$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa File: FFB4C24ADC4411EE9199B15EC4F9AE02.roa (raw, json) Hash identifier: LD/N9+dO1wM5CCYB9LvEac0HVYWr8J/SBKOxHAeKlWs= Subject key identifier: A9:C1:B4:73:A7:7E:4F:A9:16:2F:9F:5A:09:CC:19:89:3B:94:4C:B2 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1917 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa Signing time: Thu 07 Mar 2024 05:39:02 +0000 ROA not before: Thu 07 Mar 2024 05:39:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 152485 IP address blocks: 157.20.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6423 (0x1917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Mar 7 05:39:02 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65e952f5-b999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:15:a0:5e:d0:88:d0:34:ac:c1:17:26:e8: 7b:07:be:d6:dd:6b:31:20:0e:c3:c4:39:6a:cf:26: 4c:fa:88:3d:05:cf:71:26:b4:20:ee:30:a8:b3:1c: 8b:67:5d:e7:47:d2:e8:7d:37:98:18:ed:bc:5a:68: 23:2c:2a:fe:b5:8a:cc:f3:e3:c6:6f:f4:5a:fd:78: 96:e2:91:09:d5:42:83:01:ae:e6:7b:9f:ba:e2:11: 79:40:df:93:7c:1d:f9:c6:b2:00:fe:50:d0:33:f2: fe:da:72:50:6e:54:b7:d5:2d:22:2f:c5:a2:07:68: 9a:89:9b:81:40:8f:dc:22:f7:bf:aa:58:a7:26:dc: 1e:01:3b:cc:27:04:5c:e9:3a:2d:be:4e:45:11:48: 7f:9f:3f:68:f9:f9:ea:26:9f:83:c8:42:74:3e:08: 61:c3:81:77:f4:a3:46:73:4e:f7:5e:8c:54:71:0c: f0:d3:c7:0b:ec:21:60:2b:7f:b1:10:36:93:6c:14: 6f:28:68:d1:bc:b5:21:9d:19:90:52:96:8b:4d:8b: 42:41:e2:c9:83:69:4a:0b:7e:fa:40:4d:89:ec:b7: 1a:11:c2:94:f1:f0:0a:41:28:12:a3:92:1a:62:bd: 5c:dc:55:96:fc:6e:06:ea:6d:c6:18:1a:1f:ee:35: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C1:B4:73:A7:7E:4F:A9:16:2F:9F:5A:09:CC:19:89:3B:94:4C:B2 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.182.0/23 Signature Algorithm: sha256WithRSAEncryption 31:d8:c5:5b:97:e8:6a:48:3b:b8:65:f1:5d:f1:0e:99:e1:a0: 5b:d1:ce:f7:ba:7f:c3:b6:78:d4:55:5d:0d:10:6e:6e:4b:1c: fd:d3:1b:ce:18:10:7a:a0:1f:88:26:11:05:dd:58:15:94:f1: 68:90:4d:23:14:e7:21:2c:2d:99:3a:34:5e:59:74:fe:ba:62: ab:30:97:8d:cd:28:f0:e1:e7:31:13:b6:82:6d:a6:ef:6d:e2: 67:f7:8e:99:e6:40:37:2b:c2:e9:66:1c:cc:bc:c9:57:fd:54: 18:47:6e:50:46:a8:3e:05:60:d8:8e:5f:35:b2:87:8b:b8:f8: 28:ad:3d:d9:98:da:ac:ec:c7:d1:dd:65:eb:09:b2:28:65:5d: 24:fe:d0:54:fc:04:61:27:e0:cf:18:2c:64:02:6a:05:4c:5d: 21:03:50:29:0e:89:66:e1:50:21:2f:03:8d:3f:1b:ae:2f:37: 08:f7:0c:76:da:96:dd:b4:54:28:0d:16:ea:11:ae:18:6b:3e: a7:27:2b:4e:2c:b6:24:d9:5f:3e:1f:19:72:c1:cd:25:d9:a7: 70:70:d3:99:b7:b7:27:a9:1e:2d:e0:c6:1e:31:77:cf:ca:cb: 12:7f:2f:d4:a6:ce:98:18:3c:e5:36:4e:1b:2f:87:73:a2:de: a2:d4:0e:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwMzA3MDUzOTAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU5NTJmNS1iOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApboVoF7QiNA0rMEXJuh7B77W3WsxIA7DxDlqzyZM+og9Bc9xJrQg7jCosxyL Z13nR9LofTeYGO28WmgjLCr+tYrM8+PGb/Ra/XiW4pEJ1UKDAa7me5+64hF5QN+T fB35xrIA/lDQM/L+2nJQblS31S0iL8WiB2iaiZuBQI/cIve/qlinJtweATvMJwRc 6Totvk5FEUh/nz9o+fnqJp+DyEJ0Pghhw4F39KNGc073XoxUcQzw08cL7CFgK3+x EDaTbBRvKGjRvLUhnRmQUpaLTYtCQeLJg2lKC376QE2J7LcaEcKU8fAKQSgSo5Ia Yr1c3FWW/G4G6m3GGBof7jUAowIDAQABo4IClTCCApEwHQYDVR0OBBYEFKnBtHOn fk+pFi+fWgnMGYk7lEyyMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkZCNEMyNEFE QzQ0MTFFRTkxOTlCMTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFLYwDQYJKoZIhvcNAQELBQADggEBADHYxVuX6GpIO7hl 8V3xDpnhoFvRzve6f8O2eNRVXQ0Qbm5LHP3TG84YEHqgH4gmEQXdWBWU8WiQTSMU 5yEsLZk6NF5ZdP66Yqswl43NKPDh5zETtoJtpu9t4mf3jpnmQDcrwulmHMy8yVf9 VBhHblBGqD4FYNiOXzWyh4u4+CitPdmY2qzsx9HdZesJsihlXST+0FT8BGEn4M8Y LGQCagVMXSEDUCkOiWbhUCEvA40/G64vNwj3DHbalt20VCgNFuoRrhhrPqcnK04s tiTZXz4fGXLBzSXZp3Bw05m3tyepHi3gxh4xd8/KyxJ/L9SmzpgYPOU2Thsvh3Oi 3qLUDoU= -----END CERTIFICATE-----Generated at Thu May 16 16:14:33 2024 by rpki-client on console-fra.rpki-client.org