$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa File: AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa (raw, json) Hash identifier: xZnRQuGmH+tPK553xhJr/YwZYByUzuaoNBPGfXz/s1A= Subject key identifier: C5:4A:53:7A:B5:01:CE:1A:C5:36:14:7C:39:30:8D:F9:5A:70:B9:FC Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 2581 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa Signing time: Tue 30 Apr 2024 16:23:08 +0000 ROA not before: Tue 30 Apr 2024 16:23:08 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 63944 IP address blocks: 150.107.50.0/24 maxlen: 24 150.107.51.0/24 maxlen: 24 2400:eb80::/33 maxlen: 33 2400:eb80:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 16:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9601 (0x2581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Apr 30 16:23:08 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66311aec-9299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:77:dd:3f:93:01:13:c6:12:ed:42:0d:ed:71: 06:3a:1f:07:9b:ad:70:cc:7a:2f:56:b4:7c:02:55: 02:5d:6b:e5:9f:9e:16:99:78:ef:ac:70:6a:ef:15: ed:a4:20:e8:92:c9:c0:0e:b0:3b:40:4f:8e:01:74: ef:86:21:9d:d1:a1:a5:5b:bc:d8:b3:db:bb:fb:8a: cb:83:b2:d9:19:79:bd:72:82:f6:b5:b3:4b:d3:47: c0:f2:03:7b:50:4c:3a:a7:52:ae:d2:c1:93:1a:a7: c4:b2:24:cf:16:7f:c8:fc:96:cd:d5:6b:a8:30:04: cf:dc:90:40:4f:74:d4:e2:d8:c8:dd:86:6c:a4:36: e0:46:7d:4c:5c:a0:38:0e:92:f8:3f:6f:7e:e3:94: d5:72:7a:4e:a1:99:0f:2f:3b:6f:88:34:bc:7c:34: b4:92:27:78:b4:94:b8:ce:e2:2d:a0:7a:68:7a:da: aa:05:71:55:41:d4:01:3c:b5:94:f8:92:e9:70:dc: 81:d4:45:1c:87:a5:42:7b:94:03:ab:09:86:80:4d: 76:70:4b:7d:db:8d:f9:4d:a2:4d:aa:33:ab:59:d7: 6f:3c:28:ea:8d:ff:61:39:05:6b:b0:0f:b1:bc:32: ff:6b:79:51:25:6c:fd:75:91:50:4f:e3:14:fd:3b: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4A:53:7A:B5:01:CE:1A:C5:36:14:7C:39:30:8D:F9:5A:70:B9:FC X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/AC6AF97ABFBF11EEAA5AC736C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.107.50.0/23 IPv6: 2400:eb80::/32 Signature Algorithm: sha256WithRSAEncryption 2f:dd:cf:79:30:1e:59:23:f7:6a:18:75:bf:fe:fb:58:8d:96: f9:b1:52:b5:b5:b5:47:2a:31:3c:88:df:da:1a:47:be:36:34: 0a:31:88:76:c2:c1:2d:74:cc:37:40:c7:39:2f:fa:2a:22:3b: 77:8b:d3:51:71:09:77:3c:12:f0:e3:1e:27:35:bd:a7:e9:ca: d8:81:a7:9a:49:dc:24:ef:d6:23:af:ed:d2:48:3c:74:b7:19: 73:25:e7:c6:10:6e:46:58:fe:4a:f9:81:0a:e3:d0:3d:e8:78: 8d:40:e3:b9:2e:7f:a0:a9:9f:e6:40:77:b5:8a:b9:e5:23:5b: a7:77:eb:2e:a4:9d:c8:8b:1d:12:71:e0:06:00:e9:33:c7:ce: 20:fe:5e:40:52:45:86:7b:be:df:fa:f5:cc:25:1b:5d:a8:a4: c2:7c:47:bc:5c:68:48:2c:a1:bc:65:cf:c1:9e:45:56:14:48: e7:7d:99:55:37:84:db:1f:f8:97:8d:61:aa:22:e6:4b:c5:4c: 62:db:b1:d9:ec:14:53:95:fe:dc:24:27:5c:9f:1f:2f:9c:48: c1:a1:89:a2:9e:6f:9c:6f:62:25:39:e3:d7:f9:e1:9c:e7:41: 53:20:11:6d:d0:4c:86:7a:8c:c5:f0:6a:19:b2:88:a1:d8:dc: e5:dc:3d:58 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICJYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjQwNDMwMTYyMzA4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMWFlYy05Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HfdP5MBE8YS7UIN7XEGOh8Hm61wzHovVrR8AlUCXWvln54WmXjvrHBq7xXt pCDoksnADrA7QE+OAXTvhiGd0aGlW7zYs9u7+4rLg7LZGXm9coL2tbNL00fA8gN7 UEw6p1Ku0sGTGqfEsiTPFn/I/JbN1WuoMATP3JBAT3TU4tjI3YZspDbgRn1MXKA4 DpL4P29+45TVcnpOoZkPLztviDS8fDS0kid4tJS4zuItoHpoetqqBXFVQdQBPLWU +JLpcNyB1EUch6VCe5QDqwmGgE12cEt92435TaJNqjOrWddvPCjqjf9hOQVrsA+x vDL/a3lRJWz9dZFQT+MU/TuyEQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMVKU3q1 Ac4axTYUfDkwjflacLn8MB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNEQjAvQjg5NUFGNzQwNTE1MTFFNThENDlBRTQyQzRGOUFFMDIvQUM2QUY5N0FC RkJGMTFFRUFBNUFDNzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAGWazIwDQQCAAIwBwMFACQA64AwDQYJKoZIhvcNAQELBQAD ggEBAC/dz3kwHlkj92oYdb/++1iNlvmxUrW1tUcqMTyI39oaR742NAoxiHbCwS10 zDdAxzkv+ioiO3eL01FxCXc8EvDjHic1vafpytiBp5pJ3CTv1iOv7dJIPHS3GXMl 58YQbkZY/kr5gQrj0D3oeI1A47kuf6Cpn+ZAd7WKueUjW6d36y6knciLHRJx4AYA 6TPHziD+XkBSRYZ7vt/69cwlG12opMJ8R7xcaEgsobxlz8GeRVYUSOd9mVU3hNsf +JeNYaoi5kvFTGLbsdnsFFOV/twkJ1yfHy+cSMGhiaKeb5xvYiU549f54ZznQVMg EW3QTIZ6jMXwahmyiKHY3OXcPVg= -----END CERTIFICATE-----Generated at Fri May 24 17:56:32 2024 by rpki-client on console-fra.rpki-client.org