$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/3A827C88AE0C11EB9325C43EC4F9AE02.roa File: 3A827C88AE0C11EB9325C43EC4F9AE02.roa (raw, json) Hash identifier: 9LnxkTC3qyNHnmlyQgGypMIIdsZq/Yxpx5XTQa4c9C4= Subject key identifier: 29:6D:26:56:35:5B:FE:C7:A3:69:FC:06:D2:77:5A:B8:8D:C3:22:B8 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 297E Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/3A827C88AE0C11EB9325C43EC4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:07 +0000 ROA not before: Tue 31 Dec 2024 15:53:07 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 15133 IP address blocks: 49.231.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10622 (0x297e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Dec 31 15:53:07 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741363-48bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:99:ff:36:93:0c:37:05:bd:8f:38:0d:09: 1d:29:76:16:48:52:8f:53:3b:ef:9f:da:f5:fb:ba: 97:1e:db:9f:09:ef:a1:89:ff:89:22:b3:cc:e0:db: 5c:3a:e2:9f:4b:f3:d6:14:f7:da:c5:9d:99:51:65: 86:3c:06:79:20:ce:cb:1d:82:a2:dc:97:0f:1c:93: ee:d6:40:84:4f:21:9c:c7:2f:ea:9b:a5:10:09:76: 23:53:3a:dd:4a:76:d8:01:7a:d4:41:ff:d7:69:c6: aa:41:c2:e6:f7:f5:33:d9:8b:82:bd:ad:f9:c8:a3: 9e:15:ea:fc:69:11:88:85:62:15:c1:37:03:dc:3b: 2f:b1:75:d9:b9:00:72:be:e7:f0:35:05:2d:a1:d9: 91:fc:e4:80:5b:43:98:75:26:b9:86:b9:bf:03:cd: e5:58:d6:05:37:90:66:1b:ad:64:21:42:15:e9:c0: ed:c7:b0:4e:49:d6:eb:0c:90:25:00:12:aa:11:fe: 21:7d:f6:ba:d9:b0:fe:1d:08:42:22:6c:2c:93:06: 34:05:91:ca:df:f6:4f:87:e5:85:3b:ed:01:f4:92: ff:22:7d:7e:52:ca:b0:b0:ec:f2:15:9c:be:0d:0a: e7:09:55:fc:b9:59:d6:df:9a:1e:10:4e:a9:b8:9c: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6D:26:56:35:5B:FE:C7:A3:69:FC:06:D2:77:5A:B8:8D:C3:22:B8 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/3A827C88AE0C11EB9325C43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.231.126.0/24 Signature Algorithm: sha256WithRSAEncryption 80:16:ba:3c:05:f8:b8:79:0a:03:59:fb:fb:0b:c6:4c:d9:f4: 82:0e:a3:47:28:9d:9d:b3:7a:1e:89:0f:f2:62:9f:4c:48:21: 0e:5c:a2:a7:d1:be:03:6e:0e:de:d4:46:14:a6:ac:88:16:60: 48:20:a9:17:67:2f:64:a1:e2:45:5e:f6:5c:f3:b1:35:b3:33: c1:28:e5:8c:64:67:fb:17:59:fa:59:21:be:c8:6b:55:3d:49: 41:99:df:22:72:44:63:1d:23:a8:84:ce:b8:76:83:76:76:66: d0:04:f0:6f:03:77:b0:92:55:32:31:43:c9:45:dd:83:19:2c: ab:f3:48:08:d3:3e:c9:d6:d3:4d:68:49:78:91:ab:f2:9d:3d: 89:80:68:4f:ff:39:3a:b6:02:65:c7:36:09:9f:ca:31:b6:2f: 12:17:56:e9:aa:1e:94:e4:d0:26:77:9a:b2:3d:85:d3:18:f1: 9c:fa:98:87:7f:7a:d7:31:48:ae:db:b9:c5:e3:74:04:7b:24: 8f:9e:e2:a0:55:38:43:19:10:b0:f2:83:2f:a5:a9:c9:1c:9c: 94:47:44:53:e1:ce:04:69:e1:a5:cc:d7:ae:e6:68:bd:06:06: 0b:12:43:f2:c8:2c:7b:f7:6d:1a:b5:03:06:b1:97:46:1c:fa: af:32:cc:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzA3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM2My00OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxqZ/zaTDDcFvY84DQkdKXYWSFKPUzvvn9r1+7qXHtufCe+hif+JIrPM4Ntc OuKfS/PWFPfaxZ2ZUWWGPAZ5IM7LHYKi3JcPHJPu1kCETyGcxy/qm6UQCXYjUzrd SnbYAXrUQf/XacaqQcLm9/Uz2YuCva35yKOeFer8aRGIhWIVwTcD3DsvsXXZuQBy vufwNQUtodmR/OSAW0OYdSa5hrm/A83lWNYFN5BmG61kIUIV6cDtx7BOSdbrDJAl ABKqEf4hffa62bD+HQhCImwskwY0BZHK3/ZPh+WFO+0B9JL/In1+UsqwsOzyFZy+ DQrnCVX8uVnW35oeEE6puJy1LQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCltJlY1 W/7Ho2n8BtJ3WriNwyK4MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvM0E4MjdDODhB RTBDMTFFQjkzMjVDNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx534wDQYJKoZIhvcNAQELBQADggEBAIAWujwF+Lh5CgNZ +/sLxkzZ9IIOo0conZ2zeh6JD/Jin0xIIQ5coqfRvgNuDt7URhSmrIgWYEggqRdn L2Sh4kVe9lzzsTWzM8Eo5YxkZ/sXWfpZIb7Ia1U9SUGZ3yJyRGMdI6iEzrh2g3Z2 ZtAE8G8Dd7CSVTIxQ8lF3YMZLKvzSAjTPsnW001oSXiRq/KdPYmAaE//OTq2AmXH NgmfyjG2LxIXVumqHpTk0CZ3mrI9hdMY8Zz6mId/etcxSK7bucXjdAR7JI+e4qBV OEMZELDygy+lqckcnJRHRFPhzgRp4aXM167maL0GBgsSQ/LILHv3bRq1Awaxl0Yc +q8yzEk= -----END CERTIFICATE-----Generated at Sat Apr 5 01:42:36 2025 by rpki-client