$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B5300C8C383A11EFA2A6EE6EC4F9AE02.roa File: B5300C8C383A11EFA2A6EE6EC4F9AE02.roa (raw, json) Hash identifier: AX30hhzAgZvwIQz2MiJiqyXmTq/Wdrer73O0t8xOmFw= Subject key identifier: BE:02:79:7C:42:34:5B:13:37:DB:22:A6:84:00:33:49:04:0A:F5:8B Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1A86 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B5300C8C383A11EFA2A6EE6EC4F9AE02.roa Signing time: Tue 02 Jul 2024 06:17:07 +0000 ROA not before: Tue 02 Jul 2024 06:17:07 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152548 IP address blocks: 160.22.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6790 (0x1a86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 2 06:17:07 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66839b63-7ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2d:68:5c:18:8d:37:ff:28:b5:55:3e:80:e5: ea:fa:f6:f1:2a:82:32:e2:da:b8:cc:e0:17:f4:f6: da:21:72:49:9d:60:31:5b:d5:cc:a4:ec:8b:0e:29: 62:9c:de:80:5e:dd:7d:a8:b8:76:ce:36:8a:dc:f6: d4:85:20:3e:3d:51:7a:71:97:5f:7c:27:27:96:15: 70:dd:06:bd:a7:ea:29:b7:e0:5b:2a:61:c2:d3:a5: e9:12:e0:97:22:8d:6f:7d:ca:a1:71:f3:67:c3:46: 5e:cf:13:49:05:f1:9d:96:33:17:ca:5c:f9:0f:66: 5a:0d:68:62:e8:c1:39:91:e2:37:d6:60:1e:df:41: 9f:99:70:76:49:66:6b:11:9e:41:b9:56:30:93:5e: 65:be:cc:34:71:0e:1a:5c:7e:58:51:a6:b6:c5:3b: e4:c5:e6:61:c8:32:8c:b2:44:e8:b2:49:5d:14:de: cd:f6:9e:15:3b:3e:ce:68:a1:e6:4b:0a:ca:66:94: 1c:fb:2a:18:c9:b1:0e:5c:97:c9:9c:e8:95:e9:7c: d9:1c:5c:bd:52:40:c1:46:4c:c7:7e:4e:cf:3b:0e: 94:32:76:45:f4:6a:01:bd:18:48:ac:87:00:ea:bf: 2f:73:3e:e9:18:de:41:82:32:e6:8f:0b:ab:36:48: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:02:79:7C:42:34:5B:13:37:DB:22:A6:84:00:33:49:04:0A:F5:8B X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B5300C8C383A11EFA2A6EE6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.232.0/23 Signature Algorithm: sha256WithRSAEncryption 90:58:2c:05:6a:90:9a:70:08:cc:bc:0e:96:59:8b:a2:85:dd: 4c:4e:31:eb:fe:f8:95:8b:d3:c4:c8:64:b8:9f:cd:37:b5:cb: 05:43:1a:6d:87:a5:53:cb:17:74:6a:74:c9:95:9a:04:dd:7a: fc:a6:df:04:da:18:d2:ef:e9:b6:01:5c:ed:54:e5:9d:d2:fa: 5d:2c:2d:d9:f4:b2:ee:6b:5b:9d:69:fe:3e:04:49:fc:8b:c1: 99:4d:49:89:8e:73:d5:f2:23:54:f0:25:7d:34:c4:fb:3c:1f: b0:dc:dd:aa:68:e6:d9:f9:5b:02:c3:25:d3:88:e1:d8:c1:46: 0a:5c:fc:08:8f:61:2d:bb:01:cc:71:c3:9f:84:be:73:a5:81: 90:00:23:79:a3:fe:a0:59:49:87:92:76:5b:c3:9c:0c:16:db: 4e:db:c8:2f:f5:5f:2c:ce:9d:ff:78:4f:5f:cc:a0:da:39:df: ad:c4:d9:5a:11:24:35:ff:d1:aa:58:e1:f4:9c:ba:55:88:86: 0a:ae:92:25:cc:94:bf:84:c1:b1:80:c9:5d:85:aa:41:41:d1: 97:16:dc:af:f5:2b:8b:bc:a8:38:30:65:ef:37:51:c0:c6:f0: 09:8c:77:38:06:20:5f:4b:44:9b:5f:f1:23:e3:dc:b3:fd:93: 5e:b1:1e:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNzAyMDYxNzA3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjgzOWI2My03ZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4y1oXBiNN/8otVU+gOXq+vbxKoIy4tq4zOAX9PbaIXJJnWAxW9XMpOyLDili nN6AXt19qLh2zjaK3PbUhSA+PVF6cZdffCcnlhVw3Qa9p+opt+BbKmHC06XpEuCX Io1vfcqhcfNnw0ZezxNJBfGdljMXylz5D2ZaDWhi6ME5keI31mAe30GfmXB2SWZr EZ5BuVYwk15lvsw0cQ4aXH5YUaa2xTvkxeZhyDKMskToskldFN7N9p4VOz7OaKHm SwrKZpQc+yoYybEOXJfJnOiV6XzZHFy9UkDBRkzHfk7POw6UMnZF9GoBvRhIrIcA 6r8vcz7pGN5BgjLmjwurNkh9vwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL4CeXxC NFsTN9sipoQAM0kECvWLMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjUzMDBDOEMz ODNBMTFFRkEyQTZFRTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFugwDQYJKoZIhvcNAQELBQADggEBAJBYLAVqkJpwCMy8 DpZZi6KF3UxOMev++JWL08TIZLifzTe1ywVDGm2HpVPLF3RqdMmVmgTdevym3wTa GNLv6bYBXO1U5Z3S+l0sLdn0su5rW51p/j4ESfyLwZlNSYmOc9XyI1TwJX00xPs8 H7Dc3apo5tn5WwLDJdOI4djBRgpc/AiPYS27Acxxw5+EvnOlgZAAI3mj/qBZSYeS dlvDnAwW207byC/1XyzOnf94T1/MoNo5363E2VoRJDX/0apY4fSculWIhgqukiXM lL+EwbGAyV2FqkFB0ZcW3K/1K4u8qDgwZe83UcDG8AmMdzgGIF9LRJtf8SPj3LP9 k16xHlc= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org