D7:B8 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1BC7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa Signing time: Mon 04 Nov 2024 11:31:23 +0000 ROA not before: Mon 04 Nov 2024 11:31:23 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 153233 IP address blocks: 160.191.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7111 (0x1bc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 4 11:31:23 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6728b08b-0d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:37:ff:c1:49:4d:c7:95:0c:d7:06:20:04:93: f4:55:0a:62:4e:01:96:9a:43:48:5f:a6:bc:3c:dd: 0d:90:fe:cf:18:ce:e1:f5:b6:3c:56:66:b6:f2:5d: 14:05:c0:77:56:87:e1:24:58:90:15:ed:19:0b:71: 4f:d0:e6:3f:9c:0e:aa:65:b0:98:88:f6:40:36:49: 03:0f:09:0b:15:ca:35:34:9c:b4:13:c8:15:d3:04: 14:45:e2:09:16:e5:96:17:25:19:c4:3b:e1:7e:1f: b4:19:2d:ec:b9:c1:89:7c:f3:19:47:19:05:14:bf: c6:a5:eb:53:9d:46:77:1e:c1:6e:6c:db:35:7a:1f: 76:a3:53:99:f1:63:95:a5:aa:bb:1b:40:d6:ca:61: 8e:72:bd:d2:ec:e9:80:5a:70:06:38:66:f3:2e:fd: 1d:84:b0:88:ac:a2:b0:ae:73:b8:36:07:72:e3:f1: 37:36:9a:84:81:1a:e4:c5:5f:17:8b:04:6c:96:ae: 39:42:e8:59:c0:e8:a8:4a:5b:ba:72:6a:9e:eb:9b: 6e:1e:95:32:fc:9d:5e:e4:f4:68:72:72:61:e5:01: 00:59:23:66:20:8d:72:10:17:a8:97:4e:d8:86:7a: 7d:3a:a6:df:cf:d2:7c:1a:e5:43:6a:c6:99:11:a4: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:5C:87:04:38:89:E9:A9:78:D0:1F:4B:66:FF:A5:4A:8C:D7:B8 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.136.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:9a:ee:53:51:f7:85:96:36:8e:0f:dd:59:92:ed:b8:4d:9c: b3:41:88:b3:14:66:9a:65:e5:2a:29:0d:20:4a:f5:d3:aa:55: 80:e1:5b:ae:4f:92:d5:ae:f9:15:bb:3a:14:10:b0:c6:41:7f: 7f:fb:92:28:bc:7b:f2:47:37:60:98:bf:75:d4:c8:b1:df:c1: f7:9d:4c:6b:3d:e2:72:7a:3b:55:79:96:bf:c1:c8:3d:e0:4c: 5b:75:dc:e3:c9:13:64:e1:4a:a1:e0:4e:36:28:60:4d:d6:32: 54:4b:f5:24:18:ca:f5:33:0c:c6:5e:29:eb:9e:2d:8b:1a:89: 08:c7:eb:50:9f:1b:87:86:38:a5:68:df:dd:77:f4:d8:c0:15: c8:62:25:45:95:25:86:2d:ff:e4:3b:74:3b:e5:45:ba:2c:bb: c2:c0:2d:f9:55:c0:a0:57:82:ca:cc:b1:88:da:2b:9d:20:ea: 4e:c3:4a:e8:b6:e3:35:b7:c6:99:b2:0e:ef:99:84:d8:ef:e2: f0:a8:52:5c:93:6c:9d:6e:27:80:c4:ac:53:bf:7b:98:cf:fb: 41:55:a6:25:c7:91:c8:1b:27:1b:bf:02:8d:56:55:4d:0e:63: 0b:69:7b:ef:97:58:08:f2:e4:32:77:0e:fb:b9:56:98:84:57: ba:8d:ff:17 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQxMTA0MTEzMTIzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI4YjA4Yi0wZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jf/wUlNx5UM1wYgBJP0VQpiTgGWmkNIX6a8PN0NkP7PGM7h9bY8Vma28l0U BcB3VofhJFiQFe0ZC3FP0OY/nA6qZbCYiPZANkkDDwkLFco1NJy0E8gV0wQUReIJ FuWWFyUZxDvhfh+0GS3sucGJfPMZRxkFFL/GpetTnUZ3HsFubNs1eh92o1OZ8WOV paq7G0DWymGOcr3S7OmAWnAGOGbzLv0dhLCIrKKwrnO4Ngdy4/E3NpqEgRrkxV8X iwRslq45QuhZwOioSlu6cmqe65tuHpUy/J1e5PRocnJh5QEAWSNmII1yEBeol07Y hnp9Oqbfz9J8GuVDasaZEaQrZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPLyXIcE OInpqXjQH0tm/6VKjNe4MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTIyMkQ1REU5 QUEwMTFFRkEyOUZERjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv4gwDQYJKoZIhvcNAQELBQADggEBADqa7lNR94WWNo4P 3VmS7bhNnLNBiLMUZppl5SopDSBK9dOqVYDhW65PktWu+RW7OhQQsMZBf3/7kii8 e/JHN2CYv3XUyLHfwfedTGs94nJ6O1V5lr/ByD3gTFt13OPJE2ThSqHgTjYoYE3W MlRL9SQYyvUzDMZeKeueLYsaiQjH61CfG4eGOKVo39139NjAFchiJUWVJYYt/+Q7 dDvlRbosu8LALflVwKBXgsrMsYjaK50g6k7DSui24zW3xpmyDu+ZhNjv4vCoUlyT bJ1uJ4DErFO/e5jP+0FVpiXHkcgbJxu/Ao1WVU0OYwtpe++XWAjy5DJ3Dvu5VpiE V7qN/xc= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org