$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/6007188446B111E98B793856C4F9AE02.roa File: 6007188446B111E98B793856C4F9AE02.roa (raw, json) Hash identifier: mPz8p2CrH2JmH3Sb725igNrTRG19saMQGzxs8VfAHPE= Subject key identifier: DB:BA:C6:16:AA:8B:3A:1F:04:52:47:EC:67:F2:9B:09:5C:AF:17:43 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 0F7F Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/6007188446B111E98B793856C4F9AE02.roa Signing time: Thu 02 May 2024 18:36:46 +0000 ROA not before: Thu 02 May 2024 18:36:46 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 7474 IP address blocks: 147.76.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3967 (0xf7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 18:36:46 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633dd3d-f0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:dc:8c:00:cb:1c:85:05:67:53:e5:98:e4: 47:0b:7a:ff:19:a0:41:da:0e:b4:26:0f:d6:fa:50: 0c:8d:71:96:83:aa:89:6d:cd:57:0b:0e:9e:1e:65: 76:9a:ed:a6:40:ab:97:fd:10:15:65:81:0a:78:c0: c7:7b:68:96:ba:a8:9c:fa:6a:52:a6:c6:64:6c:a2: 49:20:15:e9:2a:ff:3c:e2:05:86:23:1e:db:d8:25: 44:16:b3:bb:e3:cd:4b:bb:c9:f2:8d:bf:33:05:44: 68:8b:68:f8:56:48:64:3b:85:dc:84:76:47:5f:23: 29:cc:93:28:4d:d9:d0:c9:2e:02:22:b8:7c:f9:46: 49:f4:5d:42:5f:1b:14:35:e7:87:fb:1d:f1:e8:50: a3:ff:ac:66:d1:b5:55:5f:84:cb:af:39:f2:6a:69: bc:4a:47:72:f8:74:da:32:57:52:ab:6b:f8:be:1a: f0:ed:b5:45:b5:bc:fb:dc:33:13:f8:19:c3:9b:f6: 2e:0f:3b:c9:c7:79:f3:65:b1:04:35:9a:1d:5b:42: eb:c3:88:20:29:c3:c3:4c:54:ab:f4:e9:86:1a:f3: ab:22:ee:1a:67:4c:d7:2f:63:3a:de:c5:d8:c9:46: 22:91:3e:81:f1:c2:2f:31:77:07:ab:68:c4:03:c8: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BA:C6:16:AA:8B:3A:1F:04:52:47:EC:67:F2:9B:09:5C:AF:17:43 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/6007188446B111E98B793856C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.76.21.0/24 Signature Algorithm: sha256WithRSAEncryption 13:7c:8a:90:90:0c:f2:7e:d1:18:df:ea:e8:30:30:58:e2:27: 21:0b:20:03:ea:c0:19:23:e5:cb:83:31:56:c0:b1:5e:92:33: 25:3d:2c:c5:12:19:fa:da:52:31:6c:d9:84:76:1d:82:38:01: af:0e:21:c9:45:a6:9a:7e:84:88:02:1a:3d:4f:bd:97:70:c3: e3:55:d9:60:df:b5:d6:20:85:b0:07:67:3d:49:12:2e:0b:27: fd:82:c8:f9:50:21:bb:6b:1c:84:3c:3f:ac:33:bf:b0:1e:28: a2:5a:61:1c:b2:32:88:98:72:5a:a8:15:24:e3:69:6f:3b:cc: 95:2a:3b:f1:16:1b:a9:2f:3d:4b:2e:44:d8:b3:1c:97:17:11: 22:df:23:b4:89:d9:eb:f8:27:dc:d3:54:9f:f9:84:7e:9c:23: 7c:38:a7:4d:ff:93:a9:2e:8f:eb:8c:37:97:a7:7f:f5:d7:0b: 0f:e1:b8:3a:9b:6b:99:ce:ad:c2:8e:30:4a:c7:20:6c:4c:00: aa:c4:0f:be:31:a3:30:c2:27:07:57:d7:0e:71:49:0c:51:a3: 17:2a:39:1e:6e:25:d6:3b:71:c7:e6:e9:59:c9:b8:ca:1d:04: 4f:55:b8:c7:84:0f:2b:e2:87:ee:eb:50:f5:f0:9b:c0:0b:74: ea:b5:99:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjQwNTAyMTgzNjQ2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzZGQzZC1mMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMncjADLHIUFZ1PlmORHC3r/GaBB2g60Jg/W+lAMjXGWg6qJbc1XCw6eHmV2 mu2mQKuX/RAVZYEKeMDHe2iWuqic+mpSpsZkbKJJIBXpKv884gWGIx7b2CVEFrO7 481Lu8nyjb8zBURoi2j4VkhkO4XchHZHXyMpzJMoTdnQyS4CIrh8+UZJ9F1CXxsU NeeH+x3x6FCj/6xm0bVVX4TLrznyamm8Skdy+HTaMldSq2v4vhrw7bVFtbz73DMT +BnDm/YuDzvJx3nzZbEENZodW0Lrw4ggKcPDTFSr9OmGGvOrIu4aZ0zXL2M63sXY yUYikT6B8cIvMXcHq2jEA8ipMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNu6xhaq izofBFJH7GfymwlcrxdDMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvNjAwNzE4ODQ0 NkIxMTFFOThCNzkzODU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACTTBUwDQYJKoZIhvcNAQELBQADggEBABN8ipCQDPJ+0Rjf 6ugwMFjiJyELIAPqwBkj5cuDMVbAsV6SMyU9LMUSGfraUjFs2YR2HYI4Aa8OIclF ppp+hIgCGj1PvZdww+NV2WDftdYghbAHZz1JEi4LJ/2CyPlQIbtrHIQ8P6wzv7Ae KKJaYRyyMoiYclqoFSTjaW87zJUqO/EWG6kvPUsuRNizHJcXESLfI7SJ2ev4J9zT VJ/5hH6cI3w4p03/k6kuj+uMN5enf/XXCw/huDqba5nOrcKOMErHIGxMAKrED74x ozDCJwdX1w5xSQxRoxcqOR5uJdY7ccfm6VnJuModBE9VuMeEDyvih+7rUPXwm8AL dOq1mUQ= -----END CERTIFICATE-----Generated at Fri May 31 19:47:51 2024 by rpki-client on console-fra.rpki-client.org