$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/AF38C3DA169511EFAFC8CA17C4F9AE02.roa File: AF38C3DA169511EFAFC8CA17C4F9AE02.roa (raw, json) Hash identifier: pLz61UjqHy+UbhKTsZdEHJcxk2o3nKuy+FpI+lClGpw= Subject key identifier: CE:83:C5:C0:2E:A1:D2:3F:BA:68:B3:D9:F4:D7:D6:32:2A:E7:87:A7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 19E0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/AF38C3DA169511EFAFC8CA17C4F9AE02.roa Signing time: Thu 30 May 2024 15:52:21 +0000 ROA not before: Thu 30 May 2024 15:52:21 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134009 IP address blocks: 157.66.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6624 (0x19e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 30 15:52:21 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a0b5-71ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:5e:2e:c8:68:a5:ea:cc:6c:43:10:18:39: 94:91:97:6c:81:68:7d:f7:c5:9f:ce:f8:93:29:4a: ee:49:57:cb:9c:c8:f3:61:cf:da:13:c7:5a:9a:a9: eb:11:d2:60:15:92:c3:99:e0:3f:1e:b9:de:22:21: bf:d1:43:4d:da:52:ff:fd:2f:26:b9:16:f4:5a:d2: 29:08:c8:60:a9:a4:52:43:5d:ff:00:51:d1:4e:a2: 6f:59:33:7b:26:4c:13:93:9f:26:61:df:92:49:a7: b6:b9:82:52:99:55:ae:c8:de:ca:94:56:2d:eb:03: 0c:06:f0:f0:39:c2:c8:ec:41:b4:8a:cf:52:1f:6f: 75:fd:94:3c:33:fc:cd:79:a7:b3:f1:fc:65:ab:a7: 5e:f2:ec:db:9f:3d:9e:2d:ff:61:e6:45:f1:f5:55: bb:3f:1b:83:1c:5f:f6:25:d3:a3:37:21:1c:66:cd: ef:3d:77:1d:29:35:fa:11:52:3e:64:33:88:57:25: 41:e2:d2:7b:b9:f7:31:e3:d7:9f:99:a5:ff:bc:95: e6:34:5e:cd:fc:ce:cc:b6:d6:83:cc:09:8b:21:1a: 31:3d:60:13:3c:e8:38:2d:88:b8:a4:f7:de:55:7c: 06:71:9b:cc:64:7b:54:82:fd:f6:6b:6d:76:38:72: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:C5:C0:2E:A1:D2:3F:BA:68:B3:D9:F4:D7:D6:32:2A:E7:87:A7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/AF38C3DA169511EFAFC8CA17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.45.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:75:64:99:9a:47:4f:62:77:7f:03:af:dd:db:da:76:d1:f9: 7a:6e:30:c9:81:d6:1c:a3:de:96:a0:52:b4:2d:2f:c5:73:b6: 57:24:9b:d1:f4:ea:85:0a:28:58:5c:ec:27:7e:21:35:6e:fd: d2:0d:53:d7:83:13:c5:67:dd:3e:4d:ef:f3:b2:93:38:0d:11: 10:84:2e:28:b6:d2:a5:b6:39:f0:1a:d6:78:0d:11:23:1d:9f: 30:4d:de:79:11:50:ec:3c:03:3e:0b:3a:b7:e0:ab:71:d1:d4: 92:06:c6:94:3d:60:9a:02:5c:f1:a1:ca:e9:a8:1b:e3:58:ea: ab:fd:d9:69:3b:24:c2:c3:f0:03:80:53:63:a2:2a:fa:24:d0: fb:2f:d5:2c:8b:95:81:d9:75:54:5f:4b:39:38:45:30:66:98: 4e:b1:c6:5a:09:79:46:77:15:53:4b:f3:21:34:f4:d9:14:b9: 96:1f:ff:7b:5b:79:25:2a:54:d2:95:b2:f5:67:e8:a2:14:f6: b7:3b:eb:81:54:99:6f:5c:87:79:9f:93:8f:d8:62:49:03:f8: 01:13:52:19:d5:04:7e:b0:35:f4:e2:01:b8:98:df:5a:78:0e: d6:df:ea:42:85:cb:49:b8:1b:4e:90:aa:f5:cd:e4:04:89:72: 80:0a:5c:a9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTMwMTU1MjIxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YTBiNS03MWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23BeLshoperMbEMQGDmUkZdsgWh998WfzviTKUruSVfLnMjzYc/aE8damqnr EdJgFZLDmeA/HrneIiG/0UNN2lL//S8muRb0WtIpCMhgqaRSQ13/AFHRTqJvWTN7 JkwTk58mYd+SSae2uYJSmVWuyN7KlFYt6wMMBvDwOcLI7EG0is9SH291/ZQ8M/zN eaez8fxlq6de8uzbnz2eLf9h5kXx9VW7PxuDHF/2JdOjNyEcZs3vPXcdKTX6EVI+ ZDOIVyVB4tJ7ufcx49efmaX/vJXmNF7N/M7MttaDzAmLIRoxPWATPOg4LYi4pPfe VXwGcZvMZHtUgv32a212OHJSPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM6DxcAu odI/umiz2fTX1jIq54enMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUYzOEMzREEx Njk1MTFFRkFGQzhDQTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdQi0wDQYJKoZIhvcNAQELBQADggEBAJp1ZJmaR09id38D r93b2nbR+XpuMMmB1hyj3pagUrQtL8Vztlckm9H06oUKKFhc7Cd+ITVu/dINU9eD E8Vn3T5N7/OykzgNERCELii20qW2OfAa1ngNESMdnzBN3nkRUOw8Az4LOrfgq3HR 1JIGxpQ9YJoCXPGhyumoG+NY6qv92Wk7JMLD8AOAU2OiKvok0Psv1SyLlYHZdVRf Szk4RTBmmE6xxloJeUZ3FVNL8yE09NkUuZYf/3tbeSUqVNKVsvVn6KIU9rc764FU mW9ch3mfk4/YYkkD+AETUhnVBH6wNfTiAbiY31p4Dtbf6kKFy0m4G06QqvXN5ASJ coAKXKk= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org