$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa File: 80741B04221F11EF92A42E1AC4F9AE02.roa (raw, json) Hash identifier: +0mo10Ws60113T/VX//uyh/DURlhmmXDvzWq5iLVu9Q= Subject key identifier: C9:53:BF:E2:C3:0B:44:3B:58:A8:A7:E4:BB:87:9D:04:75:DD:3F:11 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: 02 Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa Signing time: Tue 04 Jun 2024 03:06:57 +0000 ROA not before: Tue 04 Jun 2024 03:06:57 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152588 IP address blocks: 157.20.102.0/24 maxlen: 24 157.20.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Jun 4 03:06:57 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=665e84d0-7fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:81:38:bd:44:aa:99:e6:f7:87:ff:9d:86: b8:f8:3b:53:5c:e9:16:f6:13:6e:d8:d8:26:37:87: 97:49:74:d2:32:8a:d6:b3:bd:fb:4c:60:d0:e7:04: ac:3f:d1:db:2b:2f:7e:89:20:9c:d2:66:a7:92:59: 3c:ff:ca:0f:20:a3:fd:a7:83:65:65:da:62:fd:bf: 93:c5:c3:d8:ee:a6:41:d2:b6:de:6a:f9:18:ae:d8: 9d:0f:70:9f:6d:ae:a8:c3:4c:ba:c1:ad:15:75:64: 0f:c4:ca:8e:8f:b8:b6:2b:b5:4a:f2:46:bc:3e:db: 80:b0:59:06:9f:0e:17:df:06:2e:cc:ca:50:f2:d7: bb:0b:79:48:7f:32:ed:d3:af:00:75:2f:f2:ce:4b: e4:b2:dc:0d:47:b9:4a:49:67:a1:cf:d2:3b:3d:c1: ac:88:1f:e0:53:06:07:50:50:a4:5f:95:bd:2b:6a: 1e:9e:77:df:78:da:75:d7:48:0e:bf:04:83:61:f2: 29:4c:ad:8d:7f:87:5d:73:66:56:94:58:09:26:86: cc:cc:21:1a:2e:a7:d1:39:f6:1a:e1:97:0d:b7:b7: 3e:0b:bb:c4:9c:18:cd:87:fa:2d:e6:fe:02:ac:11: 68:78:52:3b:be:c5:1c:16:2c:3d:6e:73:4d:09:f6: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:53:BF:E2:C3:0B:44:3B:58:A8:A7:E4:BB:87:9D:04:75:DD:3F:11 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.102.0/23 Signature Algorithm: sha256WithRSAEncryption 11:c6:41:10:4e:0b:2d:41:1c:45:02:8e:fd:b6:a3:2f:f5:85: 0c:1d:ab:29:3c:9b:5a:82:91:19:3b:1d:9f:bc:68:b6:4c:e5: e2:93:2d:17:89:c3:89:50:e7:83:3f:2b:a6:96:ed:40:47:61: 66:78:a6:3a:91:03:a8:4b:49:2b:9b:94:07:b4:d7:f3:ee:ae: b4:e4:67:e4:94:b2:f5:c9:11:3e:c5:ab:e0:38:e9:73:42:9f: 9b:71:04:cb:cc:6e:92:b6:51:66:ca:40:cb:7e:1d:6e:9a:bd: 9f:27:8c:99:81:3c:8e:d6:b8:3d:c5:8d:84:f5:08:92:e2:e0: 26:09:d4:28:00:43:2a:5d:40:33:b0:ae:cb:3c:ff:95:8a:5a: ad:cd:ac:20:89:fb:de:2b:69:42:0c:f4:33:a7:aa:cd:d0:97: 45:50:c9:a4:b3:1c:ed:74:74:5f:15:d9:b5:52:8f:a1:9c:d3: 92:c7:53:bd:c7:f1:44:ff:98:0d:f3:67:64:60:d2:16:8d:59: 50:44:e2:92:19:00:f2:6d:e9:e9:6a:df:5a:12:91:ac:52:89: 48:96:98:92:60:71:8b:05:51:07:a8:fe:e5:a9:74:29:e0:2e: 07:7b:00:ea:dc:08:26:75:85:ba:54:79:fd:ba:93:e7:80:86: ad:79:bb:bc -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEIzMzExMC8GA1UEBRMoRUYwRTQ5MzJGQzY4Qjc1MkUzNDI4OTIyQTkzRTY2QUJF MzFGMzQzMTAeFw0yNDA2MDQwMzA2NTdaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NWU4NGQwLTdmYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCy4E4vUSqmeb3h/+dhrj4O1Nc6Rb2E27Y2CY3h5dJdNIyitazvftMYNDnBKw/ 0dsrL36JIJzSZqeSWTz/yg8go/2ng2Vl2mL9v5PFw9jupkHStt5q+Riu2J0PcJ9t rqjDTLrBrRV1ZA/Eyo6PuLYrtUryRrw+24CwWQafDhffBi7MylDy17sLeUh/Mu3T rwB1L/LOS+Sy3A1HuUpJZ6HP0js9wayIH+BTBgdQUKRflb0rah6ed9942nXXSA6/ BINh8ilMrY1/h11zZlaUWAkmhszMIRoup9E59hrhlw23tz4Lu8ScGM2H+i3m/gKs EWh4Uju+xRwWLD1uc00J9mlvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUyVO/4sML RDtYqKfku4edBHXdPxEwHwYDVR0jBBgwFoAU7w5JMvxot1LjQokiqT5mq+MfNDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0QjMzLzFBQ0U3RDA0MjIx RTExRUY5MzQ0QTMwOUM0RjlBRTAyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5E RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN3c1Sk12eG90MUxqUW9raXFUNW1xLU1mTkRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi84MDc0MUIwNDIy MUYxMUVGOTJBNDJFMUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0UZjANBgkqhkiG9w0BAQsFAAOCAQEAEcZBEE4LLUEcRQKO /bajL/WFDB2rKTybWoKRGTsdn7xotkzl4pMtF4nDiVDngz8rppbtQEdhZnimOpED qEtJK5uUB7TX8+6utORn5JSy9ckRPsWr4Djpc0Kfm3EEy8xukrZRZspAy34dbpq9 nyeMmYE8jta4PcWNhPUIkuLgJgnUKABDKl1AM7Cuyzz/lYparc2sIIn73itpQgz0 M6eqzdCXRVDJpLMc7XR0XxXZtVKPoZzTksdTvcfxRP+YDfNnZGDSFo1ZUETikhkA 8m3p6WrfWhKRrFKJSJaYkmBxiwVRB6j+5al0KeAuB3sA6twIJnWFulR5/bqT54CG rXm7vA== -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:21 2024 by rpki-client on console-fra.rpki-client.org