$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6A0ED74444D611EFA226D072C4F9AE02.roa File: 6A0ED74444D611EFA226D072C4F9AE02.roa (raw, json) Hash identifier: gV9Rm6EHBFGoFlqgMO8Z0aZKZL0tkXXHOUcs+xgovLk= Subject key identifier: 48:13:CB:03:C3:A3:73:F1:FF:27:0C:6C:05:E5:E7:22:FE:D6:0D:29 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1AF7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6A0ED74444D611EFA226D072C4F9AE02.roa Signing time: Mon 12 Aug 2024 07:28:13 +0000 ROA not before: Mon 12 Aug 2024 07:28:13 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 58678 IP address blocks: 157.20.27.0/24 maxlen: 24 160.25.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6903 (0x1af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Aug 12 07:28:13 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66b9b98d-45f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:ce:1e:f3:05:0a:34:9e:2b:ba:db:96:65: c8:9f:83:ac:bc:8d:86:59:df:51:d1:2a:a3:fb:8b: 6d:d5:8f:74:60:8a:3e:4d:9b:df:9c:76:bc:86:6b: 8b:8c:1f:e4:24:f1:84:71:b6:0d:8a:ee:0a:bd:b2: a9:2f:62:7e:4f:60:ac:b1:ab:93:7f:f2:c8:30:62: 21:28:e4:cc:61:dc:34:55:67:df:1e:b1:3b:12:14: 5d:b9:9b:24:a9:f7:75:f5:ee:dd:d7:d9:f7:fd:b1: 24:08:2c:12:30:a7:91:a2:d2:56:b9:ac:dd:96:7e: 75:44:e2:c2:7b:1e:77:f7:9b:f6:49:65:6d:1e:2e: 7a:a2:35:68:49:9b:2a:fe:15:ec:53:c2:c3:56:51: f7:83:54:13:a5:fc:b4:6d:86:57:52:43:c3:15:d5: 86:c8:bf:54:ff:29:d8:f7:e8:62:a5:73:0f:bf:4f: 22:ac:6f:44:86:62:ad:e3:42:25:e7:42:7a:f7:47: 92:e3:ff:7d:62:e1:5d:21:37:1b:06:e2:fb:95:ce: a0:d2:62:4b:df:a0:73:e2:0c:b4:27:92:6f:c8:3e: 64:9f:ec:43:37:63:81:c6:89:d2:c0:af:d0:92:01: 53:e5:c1:9a:67:15:10:f8:9e:2f:c5:bf:70:eb:38: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:13:CB:03:C3:A3:73:F1:FF:27:0C:6C:05:E5:E7:22:FE:D6:0D:29 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6A0ED74444D611EFA226D072C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.27.0/24 160.25.190.0/24 Signature Algorithm: sha256WithRSAEncryption c2:85:70:7c:34:19:9f:c3:11:47:a5:00:48:3a:eb:b0:e7:f8: 9f:a3:41:8a:a5:7a:8f:cb:35:0c:9e:93:9a:04:75:e0:01:1b: 49:f7:55:d4:24:43:51:55:f9:0b:0c:5f:8e:b5:c1:b1:0a:80: 80:86:ea:eb:18:4f:1a:0c:6b:e0:db:c5:a6:93:5a:44:6d:d9: b9:0f:e3:41:16:5b:27:49:94:35:41:a2:ba:92:b8:12:a5:27: 74:29:a3:ef:e0:92:fa:d0:5e:68:59:a5:a7:83:96:49:1b:1b: fb:09:68:79:9e:f6:ac:d9:57:a2:d0:d8:cd:fe:87:29:32:2b: 42:4e:f3:c6:28:e6:47:a6:43:f0:42:d5:bf:8c:53:f3:fa:4c: 5d:95:db:dd:37:16:ef:54:da:1c:22:4f:15:fa:15:cd:94:47: 5a:e0:27:fb:fa:64:ef:19:2e:e5:6b:1f:df:12:ae:78:06:46: f9:99:39:8b:c7:6a:4e:f2:c1:dc:7e:9a:08:45:65:68:79:69: 64:61:ca:8b:7d:88:e2:a6:e8:bd:fb:71:41:c1:d1:ac:aa:6e: 1d:ea:d5:cb:ed:a1:02:a8:df:38:26:2f:f3:83:b9:ae:c6:d5: 08:dd:7f:57:07:f1:1f:95:35:4a:93:fc:2b:e8:d3:27:62:fa: 6e:2e:79:16 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwODEyMDcyODEzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI5Yjk4ZC00NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT3OHvMFCjSeK7rblmXIn4OsvI2GWd9R0Sqj+4tt1Y90YIo+TZvfnHa8hmuL jB/kJPGEcbYNiu4KvbKpL2J+T2CssauTf/LIMGIhKOTMYdw0VWffHrE7EhRduZsk qfd19e7d19n3/bEkCCwSMKeRotJWuazdln51ROLCex5395v2SWVtHi56ojVoSZsq /hXsU8LDVlH3g1QTpfy0bYZXUkPDFdWGyL9U/ynY9+hipXMPv08irG9EhmKt40Il 50J690eS4/99YuFdITcbBuL7lc6g0mJL36Bz4gy0J5JvyD5kn+xDN2OBxonSwK/Q kgFT5cGaZxUQ+J4vxb9w6zj6zQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEgTywPD o3Px/ycMbAXl5yL+1g0pMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkEwRUQ3NDQ0 NEQ2MTFFRkEyMjZEMDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACdFBsDBACgGb4wDQYJKoZIhvcNAQELBQADggEBAMKFcHw0 GZ/DEUelAEg667Dn+J+jQYqleo/LNQyek5oEdeABG0n3VdQkQ1FV+QsMX461wbEK gICG6usYTxoMa+DbxaaTWkRt2bkP40EWWydJlDVBorqSuBKlJ3Qpo+/gkvrQXmhZ paeDlkkbG/sJaHme9qzZV6LQ2M3+hykyK0JO88Yo5kemQ/BC1b+MU/P6TF2V2903 Fu9U2hwiTxX6Fc2UR1rgJ/v6ZO8ZLuVrH98SrngGRvmZOYvHak7ywdx+mghFZWh5 aWRhyot9iOKm6L37cUHB0ayqbh3q1cvtoQKo3zgmL/ODua7G1Qjdf1cH8R+VNUqT /Cvo0ydi+m4ueRY= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org