$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B3715800F88A11EEBE76EE82C4F9AE02.roa File: B3715800F88A11EEBE76EE82C4F9AE02.roa (raw, json) Hash identifier: JUMEgDUj7PtxqKGlTkEvrvt1SVuEvMesHP0zbZIMogI= Subject key identifier: 2B:F1:4E:1F:80:57:5E:4B:80:93:77:58:5F:F7:6E:C9:A9:ED:81:12 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 195E Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B3715800F88A11EEBE76EE82C4F9AE02.roa Signing time: Fri 12 Apr 2024 05:08:30 +0000 ROA not before: Fri 12 Apr 2024 05:08:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59162 IP address blocks: 157.20.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6494 (0x195e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Apr 12 05:08:30 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6618c1cd-988c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:c1:fd:2d:06:de:6f:99:ee:36:5b:9c:7d: 9f:71:73:4b:76:cc:cb:aa:2f:42:93:b0:44:cc:1b: 23:e9:ee:c6:f4:60:97:aa:44:4c:80:5e:96:8f:8c: 3b:95:f4:63:c9:3c:d4:03:64:5c:35:fe:48:ed:53: 40:9f:08:da:9c:9a:bc:36:4f:6d:bb:b7:d2:8d:8c: 0f:30:ee:b5:35:e6:02:01:f0:ab:c9:80:13:50:73: 7d:9d:cb:32:d7:fb:05:77:66:29:52:c7:cf:93:6b: 95:ad:92:52:e2:fc:54:6e:03:40:9d:69:18:b4:77: 6d:93:52:01:ca:53:0c:30:7d:7a:0f:3d:c3:7a:91: 6b:d2:50:12:b1:99:20:9d:62:86:a5:22:14:2c:63: 0f:9e:6d:28:c8:cb:23:39:b6:9d:2f:ec:5c:5b:14: a4:fc:9b:89:40:d5:84:7a:d6:b7:d7:52:92:4e:c9: fc:70:b3:9c:f8:90:4b:03:4e:37:3c:75:21:6b:ea: 68:83:26:d7:bc:50:c1:e4:a4:a1:36:62:0b:56:4b: f1:c3:19:55:9c:91:36:86:89:2d:e3:02:6a:cd:0c: 97:18:23:64:e4:b1:4e:fd:30:c4:5b:44:e3:18:b7: 3b:e7:1c:0c:31:40:41:94:cc:73:4a:ea:e0:d3:20: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F1:4E:1F:80:57:5E:4B:80:93:77:58:5F:F7:6E:C9:A9:ED:81:12 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B3715800F88A11EEBE76EE82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.228.0/23 Signature Algorithm: sha256WithRSAEncryption 21:9d:b1:bb:5e:d8:96:29:be:a9:f2:ba:99:27:43:3e:4f:a7: 79:c6:bd:66:c3:73:b6:7f:bc:6c:5d:4c:20:c9:df:c3:36:a6: 8d:3b:6f:63:63:53:93:4e:58:4e:88:39:54:ad:d7:29:01:3f: d3:5f:df:c0:7d:03:e9:6c:d9:55:a8:6c:06:cf:f3:e4:9a:58: 2d:f6:ea:e1:48:5a:a5:48:65:44:24:3c:41:6b:47:8e:83:cc: a6:d7:fe:61:f0:a9:41:a8:22:bf:c2:cd:d5:ed:d3:d8:06:22: 22:fc:a5:53:ef:ca:78:50:6f:88:ea:dc:1f:34:89:26:a1:9d: 16:97:1b:b8:40:4c:98:69:00:98:9f:d4:28:c4:bc:b2:2a:45: e2:e9:0e:15:54:84:82:7e:72:bf:f2:3c:3d:e3:b0:bf:7e:23: 1e:47:b7:25:3b:f8:7d:6b:01:44:51:0e:f4:35:c5:c4:a7:9d: af:ba:a4:1c:be:aa:07:2c:81:bd:96:a4:02:bb:35:8f:5c:68: 2c:82:e9:c0:82:f8:7d:ed:6a:0b:d2:75:fa:1a:e3:98:e0:a4: ae:ed:86:71:3e:88:e3:13:de:e1:ca:d4:b7:ea:a2:d2:4a:9c: 55:fb:b8:e0:dc:11:de:7a:56:97:8f:83:ae:28:cf:9f:dc:ee: 46:9d:1c:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNDEyMDUwODMwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE4YzFjZC05ODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonHB/S0G3m+Z7jZbnH2fcXNLdszLqi9Ck7BEzBsj6e7G9GCXqkRMgF6Wj4w7 lfRjyTzUA2RcNf5I7VNAnwjanJq8Nk9tu7fSjYwPMO61NeYCAfCryYATUHN9ncsy 1/sFd2YpUsfPk2uVrZJS4vxUbgNAnWkYtHdtk1IBylMMMH16Dz3DepFr0lASsZkg nWKGpSIULGMPnm0oyMsjObadL+xcWxSk/JuJQNWEeta311KSTsn8cLOc+JBLA043 PHUha+pogybXvFDB5KShNmILVkvxwxlVnJE2hokt4wJqzQyXGCNk5LFO/TDEW0Tj GLc75xwMMUBBlMxzSurg0yC2PQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCvxTh+A V15LgJN3WF/3bsmp7YESMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjM3MTU4MDBG ODhBMTFFRUJFNzZFRTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFOQwDQYJKoZIhvcNAQELBQADggEBACGdsbte2JYpvqny upknQz5Pp3nGvWbDc7Z/vGxdTCDJ38M2po07b2NjU5NOWE6IOVSt1ykBP9Nf38B9 A+ls2VWobAbP8+SaWC326uFIWqVIZUQkPEFrR46DzKbX/mHwqUGoIr/CzdXt09gG IiL8pVPvynhQb4jq3B80iSahnRaXG7hATJhpAJif1CjEvLIqReLpDhVUhIJ+cr/y PD3jsL9+Ix5HtyU7+H1rAURRDvQ1xcSnna+6pBy+qgcsgb2WpAK7NY9caCyC6cCC +H3tagvSdfoa45jgpK7thnE+iOMT3uHK1LfqotJKnFX7uODcEd56VpePg64oz5/c 7kadHCc= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org