$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A70F6986C1611EE9E183B1EC4F9AE02.roa File: 6A70F6986C1611EE9E183B1EC4F9AE02.roa (raw, json) Hash identifier: z8kJUF5fm8TRyle+RSng70GQGJFhurIqxSQIA7cpf7U= Subject key identifier: F9:BF:69:D7:67:93:25:15:D0:A5:12:73:C0:7D:06:19:26:9F:D6:53 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7C10 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A70F6986C1611EE9E183B1EC4F9AE02.roa Signing time: Mon 16 Oct 2023 11:23:23 +0000 ROA not before: Mon 16 Oct 2023 11:23:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133962 IP address blocks: 157.119.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31760 (0x7c10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 16 11:23:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=652d1d2a-4df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:a8:ab:2c:21:30:ee:32:d9:7d:9e:19:e0: e3:e8:da:2b:c3:6c:bc:a0:54:3b:c7:1e:9f:09:b8: 6a:5c:59:ad:03:ab:ed:0f:47:bc:16:a9:f6:ab:22: bb:52:10:19:51:87:66:98:0a:24:f8:55:28:b9:cf: 88:59:07:50:5c:b8:95:6a:e1:23:4f:75:fd:ef:8d: 1d:0a:12:7f:05:0e:72:2a:50:d8:59:3b:06:ab:87: 7c:c2:61:ef:02:5b:45:b5:ee:8d:75:50:82:d7:51: 29:ba:0d:69:14:ff:6f:4c:27:33:b6:ac:6a:f1:4d: cd:57:05:62:03:19:84:8b:10:8e:81:5a:24:9f:97: 73:2a:76:39:ac:e4:b9:cd:d2:52:ec:55:78:9c:6b: f4:3d:d1:7b:f3:b0:c6:b9:09:00:38:e1:34:21:60: bf:b9:2d:93:c7:10:94:59:ee:bf:69:d5:54:41:cc: eb:33:66:9e:ef:7d:b6:8e:f3:43:a4:dd:cc:51:82: 74:8f:bb:d4:33:99:1d:ae:53:ff:f7:5d:52:75:05: d2:da:12:06:91:fb:25:75:11:9c:01:e3:c0:fd:b2: 60:64:1e:88:19:c8:fa:cc:10:bf:5f:e6:fa:48:d6: 0f:66:f2:49:af:15:17:16:4b:4a:fd:35:b6:20:3e: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BF:69:D7:67:93:25:15:D0:A5:12:73:C0:7D:06:19:26:9F:D6:53 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A70F6986C1611EE9E183B1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.119.208.0/22 Signature Algorithm: sha256WithRSAEncryption bb:46:7d:f2:a5:72:a8:2a:85:2f:bf:69:c1:09:06:30:c6:cf: c6:80:f5:5a:10:d3:04:ea:3b:f9:63:28:0b:70:e1:03:11:7e: 92:0f:13:25:4a:c9:06:95:1c:37:be:42:55:3c:fc:a9:02:76: 1b:de:e6:be:c8:67:a5:0d:94:fd:dd:73:9c:51:82:3a:63:6d: d1:bc:2e:c4:24:90:b5:fb:25:1e:83:37:98:80:bc:45:31:7a: 76:24:a3:11:94:32:74:53:f5:80:eb:fd:72:0d:bd:fb:6e:14: 6f:f4:87:db:2b:35:10:63:79:3a:93:28:6e:ff:fe:ad:86:33: ad:31:55:46:12:d6:b8:0f:71:ab:a6:b8:ce:3a:59:1d:ca:62: 1a:0e:0b:83:6f:15:c1:0d:99:41:20:9d:57:47:0f:b0:24:62: d4:6a:39:d2:29:fc:85:2d:fc:03:5b:a3:15:b4:f7:02:cb:58: 3d:76:58:f9:a0:c7:4a:61:d2:74:9f:72:1e:93:25:a2:40:74: 36:e9:a2:17:5f:20:29:cb:fb:2a:48:b0:a3:20:f9:41:09:a8: b3:99:e9:f9:67:5a:05:e0:af:19:58:ce:3f:72:7f:fa:12:ea: c3:31:cb:4d:8f:3a:26:f4:98:11:ba:0d:c1:7e:c6:86:26:9e: c4:67:a4:51 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICfBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDE2MTEyMzIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJkMWQyYS00ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9KoqywhMO4y2X2eGeDj6Norw2y8oFQ7xx6fCbhqXFmtA6vtD0e8Fqn2qyK7 UhAZUYdmmAok+FUouc+IWQdQXLiVauEjT3X9740dChJ/BQ5yKlDYWTsGq4d8wmHv AltFte6NdVCC11Epug1pFP9vTCcztqxq8U3NVwViAxmEixCOgVokn5dzKnY5rOS5 zdJS7FV4nGv0PdF787DGuQkAOOE0IWC/uS2TxxCUWe6/adVUQczrM2ae7322jvND pN3MUYJ0j7vUM5kdrlP/911SdQXS2hIGkfsldRGcAePA/bJgZB6IGcj6zBC/X+b6 SNYPZvJJrxUXFktK/TW2ID7BrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPm/addn kyUV0KUSc8B9Bhkmn9ZTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkE3MEY2OTg2 QzE2MTFFRTlFMTgzQjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKdd9AwDQYJKoZIhvcNAQELBQADggEBALtGffKlcqgqhS+/ acEJBjDGz8aA9VoQ0wTqO/ljKAtw4QMRfpIPEyVKyQaVHDe+QlU8/KkCdhve5r7I Z6UNlP3dc5xRgjpjbdG8LsQkkLX7JR6DN5iAvEUxenYkoxGUMnRT9YDr/XINvftu FG/0h9srNRBjeTqTKG7//q2GM60xVUYS1rgPcaumuM46WR3KYhoOC4NvFcENmUEg nVdHD7AkYtRqOdIp/IUt/ANboxW09wLLWD12WPmgx0ph0nSfch6TJaJAdDbpohdf ICnL+ypIsKMg+UEJqLOZ6flnWgXgrxlYzj9yf/oS6sMxy02POib0mBG6DcF+xoYm nsRnpFE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org