$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa File: BE63E1C2FE1D11EE9E701774C4F9AE02.roa (raw, json) Hash identifier: ayJ1osiVtmsbHGzs7ecOF6BVu4j3Xa/BjYgW5rg6JFE= Subject key identifier: 44:54:D8:D9:D9:A8:85:02:0C:4C:05:4D:FF:6F:22:09:AF:32:D4:B9 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 196E Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa Signing time: Fri 19 Apr 2024 07:23:40 +0000 ROA not before: Fri 19 Apr 2024 07:23:40 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134926 IP address blocks: 157.20.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6510 (0x196e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Apr 19 07:23:40 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=66221bfb-f41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:b5:71:45:86:59:2d:e5:01:e6:f1:54:70: 42:c2:65:77:ea:d5:03:be:72:38:df:07:ed:d5:d8: 27:1d:28:8c:c5:9a:6a:55:26:19:86:1e:ee:35:4b: eb:0b:4d:ad:b6:59:69:7b:38:bc:a8:dd:51:99:e5: dd:09:92:48:86:20:47:72:c4:37:d5:13:6c:a5:2c: f4:19:ad:d4:5e:b9:69:a0:c2:85:12:e2:ca:8b:18: b1:b9:92:a1:9d:4e:fd:ee:e9:58:72:4a:66:6b:4e: 88:16:71:e8:4d:cf:36:6c:e4:f6:c9:5c:33:8c:d9: bd:ec:d9:6b:fd:65:ad:b1:78:d0:41:98:08:3e:9b: d5:70:c5:a6:07:89:b5:bb:e6:e4:26:bf:50:51:1e: 8d:da:2e:16:ca:4d:88:02:e2:3c:0e:34:14:c9:12: 54:d0:c5:8c:28:66:49:72:65:f9:88:cf:aa:6c:04: eb:13:84:9d:76:1e:dd:13:69:1a:fa:a9:ac:89:9f: 4b:74:b8:04:2d:bb:e0:7c:d9:bb:93:6b:33:7b:92: 39:59:c5:9c:05:86:5b:7f:3a:4b:50:4d:04:59:d9: 5d:52:cc:9d:95:fe:dd:06:04:29:58:92:33:b3:6c: d6:5b:ba:ff:19:48:a4:17:44:f4:7a:66:1d:f2:a3: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:54:D8:D9:D9:A8:85:02:0C:4C:05:4D:FF:6F:22:09:AF:32:D4:B9 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63E1C2FE1D11EE9E701774C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.214.0/23 Signature Algorithm: sha256WithRSAEncryption ba:a3:09:1a:84:dd:35:a3:46:51:b5:53:cd:02:0f:66:93:6f: 33:83:b7:dd:64:bc:41:c8:6a:7c:86:3a:e0:75:07:1f:dd:c1: 66:99:1d:7b:c9:42:a2:50:b9:7c:8c:83:00:d7:62:e7:19:5e: 29:94:ab:42:a8:96:ef:db:1c:0a:3e:9e:dd:c7:c4:13:c6:a2: bb:08:cd:35:ce:1f:5d:4a:0f:46:df:ef:7f:cd:16:b3:5b:57: fd:69:85:31:2a:78:f3:ce:44:5e:f8:05:30:34:f2:cd:43:d7: 9e:8b:2b:2e:77:42:d8:d0:6d:22:ae:01:d5:84:7d:a9:5d:fc: 71:ad:59:62:5a:11:2c:40:a9:5d:b7:c7:77:a4:17:69:46:da: c4:26:97:98:e0:e0:db:9b:2a:f9:90:6c:08:ad:5f:96:34:06: 1a:5e:f8:3c:d4:3d:d1:5c:bb:18:30:db:1d:6e:3c:ee:64:fd: 9f:bb:17:1c:8e:44:fc:6b:fa:bb:15:ce:83:57:a5:bf:67:89: f3:25:f3:73:b4:dc:3f:9f:66:32:b8:df:02:33:62:5d:8a:9c: 42:d0:12:16:17:f7:aa:79:9e:13:b5:83:df:47:fc:7a:ce:21: bf:89:24:30:16:cd:81:a0:57:21:19:65:6c:de:f2:90:7c:83: c8:5b:35:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNDE5MDcyMzQwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIyMWJmYi1mNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPu1cUWGWS3lAebxVHBCwmV36tUDvnI43wft1dgnHSiMxZpqVSYZhh7uNUvr C02ttllpezi8qN1RmeXdCZJIhiBHcsQ31RNspSz0Ga3UXrlpoMKFEuLKixixuZKh nU797ulYckpma06IFnHoTc82bOT2yVwzjNm97Nlr/WWtsXjQQZgIPpvVcMWmB4m1 u+bkJr9QUR6N2i4Wyk2IAuI8DjQUyRJU0MWMKGZJcmX5iM+qbATrE4Sddh7dE2ka +qmsiZ9LdLgELbvgfNm7k2sze5I5WcWcBYZbfzpLUE0EWdldUsydlf7dBgQpWJIz s2zWW7r/GUikF0T0emYd8qM/LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFERU2NnZ qIUCDEwFTf9vIgmvMtS5MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkU2M0UxQzJG RTFEMTFFRTlFNzAxNzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFNYwDQYJKoZIhvcNAQELBQADggEBALqjCRqE3TWjRlG1 U80CD2aTbzODt91kvEHIanyGOuB1Bx/dwWaZHXvJQqJQuXyMgwDXYucZXimUq0Ko lu/bHAo+nt3HxBPGorsIzTXOH11KD0bf73/NFrNbV/1phTEqePPORF74BTA08s1D 156LKy53QtjQbSKuAdWEfald/HGtWWJaESxAqV23x3ekF2lG2sQml5jg4NubKvmQ bAitX5Y0Bhpe+DzUPdFcuxgw2x1uPO5k/Z+7FxyORPxr+rsVzoNXpb9nifMl83O0 3D+fZjK43wIzYl2KnELQEhYX96p5nhO1g99H/HrOIb+JJDAWzYGgVyEZZWze8pB8 g8hbNT0= -----END CERTIFICATE-----Generated at Thu May 16 17:51:24 2024 by rpki-client on console-ams.rpki-client.org