$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F41C354CCB411EEA47EB676C4F9AE02.roa File: 8F41C354CCB411EEA47EB676C4F9AE02.roa (raw, json) Hash identifier: OGRENPdmx1L9fhDDIfbf/cbyaL08N9mmH5K8x6eCFjA= Subject key identifier: B9:8E:E9:AE:96:C8:8F:EB:D4:C7:4C:64:06:1F:04:6F:F8:D3:0A:4F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 18ED Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F41C354CCB411EEA47EB676C4F9AE02.roa Signing time: Fri 16 Feb 2024 10:17:17 +0000 ROA not before: Fri 16 Feb 2024 10:17:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146918 IP address blocks: 157.10.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6381 (0x18ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Feb 16 10:17:17 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65cf362c-36ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:ea:55:38:7d:93:06:17:b2:cf:9b:f0:95: 23:54:7f:f7:fa:fe:47:6f:10:cd:a9:a4:e8:4d:ab: 37:ea:b4:ea:40:b1:9c:ad:1d:50:09:b0:31:2e:13: 9d:b3:95:69:b6:d5:70:39:ed:8a:b0:49:02:a0:93: 3d:af:78:01:61:70:18:1e:14:c4:c4:85:c3:65:17: 98:3e:db:76:b2:cd:57:cf:18:07:55:75:d0:dc:4e: be:2d:bf:fd:08:50:50:5d:6a:65:f0:fe:b3:db:9b: 49:b9:62:d4:df:dd:3d:5f:3b:67:6c:ae:82:65:06: 21:f6:52:38:ec:66:36:36:61:b2:29:c0:52:96:d1: e7:be:3a:1e:b0:68:72:16:28:09:62:ac:73:57:b9: ef:4e:1d:c6:81:39:04:a1:5d:8e:d2:5f:53:c3:8d: 83:2a:9e:8b:d7:87:a1:0e:48:e5:60:27:e2:13:04: 37:63:41:e0:53:92:1c:f3:cc:7d:2c:e6:3c:3a:9f: 2b:09:30:04:ff:38:4a:74:9f:78:f5:f1:66:b2:a0: bb:a5:49:d1:50:a5:90:26:e0:e7:bb:73:78:8a:6e: f4:19:21:11:55:68:1f:11:13:3c:0c:09:4a:4c:d1: 7f:17:9f:f5:b0:09:37:41:1b:ed:b8:81:7b:9b:0f: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8E:E9:AE:96:C8:8F:EB:D4:C7:4C:64:06:1F:04:6F:F8:D3:0A:4F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F41C354CCB411EEA47EB676C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.96.0/24 Signature Algorithm: sha256WithRSAEncryption 43:14:86:63:34:0e:c7:58:a0:d4:56:c6:c8:ce:7f:4e:33:32: 06:ac:34:38:4b:eb:b6:68:b9:86:98:b0:7b:ae:dd:c9:c0:1d: 93:eb:26:f5:a9:3e:1b:db:9f:5f:1d:7f:f4:a2:3d:a0:5d:39: 36:30:f2:40:90:2e:b8:54:dd:95:0c:e8:09:cc:44:00:55:70: 68:c5:6d:c8:3e:7d:79:40:16:99:aa:2a:7e:43:23:0e:99:5d: d5:23:f3:e9:e2:e7:82:e9:2e:dd:46:68:fd:79:29:86:4e:e3: 8b:e0:32:83:56:ea:28:ad:c3:3f:db:63:9b:c4:92:c2:72:f5: 99:e0:c5:48:8a:a0:54:be:37:48:1b:3f:ef:de:9e:67:7a:f2: 23:4c:bb:67:08:ee:38:bc:d9:ef:a9:d3:80:9d:b9:1b:8a:44: 8f:d5:be:81:ca:c9:a3:60:10:eb:a2:fa:bd:7c:d6:27:5a:73: c3:db:f9:d1:a9:e8:91:07:7b:f8:b1:29:af:c0:f3:6b:da:00: 57:44:fa:18:7c:86:c0:f8:a8:0c:ab:c4:62:91:0d:78:4e:d7: 01:36:89:c8:fb:95:c6:99:c5:51:59:df:54:23:34:27:44:81: ac:99:d5:48:58:3a:20:d6:47:f3:91:37:f2:76:59:48:77:f8: 1c:5c:c8:73 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwMjE2MTAxNzE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNmMzYyYy0zNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD/qVTh9kwYXss+b8JUjVH/3+v5HbxDNqaToTas36rTqQLGcrR1QCbAxLhOd s5VpttVwOe2KsEkCoJM9r3gBYXAYHhTExIXDZReYPtt2ss1XzxgHVXXQ3E6+Lb/9 CFBQXWpl8P6z25tJuWLU3909XztnbK6CZQYh9lI47GY2NmGyKcBSltHnvjoesGhy FigJYqxzV7nvTh3GgTkEoV2O0l9Tw42DKp6L14ehDkjlYCfiEwQ3Y0HgU5Ic88x9 LOY8Op8rCTAE/zhKdJ949fFmsqC7pUnRUKWQJuDnu3N4im70GSERVWgfERM8DAlK TNF/F5/1sAk3QRvtuIF7mw897QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLmO6a6W yI/r1MdMZAYfBG/40wpPMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEY0MUMzNTRD Q0I0MTFFRUE0N0VCNjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdCmAwDQYJKoZIhvcNAQELBQADggEBAEMUhmM0DsdYoNRW xsjOf04zMgasNDhL67ZouYaYsHuu3cnAHZPrJvWpPhvbn18df/SiPaBdOTYw8kCQ LrhU3ZUM6AnMRABVcGjFbcg+fXlAFpmqKn5DIw6ZXdUj8+ni54LpLt1GaP15KYZO 44vgMoNW6iitwz/bY5vEksJy9ZngxUiKoFS+N0gbP+/enmd68iNMu2cI7ji82e+p 04CduRuKRI/VvoHKyaNgEOui+r181idac8Pb+dGp6JEHe/ixKa/A82vaAFdE+hh8 hsD4qAyrxGKRDXhO1wE2icj7lcaZxVFZ31QjNCdEgayZ1UhYOiDWR/ORN/J2WUh3 +BxcyHM= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org