$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa File: 3848F884F23311EE97946A35C4F9AE02.roa (raw, json) Hash identifier: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q= Subject key identifier: CB:8C:0D:28:18:C9:75:5A:C1:20:5D:09:1F:46:87:12:38:88:FD:74 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 1043 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa Signing time: Fri 02 May 2025 17:57:15 +0000 ROA not before: Fri 02 May 2025 17:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7545 IP address blocks: 147.76.52.0/24 maxlen: 24 147.76.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4163 (0x1043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 17:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6815077b-d765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:f1:40:c2:d8:e2:28:9e:66:e3:1f:04:aa: 21:01:fd:9f:9f:58:55:13:2d:b6:90:9c:4f:9b:99: 61:dc:89:d5:3b:2c:0d:d9:3a:c0:de:fb:c4:be:38: e5:7d:29:45:02:61:d0:80:d9:5a:5f:e3:7a:9c:8a: 25:42:82:a2:1e:6d:39:01:fc:1d:a1:b4:48:ae:bb: dc:ee:88:ab:50:d3:8f:53:0e:a7:7b:a9:8c:15:56: d4:12:29:51:34:d0:09:95:c9:21:f8:0c:22:1b:19: 33:bf:82:d3:a4:7d:b8:f2:e6:24:24:69:13:44:38: bd:6f:84:8f:db:29:12:e6:29:e2:70:75:54:21:86: 66:22:19:58:d3:38:a3:2f:da:f8:62:67:02:e9:cb: 12:a0:a8:d1:3b:ec:15:78:6c:97:42:96:45:f2:74: 53:fd:6a:4b:97:3a:bf:36:93:65:fd:a3:6f:14:83: d6:31:92:89:c3:42:3f:6f:c8:e2:a7:95:5b:7f:45: bf:8f:e9:d8:bc:28:ef:50:62:53:e0:45:84:d0:ae: e3:2f:13:8f:ec:01:a7:c9:40:c4:fb:a5:a3:62:1d: ab:99:2c:e9:bd:ee:43:22:04:6a:c1:80:22:cc:1b: 19:3c:69:b2:63:5c:d8:b2:f7:21:0a:e5:df:2f:fe: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8C:0D:28:18:C9:75:5A:C1:20:5D:09:1F:46:87:12:38:88:FD:74 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.76.52.0/23 Signature Algorithm: sha256WithRSAEncryption 31:3c:db:2c:d9:ef:93:f8:d0:09:b0:f7:dd:64:f4:82:fd:e5: 00:3d:17:e7:7f:c5:a6:dd:1d:3a:a8:16:80:62:6f:7e:7b:b2: d6:de:0c:d5:f2:f6:1b:26:f7:71:f9:91:fb:b2:52:6a:b9:23: dc:f1:de:bf:5d:7f:b4:48:28:4e:80:bf:ed:2e:9a:c8:ca:bc: 75:db:e8:c0:66:24:60:62:fd:17:f7:9e:52:c7:48:7e:c8:db: 22:a7:c3:33:d5:b7:68:07:e4:9d:c4:45:45:95:ad:87:85:81: a2:f1:ba:26:cb:b2:22:f1:12:5c:d4:e7:ca:4b:d2:8a:86:32: 5f:21:19:c2:a3:99:43:5b:01:60:48:e0:f0:19:d8:86:2f:e9: d8:90:af:2c:0a:1a:fb:f6:a8:94:75:31:0f:ee:ed:fd:3d:4d: 36:d6:d5:51:33:f8:3d:21:11:c6:58:3d:97:f4:1f:20:87:c3: e8:07:db:9d:c8:23:e2:26:ce:39:25:ed:d1:3d:04:b3:01:0c: d9:76:f7:77:a0:d8:7e:f6:7d:cd:e6:ad:d7:64:78:03:1f:ed: 89:6a:5a:bf:67:77:e2:f0:39:f7:b9:f7:08:53:0c:0e:2e:c4: 0a:fb:d9:28:f5:fd:45:dd:6b:aa:2f:84:1e:f5:7d:3f:6e:d4: 00:94:ca:55 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNTAyMTc1NzE1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MDc3Yi1kNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLDxQMLY4iieZuMfBKohAf2fn1hVEy22kJxPm5lh3InVOywN2TrA3vvEvjjl fSlFAmHQgNlaX+N6nIolQoKiHm05AfwdobRIrrvc7oirUNOPUw6ne6mMFVbUEilR NNAJlckh+AwiGxkzv4LTpH248uYkJGkTRDi9b4SP2ykS5inicHVUIYZmIhlY0zij L9r4YmcC6csSoKjRO+wVeGyXQpZF8nRT/WpLlzq/NpNl/aNvFIPWMZKJw0I/b8ji p5Vbf0W/j+nYvCjvUGJT4EWE0K7jLxOP7AGnyUDE+6WjYh2rmSzpve5DIgRqwYAi zBsZPGmyY1zYsvchCuXfL/60EwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMuMDSgY yXVawSBdCR9GhxI4iP10MB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvMzg0OEY4ODRG MjMzMTFFRTk3OTQ2QTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGTTDQwDQYJKoZIhvcNAQELBQADggEBADE82yzZ75P40Amw 991k9IL95QA9F+d/xabdHTqoFoBib357stbeDNXy9hsm93H5kfuyUmq5I9zx3r9d f7RIKE6Av+0umsjKvHXb6MBmJGBi/Rf3nlLHSH7I2yKnwzPVt2gH5J3ERUWVrYeF gaLxuibLsiLxElzU58pL0oqGMl8hGcKjmUNbAWBI4PAZ2IYv6diQrywKGvv2qJR1 MQ/u7f09TTbW1VEz+D0hEcZYPZf0HyCHw+gH253II+Imzjkl7dE9BLMBDNl293eg 2H72fc3mrddkeAMf7YlqWr9nd+LwOfe59whTDA4uxAr72Sj1/UXda6ovhB71fT9u 1ACUylU= -----END CERTIFICATE-----Generated at Tue May 13 07:54:42 2025 by rpki-client