$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/49A2605CCED411EE9537E682C4F9AE02.roa File: 49A2605CCED411EE9537E682C4F9AE02.roa (raw, json) Hash identifier: v7MDQEBlzQXYXaA1PXhB+w5/Cfa3wGmkaWCHIvXp/So= Subject key identifier: 26:2F:43:F3:6C:76:E1:11:C0:53:E4:02:20:CB:21:60:4A:CC:6E:45 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 64 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/49A2605CCED411EE9537E682C4F9AE02.roa Signing time: Mon 19 Feb 2024 03:09:26 +0000 ROA not before: Mon 19 Feb 2024 03:09:26 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 151858 IP address blocks: 157.15.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Feb 19 03:09:26 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65d2c666-cdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:a9:81:82:ac:40:68:72:c5:0a:3a:0d:e8: a9:ab:8f:c9:30:b9:80:17:ca:7c:53:67:5c:16:e3: 7c:eb:f7:21:4f:81:3d:9d:70:50:ee:be:34:0b:1c: c1:47:8e:c8:b7:9a:b9:6e:e8:c4:75:ad:c5:62:91: e8:b6:b7:8f:a6:c6:00:c8:b9:f2:44:78:cc:6c:bb: 8d:1a:2c:e5:ae:cc:f2:26:ea:6d:f6:cf:36:fe:83: 7c:03:44:8f:26:af:2b:39:45:ab:64:79:a8:82:fd: 00:1c:d8:6e:8f:15:59:bc:3e:5e:18:8c:a0:f1:49: f1:58:9e:bc:77:20:35:14:44:8c:56:df:c2:84:ba: eb:03:72:82:bc:be:2c:2b:74:65:af:dd:1a:cb:a4: b5:40:02:2a:96:de:2e:42:24:15:cc:22:e7:eb:91: 6a:b7:20:cc:13:09:7a:49:7c:a4:90:6d:4b:ec:f4: 12:ae:e5:ea:51:8c:fe:db:f1:8f:3e:80:6a:4f:35: 77:1d:5e:87:b4:35:82:ae:5a:55:84:dd:81:fd:53: f0:c1:c3:32:fc:0f:7c:ab:f6:52:78:eb:03:3a:3d: 48:2d:8a:8a:97:da:67:57:0b:99:3b:ec:20:72:16: e1:4e:64:43:4a:d8:39:e1:fa:48:f1:d2:49:22:b4: 0d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2F:43:F3:6C:76:E1:11:C0:53:E4:02:20:CB:21:60:4A:CC:6E:45 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/49A2605CCED411EE9537E682C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.84.0/23 Signature Algorithm: sha256WithRSAEncryption 61:55:34:0a:99:08:7a:f6:52:46:86:1f:c2:13:0f:d3:2e:61: 83:5b:36:d3:6a:85:77:d3:4f:b8:a1:15:d6:e5:3a:a1:e6:53: 3c:a6:1e:69:4a:79:c6:ee:fe:1a:99:6e:c9:59:34:4d:3e:5f: 83:e2:a4:a5:c9:39:d7:09:0b:82:61:d4:ab:bd:ee:b5:57:df: e7:33:d7:17:8f:f6:a3:ec:64:45:fe:26:41:0a:ab:78:8c:db: 00:40:fe:ce:ee:1b:32:be:76:ae:14:be:f6:ab:c3:4e:32:db: 73:17:53:f9:2a:27:04:1e:76:95:7c:8a:cf:aa:05:3f:fd:7d: 40:ad:46:2d:82:82:b2:d9:98:41:8d:d1:c8:a2:b2:53:c2:46: 14:9e:75:7b:c4:25:47:81:30:1c:1a:5f:33:19:31:80:71:ba: df:d3:92:e2:c2:11:1c:c4:9f:82:5d:d0:11:20:e3:de:8b:71: 42:d2:81:e8:c4:0c:0d:c7:59:1c:13:28:9f:5c:2a:27:1c:e1: d1:4e:6c:69:bc:d1:7d:82:69:7a:44:bb:3a:91:1b:31:1e:e1: 6f:9f:65:ed:23:25:26:3e:64:ec:5a:f1:ae:fe:68:bf:95:85: 83:00:8c:c4:d6:6d:06:4d:70:a9:f8:7f:e2:70:ec:13:13:3d: 91:69:87:22 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTYwQTExMC8GA1UEBRMoOEFDNzIxMjk4RjkyRTEwQTJFRTMwNTFBRkJDOTExNDI4 NEY4MEUxMjAeFw0yNDAyMTkwMzA5MjZaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZDJjNjY2LWNkZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL3KmBgqxAaHLFCjoN6Kmrj8kwuYAXynxTZ1wW43zr9yFPgT2dcFDuvjQLHMFH jsi3mrlu6MR1rcVikei2t4+mxgDIufJEeMxsu40aLOWuzPIm6m32zzb+g3wDRI8m rys5RatkeaiC/QAc2G6PFVm8Pl4YjKDxSfFYnrx3IDUURIxW38KEuusDcoK8viwr dGWv3RrLpLVAAiqW3i5CJBXMIufrkWq3IMwTCXpJfKSQbUvs9BKu5epRjP7b8Y8+ gGpPNXcdXoe0NYKuWlWE3YH9U/DBwzL8D3yr9lJ46wM6PUgtioqX2mdXC5k77CBy FuFOZENK2Dnh+kjx0kkitA1BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJi9D82x2 4RHAU+QCIMshYErMbkUwHwYDVR0jBBgwFoAUischKY+S4Qou4wUa+8kRQoT4DhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NjBBLzIwOTU4NjE4QTlE RjExRUVBMzU2QTQzRUM0RjlBRTAyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXNjaEtZLVM0UW91NHdVYS04a1JRb1Q0RGhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS8yMDk1ODYxOEE5REYxMUVFQTM1NkE0M0VDNEY5QUUwMi80OUEyNjA1Q0NF RDQxMUVFOTUzN0U2ODJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0PVDANBgkqhkiG9w0BAQsFAAOCAQEAYVU0CpkIevZSRoYf whMP0y5hg1s202qFd9NPuKEV1uU6oeZTPKYeaUp5xu7+GpluyVk0TT5fg+Kkpck5 1wkLgmHUq73utVff5zPXF4/2o+xkRf4mQQqreIzbAED+zu4bMr52rhS+9qvDTjLb cxdT+SonBB52lXyKz6oFP/19QK1GLYKCstmYQY3RyKKyU8JGFJ51e8QlR4EwHBpf MxkxgHG639OS4sIRHMSfgl3QESDj3otxQtKB6MQMDcdZHBMon1wqJxzh0U5sabzR fYJpekS7OpEbMR7hb59l7SMlJj5k7Frxrv5ov5WFgwCMxNZtBk1wqfh/4nDsExM9 kWmHIg== -----END CERTIFICATE-----Generated at Fri May 31 15:08:32 2024 by rpki-client on console-fra.rpki-client.org