$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C384D79CEB5811EE9EDEBA53C4F9AE02.roa File: C384D79CEB5811EE9EDEBA53C4F9AE02.roa (raw, json) Hash identifier: ZTC6vBJZu2WOWdos4y42x10h7dmTscrJNv6XMeJR7DY= Subject key identifier: A5:98:DA:D5:72:39:1A:27:AD:CA:40:AC:BA:CA:C7:CE:66:54:E5:72 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1942 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C384D79CEB5811EE9EDEBA53C4F9AE02.roa Signing time: Tue 26 Mar 2024 10:08:17 +0000 ROA not before: Tue 26 Mar 2024 10:08:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 58898 IP address blocks: 157.20.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6466 (0x1942) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Mar 26 10:08:17 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=66029e90-66e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:53:c6:3a:8f:b9:40:c2:ff:33:4e:42:3a: 3c:13:49:fe:16:39:8c:7d:1c:bf:9b:8e:91:14:62: 24:ed:5a:19:8f:7f:43:4b:bd:e0:06:0b:1d:56:f6: 90:ee:d7:c6:7a:67:de:b8:a5:a4:36:6a:8f:29:cd: 73:56:b9:9f:7b:c3:66:03:c8:88:97:d4:85:02:1c: 65:5d:62:08:1c:1e:9d:3d:19:8a:51:db:9c:87:be: 5c:b7:d1:d8:06:38:22:54:9b:30:ea:85:e7:75:b1: 5f:dd:4c:86:bc:f9:60:58:89:71:fd:1a:8a:da:e9: dd:9d:3f:ee:30:0e:9e:b2:ac:fd:56:9e:e8:33:de: f2:d7:27:48:08:38:36:1a:04:87:fa:c5:6a:05:1f: 5b:40:98:94:17:0c:ae:0b:36:1f:a5:a1:93:72:05: 14:20:07:94:d7:23:6c:a1:06:91:c6:f9:95:74:6b: 31:c7:88:84:9e:2b:05:ae:37:6b:72:6d:bf:9c:a2: 7b:50:11:f8:7f:e9:f4:1b:71:48:cf:82:28:60:9b: 6e:39:cc:71:9e:0d:9b:cc:54:87:8d:84:50:86:d0: 82:be:cb:b8:13:c2:d7:34:53:6f:5b:a2:d9:54:7f: 3d:c5:ae:82:68:9c:3d:51:5c:d1:10:85:72:1f:5a: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:98:DA:D5:72:39:1A:27:AD:CA:40:AC:BA:CA:C7:CE:66:54:E5:72 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C384D79CEB5811EE9EDEBA53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.250.0/23 Signature Algorithm: sha256WithRSAEncryption 98:f9:6b:ad:aa:ca:d5:4d:2d:96:f5:77:f0:14:a3:4b:67:f4: dc:86:fa:43:3f:d4:13:0a:cb:59:9a:49:68:40:ef:c5:2b:75: d6:d4:79:c3:e3:96:8a:e7:8d:35:87:90:54:ca:79:2f:ea:17: 4c:92:dd:cf:9b:c6:7d:d2:1a:d1:db:e9:7f:05:91:b8:0d:1e: 2f:fc:67:8b:bf:20:76:5f:40:12:53:a3:c6:d1:ef:ae:c4:67: b3:f6:1a:05:17:f6:ff:b9:3b:99:7b:d2:67:aa:70:83:1c:7b: 74:22:bd:76:8e:db:14:97:74:06:93:9c:91:df:37:b6:c8:b5: 9d:8e:f6:53:0f:80:5e:6b:36:24:3c:4c:94:90:93:8b:12:72: ff:aa:5b:42:06:ee:e2:6b:0f:b5:e9:41:6a:0c:b1:58:87:bd: 6e:2c:0f:c4:46:60:46:dd:d2:c0:51:26:29:ed:d3:11:5f:41: 12:a1:3a:00:25:20:7e:0f:e8:5c:75:1b:a5:7f:fa:0b:3f:b0: ce:7d:6f:23:40:16:e1:8f:d8:0c:bc:d0:8e:56:15:c9:0e:fc: c2:a7:28:93:30:da:15:50:11:a2:15:7c:cd:9e:40:0b:b8:21: 6e:b9:b7:4b:2d:b9:44:23:d6:a1:8b:ae:f4:c8:10:ff:ff:a8: c3:89:90:4b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwMzI2MTAwODE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjAyOWU5MC02NmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw19TxjqPuUDC/zNOQjo8E0n+FjmMfRy/m46RFGIk7VoZj39DS73gBgsdVvaQ 7tfGemfeuKWkNmqPKc1zVrmfe8NmA8iIl9SFAhxlXWIIHB6dPRmKUduch75ct9HY BjgiVJsw6oXndbFf3UyGvPlgWIlx/RqK2undnT/uMA6esqz9Vp7oM97y1ydICDg2 GgSH+sVqBR9bQJiUFwyuCzYfpaGTcgUUIAeU1yNsoQaRxvmVdGsxx4iEnisFrjdr cm2/nKJ7UBH4f+n0G3FIz4IoYJtuOcxxng2bzFSHjYRQhtCCvsu4E8LXNFNvW6LZ VH89xa6CaJw9UVzREIVyH1pSswIDAQABo4IClTCCApEwHQYDVR0OBBYEFKWY2tVy ORonrcpArLrKx85mVOVyMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzM4NEQ3OUNF QjU4MTFFRTlFREVCQTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFPowDQYJKoZIhvcNAQELBQADggEBAJj5a62qytVNLZb1 d/AUo0tn9NyG+kM/1BMKy1maSWhA78UrddbUecPjlornjTWHkFTKeS/qF0yS3c+b xn3SGtHb6X8FkbgNHi/8Z4u/IHZfQBJTo8bR767EZ7P2GgUX9v+5O5l70meqcIMc e3QivXaO2xSXdAaTnJHfN7bItZ2O9lMPgF5rNiQ8TJSQk4sScv+qW0IG7uJrD7Xp QWoMsViHvW4sD8RGYEbd0sBRJint0xFfQRKhOgAlIH4P6Fx1G6V/+gs/sM59byNA FuGP2Ay80I5WFckO/MKnKJMw2hVQEaIVfM2eQAu4IW65t0stuUQj1qGLrvTIEP// qMOJkEs= -----END CERTIFICATE-----Generated at Thu May 16 17:51:24 2024 by rpki-client on console-ams.rpki-client.org