$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/30D59F38D61011E996559038C4F9AE02.roa File: 30D59F38D61011E996559038C4F9AE02.roa (raw, json) Hash identifier: l/Zm9Jm1iw5tClG3iTcyHjNIlp6OQ7eYrNNSwGZ1a9o= Subject key identifier: B2:88:AB:7D:BB:AE:C4:31:6D:25:DC:01:CE:F8:95:16:BE:CF:35:91 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2983 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/30D59F38D61011E996559038C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:12 +0000 ROA not before: Tue 31 Dec 2024 15:53:12 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 20940 IP address blocks: 49.231.112.0/24 maxlen: 24 49.231.116.0/23 maxlen: 23 2405:9800:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10627 (0x2983) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Dec 31 15:53:12 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741367-37c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:41:fc:bc:b5:0a:da:a1:a2:70:10:21:54: 2a:51:45:87:9d:2a:c3:f8:ae:83:27:01:e0:96:6a: f3:68:3e:3b:ff:69:ae:c0:f6:22:a3:3b:3d:7e:f2: 52:af:6b:ed:c1:9d:63:a0:31:ad:95:9c:6c:8d:e6: b6:c1:1b:0a:6f:c2:0e:2b:5e:05:bc:05:e9:25:ec: 41:4f:8c:64:fe:bf:44:e4:b1:5f:c1:5a:c4:af:57: fa:42:2b:c9:af:13:0e:88:0f:45:55:71:61:64:cb: ff:53:45:6b:a8:17:f3:e3:49:0f:ba:0e:ac:bd:0b: 38:5b:91:c3:72:d5:90:9b:bd:63:e8:c7:cf:f1:3e: 99:47:5f:e7:02:d2:6f:ee:06:5f:9d:4d:2d:e1:3c: 21:25:17:b9:7a:bd:1c:2a:e9:88:18:ed:2b:c8:d9: 43:9c:39:6e:c5:79:28:51:e5:20:96:a3:9f:15:71: e2:65:4a:7a:ae:f9:e6:07:4f:3e:98:dd:11:27:01: 2a:e3:0e:81:e3:b4:58:65:e5:ac:3b:18:3c:b6:4c: e2:e6:5d:41:79:4e:3b:0e:f3:46:c1:82:c8:8b:b4: 22:ef:e1:45:af:a1:57:63:c9:fd:6e:00:e6:4d:2a: cb:2a:a5:a9:d1:74:13:95:7b:36:30:4f:f4:14:6e: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:88:AB:7D:BB:AE:C4:31:6D:25:DC:01:CE:F8:95:16:BE:CF:35:91 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/30D59F38D61011E996559038C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.231.112.0/24 49.231.116.0/23 IPv6: 2405:9800:b::/48 Signature Algorithm: sha256WithRSAEncryption 07:bc:e8:59:c4:9b:47:ff:db:00:84:9d:1e:0f:30:a1:36:c8: f1:a7:b9:20:81:16:6d:02:c8:98:f4:2b:ef:bb:79:ec:70:84: c2:a7:ae:75:23:c0:70:b5:88:2a:d4:be:f5:59:ae:6f:ee:6f: bb:4c:97:4d:17:23:23:ef:df:02:16:60:27:73:05:77:13:84: 95:00:ab:4d:42:ac:63:15:e1:03:b7:1a:cd:8d:8b:3e:73:81: da:6b:93:4c:65:97:1e:a5:a8:0f:d8:b8:65:5b:ce:29:8a:3f: c8:f6:12:a9:ad:8a:f6:81:99:a7:26:da:f4:e6:a5:5d:2b:c4: 42:b4:a4:39:b4:b8:89:4a:53:43:8b:ef:3f:16:36:62:22:60: d0:f7:98:38:b6:3c:42:8a:e3:2c:80:45:30:71:d8:4e:8c:0b: d7:92:a2:f5:17:2a:61:52:9c:76:62:72:0c:b2:f3:0b:bc:57: ce:ca:19:cc:92:75:3d:b2:47:49:10:8f:4d:82:5a:45:96:b2: 64:1e:ae:d9:c8:fc:2e:3a:8a:f0:d6:a6:97:a0:8f:3e:cc:58: cc:34:a3:5c:a9:4c:d2:41:71:9a:77:d3:b0:61:49:3f:bd:73: 6b:b6:51:b3:30:a4:be:4f:9a:ef:45:25:08:4e:ec:68:d7:43: 37:c3:ad:5b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICKYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzEyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM2Ny0zN2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6lB/Ly1CtqhonAQIVQqUUWHnSrD+K6DJwHglmrzaD47/2muwPYiozs9fvJS r2vtwZ1joDGtlZxsjea2wRsKb8IOK14FvAXpJexBT4xk/r9E5LFfwVrEr1f6QivJ rxMOiA9FVXFhZMv/U0VrqBfz40kPug6svQs4W5HDctWQm71j6MfP8T6ZR1/nAtJv 7gZfnU0t4TwhJRe5er0cKumIGO0ryNlDnDluxXkoUeUglqOfFXHiZUp6rvnmB08+ mN0RJwEq4w6B47RYZeWsOxg8tkzi5l1BeU47DvNGwYLIi7Qi7+FFr6FXY8n9bgDm TSrLKqWp0XQTlXs2ME/0FG6AWwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFLKIq327 rsQxbSXcAc74lRa+zzWRMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMzBENTlGMzhE NjEwMTFFOTk2NTU5MDM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAAx53ADBAEx53QwDwQCAAIwCQMHACQFmAAACzANBgkqhkiG 9w0BAQsFAAOCAQEAB7zoWcSbR//bAISdHg8woTbI8ae5IIEWbQLImPQr77t57HCE wqeudSPAcLWIKtS+9Vmub+5vu0yXTRcjI+/fAhZgJ3MFdxOElQCrTUKsYxXhA7ca zY2LPnOB2muTTGWXHqWoD9i4ZVvOKYo/yPYSqa2K9oGZpyba9OalXSvEQrSkObS4 iUpTQ4vvPxY2YiJg0PeYOLY8QorjLIBFMHHYTowL15Ki9RcqYVKcdmJyDLLzC7xX zsoZzJJ1PbJHSRCPTYJaRZayZB6u2cj8LjqK8Naml6CPPsxYzDSjXKlM0kFxmnfT sGFJP71za7ZRszCkvk+a70UlCE7saNdDN8OtWw== -----END CERTIFICATE-----Generated at Sat Apr 5 02:15:43 2025 by rpki-client