$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/A244D92411E111EFBEBDD04FC4F9AE02.roa File: A244D92411E111EFBEBDD04FC4F9AE02.roa (raw, json) Hash identifier: Sn/X8QwI7RWARUV5M3ib9s4fogqlJ/WgTeiO4skend4= Subject key identifier: 09:39:10:A7:62:E3:27:2A:1A:84:08:87:F2:63:5F:72:D6:51:2E:C3 Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Certificate serial: 44 Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/A244D92411E111EFBEBDD04FC4F9AE02.roa Signing time: Tue 14 May 2024 11:03:46 +0000 ROA not before: Tue 14 May 2024 11:03:46 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 140362 IP address blocks: 157.10.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Validity Not Before: May 14 11:03:46 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66434512-5b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:64:33:6e:8c:1f:3a:de:67:5c:31:fe:58: a2:72:f7:21:61:64:eb:f9:73:fa:8e:d1:f6:e8:0d: b6:fe:15:c8:95:cb:7a:09:81:dd:30:61:d5:22:57: ce:1b:39:3f:cc:1e:73:08:ed:3c:96:d9:52:18:fb: 8e:1e:d3:54:50:48:53:55:a5:fc:44:3a:b1:bf:db: f4:19:f1:a6:82:7e:15:31:37:fe:06:fa:de:bf:17: 29:37:dc:35:d0:85:a8:6d:63:a2:9c:99:97:c2:75: 37:d5:b5:da:85:33:6a:85:88:e3:17:c3:e0:3c:4a: 11:54:d9:1a:ab:7b:91:53:27:69:d1:51:1f:6e:0a: be:a8:6c:46:80:24:41:61:cc:5f:67:55:44:d5:9e: 93:3f:8a:c9:d5:5c:3c:af:4e:8e:d5:4d:e7:b1:5a: 7c:4f:22:1d:97:93:67:92:5b:d3:e5:ef:4d:49:31: dc:2b:58:b8:01:9c:2b:42:35:2e:56:d6:b4:e0:64: 9a:01:01:be:c4:f6:3a:de:d7:80:9d:d3:c7:89:ba: 77:ec:5f:a5:91:c8:f1:81:b9:60:10:07:2b:22:07: e7:34:3a:45:55:7f:eb:04:f8:b4:11:47:f4:60:94: dd:5b:fe:60:6d:72:07:77:ba:7f:6c:c7:b1:71:4f: 84:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:39:10:A7:62:E3:27:2A:1A:84:08:87:F2:63:5F:72:D6:51:2E:C3 X509v3 Authority Key Identifier: keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/A244D92411E111EFBEBDD04FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.251.0/24 Signature Algorithm: sha256WithRSAEncryption 74:01:31:32:9b:bd:a4:af:b0:59:e7:53:fd:c3:c3:4e:06:94: 0c:bf:e4:ab:85:e6:b4:ae:96:14:48:7f:47:80:5d:94:30:c9: 05:d1:75:c5:38:94:52:b5:4c:99:79:f0:b4:d2:9f:00:64:c3: 97:80:f9:2a:2c:39:ce:2c:51:9b:88:ed:c6:65:4d:f9:b4:c0: 23:16:0f:42:cb:5e:c0:e0:20:85:1c:ae:47:9a:41:7a:60:d5: 86:c7:aa:7f:5c:0d:18:39:e0:be:3b:17:b6:05:72:d2:28:b5: 2e:6f:2a:0b:ff:83:19:f2:d0:cf:29:9c:fa:47:b6:cf:87:ed: 9d:ff:8b:d6:d5:f8:8e:6c:1a:20:e7:1c:f2:48:c0:f3:2a:73: 03:99:87:c0:89:0d:d6:52:6e:66:22:df:8f:da:83:80:6b:9a: eb:b7:da:6d:32:b0:ce:b3:7b:1b:36:40:c0:7a:d4:91:8b:51: e7:85:30:45:29:0d:8e:c0:7c:36:92:e8:99:26:c0:e5:31:67: 1a:e7:12:3c:3b:89:c5:18:58:39:92:04:c1:9d:3a:80:b7:d9: bc:a9:4f:e0:a4:2c:ed:76:a0:12:37:7a:da:73:2b:01:55:ce: 83:2a:2b:a6:e7:e5:58:aa:3c:16:a6:da:37:7b:95:08:78:b4: c2:cb:c9:db -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjNBRjExMC8GA1UEBRMoMzQ3NEMyNTM5ODYxMTAwQUZEOTYzQTE2M0M4MDJEMDI2 NEY4RUM3RDAeFw0yNDA1MTQxMTAzNDZaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NDM0NTEyLTViNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7LWQzbowfOt5nXDH+WKJy9yFhZOv5c/qO0fboDbb+FciVy3oJgd0wYdUiV84b OT/MHnMI7TyW2VIY+44e01RQSFNVpfxEOrG/2/QZ8aaCfhUxN/4G+t6/Fyk33DXQ hahtY6KcmZfCdTfVtdqFM2qFiOMXw+A8ShFU2Rqre5FTJ2nRUR9uCr6obEaAJEFh zF9nVUTVnpM/isnVXDyvTo7VTeexWnxPIh2Xk2eSW9Pl701JMdwrWLgBnCtCNS5W 1rTgZJoBAb7E9jre14Cd08eJunfsX6WRyPGBuWAQBysiB+c0OkVVf+sE+LQRR/Rg lN1b/mBtcgd3un9sx7FxT4TFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCTkQp2Lj JyoahAiH8mNfctZRLsMwHwYDVR0jBBgwFoAUNHTCU5hhEAr9ljoWPIAtAmT47H0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2M0FGLzRERkU2ODI0QjZC NzExRUVBOUQ3RkMzQUM0RjlBRTAyL05IVENVNWhoRUFyOWxqb1dQSUF0QW1UNDdI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkhUQ1U1aGhFQXI5bGpvV1BJQXRBbVQ0N0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi80REZFNjgyNEI2QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9BMjQ0RDkyNDEx RTExMUVGQkVCREQwNEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJ0K+zANBgkqhkiG9w0BAQsFAAOCAQEAdAExMpu9pK+wWedT /cPDTgaUDL/kq4XmtK6WFEh/R4BdlDDJBdF1xTiUUrVMmXnwtNKfAGTDl4D5Kiw5 zixRm4jtxmVN+bTAIxYPQstewOAghRyuR5pBemDVhseqf1wNGDngvjsXtgVy0ii1 Lm8qC/+DGfLQzymc+ke2z4ftnf+L1tX4jmwaIOcc8kjA8ypzA5mHwIkN1lJuZiLf j9qDgGua67fabTKwzrN7GzZAwHrUkYtR54UwRSkNjsB8NpLomSbA5TFnGucSPDuJ xRhYOZIEwZ06gLfZvKlP4KQs7XagEjd62nMrAVXOgyorpuflWKo8FqbaN3uVCHi0 wsvJ2w== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:33 2024 by rpki-client on console-ams.rpki-client.org