$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/48005D9EE5AE11EE9ECE4023C4F9AE02.roa File: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (raw, json) Hash identifier: gkDhVsMy2wpjgH+HYZGfejjLuVLx5h/KbFkHjnnS0sg= Subject key identifier: B2:30:3C:2D:DF:92:B3:4D:90:B5:6F:1F:76:71:03:86:AF:7A:38:8B Certificate issuer: /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456 Certificate serial: 07 Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/48005D9EE5AE11EE9ECE4023C4F9AE02.roa Signing time: Tue 19 Mar 2024 05:05:19 +0000 ROA not before: Tue 19 Mar 2024 05:05:19 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152594 IP address blocks: 157.20.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456 Validity Not Before: Mar 19 05:05:19 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f91d0f-33a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:23:56:12:5d:6b:94:17:8c:5a:22:00:76: 86:c1:7c:17:b8:53:60:69:33:66:e5:00:9c:cb:85: 0b:f1:05:41:9a:32:07:5e:2d:2c:45:58:f0:42:92: 24:5c:0a:24:eb:f9:71:32:a0:8a:a4:a8:97:4e:de: b2:7c:dd:4d:05:7e:96:53:30:b6:0b:11:16:84:b6: 39:99:31:40:71:93:af:c2:ff:01:f6:9b:70:3f:10: e7:9f:fa:fe:78:d3:f3:27:6b:a7:4f:c0:56:a7:d5: 7a:9f:18:0a:53:f5:44:74:c9:31:26:e2:4e:90:30: 35:ee:cc:e4:ae:f7:ba:fd:85:f7:17:6a:46:23:a8: 0f:e7:60:2a:5c:04:72:c9:97:0f:fb:b5:d2:02:23: 3c:41:45:e1:1e:ba:40:ee:cc:0c:5c:90:d1:08:26: d0:93:0c:d1:c5:a0:7a:39:9d:f7:e4:05:c6:65:9b: 21:d3:ac:06:40:8e:60:22:0c:55:df:a6:4e:ad:25: 92:fd:70:6a:15:d8:f2:dc:ed:ae:fe:30:69:c1:31: 50:07:d6:a2:0f:90:77:f9:a4:3f:37:a1:16:03:32: 8a:56:a6:c4:01:88:8a:de:7c:cc:6c:b8:90:df:bf: 66:cc:01:c7:bf:be:28:37:d4:fe:94:1b:b7:d7:23: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:30:3C:2D:DF:92:B3:4D:90:B5:6F:1F:76:71:03:86:AF:7A:38:8B X509v3 Authority Key Identifier: keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/48005D9EE5AE11EE9ECE4023C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.129.0/24 Signature Algorithm: sha256WithRSAEncryption 57:4d:fd:45:b9:ba:5c:11:2c:d4:4d:85:a7:76:fa:63:a4:b8: 27:5c:86:1c:31:c1:25:84:cf:0c:50:96:44:a9:1d:74:6a:71: 86:5c:1d:37:b2:2a:a3:1d:8a:b9:aa:b7:f0:72:92:ad:4c:6c: 24:a9:09:5c:16:72:b7:fe:9b:61:b6:83:33:69:e9:52:96:1e: e7:2e:d2:98:a3:41:d5:c1:a0:ae:94:1d:a7:4f:15:c8:37:d7: 82:ed:0b:17:34:da:50:6d:a3:80:ff:f7:ad:a8:b4:bc:d6:2b: e8:be:88:23:38:6d:fd:98:6f:d2:d2:1e:7b:c3:19:25:9a:58: 0f:c0:4c:0b:29:2b:11:11:b5:d9:0a:08:5e:77:37:78:d2:f3: dc:1f:b3:d2:4f:8e:cb:cc:e4:bd:ec:5d:79:e8:fd:99:43:65: f5:9c:e8:ef:f8:8c:11:a7:40:98:5f:01:99:f8:f0:5f:ca:23: 76:a4:f5:34:2a:65:cc:3c:68:a4:3c:8a:78:14:2e:d8:88:8d: 55:e5:bb:0f:c0:4c:3e:4a:4f:21:8b:7d:eb:26:3d:39:5b:48: 94:7d:59:22:ef:df:68:96:2c:1f:3f:73:7a:bf:97:d9:19:ee: 44:ee:01:12:b8:44:65:c1:b9:8a:f4:2f:7b:a4:67:1c:c2:7e: 86:78:1c:f6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjVBQzExMC8GA1UEBRMoQTEwRjU3ODNDOEY5QTZEOTREMjlCNEFBOTBDNTZFMDE2 QkI1MTQ1NjAeFw0yNDAzMTkwNTA1MTlaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjkxZDBmLTMzYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKlCNWEl1rlBeMWiIAdobBfBe4U2BpM2blAJzLhQvxBUGaMgdeLSxFWPBCkiRc CiTr+XEyoIqkqJdO3rJ83U0FfpZTMLYLERaEtjmZMUBxk6/C/wH2m3A/EOef+v54 0/Mna6dPwFan1XqfGApT9UR0yTEm4k6QMDXuzOSu97r9hfcXakYjqA/nYCpcBHLJ lw/7tdICIzxBReEeukDuzAxckNEIJtCTDNHFoHo5nffkBcZlmyHTrAZAjmAiDFXf pk6tJZL9cGoV2PLc7a7+MGnBMVAH1qIPkHf5pD83oRYDMopWpsQBiIrefMxsuJDf v2bMAce/vig31P6UG7fXI/x7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsjA8Ld+S s02QtW8fdnEDhq96OIswHwYDVR0jBBgwFoAUoQ9Xg8j5ptlNKbSqkMVuAWu1FFYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NUFDL0NCNzRGOEJFRTFF MDExRUVBRjZFMUU2OEM0RjlBRTAyL29ROVhnOGo1cHRsTktiU3FrTVZ1QVd1MUZG WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1E5WGc4ajVwdGxOS2JTcWtNVnVBV3UxRkZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9DQjc0RjhCRUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi80ODAwNUQ5RUU1 QUUxMUVFOUVDRTQwMjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJ0UgTANBgkqhkiG9w0BAQsFAAOCAQEAV039Rbm6XBEs1E2F p3b6Y6S4J1yGHDHBJYTPDFCWRKkddGpxhlwdN7Iqox2Kuaq38HKSrUxsJKkJXBZy t/6bYbaDM2npUpYe5y7SmKNB1cGgrpQdp08VyDfXgu0LFzTaUG2jgP/3rai0vNYr 6L6IIzht/Zhv0tIee8MZJZpYD8BMCykrERG12QoIXnc3eNLz3B+z0k+Oy8zkvexd eej9mUNl9Zzo7/iMEadAmF8BmfjwX8ojdqT1NCplzDxopDyKeBQu2IiNVeW7D8BM PkpPIYt96yY9OVtIlH1ZIu/faJYsHz9zer+X2RnuRO4BErhEZcG5ivQve6RnHMJ+ hngc9g== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:30 2024 by rpki-client on console-ams.rpki-client.org