$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa File: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (raw, json) Hash identifier: 39fzunF22gk0jBRxG5Uxab3F1EcOlffH5iC8bLOkYdw= Subject key identifier: 7F:73:95:1A:4A:6C:9E:26:3C:3F:5B:4E:07:BA:B7:D1:7E:71:93:C1 Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Certificate serial: 02 Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa Signing time: Fri 19 Jul 2024 09:58:46 +0000 ROA not before: Fri 19 Jul 2024 09:58:46 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Validity Not Before: Jul 19 09:58:46 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=669a38d6-cb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:8a:af:71:43:23:e4:10:c6:8e:24:2c:4f: 24:52:e3:fb:71:f4:a3:82:4b:ce:b9:59:69:ca:db: d6:a6:fd:c8:a6:c3:6e:9c:18:b3:61:4e:24:e7:12: 26:b3:20:e0:5f:67:01:f8:ed:3a:b0:d7:dd:9e:73: ee:c4:38:4a:0a:19:79:b3:f1:e3:d8:c2:be:6e:a2: aa:13:20:7c:92:6a:3f:68:c5:c6:f3:8f:1f:a7:d0: 77:7a:54:d7:31:e4:d1:5c:9d:ec:28:50:d4:a0:49: 54:0e:14:fc:8b:81:66:4e:0f:a9:e3:71:ba:1c:74: c1:c5:0b:7e:bd:e5:05:cf:9b:43:55:a5:8e:e6:c0: af:a6:a8:4e:d2:47:fc:57:96:ac:18:db:44:2d:0b: 41:09:13:b0:3e:03:36:1f:e8:10:a8:44:7b:3a:b0: 5a:45:67:f5:d2:02:34:70:46:a5:54:49:7a:2b:7b: bc:b1:96:b2:a9:9d:7d:72:be:36:6f:04:3e:bd:c1: 67:35:d1:6d:c3:a0:a2:2c:da:91:ac:c5:5d:40:ec: 32:fd:92:33:7c:64:0e:30:96:5f:50:c6:d4:36:38: ff:82:a7:6f:bc:64:ff:db:80:9a:3d:fd:e8:ec:23: bd:29:7a:0b:be:76:e5:26:07:14:fd:1f:57:8f:c0: 93:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:73:95:1A:4A:6C:9E:26:3C:3F:5B:4E:07:BA:B7:D1:7E:71:93:C1 X509v3 Authority Key Identifier: keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.140.0/23 Signature Algorithm: sha256WithRSAEncryption 62:b9:97:b5:89:47:f4:b2:87:c7:15:7b:7e:67:66:fe:f5:2d: 9f:fa:cb:6f:75:56:8a:5a:32:93:a7:88:89:6c:03:50:c9:b8: 6a:6f:98:ae:ca:cc:15:d4:22:4e:11:61:ab:02:1b:07:df:a1: 15:e6:12:11:b2:37:d1:30:cc:55:83:96:33:0d:16:8b:72:a3: 33:73:2b:01:99:f0:32:86:e7:bf:0b:91:ec:0e:b0:48:dd:d7: 1d:c8:96:31:17:c2:c3:ed:90:83:68:83:93:ce:20:23:3c:7e: 6e:92:05:60:c8:04:02:2c:38:b0:24:0a:5a:b4:b5:cd:be:1d: 65:83:eb:4b:ff:1f:e5:a5:98:05:96:0b:12:cc:8d:1c:82:07: 50:83:17:88:ed:fb:46:90:c6:73:21:44:c0:05:61:e6:dc:19: 19:51:a9:1a:2d:46:3e:54:91:33:6f:ca:a0:8f:01:22:2f:5c: 3b:0d:2e:80:8f:45:ce:e5:fd:eb:13:a0:cd:89:2d:8c:94:e0: b1:56:55:c3:96:38:92:c9:62:77:97:20:a9:74:e0:f0:35:87: 85:45:54:31:29:be:51:1d:0e:ea:7a:39:3d:d6:d6:5f:5b:f5: ca:97:be:dd:f7:e5:5b:7a:79:ca:38:ed:ef:b0:8b:cf:78:56: fd:dd:9a:34 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjYyOTExMC8GA1UEBRMoNjMwRUZDOEJDODI0N0Y5OUEwMTI4MDc0MUU0QTFBMERC N0YxNDdCMDAeFw0yNDA3MTkwOTU4NDZaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OWEzOGQ2LWNiNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2HoqvcUMj5BDGjiQsTyRS4/tx9KOCS865WWnK29am/cimw26cGLNhTiTnEiaz IOBfZwH47Tqw192ec+7EOEoKGXmz8ePYwr5uoqoTIHySaj9oxcbzjx+n0Hd6VNcx 5NFcnewoUNSgSVQOFPyLgWZOD6njcbocdMHFC3695QXPm0NVpY7mwK+mqE7SR/xX lqwY20QtC0EJE7A+AzYf6BCoRHs6sFpFZ/XSAjRwRqVUSXore7yxlrKpnX1yvjZv BD69wWc10W3DoKIs2pGsxV1A7DL9kjN8ZA4wll9QxtQ2OP+Cp2+8ZP/bgJo9/ejs I70pegu+duUmBxT9H1ePwJPjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUf3OVGkps niY8P1tOB7q30X5xk8EwHwYDVR0jBBgwFoAUYw78i8gkf5mgEoB0HkoaDbfxR7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNjI5L0UyQ0Y5NDBBNDVC NDExRUY4RkRCNzQxREM0RjlBRTAyL1l3NzhpOGdrZjVtZ0VvQjBIa29hRGJmeFI3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWXc3OGk4Z2tmNW1nRW9CMEhrb2FEYmZ4UjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FMkNGOTQwQTQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi83Q0U0MzI2MjQ1 QjUxMUVGQkFDMDZFMUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0KjDANBgkqhkiG9w0BAQsFAAOCAQEAYrmXtYlH9LKHxxV7 fmdm/vUtn/rLb3VWiloyk6eIiWwDUMm4am+YrsrMFdQiThFhqwIbB9+hFeYSEbI3 0TDMVYOWMw0Wi3KjM3MrAZnwMobnvwuR7A6wSN3XHciWMRfCw+2Qg2iDk84gIzx+ bpIFYMgEAiw4sCQKWrS1zb4dZYPrS/8f5aWYBZYLEsyNHIIHUIMXiO37RpDGcyFE wAVh5twZGVGpGi1GPlSRM2/KoI8BIi9cOw0ugI9FzuX96xOgzYktjJTgsVZVw5Y4 kslid5cgqXTg8DWHhUVUMSm+UR0O6no5PdbWX1v1ype+3fflW3p5yjjt77CLz3hW /d2aNA== -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:53 2024 by rpki-client on console-ams.rpki-client.org