$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/53C2E0FCD85C11E9811E5758C4F9AE02.roa File: 53C2E0FCD85C11E9811E5758C4F9AE02.roa (raw, json) Hash identifier: IFjr14VzDaCJQkYc7BZ60fLyTVhyAlBLeRayrPuTn0E= Subject key identifier: CB:BD:C5:53:EA:45:5B:41:FB:F2:11:BB:C6:81:E9:34:25:8D:AD:59 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2996 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/53C2E0FCD85C11E9811E5758C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:29 +0000 ROA not before: Tue 31 Dec 2024 15:53:29 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 55545 IP address blocks: 58.64.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10646 (0x2996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Dec 31 15:53:29 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741378-5ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d2:af:5f:38:df:d3:58:d1:ca:6d:16:86:fa: 1c:b9:36:6c:83:a6:17:b3:38:fc:73:84:a0:31:68: 9f:d4:42:1b:b8:ec:76:7a:1e:cd:88:6f:53:25:ca: 7e:9c:43:5e:1e:a9:6f:30:b5:0e:08:f5:46:c3:91: 6f:72:e7:3b:80:c3:1d:6e:0e:1f:7b:8e:dd:c8:ac: 20:b4:41:8b:25:66:fe:c4:a4:00:60:f2:ed:3e:8e: a5:3b:f4:93:9f:56:44:e2:99:f8:dd:ce:81:6b:ad: 7f:4d:8c:7a:99:57:99:80:32:c9:f5:09:de:4e:bd: 76:e4:a4:82:54:12:34:2b:8c:74:4e:c1:36:54:cd: 73:c7:5f:f4:0e:e1:ea:87:bd:4f:b8:8b:3c:fd:bd: 81:d2:70:b3:9a:9f:d0:c7:86:9b:b4:9d:aa:84:9b: bf:84:21:89:15:40:f2:0a:ac:0c:2d:c0:21:ff:c1: bf:9d:1c:df:9b:0c:cf:06:b6:82:ee:ce:58:a6:d8: be:a7:e0:da:59:1e:cf:ec:cd:72:a6:4e:c9:a4:e8: df:99:3f:6a:24:01:7d:c8:2c:12:24:fc:c5:04:50: ad:96:07:09:60:40:59:1a:a3:35:2d:46:5b:9d:4c: 68:5f:14:d6:f1:c7:1e:b2:af:82:b2:5e:ca:a5:18: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BD:C5:53:EA:45:5B:41:FB:F2:11:BB:C6:81:E9:34:25:8D:AD:59 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/53C2E0FCD85C11E9811E5758C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.32.0/24 Signature Algorithm: sha256WithRSAEncryption bb:66:40:23:16:81:e4:49:93:03:ef:c6:a3:31:50:01:e4:41: cb:3c:58:3f:6b:80:cc:e0:d4:9e:0b:04:c8:18:d1:4e:b7:4f: a5:39:a7:59:da:22:48:87:87:c6:0f:69:09:eb:fc:25:5d:7e: 6d:36:ba:ff:f6:67:8b:3f:b2:b9:7a:a1:9e:fd:3f:ec:57:2a: 87:ad:27:f0:24:ae:9b:5e:90:3b:ba:cf:34:85:c4:e9:60:16: e9:38:27:7c:3e:df:95:11:3e:b7:90:87:78:25:53:76:ec:80: 87:dd:d8:ef:cb:d2:fb:f2:37:49:00:62:5c:7a:a5:c8:dd:da: e8:8b:60:60:5b:df:8e:71:8c:f9:51:70:8c:1a:47:77:1b:2b: 35:7e:51:94:29:ce:cc:71:a8:a3:cb:58:52:4f:f1:81:5a:62: 7c:18:ff:9e:21:00:46:a2:24:06:d7:d5:aa:d4:53:ef:93:90: 2a:f8:3b:3f:88:08:c7:43:cb:a0:13:d0:60:0e:35:41:b3:e5: c4:11:c1:6d:69:67:65:9e:70:b5:74:29:a6:c3:b0:35:c3:da: c5:d1:b9:7a:74:df:68:7f:75:a6:5a:fc:9b:2f:d5:bb:15:29: ce:aa:01:03:c1:8b:7b:dd:1e:a3:5b:a4:99:75:38:94:99:71: 25:12:08:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzI5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM3OC01Y2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NKvXzjf01jRym0WhvocuTZsg6YXszj8c4SgMWif1EIbuOx2eh7NiG9TJcp+ nENeHqlvMLUOCPVGw5Fvcuc7gMMdbg4fe47dyKwgtEGLJWb+xKQAYPLtPo6lO/ST n1ZE4pn43c6Ba61/TYx6mVeZgDLJ9QneTr125KSCVBI0K4x0TsE2VM1zx1/0DuHq h71PuIs8/b2B0nCzmp/Qx4abtJ2qhJu/hCGJFUDyCqwMLcAh/8G/nRzfmwzPBraC 7s5Ypti+p+DaWR7P7M1ypk7JpOjfmT9qJAF9yCwSJPzFBFCtlgcJYEBZGqM1LUZb nUxoXxTW8ccesq+Csl7KpRjB3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMu9xVPq RVtB+/IRu8aB6TQlja1ZMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNTNDMkUwRkNE ODVDMTFFOTgxMUU1NzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6QCAwDQYJKoZIhvcNAQELBQADggEBALtmQCMWgeRJkwPv xqMxUAHkQcs8WD9rgMzg1J4LBMgY0U63T6U5p1naIkiHh8YPaQnr/CVdfm02uv/2 Z4s/srl6oZ79P+xXKoetJ/AkrptekDu6zzSFxOlgFuk4J3w+35URPreQh3glU3bs gIfd2O/L0vvyN0kAYlx6pcjd2uiLYGBb345xjPlRcIwaR3cbKzV+UZQpzsxxqKPL WFJP8YFaYnwY/54hAEaiJAbX1arUU++TkCr4Oz+ICMdDy6AT0GAONUGz5cQRwW1p Z2WecLV0KabDsDXD2sXRuXp032h/daZa/Jsv1bsVKc6qAQPBi3vdHqNbpJl1OJSZ cSUSCJ8= -----END CERTIFICATE-----Generated at Sat Apr 5 02:15:36 2025 by rpki-client