$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa File: 5E46267A46B111E98B793856C4F9AE02.roa (raw, json) Hash identifier: sVPaCSc2bcCAKD2poBldbcrhl65mJlc4QyQnO+jZmMc= Subject key identifier: EC:E2:82:BF:CD:C2:DE:90:53:07:06:0E:80:FD:CB:7C:0B:3F:06:44 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 0F7B Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa Signing time: Thu 02 May 2024 18:36:42 +0000 ROA not before: Thu 02 May 2024 18:36:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136518 IP address blocks: 147.76.54.0/24 maxlen: 24 147.76.55.0/24 maxlen: 24 147.76.60.0/24 maxlen: 24 147.76.62.0/24 maxlen: 24 147.76.63.0/24 maxlen: 24 147.76.64.0/24 maxlen: 24 147.76.65.0/24 maxlen: 24 147.76.66.0/24 maxlen: 24 147.76.99.0/24 maxlen: 24 147.76.100.0/24 maxlen: 24 147.76.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3963 (0xf7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 18:36:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633dd3a-e9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:0d:fd:d1:79:00:9c:bb:4c:76:6d:a0:44: 60:40:19:75:df:f5:95:2a:71:09:93:67:4a:e3:ee: 69:1e:b6:d9:7f:91:d7:7a:ac:31:ab:a7:92:1b:a6: c3:0e:c8:52:04:a7:a8:81:b9:79:32:4d:e3:c9:bc: d3:69:8e:4b:2b:6b:a9:41:59:29:2f:2f:2e:ee:a3: 44:b5:f6:3b:e3:db:70:f1:05:d7:be:42:f0:f4:30: cf:6c:6e:be:2e:ff:7f:e4:9f:cb:7b:af:92:10:f3: 1e:53:54:26:13:9a:3a:49:8f:e5:5c:57:29:6f:55: d5:71:4b:16:b9:8d:ef:93:9b:2e:5c:97:f7:45:ca: f1:a2:f2:79:17:b2:14:c2:86:ee:ba:ec:b1:47:0f: 4c:ab:2e:93:54:16:06:f0:01:d8:85:0c:b8:fb:cf: b4:d9:9f:85:29:7d:e1:f6:b1:10:f4:1a:eb:cb:e5: e0:18:ee:ab:b3:8e:ce:b5:89:05:08:5d:f0:83:fe: ce:77:76:b3:33:35:30:f5:9f:3f:d5:f5:c3:d1:fb: e7:7c:5d:fc:2b:45:c1:07:de:54:50:c3:e3:a3:85: 0d:04:e5:37:57:a8:b3:6d:74:41:bb:7a:e4:81:e3: f2:cb:08:22:b2:ce:16:52:48:c7:31:4a:09:4e:64: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:82:BF:CD:C2:DE:90:53:07:06:0E:80:FD:CB:7C:0B:3F:06:44 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.76.54.0/23 147.76.60.0/24 147.76.62.0-147.76.66.255 147.76.99.0-147.76.101.255 Signature Algorithm: sha256WithRSAEncryption 18:cc:ef:16:0c:b5:91:47:28:32:f0:f9:df:f9:dc:c3:00:41: e3:54:1b:30:fe:f3:1e:21:5e:01:14:b0:03:38:ad:08:74:b8: f2:99:59:9e:44:82:99:1a:84:3f:58:c9:4e:ca:9d:84:f6:3c: ae:bc:da:2f:88:d8:fd:16:1f:fb:17:29:88:f8:8d:81:84:1a: 09:f3:5e:65:8a:53:c0:42:cf:3e:7c:78:8d:3b:56:c6:e8:e8: ec:97:96:ec:74:f1:b9:aa:6d:87:3c:be:4e:2f:4d:09:86:34: 82:21:15:9e:77:91:fc:a9:23:dc:0b:23:84:49:70:09:d5:83: c4:ac:fc:95:bf:d0:58:83:1b:94:8f:16:1e:59:6b:11:cd:52: 9e:b4:27:3e:45:ca:08:20:d7:9d:fa:6e:8f:a0:7e:7d:2e:8c: 78:b8:7b:a4:20:9c:4c:11:cd:b1:b1:28:bb:c7:ea:fd:0c:bc: 70:d1:ce:0e:2e:de:94:48:56:f1:1d:1c:9b:1c:f4:cb:7c:ea: 12:f4:31:30:42:f1:4c:35:79:1e:80:99:a8:92:c1:49:a6:d2: 58:6d:6d:3b:58:ba:37:81:9b:94:bc:74:ab:bb:38:1b:31:05: a1:60:86:ba:8d:43:c3:49:85:55:1a:5f:3c:9b:fc:f3:2d:49: 5b:f6:cb:44 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICD3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjQwNTAyMTgzNjQyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzZGQzYS1lOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPgN/dF5AJy7THZtoERgQBl13/WVKnEJk2dK4+5pHrbZf5HXeqwxq6eSG6bD DshSBKeogbl5Mk3jybzTaY5LK2upQVkpLy8u7qNEtfY749tw8QXXvkLw9DDPbG6+ Lv9/5J/Le6+SEPMeU1QmE5o6SY/lXFcpb1XVcUsWuY3vk5suXJf3RcrxovJ5F7IU wobuuuyxRw9Mqy6TVBYG8AHYhQy4+8+02Z+FKX3h9rEQ9Brry+XgGO6rs47OtYkF CF3wg/7Od3azMzUw9Z8/1fXD0fvnfF38K0XBB95UUMPjo4UNBOU3V6izbXRBu3rk gePyywgiss4WUkjHMUoJTmTVeQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFOzigr/N wt6QUwcGDoD9y3wLPwZEMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvNUU0NjI2N0E0 NkIxMTFFOThCNzkzODU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgDBAGTTDYDBACTTDwwDAMEAZNMPgMEAJNMQjAMAwQAk0xjAwQB k0xkMA0GCSqGSIb3DQEBCwUAA4IBAQAYzO8WDLWRRygy8Pnf+dzDAEHjVBsw/vMe IV4BFLADOK0IdLjymVmeRIKZGoQ/WMlOyp2E9jyuvNoviNj9Fh/7FymI+I2BhBoJ 815lilPAQs8+fHiNO1bG6Ojsl5bsdPG5qm2HPL5OL00JhjSCIRWed5H8qSPcCyOE SXAJ1YPErPyVv9BYgxuUjxYeWWsRzVKetCc+RcoIINed+m6PoH59Lox4uHukIJxM Ec2xsSi7x+r9DLxw0c4OLt6USFbxHRybHPTLfOoS9DEwQvFMNXkegJmoksFJptJY bW07WLo3gZuUvHSruzgbMQWhYIa6jUPDSYVVGl88m/zzLUlb9stE -----END CERTIFICATE-----Generated at Thu May 16 20:25:48 2024 by rpki-client on console-ams.rpki-client.org