$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8235F768D6E411EE843AFD43C4F9AE02.roa File: 8235F768D6E411EE843AFD43C4F9AE02.roa (raw, json) Hash identifier: O4SAplkr6Vu0K1vRBpiuoFeVYu7MewF2z58WD7f2B/Y= Subject key identifier: C5:3B:32:15:97:5F:05:27:D9:63:E6:95:F0:AD:CF:56:60:52:19:19 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 75 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8235F768D6E411EE843AFD43C4F9AE02.roa Signing time: Thu 29 Feb 2024 09:25:42 +0000 ROA not before: Thu 29 Feb 2024 09:25:42 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135981 IP address blocks: 157.20.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Feb 29 09:25:42 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65e04d96-ad21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b2:78:f9:d3:65:00:49:d5:df:4b:61:f5:59: 2a:e3:77:16:96:eb:73:5e:50:87:71:5a:d6:f5:6e: 9f:b5:c9:0c:9d:ec:a0:cc:05:13:7e:32:36:9d:5f: 72:dd:7e:51:e1:7d:5b:33:10:9e:e2:ed:30:59:7c: 6d:91:96:18:bf:4b:f2:9d:9c:58:88:f5:9d:85:11: 33:af:ea:5f:69:c9:8a:6a:75:ea:4d:f8:ba:b9:32: d6:8c:f6:4f:22:77:d6:9a:83:53:1d:ec:7e:96:a3: f7:9e:cf:1a:01:13:10:ac:57:87:13:a5:e0:9e:1c: d9:9f:8e:cf:1c:73:fd:af:67:46:f1:3b:97:2d:cc: 88:ea:98:c9:ae:dc:c0:06:f2:4e:9b:d8:8e:81:5f: 1c:bf:8e:30:5c:bf:b5:96:f2:ad:b7:b7:e6:b0:c6: b3:19:94:93:08:22:70:eb:07:26:39:91:75:62:7c: 04:bd:eb:77:eb:4d:ba:ce:b8:e9:57:4b:80:1d:a1: 2d:06:c0:d4:66:ce:df:a1:f9:a2:99:4e:6d:52:a7: b2:07:e6:92:be:75:35:f5:44:f6:97:3b:e7:dd:98: 54:d7:20:39:b0:b3:58:38:ff:9d:87:8b:00:f3:16: 92:05:4c:55:74:46:19:c1:bc:b0:6c:c1:88:00:87: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:32:15:97:5F:05:27:D9:63:E6:95:F0:AD:CF:56:60:52:19:19 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8235F768D6E411EE843AFD43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.58.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:62:25:1e:ba:b8:85:6d:a7:6b:2c:7e:ff:a2:66:de:8a:19: 69:65:e1:bf:a0:a1:b8:32:65:fa:51:7d:1e:48:ee:2b:b9:6a: ec:18:60:4b:d6:59:2a:1d:e8:c8:6d:01:e8:d3:fa:25:8c:ac: 71:66:67:2f:eb:d4:fe:18:84:29:a4:82:29:d3:76:d2:77:fb: da:82:d1:6a:fb:dc:01:4f:29:8d:60:f8:b0:ef:12:5d:fb:77: 38:14:5e:43:ab:89:81:aa:a1:e8:2e:e8:64:67:7a:1e:ab:00: 86:02:92:b6:41:e0:d7:b1:d6:bc:9d:be:1f:34:43:2a:5d:73: 9e:5a:5e:76:cd:9c:0d:63:ab:2b:87:09:b3:34:e1:54:ff:9a: 13:cf:dd:e5:2f:0d:f7:eb:64:4e:25:0f:e2:b3:d7:d0:8f:9e: 5c:de:5a:37:f6:a0:3a:32:eb:a1:4e:8e:fa:76:2a:35:e8:91: b0:88:63:48:c3:8b:fe:d4:84:22:c1:d5:fb:ee:64:ac:5f:df: 36:27:e7:ee:6d:27:79:ba:52:76:d8:f7:5c:ed:c3:a8:84:9e: ce:4d:88:37:82:28:51:18:ab:38:72:bd:38:f2:fe:b7:29:13: 2e:29:81:eb:17:e8:57:ee:2a:94:ac:d4:a6:b4:62:26:19:ed: 8c:5c:e6:a0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTYwQTExMC8GA1UEBRMoOEFDNzIxMjk4RjkyRTEwQTJFRTMwNTFBRkJDOTExNDI4 NEY4MEUxMjAeFw0yNDAyMjkwOTI1NDJaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZTA0ZDk2LWFkMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDisnj502UASdXfS2H1WSrjdxaW63NeUIdxWtb1bp+1yQyd7KDMBRN+MjadX3Ld flHhfVszEJ7i7TBZfG2Rlhi/S/KdnFiI9Z2FETOv6l9pyYpqdepN+Lq5MtaM9k8i d9aag1Md7H6Wo/eezxoBExCsV4cTpeCeHNmfjs8cc/2vZ0bxO5ctzIjqmMmu3MAG 8k6b2I6BXxy/jjBcv7WW8q23t+awxrMZlJMIInDrByY5kXVifAS963frTbrOuOlX S4AdoS0GwNRmzt+h+aKZTm1Sp7IH5pK+dTX1RPaXO+fdmFTXIDmws1g4/52HiwDz FpIFTFV0RhnBvLBswYgAh6QTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxTsyFZdf BSfZY+aV8K3PVmBSGRkwHwYDVR0jBBgwFoAUischKY+S4Qou4wUa+8kRQoT4DhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NjBBLzIwOTU4NjE4QTlE RjExRUVBMzU2QTQzRUM0RjlBRTAyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXNjaEtZLVM0UW91NHdVYS04a1JRb1Q0RGhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS8yMDk1ODYxOEE5REYxMUVFQTM1NkE0M0VDNEY5QUUwMi84MjM1Rjc2OEQ2 RTQxMUVFODQzQUZENDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0UOjANBgkqhkiG9w0BAQsFAAOCAQEAi2IlHrq4hW2nayx+ /6Jm3ooZaWXhv6ChuDJl+lF9HkjuK7lq7BhgS9ZZKh3oyG0B6NP6JYyscWZnL+vU /hiEKaSCKdN20nf72oLRavvcAU8pjWD4sO8SXft3OBReQ6uJgaqh6C7oZGd6HqsA hgKStkHg17HWvJ2+HzRDKl1znlpeds2cDWOrK4cJszThVP+aE8/d5S8N9+tkTiUP 4rPX0I+eXN5aN/agOjLroU6O+nYqNeiRsIhjSMOL/tSEIsHV++5krF/fNifn7m0n ebpSdtj3XO3DqISezk2IN4IoURirOHK9OPL+tykTLimB6xfoV+4qlKzUprRiJhnt jFzmoA== -----END CERTIFICATE-----Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org