$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa File: C2838C8245B011EFAE60CC76C4F9AE02.roa (raw, json) Hash identifier: hwH3UwPPp5HcdIoVJGmqXyZx+8wSSAmPJHdJhpeAuug= Subject key identifier: 38:91:D9:C1:DC:FA:F4:05:EF:B4:D4:D6:79:64:28:14:71:DF:8A:3A Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: 02 Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa Signing time: Fri 19 Jul 2024 09:24:55 +0000 ROA not before: Fri 19 Jul 2024 09:24:55 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Jul 19 09:24:55 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=669a30e7-b453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:af:94:6f:03:90:db:8a:52:16:0f:2a:63: a6:18:31:a4:3a:dc:d9:87:a3:30:b3:c0:95:85:ce: 59:83:46:51:4a:0f:82:04:d8:10:19:e3:28:34:cb: b4:32:0f:db:d4:ae:5f:d0:a6:ed:2e:27:e7:87:4c: d0:ad:4d:80:2e:27:cb:21:0e:2e:e2:8c:3d:b4:48: 2b:47:6a:10:ac:c1:bd:ad:b7:68:1a:f9:04:bf:57: fc:41:16:ff:fa:3d:d5:3f:9b:b2:8e:4d:05:df:89: 49:ef:32:2e:8b:4e:49:3c:6d:43:84:e0:ad:f3:97: 37:29:b3:20:4d:08:f3:7e:54:1b:17:2b:9a:d1:07: d7:c5:0d:4a:5a:61:ba:90:e8:4d:12:5d:38:cc:70: 6f:34:43:71:1b:3d:7a:9a:57:dd:6b:30:84:a8:a2: 17:12:63:57:fe:06:9d:78:b0:bd:9b:c4:14:55:b5: 4f:e1:5f:15:a5:f5:a6:59:80:a0:ab:4d:0a:71:30: b6:e5:af:cc:ae:ba:ea:45:96:27:0a:17:16:06:4d: c8:aa:3f:13:06:3d:04:0b:34:35:34:4a:39:0f:11: 73:8c:a3:60:98:95:db:c4:3c:12:07:dd:d6:c9:e1: cd:4c:de:ea:92:b2:cb:43:11:b8:b4:98:94:6b:83: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:91:D9:C1:DC:FA:F4:05:EF:B4:D4:D6:79:64:28:14:71:DF:8A:3A X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.120.0/23 Signature Algorithm: sha256WithRSAEncryption 90:66:c2:2f:57:af:9c:29:35:fd:98:33:52:35:92:b3:60:c7: 15:1b:1b:64:6e:09:db:14:f6:d2:42:69:c9:80:10:11:63:8f: ac:c0:b7:52:e1:b2:41:84:20:20:53:65:a2:b3:d0:81:d2:78: c9:fd:4f:4a:2a:c2:31:e3:e8:cb:d8:9d:1c:b8:a7:a6:8d:c7: 10:c5:a0:f4:34:f5:5b:61:f2:3c:b4:5b:c0:08:f3:38:a3:71: f4:64:72:c8:c6:77:be:7b:fa:2a:86:36:c1:33:45:8c:82:0a: 54:66:24:5c:e5:66:46:50:8b:99:25:e7:d3:2e:f3:a2:97:43: 59:96:6f:07:d8:91:3f:24:b2:3d:65:9b:a9:8a:74:2a:f5:71: 05:cd:a0:a8:ad:6a:9b:0c:41:3e:9e:f4:bf:0d:d0:1e:c9:65: 2e:06:a3:0f:17:8a:8b:46:f1:d9:a7:e8:fe:2f:44:7f:52:80: 06:37:27:7d:b6:79:5b:9a:ac:48:1b:4e:92:c9:bf:ea:59:72: 97:53:22:59:09:ac:17:2a:ea:2c:ef:d8:b8:ab:a7:b8:4c:90: ef:22:bf:8d:12:e8:25:9e:c3:f4:57:95:b9:56:b1:06:db:11: d3:e8:de:7f:97:cf:47:7f:c9:9d:5a:04:f6:40:d2:1f:11:74: 7d:aa:62:e9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUU4NTExMC8GA1UEBRMoMDcyNDRBOTk0Q0RDNEI5MzgwNzQ3MTFDNDI0OEQ0OUY5 RDUwRDgyNzAeFw0yNDA3MTkwOTI0NTVaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OWEzMGU3LWI0NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC816+UbwOQ24pSFg8qY6YYMaQ63NmHozCzwJWFzlmDRlFKD4IE2BAZ4yg0y7Qy D9vUrl/Qpu0uJ+eHTNCtTYAuJ8shDi7ijD20SCtHahCswb2tt2ga+QS/V/xBFv/6 PdU/m7KOTQXfiUnvMi6LTkk8bUOE4K3zlzcpsyBNCPN+VBsXK5rRB9fFDUpaYbqQ 6E0SXTjMcG80Q3EbPXqaV91rMISoohcSY1f+Bp14sL2bxBRVtU/hXxWl9aZZgKCr TQpxMLblr8yuuupFlicKFxYGTciqPxMGPQQLNDU0SjkPEXOMo2CYldvEPBIH3dbJ 4c1M3uqSsstDEbi0mJRrg/ajAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOJHZwdz6 9AXvtNTWeWQoFHHfijowHwYDVR0jBBgwFoAUByRKmUzcS5OAdHEcQkjUn51Q2Ccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTg1L0ZDNjZGNUFFNDVB RDExRUZCNDM1RUI2RkM0RjlBRTAyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQnlSS21VemNTNU9BZEhFY1FralVuNTFRMkNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9DMjgzOEM4MjQ1 QjAxMUVGQUU2MENDNzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0KeDANBgkqhkiG9w0BAQsFAAOCAQEAkGbCL1evnCk1/Zgz UjWSs2DHFRsbZG4J2xT20kJpyYAQEWOPrMC3UuGyQYQgIFNlorPQgdJ4yf1PSirC MePoy9idHLinpo3HEMWg9DT1W2HyPLRbwAjzOKNx9GRyyMZ3vnv6KoY2wTNFjIIK VGYkXOVmRlCLmSXn0y7zopdDWZZvB9iRPySyPWWbqYp0KvVxBc2gqK1qmwxBPp70 vw3QHsllLgajDxeKi0bx2afo/i9Ef1KABjcnfbZ5W5qsSBtOksm/6llyl1MiWQms FyrqLO/YuKunuEyQ7yK/jRLoJZ7D9FeVuVaxBtsR0+jef5fPR3/JnVoE9kDSHxF0 fapi6Q== -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:23 2024 by rpki-client on console-fra.rpki-client.org