$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa File: D52B5F46BB4E11EE9496B14FC4F9AE02.roa (raw, json) Hash identifier: SZX0KxXwCR4UVvhMhbUOX7UUdqfNIqyXjvw1yQBbvIc= Subject key identifier: F9:8C:35:49:8F:26:09:DC:5F:E8:AF:15:4C:8A:70:3D:53:97:8B:D1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 19A8 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa Signing time: Mon 13 May 2024 05:39:18 +0000 ROA not before: Mon 13 May 2024 05:39:18 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151719 IP address blocks: 157.15.10.0/23 maxlen: 24 157.20.180.0/23 maxlen: 24 157.66.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6568 (0x19a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 13 05:39:18 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6641a785-dc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:81:0f:b2:39:35:18:d3:8d:fd:77:4d:6c: 04:28:6a:60:b1:59:f3:d6:e9:40:70:c8:f3:ff:52: ce:e1:46:d7:c0:c0:8b:50:f4:9d:06:08:55:4f:74: c8:f8:b4:84:8a:a9:9a:44:36:b0:04:b7:c2:f8:4a: 63:be:ea:64:36:86:6f:8a:10:ad:5d:4e:57:e8:27: 55:e9:de:d4:48:9c:9b:4e:04:2b:40:25:1e:ed:d6: fa:ec:c3:e9:9f:2a:9b:36:99:d6:d9:ca:30:1e:15: 2f:ec:75:20:92:63:6d:3e:e7:f3:5f:ca:5a:a0:a0: c9:ed:ea:c0:b4:e2:a8:47:05:de:d6:78:9a:74:94: 80:48:84:1f:a4:ea:cc:ab:6d:73:aa:21:a9:d0:db: 47:07:65:c0:18:82:02:f3:9e:c2:23:ca:95:c7:37: ac:f5:88:5f:2d:c4:58:cc:e1:e8:df:44:c7:a1:4f: 7e:45:1b:f5:d0:5e:67:43:09:8e:88:64:cf:52:4c: 84:1a:26:77:61:8d:4b:b5:7a:70:3b:85:c1:2b:36: 0f:e9:7f:31:d5:dd:16:84:7e:d5:2b:5f:e0:3e:2d: 9d:0d:9f:92:2f:47:c2:2c:09:dc:a8:36:ee:80:23: 7f:7b:28:20:b9:6a:f5:aa:b0:63:b1:28:43:be:c8: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8C:35:49:8F:26:09:DC:5F:E8:AF:15:4C:8A:70:3D:53:97:8B:D1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.10.0/23 157.20.180.0/23 157.66.118.0/23 Signature Algorithm: sha256WithRSAEncryption 79:59:16:c3:0a:09:95:46:08:ca:bb:72:80:d4:98:cc:89:aa: bf:53:5b:ae:54:68:1f:c2:6a:8d:5d:25:f1:41:07:60:ef:2f: bd:e2:72:76:af:f6:ad:cc:0e:4c:05:de:ad:92:25:5d:5f:db: 39:63:9d:98:0a:85:02:69:96:cb:d6:1a:c3:81:e9:68:78:81: 93:3e:da:a7:4b:9e:27:64:8e:12:a5:78:6c:67:1e:a8:a0:92: 01:bc:d4:ca:bf:97:48:21:9b:4f:0d:44:83:fd:fd:d9:54:fe: 24:8f:3d:69:29:2e:c2:62:5c:fa:c9:db:4c:7a:34:a7:b8:c5: 68:4e:2d:8c:65:82:4b:10:5e:46:32:b5:37:e9:76:24:db:6e: 86:13:7b:95:8f:d9:26:fe:86:a3:e4:52:66:92:98:87:72:0c: 9f:98:f6:ce:b0:63:88:a6:d9:a6:13:da:36:ca:22:0b:5e:a3: 01:0c:de:08:52:31:a6:57:e7:e5:e3:95:bd:d0:4e:76:7b:13: 30:30:7f:c2:fe:f1:6a:fd:bd:e5:c3:e0:1f:51:09:e0:3b:c1: 2c:e5:36:5b:f5:96:6a:0d:0e:2f:4d:a0:9e:f9:c5:36:37:20: fc:51:55:1b:ea:2d:00:08:76:4e:5e:e5:82:d9:8a:75:68:6f: 8e:0f:2b:ba -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTEzMDUzOTE4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxYTc4NS1kYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR2BD7I5NRjTjf13TWwEKGpgsVnz1ulAcMjz/1LO4UbXwMCLUPSdBghVT3TI +LSEiqmaRDawBLfC+EpjvupkNoZvihCtXU5X6CdV6d7USJybTgQrQCUe7db67MPp nyqbNpnW2cowHhUv7HUgkmNtPufzX8paoKDJ7erAtOKoRwXe1niadJSASIQfpOrM q21zqiGp0NtHB2XAGIIC857CI8qVxzes9YhfLcRYzOHo30THoU9+RRv10F5nQwmO iGTPUkyEGiZ3YY1LtXpwO4XBKzYP6X8x1d0WhH7VK1/gPi2dDZ+SL0fCLAncqDbu gCN/eygguWr1qrBjsShDvsi9ewIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPmMNUmP JgncX+ivFUyKcD1Tl4vRMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDUyQjVGNDZC QjRFMTFFRTk0OTZCMTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGdDwoDBAGdFLQDBAGdQnYwDQYJKoZIhvcNAQELBQADggEB AHlZFsMKCZVGCMq7coDUmMyJqr9TW65UaB/Cao1dJfFBB2DvL73icnav9q3MDkwF 3q2SJV1f2zljnZgKhQJplsvWGsOB6Wh4gZM+2qdLnidkjhKleGxnHqigkgG81Mq/ l0ghm08NRIP9/dlU/iSPPWkpLsJiXPrJ20x6NKe4xWhOLYxlgksQXkYytTfpdiTb boYTe5WP2Sb+hqPkUmaSmIdyDJ+Y9s6wY4im2aYT2jbKIgteowEM3ghSMaZX5+Xj lb3QTnZ7EzAwf8L+8Wr9veXD4B9RCeA7wSzlNlv1lmoNDi9NoJ75xTY3IPxRVRvq LQAIdk5e5YLZinVob44PK7o= -----END CERTIFICATE-----Generated at Thu May 16 17:51:24 2024 by rpki-client on console-ams.rpki-client.org