$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ACA5633A9B1111EE855AC94DC4F9AE02.roa File: ACA5633A9B1111EE855AC94DC4F9AE02.roa (raw, json) Hash identifier: LQcC0ydQkIItU+Qp5YqxZIfllhK/75sFK0LSSskn+GU= Subject key identifier: 6C:2E:7A:F5:66:81:84:73:3A:4C:61:AE:A1:33:B1:C6:7C:F8:66:89 Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Certificate serial: 2450 Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ACA5633A9B1111EE855AC94DC4F9AE02.roa Signing time: Tue 09 Apr 2024 19:35:16 +0000 ROA not before: Tue 09 Apr 2024 19:35:16 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 45458 IP address blocks: 147.50.80.0/24 maxlen: 24 147.50.96.0/20 maxlen: 24 147.50.112.0/21 maxlen: 21 147.50.119.0/24 maxlen: 24 147.50.125.0/24 maxlen: 24 147.50.126.0/23 maxlen: 24 147.50.192.0/19 maxlen: 19 147.50.192.0/24 maxlen: 24 147.50.195.0/24 maxlen: 24 184.82.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9296 (0x2450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Validity Not Before: Apr 9 19:35:16 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66159874-5777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b2:d8:3b:d1:ef:fd:67:36:3b:2d:7c:aa:85: 1f:b2:ff:78:91:a4:61:ec:2e:24:05:1e:10:b5:96: a9:86:6b:64:2d:a0:16:1a:fa:74:9b:37:78:f3:2f: 9b:49:fa:fd:a9:11:03:b6:08:d0:05:65:68:a2:65: 48:b6:18:14:1e:99:9c:73:be:74:8e:93:31:6d:87: 00:65:79:e6:b8:9d:61:40:8f:fc:c4:9f:d9:ee:a6: 00:e5:ea:d2:54:17:b2:dc:dd:0c:a5:7d:86:7e:8a: 9c:55:c3:a4:da:fe:a2:0a:81:9d:2c:2b:33:56:87: 4f:dd:6a:d4:8f:54:7a:a8:4d:ba:a9:05:55:cc:62: e0:43:48:3b:c7:cc:60:b3:48:96:e6:fb:54:c8:9b: 48:d7:f7:38:fd:96:5e:bc:da:84:69:77:17:cb:76: f2:2d:c8:1c:1e:1f:ef:36:65:1b:4f:dd:f3:1c:86: c1:8b:fe:94:af:cd:d6:40:e3:16:f2:59:29:48:f9: 6c:00:fc:d1:00:f2:46:7e:18:e9:a8:91:2d:68:c9: 2a:61:4e:8b:9d:e7:05:4f:be:c6:fb:ca:28:c6:c0: 6e:08:6e:9b:df:a7:6e:3d:c7:4d:a0:ea:bb:ca:09: 49:7d:65:88:6d:dd:98:79:54:2b:e2:e3:1d:f8:98: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2E:7A:F5:66:81:84:73:3A:4C:61:AE:A1:33:B1:C6:7C:F8:66:89 X509v3 Authority Key Identifier: keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ACA5633A9B1111EE855AC94DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.50.80.0/24 147.50.96.0-147.50.119.255 147.50.125.0-147.50.127.255 147.50.192.0/19 184.82.128.0/21 Signature Algorithm: sha256WithRSAEncryption 00:b4:3d:06:51:91:7c:72:51:be:a1:fc:21:cd:c0:3a:31:9e: e7:9b:ff:6b:a7:a5:38:bc:d7:dc:8e:f5:7b:71:28:a2:cc:6a: db:65:36:22:bd:25:27:30:b0:f8:66:b2:7a:f2:9d:85:18:bd: 38:b2:89:a6:b0:92:37:7e:f6:fc:5c:73:7c:86:8f:ab:5a:87: 63:7f:1a:4d:10:45:a7:1a:c6:c9:05:c4:7b:17:d8:84:b9:7e: c1:e9:b6:ef:3c:a1:ad:f0:e7:68:c6:9b:3b:fd:1c:fe:f9:1a: b6:3c:bf:9c:70:8d:ba:84:ab:f2:5b:72:cb:2a:21:94:7f:cd: 51:52:28:9c:88:e3:72:61:36:8c:05:ba:df:6e:fb:d9:83:e6: a2:e0:1d:8f:c8:b6:0a:d9:ab:af:1d:1b:48:81:8c:61:5f:3c: a2:15:42:0f:4d:1b:c9:74:e6:10:2c:f0:24:8a:ae:2d:6d:f4: dd:45:79:42:a5:48:d2:1a:03:af:ae:8e:ce:fb:36:57:4a:d9: f9:0c:d1:af:73:19:33:62:ff:bb:6c:30:89:86:6c:d3:ef:2f: 47:83:f4:c6:a4:20:1b:d5:21:ef:80:b4:71:0f:c6:c5:62:33: d2:c4:5f:c7:8b:3c:b2:ed:08:28:d9:3f:66:55:e3:9e:f1:c4: 86:8b:7c:ef -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICJFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx NDhDNkI0RkEwHhcNMjQwNDA5MTkzNTE2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE1OTg3NC01Nzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LLYO9Hv/Wc2Oy18qoUfsv94kaRh7C4kBR4QtZaphmtkLaAWGvp0mzd48y+b Sfr9qREDtgjQBWVoomVIthgUHpmcc750jpMxbYcAZXnmuJ1hQI/8xJ/Z7qYA5erS VBey3N0MpX2GfoqcVcOk2v6iCoGdLCszVodP3WrUj1R6qE26qQVVzGLgQ0g7x8xg s0iW5vtUyJtI1/c4/ZZevNqEaXcXy3byLcgcHh/vNmUbT93zHIbBi/6Ur83WQOMW 8lkpSPlsAPzRAPJGfhjpqJEtaMkqYU6LnecFT77G+8ooxsBuCG6b36duPcdNoOq7 yglJfWWIbd2YeVQr4uMd+Jg3+QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFGwuevVm gYRzOkxhrqEzscZ8+GaJMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0 UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvQUNBNTYzM0E5 QjExMTFFRTg1NUFDOTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MDQEAgABMC4DBACTMlAwDAMEBZMyYAMEA5MycDAMAwQAkzJ9AwQHkzIAAwQF kzLAAwQDuFKAMA0GCSqGSIb3DQEBCwUAA4IBAQAAtD0GUZF8clG+ofwhzcA6MZ7n m/9rp6U4vNfcjvV7cSiizGrbZTYivSUnMLD4ZrJ68p2FGL04sommsJI3fvb8XHN8 ho+rWodjfxpNEEWnGsbJBcR7F9iEuX7B6bbvPKGt8Odoxps7/Rz++Rq2PL+ccI26 hKvyW3LLKiGUf81RUiiciONyYTaMBbrfbvvZg+ai4B2PyLYK2auvHRtIgYxhXzyi FUIPTRvJdOYQLPAkiq4tbfTdRXlCpUjSGgOvro7O+zZXStn5DNGvcxkzYv+7bDCJ hmzT7y9Hg/TGpCAb1SHvgLRxD8bFYjPSxF/Hizyy7Qgo2T9mVeOe8cSGi3zv -----END CERTIFICATE-----Generated at Mon May 6 17:42:38 2024 by rpki-client on console-ams.rpki-client.org