$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E0A72D4AC0D611EE89AC0485C4F9AE02.roa File: E0A72D4AC0D611EE89AC0485C4F9AE02.roa (raw, json) Hash identifier: xjpgRE0h2oj8JSSVKiVsUk6Hcmox3bSiZT96TuHHg6s= Subject key identifier: 04:E5:80:59:B8:54:A4:7C:E7:9A:6B:B3:0F:87:81:4A:42:7B:BD:C7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1AA2 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E0A72D4AC0D611EE89AC0485C4F9AE02.roa Signing time: Thu 11 Jul 2024 08:20:55 +0000 ROA not before: Thu 11 Jul 2024 08:20:55 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137645 IP address blocks: 157.15.88.0/23 maxlen: 24 157.15.250.0/23 maxlen: 24 160.25.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6818 (0x1aa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 11 08:20:55 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=668f95e7-0627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:41:87:f8:49:6a:85:ea:f2:d6:d1:14:8c: 1c:e8:b9:50:d0:87:0a:ae:a6:85:68:85:6c:bb:73: f4:70:a6:27:80:f4:2f:c6:00:d1:44:4d:eb:10:ec: 21:ff:d1:ba:09:3d:09:82:68:de:88:f2:9a:31:00: 0e:0c:e2:b1:50:89:b9:a6:92:79:26:7f:0f:84:35: fc:c4:35:df:90:aa:ed:71:e3:9e:66:19:42:11:5a: 30:a8:5c:c4:1f:c2:70:06:01:ce:7a:a0:b4:08:f7: d8:e3:52:af:6a:4d:a9:15:9e:63:7c:cd:4e:f2:25: ae:c6:33:16:ef:3e:65:a0:61:fa:d7:6e:bb:ff:a4: 67:11:9c:b5:25:26:e6:2e:9f:ba:56:8f:85:a5:09: 7a:53:b7:61:ec:ef:fe:bd:d5:2d:fd:73:fc:70:f6: 11:9d:91:2c:cd:ff:df:67:12:04:75:4e:9f:17:a3: 2a:80:c7:fa:1f:cc:4b:05:c5:e4:e0:e9:ef:83:69: ef:12:8e:51:15:27:0e:fd:91:89:79:ed:90:f9:15: 50:a3:16:70:c2:cd:28:5f:ce:38:1c:c1:4b:c4:b9: 68:81:11:80:c6:a1:85:5d:90:f1:bd:4f:17:51:38: c8:d5:0b:58:4f:53:0b:09:86:f4:9d:64:ad:f1:c7: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E5:80:59:B8:54:A4:7C:E7:9A:6B:B3:0F:87:81:4A:42:7B:BD:C7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E0A72D4AC0D611EE89AC0485C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.88.0/23 157.15.250.0/23 160.25.138.0/23 Signature Algorithm: sha256WithRSAEncryption 82:d4:0b:65:7d:cd:7f:04:96:51:8e:21:e1:2d:55:30:ac:f9: 26:62:f6:20:7b:ae:2b:b4:f8:7c:b1:6e:c1:af:11:1f:62:dc: 36:95:6b:7c:85:7e:30:35:22:d9:a4:59:80:8a:e8:b0:b7:ec: ed:1c:11:b5:3e:73:d9:bd:37:07:2b:7a:c5:3b:8a:88:85:f1: fd:bc:1b:6b:88:e3:c4:82:7a:9b:c4:5d:c7:ac:a5:e9:8a:15: b1:55:ed:1b:96:a8:2d:bd:1a:e0:f6:01:17:d7:47:4f:73:9f: 9d:eb:91:9f:7f:4c:d0:98:4d:f9:96:25:ee:1d:12:65:e2:b6: 1b:fd:31:05:5e:c4:f3:c3:eb:f8:18:47:20:72:c1:74:41:91: d0:2e:13:8c:99:ee:3f:c1:83:3d:c1:2a:42:71:b5:7e:05:42: 8b:b8:d6:a7:59:80:08:ff:79:40:ae:19:19:98:b8:8e:96:85: 45:94:ad:a4:55:74:47:7d:0d:f4:d9:0e:df:ec:04:e4:1d:d5: 72:d7:8f:8c:e6:5b:44:57:9a:1b:89:20:2f:20:19:ae:f8:45: 12:46:79:41:e8:0e:44:5e:35:ee:82:6a:45:3b:f6:fb:82:b2: 4d:1e:a4:9c:16:46:9e:41:92:49:5e:e6:ac:c6:b8:6f:87:63: bd:b1:1b:06 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNzExMDgyMDU1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhmOTVlNy0wNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG9Bh/hJaoXq8tbRFIwc6LlQ0IcKrqaFaIVsu3P0cKYngPQvxgDRRE3rEOwh /9G6CT0JgmjeiPKaMQAODOKxUIm5ppJ5Jn8PhDX8xDXfkKrtceOeZhlCEVowqFzE H8JwBgHOeqC0CPfY41Kvak2pFZ5jfM1O8iWuxjMW7z5loGH61267/6RnEZy1JSbm Lp+6Vo+FpQl6U7dh7O/+vdUt/XP8cPYRnZEszf/fZxIEdU6fF6MqgMf6H8xLBcXk 4Onvg2nvEo5RFScO/ZGJee2Q+RVQoxZwws0oX844HMFLxLlogRGAxqGFXZDxvU8X UTjI1QtYT1MLCYb0nWSt8cf6YQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFATlgFm4 VKR855prsw+HgUpCe73HMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTBBNzJENEFD MEQ2MTFFRTg5QUMwNDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGdD1gDBAGdD/oDBAGgGYowDQYJKoZIhvcNAQELBQADggEB AILUC2V9zX8EllGOIeEtVTCs+SZi9iB7riu0+HyxbsGvER9i3DaVa3yFfjA1Itmk WYCK6LC37O0cEbU+c9m9NwcresU7ioiF8f28G2uI48SCepvEXcespemKFbFV7RuW qC29GuD2ARfXR09zn53rkZ9/TNCYTfmWJe4dEmXithv9MQVexPPD6/gYRyBywXRB kdAuE4yZ7j/Bgz3BKkJxtX4FQou41qdZgAj/eUCuGRmYuI6WhUWUraRVdEd9DfTZ Dt/sBOQd1XLXj4zmW0RXmhuJIC8gGa74RRJGeUHoDkReNe6CakU79vuCsk0epJwW Rp5Bkkle5qzGuG+HY72xGwY= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org