$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CBF43C10CEE811EEB7FCAA55C4F9AE02.roa File: CBF43C10CEE811EEB7FCAA55C4F9AE02.roa (raw, json) Hash identifier: v/B+8Nsqck0SmmmXEcVxjeC9bHrjMgn2Vn8Z54/2T1U= Subject key identifier: 8B:BE:8B:15:0F:98:1C:39:D6:C3:71:AF:89:EB:17:CE:55:3C:6A:56 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 193F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CBF43C10CEE811EEB7FCAA55C4F9AE02.roa Signing time: Tue 26 Mar 2024 07:49:26 +0000 ROA not before: Tue 26 Mar 2024 07:49:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151734 IP address blocks: 157.15.202.0/23 maxlen: 24 157.20.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6463 (0x193f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Mar 26 07:49:26 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=66027e06-77e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:f4:5c:a0:6f:5d:7f:01:12:fc:e5:ad:fe: 13:83:c0:d1:24:a6:e1:da:3b:5a:6e:a9:6b:a5:4c: e9:5c:5a:da:10:15:8b:62:8a:61:5b:a3:6c:ae:4f: 1f:83:4a:15:69:88:a0:88:1b:ea:bc:0d:3a:3a:52: 85:f5:ec:62:16:de:34:ee:7a:d1:ed:18:77:90:b5: 3e:db:cc:b4:ab:80:2f:50:75:1e:37:34:94:a0:a8: 0e:eb:5b:47:16:67:da:08:63:bf:76:87:e5:f2:d1: 5b:a6:9b:82:f2:62:28:d6:fc:2e:3e:18:13:7b:bd: ae:42:31:be:e8:d2:4e:c7:ae:47:49:9c:a4:b1:5c: 5e:df:3d:ee:07:32:2c:04:f8:1f:c2:a8:71:55:41: dd:04:58:04:83:93:91:55:29:00:39:d2:62:d5:fb: 9f:13:d6:40:6d:39:a9:9d:95:e0:6e:d3:1b:48:d4: ff:b0:2f:fc:48:fe:a3:2e:3e:57:04:cc:b4:5d:ee: e9:e6:ff:1f:e1:cb:3b:e3:a8:b4:13:e1:37:4c:22: 21:8d:09:02:f1:35:8a:25:74:ae:4b:e1:b6:ed:bc: 6f:14:94:1a:36:b8:ba:97:89:a2:c9:e6:20:d2:08: d2:0b:5f:df:93:c1:02:8f:5a:d1:17:e6:84:2d:8f: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BE:8B:15:0F:98:1C:39:D6:C3:71:AF:89:EB:17:CE:55:3C:6A:56 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CBF43C10CEE811EEB7FCAA55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.202.0/23 157.20.211.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:bd:29:76:68:1c:a3:d1:2d:2b:e3:c5:9a:09:5c:20:12:cb: c4:60:3f:29:39:9a:27:01:4f:f7:25:17:b6:13:97:47:fb:e8: f0:c0:da:1d:4b:07:17:0c:d1:af:91:88:c9:82:64:97:b9:52: 17:53:8e:65:f4:c3:02:3c:0e:60:c1:79:79:43:bb:81:04:c1: fb:68:d5:05:e0:fb:c5:b0:74:10:20:3b:35:d8:c8:4e:01:4c: 06:dc:05:c0:d1:dc:38:10:f0:ff:a8:68:91:8e:a1:a6:71:34: e0:7f:f5:b6:54:1e:ae:ba:09:5a:be:3a:47:b7:46:75:cd:35: b3:a9:55:bc:1b:62:62:b9:21:b9:a5:a0:43:38:3c:d6:75:1b: 8e:28:f2:f3:09:c9:56:f5:d1:9a:c9:39:ba:e8:5e:95:ea:01: b2:0a:cd:bf:b7:9d:7f:0b:93:0a:b1:8d:13:1b:d6:34:c4:e4: 60:e1:52:c5:5e:8e:43:3a:04:d9:b8:ee:36:bf:91:1b:20:9d: 7b:1c:12:03:dc:82:d6:af:13:f3:db:60:aa:57:ec:4a:67:58: ca:c4:e8:25:f6:f3:a7:94:04:57:44:db:9a:7e:20:58:7a:79: 32:9e:56:51:55:a4:b8:94:d9:61:cb:7e:4e:87:aa:9b:ec:ce: 4a:d1:48:82 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwMzI2MDc0OTI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjAyN2UwNi03N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7K70XKBvXX8BEvzlrf4Tg8DRJKbh2jtabqlrpUzpXFraEBWLYophW6Nsrk8f g0oVaYigiBvqvA06OlKF9exiFt407nrR7Rh3kLU+28y0q4AvUHUeNzSUoKgO61tH FmfaCGO/dofl8tFbppuC8mIo1vwuPhgTe72uQjG+6NJOx65HSZyksVxe3z3uBzIs BPgfwqhxVUHdBFgEg5ORVSkAOdJi1fufE9ZAbTmpnZXgbtMbSNT/sC/8SP6jLj5X BMy0Xe7p5v8f4cs746i0E+E3TCIhjQkC8TWKJXSuS+G27bxvFJQaNri6l4miyeYg 0gjSC1/fk8ECj1rRF+aELY9EYwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIu+ixUP mBw51sNxr4nrF85VPGpWMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0JGNDNDMTBD RUU4MTFFRUI3RkNBQTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGdD8oDBACdFNMwDQYJKoZIhvcNAQELBQADggEBABu9KXZo HKPRLSvjxZoJXCASy8RgPyk5micBT/clF7YTl0f76PDA2h1LBxcM0a+RiMmCZJe5 UhdTjmX0wwI8DmDBeXlDu4EEwfto1QXg+8WwdBAgOzXYyE4BTAbcBcDR3DgQ8P+o aJGOoaZxNOB/9bZUHq66CVq+Oke3RnXNNbOpVbwbYmK5IbmloEM4PNZ1G44o8vMJ yVb10ZrJObroXpXqAbIKzb+3nX8LkwqxjRMb1jTE5GDhUsVejkM6BNm47ja/kRsg nXscEgPcgtavE/PbYKpX7EpnWMrE6CX286eUBFdE25p+IFh6eTKeVlFVpLiU2WHL fk6HqpvszkrRSII= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org