$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa File: F4D5953246AF11E9A68E7652C4F9AE02.roa (raw, json) Hash identifier: vZxHW9v+mlkDb36aKmwFEOVDkr5RgcxOUaNZsIkNej4= Subject key identifier: B5:54:A1:F0:DB:ED:67:37:46:E7:F1:35:94:FC:AA:21:3C:BA:E8:24 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 0F7A Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa Signing time: Thu 02 May 2024 18:36:41 +0000 ROA not before: Thu 02 May 2024 18:36:41 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 10152 IP address blocks: 147.76.0.0/24 maxlen: 24 147.76.1.0/24 maxlen: 24 147.76.51.0/24 maxlen: 24 147.76.180.0/24 maxlen: 24 147.76.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3962 (0xf7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 18:36:41 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633dd39-9238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:6d:4c:ef:c5:4d:c1:f1:0d:74:84:83:03: 9f:23:ce:e0:d4:53:cd:64:d3:39:bc:b8:66:30:89: dd:e0:67:30:9c:ba:a4:65:0a:26:6a:2e:4b:6a:25: 80:c8:ad:af:27:2b:54:a6:e0:a3:da:f3:0e:66:45: 13:b8:cc:70:76:35:ad:2a:0e:c6:da:54:04:4b:57: 09:a5:27:20:b5:3e:3c:5f:40:aa:9e:c7:16:c8:ed: a1:7f:db:b3:75:e0:76:ee:3e:9f:0d:db:22:2c:46: 2e:74:e2:f6:89:d3:f6:66:c3:6e:70:d6:6b:c9:c8: ec:9c:4f:c8:60:73:44:51:18:c7:0d:dd:ba:03:3a: 2a:25:ed:9c:07:3b:51:a4:1b:3f:80:d1:d1:8d:23: 7f:47:e0:db:06:2a:49:9a:ce:c3:a9:f5:e6:a0:81: 73:e5:b8:7b:9a:b7:e9:36:5d:c8:fa:fc:25:23:30: 18:c2:fa:a7:d1:ba:db:3d:e1:77:78:90:88:a6:c0: 65:70:9c:fe:5f:c4:fc:6e:61:2b:b8:93:18:12:d0: 5f:6a:cf:43:ed:0d:db:d8:4b:8b:cb:bf:69:2d:5f: ec:ed:e5:25:22:fc:d2:f4:35:26:40:72:b7:25:f7: 44:53:04:9d:b0:da:57:08:c9:5e:0e:77:4c:6a:14: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:54:A1:F0:DB:ED:67:37:46:E7:F1:35:94:FC:AA:21:3C:BA:E8:24 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.76.0.0/23 147.76.51.0/24 147.76.180.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:5a:41:3f:10:d2:bf:be:b5:1b:47:3e:79:c2:8f:5e:d6:24: a5:48:64:11:48:99:33:4f:47:9a:99:5a:cd:98:50:42:a0:56: 50:0a:25:af:71:24:1a:98:05:8d:40:4e:9f:0f:3f:aa:02:a4: aa:18:9c:cb:74:9d:9b:cc:77:3a:c7:7b:a6:1e:aa:56:44:16: c0:58:41:7a:64:0f:9c:89:95:e6:20:48:06:39:b1:31:6f:a8: 2d:de:02:c8:87:eb:8b:34:7c:41:40:de:10:26:79:2f:e6:ab: 3d:eb:97:02:67:be:1c:c8:9e:3d:a9:ab:1a:4f:0a:e4:04:66: 85:4c:6c:1d:63:67:b9:d2:aa:0a:15:34:d5:d9:01:88:c5:4b: 4c:6a:95:47:90:c1:f8:d6:38:6d:3c:77:f0:a2:a3:8e:13:ff: 1e:b4:64:e1:c1:c6:b4:17:fc:c6:6a:7e:e3:c9:ac:58:de:34: 36:1f:a4:e3:f0:57:80:32:3c:1d:b3:87:2b:7f:b7:e0:6d:b1: a0:6a:8f:cc:f6:cf:f4:ae:2a:90:38:64:9f:5e:7f:58:f8:8e: 0b:5d:96:83:e2:97:ed:27:14:95:c5:f1:7c:4e:a5:70:a6:d9: 77:cd:20:e0:98:e4:76:32:6a:1b:31:61:a7:1c:34:64:f9:50: 94:e8:23:71 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICD3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjQwNTAyMTgzNjQxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzZGQzOS05MjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPxtTO/FTcHxDXSEgwOfI87g1FPNZNM5vLhmMInd4GcwnLqkZQomai5LaiWA yK2vJytUpuCj2vMOZkUTuMxwdjWtKg7G2lQES1cJpScgtT48X0CqnscWyO2hf9uz deB27j6fDdsiLEYudOL2idP2ZsNucNZrycjsnE/IYHNEURjHDd26AzoqJe2cBztR pBs/gNHRjSN/R+DbBipJms7DqfXmoIFz5bh7mrfpNl3I+vwlIzAYwvqn0brbPeF3 eJCIpsBlcJz+X8T8bmEruJMYEtBfas9D7Q3b2EuLy79pLV/s7eUlIvzS9DUmQHK3 JfdEUwSdsNpXCMleDndMahT1LQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLVUofDb 7Wc3RufxNZT8qiE8uugkMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvRjRENTk1MzI0 NkFGMTFFOUE2OEU3NjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGTTAADBACTTDMDBAGTTLQwDQYJKoZIhvcNAQELBQADggEB AHpaQT8Q0r++tRtHPnnCj17WJKVIZBFImTNPR5qZWs2YUEKgVlAKJa9xJBqYBY1A Tp8PP6oCpKoYnMt0nZvMdzrHe6YeqlZEFsBYQXpkD5yJleYgSAY5sTFvqC3eAsiH 64s0fEFA3hAmeS/mqz3rlwJnvhzInj2pqxpPCuQEZoVMbB1jZ7nSqgoVNNXZAYjF S0xqlUeQwfjWOG08d/Cio44T/x60ZOHBxrQX/MZqfuPJrFjeNDYfpOPwV4AyPB2z hyt/t+BtsaBqj8z2z/SuKpA4ZJ9ef1j4jgtdloPil+0nFJXF8XxOpXCm2XfNIOCY 5HYyahsxYaccNGT5UJToI3E= -----END CERTIFICATE-----Generated at Thu May 16 20:25:48 2024 by rpki-client on console-ams.rpki-client.org