$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa File: 7390E6C4B69011EEA6557474C4F9AE02.roa (raw, json) Hash identifier: I088a8Dwm9M0qUir0NLUJfTAgzaM6XV3Jx7Jsnh8qII= Subject key identifier: 67:3C:CF:8F:FF:01:E4:CF:36:53:7B:F6:39:C4:45:BE:BC:E2:F5:13 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: F5 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa Signing time: Fri 03 May 2024 13:56:46 +0000 ROA not before: Fri 03 May 2024 13:56:46 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 63737 IP address blocks: 157.10.48.0/23 maxlen: 23 157.10.50.0/23 maxlen: 23 157.66.156.0/23 maxlen: 23 157.66.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: May 3 13:56:46 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6634ed1d-834c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:2e:d9:d2:8d:95:9d:e3:90:36:bd:a7:5e: 27:16:cf:9c:b5:ad:0b:ca:5f:09:7c:aa:eb:7f:a5: 05:42:fc:a9:36:ba:ad:93:f0:c3:dd:4d:59:d0:6c: ab:73:17:65:1e:3a:ab:5b:8b:e8:cb:92:bb:a1:65: 47:36:ae:5d:7f:8f:ab:24:a8:53:bf:07:b7:67:e2: e8:ed:22:be:aa:2d:1c:d9:4a:c8:32:4a:f9:48:05: 03:35:d2:de:c4:07:74:7b:3f:5d:9b:a0:69:b7:9c: 0d:77:51:5b:96:55:cc:ac:0d:6f:a3:4a:7e:b7:7f: 18:85:45:7f:2d:aa:78:dc:76:6f:5c:91:59:2f:11: 2f:7c:40:c9:d3:79:89:42:0d:38:bd:48:54:5a:5b: 6c:6b:c4:d1:93:30:d5:8c:c9:42:3a:3d:1c:1e:7f: 6a:71:d0:e1:35:40:f7:d6:46:b2:3c:38:e4:7b:8e: 74:69:27:87:ec:ae:d8:18:97:fb:94:39:54:7d:17: a8:b3:cb:16:e6:2b:41:35:dc:51:74:28:d4:e5:74: 53:cb:df:6d:92:a2:9a:e5:99:e9:bb:ab:dc:f2:df: af:14:75:ac:ba:10:b1:34:80:8f:2c:e9:32:f0:dc: fd:d9:2b:6e:96:8c:64:f6:bb:b2:2c:c5:50:a4:f8: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3C:CF:8F:FF:01:E4:CF:36:53:7B:F6:39:C4:45:BE:BC:E2:F5:13 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.48.0/22 157.66.156.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:51:40:f9:55:d7:7f:d9:60:a4:a0:bd:7d:d4:fb:8c:19:01: 72:73:57:5d:4c:3c:52:66:40:45:b1:f3:b4:94:e3:ef:40:a2: 13:ab:e4:e4:cb:ad:d4:f7:2d:61:0b:1c:12:c6:72:b5:3f:46: d4:96:38:d8:a4:fa:1e:71:5a:a6:4f:6f:23:b7:b9:25:6e:14: e5:75:70:19:b1:81:f8:e3:a8:63:f4:17:c8:89:6b:3d:64:50: 71:fe:ae:ad:5b:9a:20:28:70:12:88:92:8d:48:29:6a:21:47: 76:c4:95:2a:10:28:58:eb:ad:bf:35:ed:23:5f:9f:08:aa:10: 6b:7f:76:d8:15:79:c8:80:41:fb:43:ff:cf:06:91:cc:85:7a: 8b:97:a1:78:da:cd:5e:70:3c:ad:87:9b:eb:b5:88:9e:30:05: f1:f1:88:50:0e:e5:aa:08:c5:ad:71:cf:2b:0f:b8:4b:35:60: 4a:5a:26:44:a8:a3:80:28:85:4c:21:7e:3f:48:82:27:97:fd: be:ba:10:68:70:16:77:a9:c6:d6:72:1e:73:a4:6a:4b:35:da: b9:16:46:4c:b1:90:ed:cd:9b:65:66:a7:d8:ee:5c:97:8f:03: df:c7:de:3f:81:96:cd:9f:69:d4:e1:ba:71:8c:28:25:53:2b: a7:f1:8b:1d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwNTAzMTM1NjQ2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0ZWQxZC04MzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEgu2dKNlZ3jkDa9p14nFs+cta0Lyl8JfKrrf6UFQvypNrqtk/DD3U1Z0Gyr cxdlHjqrW4voy5K7oWVHNq5df4+rJKhTvwe3Z+Lo7SK+qi0c2UrIMkr5SAUDNdLe xAd0ez9dm6Bpt5wNd1FbllXMrA1vo0p+t38YhUV/Lap43HZvXJFZLxEvfEDJ03mJ Qg04vUhUWltsa8TRkzDVjMlCOj0cHn9qcdDhNUD31kayPDjke450aSeH7K7YGJf7 lDlUfReos8sW5itBNdxRdCjU5XRTy99tkqKa5Znpu6vc8t+vFHWsuhCxNICPLOky 8Nz92Stuloxk9ruyLMVQpPi1+wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGc8z4// AeTPNlN79jnERb684vUTMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzM5MEU2QzRC NjkwMTFFRUE2NTU3NDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAKdCjADBAKdQpwwDQYJKoZIhvcNAQELBQADggEBABpRQPlV 13/ZYKSgvX3U+4wZAXJzV11MPFJmQEWx87SU4+9AohOr5OTLrdT3LWELHBLGcrU/ RtSWONik+h5xWqZPbyO3uSVuFOV1cBmxgfjjqGP0F8iJaz1kUHH+rq1bmiAocBKI ko1IKWohR3bElSoQKFjrrb817SNfnwiqEGt/dtgVeciAQftD/88GkcyFeouXoXja zV5wPK2Hm+u1iJ4wBfHxiFAO5aoIxa1xzysPuEs1YEpaJkSoo4AohUwhfj9IgieX /b66EGhwFnepxtZyHnOkaks12rkWRkyxkO3Nm2Vmp9juXJePA9/H3j+Bls2fadTh unGMKCVTK6fxix0= -----END CERTIFICATE-----Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org