$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/C7764CC6FCA311EEACCA2B5CC4F9AE02.roa File: C7764CC6FCA311EEACCA2B5CC4F9AE02.roa (raw, json) Hash identifier: BskhYAjkibtuBOu8KlbXIdkPDZaQNVMPjMPekgxh8u0= Subject key identifier: 2E:08:65:4B:61:4F:24:4A:EB:19:DA:33:EB:80:F5:CB:3A:1B:F8:F3 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 05C2 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/C7764CC6FCA311EEACCA2B5CC4F9AE02.roa Signing time: Fri 19 Apr 2024 15:20:30 +0000 ROA not before: Fri 19 Apr 2024 15:20:30 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 137076 IP address blocks: 14.96.24.0/21 maxlen: 24 14.96.32.0/21 maxlen: 24 14.96.40.0/21 maxlen: 24 14.96.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Apr 19 15:20:30 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=66228bbe-ef5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:a6:f5:3a:75:90:d6:b8:07:9b:96:ad:31: 72:6e:c6:42:30:52:d0:dd:51:c9:e3:02:3f:8a:9c: 97:aa:4d:cf:9a:18:f4:2a:eb:85:c0:e1:e8:dc:7b: f3:54:67:53:ee:68:d5:d5:2a:56:99:a5:46:e8:a6: 8a:f9:20:c6:d9:71:49:a0:29:8e:f3:81:ab:38:0b: e3:bc:a8:a8:0c:17:10:02:60:bf:dd:46:5e:9e:aa: ed:b3:4d:a7:d0:0c:03:cc:d8:dc:7b:43:77:ad:21: 83:0f:ed:af:96:85:e8:e9:62:66:0d:43:20:0e:c0: 6f:53:03:26:60:1d:e8:dc:22:d8:72:85:e3:ad:67: 0e:e0:df:88:13:0a:63:78:c5:dd:03:3c:c8:23:0c: d9:5c:de:01:d5:96:9c:e9:d2:c3:d9:94:5a:56:10: 2e:a2:51:04:1b:91:c8:80:d0:09:17:ac:c8:b4:c9: ee:11:d2:b9:f2:a7:b5:db:fa:c1:f2:b4:c4:cd:b2: b1:ea:01:15:aa:14:1c:a8:fc:85:0c:ba:e8:87:c7: cd:ea:e6:52:fe:57:c9:f6:02:10:ef:5d:f9:52:67: 35:27:a2:c3:61:58:3d:5d:bc:62:62:96:5a:43:52: 34:da:ce:b7:87:62:bf:b3:e4:27:54:54:a9:12:8c: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:08:65:4B:61:4F:24:4A:EB:19:DA:33:EB:80:F5:CB:3A:1B:F8:F3 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/C7764CC6FCA311EEACCA2B5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.96.24.0-14.96.55.255 Signature Algorithm: sha256WithRSAEncryption a7:98:12:cc:cb:82:c9:fb:41:35:70:27:2c:0e:d2:a7:3b:d0: 38:d7:0c:ab:3b:5a:e6:7f:d2:46:2d:a5:a8:04:75:f9:bd:d8: 9c:e8:4c:51:1c:4d:b9:b6:dd:2c:8c:87:5d:27:a9:13:24:09: e1:ae:7e:53:18:ac:dd:37:50:cc:28:46:69:20:c9:f6:4b:0a: 34:cc:26:bb:c8:e9:a1:42:5e:68:1b:f6:9f:f1:94:1f:7d:1a: 35:67:83:1d:9d:ec:cc:3c:75:c6:95:c3:07:d8:9f:c6:11:38: 8b:f2:2c:fa:74:03:88:99:b6:37:4e:e0:05:be:fa:d6:5c:4a: 71:fe:1c:5c:e6:d5:d1:15:8b:58:ad:f1:08:fe:a1:8c:91:69: 4b:d7:06:9e:d6:c5:2a:7e:ef:63:d4:18:ae:32:a6:a0:f6:a5: 92:5b:bc:9d:45:c1:95:37:5f:99:79:94:7a:b0:34:2d:5a:e3: 54:7d:24:94:0b:07:fb:b8:66:87:df:53:3c:0d:b8:b7:4c:1b: c1:c2:be:c1:b8:1a:1e:96:a8:f0:bd:0f:4c:7a:dd:b9:0a:6c: 65:0d:e2:13:f8:32:a0:88:c9:f6:6b:83:9a:e1:7b:94:2d:77: 70:a9:38:32:c3:7c:ce:d8:f8:e2:a1:9d:de:4c:1f:cc:67:10: a6:36:d8:33 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjQwNDE5MTUyMDMwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIyOGJiZS1lZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMKm9Tp1kNa4B5uWrTFybsZCMFLQ3VHJ4wI/ipyXqk3Pmhj0KuuFwOHo3Hvz VGdT7mjV1SpWmaVG6KaK+SDG2XFJoCmO84GrOAvjvKioDBcQAmC/3UZenqrts02n 0AwDzNjce0N3rSGDD+2vloXo6WJmDUMgDsBvUwMmYB3o3CLYcoXjrWcO4N+IEwpj eMXdAzzIIwzZXN4B1Zac6dLD2ZRaVhAuolEEG5HIgNAJF6zItMnuEdK58qe12/rB 8rTEzbKx6gEVqhQcqPyFDLroh8fN6uZS/lfJ9gIQ7135Umc1J6LDYVg9XbxiYpZa Q1I02s63h2K/s+QnVFSpEozJpwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFC4IZUth TyRK6xnaM+uA9cs6G/jzMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RFQTQvQTI0MjZCNjA5ODI5MTFFQkI3ODgyMDgxQzRGOUFFMDIvQzc3NjRDQzZG Q0EzMTFFRUFDQ0EyQjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAw5gGAMEAw5gMDANBgkqhkiG9w0BAQsFAAOCAQEAp5gS zMuCyftBNXAnLA7SpzvQONcMqzta5n/SRi2lqAR1+b3YnOhMURxNubbdLIyHXSep EyQJ4a5+Uxis3TdQzChGaSDJ9ksKNMwmu8jpoUJeaBv2n/GUH30aNWeDHZ3szDx1 xpXDB9ifxhE4i/Is+nQDiJm2N07gBb761lxKcf4cXObV0RWLWK3xCP6hjJFpS9cG ntbFKn7vY9QYrjKmoPalklu8nUXBlTdfmXmUerA0LVrjVH0klAsH+7hmh99TPA24 t0wbwcK+wbgaHpao8L0PTHrduQpsZQ3iE/gyoIjJ9muDmuF7lC13cKk4MsN8ztj4 4qGd3kwfzGcQpjbYMw== -----END CERTIFICATE-----Generated at Sat Jun 15 02:44:43 2024 by rpki-client on console-ams.rpki-client.org