$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa File: 8F1CEB52CFB011EEB0D03629C4F9AE02.roa (raw, json) Hash identifier: LiJRTJPJPFX4wtMTKLkGpRl+tmYKSWMqy6gkG8udaiY= Subject key identifier: 6D:0E:8F:A5:AF:71:E7:B5:1E:6F:14:AF:9A:DE:DE:65:10:CD:57:1F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 18FD Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa Signing time: Tue 20 Feb 2024 05:26:12 +0000 ROA not before: Tue 20 Feb 2024 05:26:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149537 IP address blocks: 157.20.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6397 (0x18fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Feb 20 05:26:12 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65d437f3-6e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:bd:bf:4f:db:0b:27:6f:04:1a:3f:3e:4e: 7d:f4:85:fb:42:34:4f:54:1b:2f:56:8a:a8:79:a8: b1:43:33:04:d3:cf:94:39:80:37:e9:87:7c:85:0d: a8:17:ca:47:3a:a9:8d:73:dd:8a:58:4f:a2:05:65: 8a:71:43:3e:92:3c:0b:71:db:3d:bf:6b:b5:97:4d: b5:b3:d2:70:a6:cb:80:c2:e5:03:90:df:2a:a8:87: 1d:66:92:11:c9:95:ab:48:8b:9a:3a:a0:12:3e:58: 73:49:17:d9:96:79:e7:a7:3d:f9:8b:02:59:57:1c: 87:ae:02:82:23:83:98:38:03:57:16:9b:7e:e1:8a: a5:f1:8c:8b:e5:f3:00:a7:79:09:0e:e6:c7:46:af: b1:a9:10:25:a0:e2:7d:48:e3:f7:08:5f:4d:88:c6: 97:24:19:69:62:e3:40:63:0a:fe:77:dd:a4:10:d9: b6:04:f7:ec:f9:4f:fd:ba:37:26:64:65:19:6f:f9: 41:d0:01:38:54:2f:41:aa:7e:55:9b:4a:8f:20:7e: 8b:1c:f0:c0:aa:4c:ff:28:5f:e8:61:1d:cb:9e:1d: cf:67:89:4c:39:e2:bb:8d:61:9e:85:c4:41:3c:b5: 0c:51:af:bb:20:18:b3:77:21:cc:b4:77:80:fd:71: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0E:8F:A5:AF:71:E7:B5:1E:6F:14:AF:9A:DE:DE:65:10:CD:57:1F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.51.0/24 Signature Algorithm: sha256WithRSAEncryption 28:e4:a7:fe:ee:26:ac:3d:db:29:88:90:cb:b1:da:a8:e3:22: e6:50:bf:62:c9:58:7a:86:8c:bf:6a:a3:62:ce:e0:d1:1d:6f: ba:43:c2:0e:41:fb:55:f6:cc:c2:e1:8e:87:b6:db:a7:7b:85: b2:a8:3c:70:91:3e:e9:63:e4:cf:08:4e:1a:f1:bd:da:75:cd: b9:af:3e:b0:ac:fb:15:36:68:fd:df:04:63:51:c5:c1:9b:ce: 5e:b4:cd:36:f6:42:55:c4:7a:ce:be:a0:84:8c:d2:a8:19:96: 6d:5f:71:69:5c:75:be:d1:76:a1:5d:f8:0d:e0:78:de:30:d7: 40:1b:53:d5:2c:e7:63:20:57:1a:53:b3:51:d8:73:e2:07:c1: e0:cf:6d:e0:94:43:ab:67:15:75:fc:6c:57:1b:1b:75:09:82: af:17:35:e3:95:ae:f3:fb:c1:9d:01:32:f5:c0:ae:55:2f:bc: b8:4f:a9:b8:07:67:72:4b:6b:04:81:76:fc:eb:96:3e:f1:af: 64:bd:be:a6:a1:4b:d0:45:fb:4d:76:62:42:1d:40:9c:ca:cf: 3a:b5:fb:c6:67:78:d9:f3:de:d2:c3:be:d1:54:65:1b:87:4a: 42:69:69:e7:38:cd:19:30:c2:79:02:64:73:96:d3:5c:59:f4: a9:4f:11:9d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwMjIwMDUyNjEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ0MzdmMy02ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oq9v0/bCydvBBo/Pk599IX7QjRPVBsvVoqoeaixQzME08+UOYA36Yd8hQ2o F8pHOqmNc92KWE+iBWWKcUM+kjwLcds9v2u1l021s9JwpsuAwuUDkN8qqIcdZpIR yZWrSIuaOqASPlhzSRfZlnnnpz35iwJZVxyHrgKCI4OYOANXFpt+4Yql8YyL5fMA p3kJDubHRq+xqRAloOJ9SOP3CF9NiMaXJBlpYuNAYwr+d92kENm2BPfs+U/9ujcm ZGUZb/lB0AE4VC9Bqn5Vm0qPIH6LHPDAqkz/KF/oYR3Lnh3PZ4lMOeK7jWGehcRB PLUMUa+7IBizdyHMtHeA/XHitwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG0Oj6Wv cee1Hm8Ur5re3mUQzVcfMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEYxQ0VCNTJD RkIwMTFFRUIwRDAzNjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdFDMwDQYJKoZIhvcNAQELBQADggEBACjkp/7uJqw92ymI kMux2qjjIuZQv2LJWHqGjL9qo2LO4NEdb7pDwg5B+1X2zMLhjoe226d7hbKoPHCR Pulj5M8IThrxvdp1zbmvPrCs+xU2aP3fBGNRxcGbzl60zTb2QlXEes6+oISM0qgZ lm1fcWlcdb7RdqFd+A3geN4w10AbU9Us52MgVxpTs1HYc+IHweDPbeCUQ6tnFXX8 bFcbG3UJgq8XNeOVrvP7wZ0BMvXArlUvvLhPqbgHZ3JLawSBdvzrlj7xr2S9vqah S9BF+012YkIdQJzKzzq1+8ZneNnz3tLDvtFUZRuHSkJpaec4zRkwwnkCZHOW01xZ 9KlPEZ0= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org