$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa File: 1568A012213C11EEA25DBF55C4F9AE02.roa (raw, json) Hash identifier: g84xEJ5ykZMjzZgZWIb8W4X/zoO3Um4FhYPpDKCVB8E= Subject key identifier: 26:31:93:3D:92:68:C9:4F:86:F7:7E:80:7D:1A:60:A3:54:45:1F:B6 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 0F7C Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa Signing time: Thu 02 May 2024 18:36:43 +0000 ROA not before: Thu 02 May 2024 18:36:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 18036 IP address blocks: 147.76.19.0/24 maxlen: 24 147.76.240.0/24 maxlen: 24 147.76.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3964 (0xf7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 18:36:43 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633dd3b-65ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:29:63:f0:39:01:d0:4e:47:14:de:a2:13:37: 7c:04:ea:ca:09:05:aa:5e:75:6e:91:88:e2:56:a1: b7:7e:88:71:d1:69:8a:c6:1c:e5:dc:a2:4d:38:0d: c5:aa:17:26:7e:78:ce:61:69:a9:cb:8b:42:5b:bd: 14:92:59:91:a3:3b:ae:25:18:d5:01:6d:d2:73:8a: 32:6b:7a:f9:70:0b:08:02:a3:56:2e:ae:77:7a:2e: 7e:bc:e6:64:43:83:e8:cd:fc:d3:47:00:10:de:88: 6b:ce:5d:aa:b1:a6:e6:a8:6e:f1:54:6f:23:15:1d: 63:03:14:81:1d:da:9d:06:59:4a:3d:d6:24:e0:87: e0:40:ea:d4:f0:56:b2:a7:88:68:1e:fb:4f:40:8e: 52:58:42:c0:17:8c:08:b5:5b:dd:ef:62:5b:63:1a: 3c:d0:6e:5c:4d:76:4a:51:88:76:b7:84:b9:f6:18: de:1a:a2:2b:6a:f5:1f:8f:c2:85:6e:87:e3:84:f5: ce:db:33:6c:69:39:a4:c0:de:34:13:76:2a:fc:b6: 12:51:c0:46:c8:9c:94:a4:f7:21:d3:da:b1:06:e1: 03:02:70:24:bc:50:1a:ec:f5:13:df:91:27:2f:53: e0:b1:a9:90:69:8e:f9:9d:c9:bf:61:26:4e:ed:19: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:31:93:3D:92:68:C9:4F:86:F7:7E:80:7D:1A:60:A3:54:45:1F:B6 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.76.19.0/24 147.76.240.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:74:35:ed:14:5e:4f:70:83:2b:9c:7c:ea:e8:48:be:ea:83: b3:c6:74:47:51:d9:eb:18:ce:c6:d1:c2:a6:d2:d2:76:10:f2: 1e:54:08:a2:e7:ad:91:9b:61:35:0f:34:47:b0:91:13:ee:04: 21:8c:c5:ab:a0:35:30:1c:8b:79:97:94:d0:66:1e:8a:c8:a7: 6d:37:32:a1:41:6c:97:6b:1c:67:f1:12:c4:0f:09:33:a0:86: a2:76:97:76:4a:7e:4d:25:18:16:73:52:72:b7:8e:90:cf:f6: 01:b1:5c:81:6a:df:dd:26:46:0c:ad:10:70:e4:d6:eb:6c:64: 41:54:0a:a4:73:a1:d9:d1:00:0d:06:f0:b6:9b:a6:d0:43:35: 7c:17:14:02:0b:d3:75:13:6a:86:8f:07:39:d8:26:e2:ab:8f: cf:b1:86:e1:69:4c:e7:30:72:e3:7e:4c:2b:a0:03:ed:f7:99: 5d:44:89:22:0e:2e:04:32:51:14:29:8c:f5:14:e9:db:d4:42: d8:46:63:a8:71:8c:f3:d7:d5:df:17:5f:71:15:65:0f:e8:aa: 23:b6:82:1d:85:9b:7c:2a:d3:f6:8f:c9:cf:af:2c:23:07:24: 6a:6c:9e:d3:87:b2:45:58:12:9d:9a:dd:13:f0:f6:1a:bc:84: a4:71:f6:c5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjQwNTAyMTgzNjQzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzZGQzYi02NWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Clj8DkB0E5HFN6iEzd8BOrKCQWqXnVukYjiVqG3fohx0WmKxhzl3KJNOA3F qhcmfnjOYWmpy4tCW70UklmRozuuJRjVAW3Sc4oya3r5cAsIAqNWLq53ei5+vOZk Q4PozfzTRwAQ3ohrzl2qsabmqG7xVG8jFR1jAxSBHdqdBllKPdYk4IfgQOrU8Fay p4hoHvtPQI5SWELAF4wItVvd72JbYxo80G5cTXZKUYh2t4S59hjeGqIravUfj8KF bofjhPXO2zNsaTmkwN40E3Yq/LYSUcBGyJyUpPch09qxBuEDAnAkvFAa7PUT35En L1PgsamQaY75ncm/YSZO7Rk5RwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCYxkz2S aMlPhvd+gH0aYKNURR+2MB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvMTU2OEEwMTIy MTNDMTFFRUEyNURCRjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACTTBMDBAGTTPAwDQYJKoZIhvcNAQELBQADggEBAD50Ne0U Xk9wgyucfOroSL7qg7PGdEdR2esYzsbRwqbS0nYQ8h5UCKLnrZGbYTUPNEewkRPu BCGMxaugNTAci3mXlNBmHorIp203MqFBbJdrHGfxEsQPCTOghqJ2l3ZKfk0lGBZz UnK3jpDP9gGxXIFq390mRgytEHDk1utsZEFUCqRzodnRAA0G8LabptBDNXwXFAIL 03UTaoaPBznYJuKrj8+xhuFpTOcwcuN+TCugA+33mV1EiSIOLgQyURQpjPUU6dvU QthGY6hxjPPX1d8XX3EVZQ/oqiO2gh2Fm3wq0/aPyc+vLCMHJGpsntOHskVYEp2a 3RPw9hq8hKRx9sU= -----END CERTIFICATE-----Generated at Fri May 31 20:34:08 2024 by rpki-client on console-ams.rpki-client.org