$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A5CD88AA7BF111EF985B7372C4F9AE02.roa File: A5CD88AA7BF111EF985B7372C4F9AE02.roa (raw, json) Hash identifier: I+dufYrzZntj+IHt4+zOM/eL7zNQ2WWXav+sOM/1RW4= Subject key identifier: 5E:AD:78:6E:96:65:8F:40:6E:DB:FA:06:A0:83:77:33:BA:17:EF:62 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1B5F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A5CD88AA7BF111EF985B7372C4F9AE02.roa Signing time: Thu 26 Sep 2024 10:25:27 +0000 ROA not before: Thu 26 Sep 2024 10:25:27 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 153244 IP address blocks: 160.187.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7007 (0x1b5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 26 10:25:27 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66f53697-7704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:29:70:2b:c5:6b:fb:c0:8a:a0:86:41:d8: ac:39:c7:ce:24:56:ca:b6:65:26:10:58:21:0d:d8: b1:22:e6:a5:cc:a8:a1:64:f6:41:05:58:97:cc:3f: fe:88:3b:b2:19:43:4a:e7:5b:3e:77:e7:cd:5d:91: 31:69:1b:36:13:57:7f:10:8a:fa:4f:c4:e6:e2:6e: 89:b1:2e:2f:65:ae:a3:a9:8b:d3:03:b3:c5:34:57: 41:1c:96:5c:ef:5f:9d:8b:fe:45:8f:c0:29:bb:ac: 8b:2c:7e:af:a1:91:d9:60:2c:0d:33:f7:6f:60:fb: eb:57:21:09:d8:e3:19:cb:96:d1:43:24:05:9b:47: 31:7c:cd:91:8f:5d:e4:35:63:ab:94:b8:50:e4:a6: 41:c4:59:98:19:70:59:ab:6d:f6:3e:1c:82:0a:72: de:8f:c0:66:8d:77:22:59:1d:dd:95:4d:16:19:d5: 33:a7:c3:59:a6:be:04:89:3b:60:19:7c:19:a6:81: ef:1b:d8:8c:89:9e:da:43:28:f0:2d:70:3e:f3:48: d2:3b:d2:d5:a8:15:e5:1a:d0:73:b1:32:d9:93:64: 10:20:5a:02:f1:f5:70:0c:88:6f:dd:1e:92:68:96: 40:42:10:4b:47:9b:72:21:ce:5d:3a:38:fb:09:93: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AD:78:6E:96:65:8F:40:6E:DB:FA:06:A0:83:77:33:BA:17:EF:62 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A5CD88AA7BF111EF985B7372C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.50.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:55:08:83:81:b9:12:40:00:3d:05:c4:94:03:9e:7b:b7:0d: b2:7d:f8:34:05:d4:74:5f:d2:77:bb:27:f2:03:0c:ab:82:5e: 2c:d4:81:d3:6d:0a:cb:ab:aa:02:ca:eb:c3:55:92:1f:21:c6: da:a5:8a:a2:72:92:a1:eb:bf:72:92:34:1c:06:f9:76:fb:a4: 00:18:3e:b7:99:a7:21:d1:9a:64:fd:df:da:a3:f8:1a:25:52: 50:5e:44:09:de:0b:5e:ce:e5:fc:78:b0:37:3b:70:bd:73:b3: f0:e7:e4:a7:f3:58:95:ce:75:98:33:eb:d5:e7:17:86:0c:8a: b9:9d:71:16:67:99:31:40:ba:d5:c3:0d:55:16:46:8b:cd:29: bf:30:a4:46:74:fb:0e:d9:76:00:d3:bf:9e:e7:b0:f8:65:9a: 1f:2f:46:09:5c:bf:78:aa:c9:90:bc:71:cb:ff:9e:e2:a4:ed: 18:7b:b7:4e:59:1e:e6:9d:b0:4a:ff:16:b9:5f:b6:d4:72:bb: c8:fd:5a:f0:43:48:0f:5d:2e:04:54:da:c4:8e:d2:e9:cf:fa: 7d:7d:e2:e7:8b:a4:94:f8:a5:cb:ef:ed:9a:e2:ad:8b:1f:bb: 49:3c:e5:c5:48:bf:62:7d:55:06:3f:68:ba:81:18:51:af:68: b3:1f:35:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwOTI2MTAyNTI3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY1MzY5Ny03NzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXEpcCvFa/vAiqCGQdisOcfOJFbKtmUmEFghDdixIualzKihZPZBBViXzD/+ iDuyGUNK51s+d+fNXZExaRs2E1d/EIr6T8Tm4m6JsS4vZa6jqYvTA7PFNFdBHJZc 71+di/5Fj8Apu6yLLH6voZHZYCwNM/dvYPvrVyEJ2OMZy5bRQyQFm0cxfM2Rj13k NWOrlLhQ5KZBxFmYGXBZq232PhyCCnLej8BmjXciWR3dlU0WGdUzp8NZpr4EiTtg GXwZpoHvG9iMiZ7aQyjwLXA+80jSO9LVqBXlGtBzsTLZk2QQIFoC8fVwDIhv3R6S aJZAQhBLR5tyIc5dOjj7CZOF4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFF6teG6W ZY9Abtv6BqCDdzO6F+9iMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTVDRDg4QUE3 QkYxMTFFRjk4NUI3MzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGguzIwDQYJKoZIhvcNAQELBQADggEBAC1VCIOBuRJAAD0F xJQDnnu3DbJ9+DQF1HRf0ne7J/IDDKuCXizUgdNtCsurqgLK68NVkh8hxtqliqJy kqHrv3KSNBwG+Xb7pAAYPreZpyHRmmT939qj+BolUlBeRAneC17O5fx4sDc7cL1z s/Dn5KfzWJXOdZgz69XnF4YMirmdcRZnmTFAutXDDVUWRovNKb8wpEZ0+w7ZdgDT v57nsPhlmh8vRglcv3iqyZC8ccv/nuKk7Rh7t05ZHuadsEr/FrlfttRyu8j9WvBD SA9dLgRU2sSO0unP+n194ueLpJT4pcvv7ZrirYsfu0k85cVIv2J9VQY/aLqBGFGv aLMfNUY= -----END CERTIFICATE-----Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org