$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa File: 648391F4DDD311E8B6169878C4F9AE02.roa (raw, json) Hash identifier: vW/3LlTcPiRKNynwBvHGu0r3aF8Kq8TXUuM7r9PgA/M= Subject key identifier: BA:7A:3B:0C:0D:C7:E8:77:0F:C8:9C:25:49:11:9A:F3:53:76:DA:F4 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2995 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:28 +0000 ROA not before: Tue 31 Dec 2024 15:53:28 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 55488 IP address blocks: 49.231.27.0/24 maxlen: 24 2405:9800:c910::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10645 (0x2995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Dec 31 15:53:28 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741378-2a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:ed:5f:4c:ac:b9:77:38:a6:2b:b7:51:f1: 84:95:2c:6d:b6:0f:4f:e3:9a:4d:49:41:e0:a8:83: 30:50:5f:2d:17:46:53:fd:12:2a:23:39:07:6b:30: cd:c4:a5:80:4d:6f:6e:2c:63:f0:97:e4:e5:5e:c4: b1:a1:32:14:09:d9:85:17:34:7c:ac:a7:e3:8d:95: 54:aa:18:46:75:00:79:57:a7:1b:ce:13:49:35:99: 05:f5:ea:c2:12:69:5d:94:fb:71:9d:a7:ed:4e:dd: da:f1:fb:1d:58:a2:77:07:12:12:c2:23:1c:52:f0: 3f:f9:e4:b4:0f:ea:96:93:cf:95:28:f3:6f:86:4f: 58:51:5b:5f:71:62:bb:5d:89:09:aa:34:98:a7:a5: d1:e6:74:c3:e3:2e:33:3f:20:98:18:65:24:d6:8f: 48:a8:d6:22:13:f5:eb:4a:d8:60:26:e9:aa:f8:8d: dc:68:42:ab:05:c1:c1:71:e5:df:95:a2:b8:c7:b5: f2:27:95:f4:e1:01:e7:3f:79:18:95:3c:eb:90:48: 35:e8:03:52:ac:29:67:ed:90:c8:fc:ae:0e:b6:e9: 07:3e:23:f1:86:1c:33:58:7c:51:f2:90:9b:14:95: f5:f5:3e:11:90:57:05:1e:a9:fb:85:17:7a:9b:3a: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7A:3B:0C:0D:C7:E8:77:0F:C8:9C:25:49:11:9A:F3:53:76:DA:F4 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.231.27.0/24 IPv6: 2405:9800:c910::/48 Signature Algorithm: sha256WithRSAEncryption 9e:53:bd:1f:9c:8d:d7:f4:fc:f8:96:c4:09:ef:56:94:ab:cb: 97:35:d2:c7:be:dc:d2:f4:96:45:e6:e6:10:5c:00:4c:42:70: 7e:5d:23:a5:7a:54:50:d6:2c:51:dd:9e:91:cd:e3:31:c4:d7: 03:11:be:0d:bf:d0:f5:90:ed:ad:1f:ed:29:1c:05:66:5a:ad: 49:7e:b7:a2:ff:24:7d:2b:58:7e:f4:ff:a2:3d:e5:7a:2d:3f: ea:fa:7e:f5:58:c6:ec:6d:1d:73:f8:6a:f6:77:9b:2e:d2:41: 4d:42:53:d5:0e:40:b2:ab:ce:56:68:c3:38:f9:59:3b:a2:20: 53:c3:24:69:0e:94:3b:55:42:9e:c8:b7:56:e3:b2:c9:4d:11: 67:3b:23:98:6f:3f:14:87:9f:1d:4d:65:63:f9:0d:3f:1d:00: dd:65:55:88:00:02:50:af:51:24:93:f3:f7:5e:33:c8:fa:70: 53:94:67:3e:01:48:36:2a:23:43:fb:e2:52:12:1e:e1:03:5b: 24:e0:78:b7:bd:8c:ee:7e:9e:fe:9a:a8:ce:ee:d1:09:0a:a3: 41:2e:c9:d3:86:44:70:22:ab:26:e9:fb:c3:6e:5e:54:34:d4: 12:77:9b:85:6b:90:af:85:cb:67:df:41:9d:8e:f1:b4:7d:74: 42:e7:29:5d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICKZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzI4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM3OC0yYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYDtX0ysuXc4piu3UfGElSxttg9P45pNSUHgqIMwUF8tF0ZT/RIqIzkHazDN xKWATW9uLGPwl+TlXsSxoTIUCdmFFzR8rKfjjZVUqhhGdQB5V6cbzhNJNZkF9erC EmldlPtxnaftTt3a8fsdWKJ3BxISwiMcUvA/+eS0D+qWk8+VKPNvhk9YUVtfcWK7 XYkJqjSYp6XR5nTD4y4zPyCYGGUk1o9IqNYiE/XrSthgJumq+I3caEKrBcHBceXf laK4x7XyJ5X04QHnP3kYlTzrkEg16ANSrCln7ZDI/K4OtukHPiPxhhwzWHxR8pCb FJX19T4RkFcFHqn7hRd6mzrcbQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLp6OwwN x+h3D8icJUkRmvNTdtr0MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNjQ4MzkxRjRE REQzMTFFOEI2MTY5ODc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAAx5xswDwQCAAIwCQMHACQFmADJEDANBgkqhkiG9w0BAQsF AAOCAQEAnlO9H5yN1/T8+JbECe9WlKvLlzXSx77c0vSWRebmEFwATEJwfl0jpXpU UNYsUd2ekc3jMcTXAxG+Db/Q9ZDtrR/tKRwFZlqtSX63ov8kfStYfvT/oj3lei0/ 6vp+9VjG7G0dc/hq9nebLtJBTUJT1Q5AsqvOVmjDOPlZO6IgU8MkaQ6UO1VCnsi3 VuOyyU0RZzsjmG8/FIefHU1lY/kNPx0A3WVViAACUK9RJJPz914zyPpwU5RnPgFI NiojQ/viUhIe4QNbJOB4t72M7n6e/pqozu7RCQqjQS7J04ZEcCKrJun7w25eVDTU EnebhWuQr4XLZ99BnY7xtH10QucpXQ== -----END CERTIFICATE-----Generated at Sat Apr 5 02:22:46 2025 by rpki-client