$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/DFBA2ED05EA611ECB7A8FE42C4F9AE02.roa File: DFBA2ED05EA611ECB7A8FE42C4F9AE02.roa (raw, json) Hash identifier: 4Fm7j1kz7m3YeGwy8vWApiEBrm3s9fehJPxJCiH3mvU= Subject key identifier: E2:5E:8B:AF:FE:6C:C7:26:31:52:D5:01:3D:B6:68:64:C1:EA:16:AF Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 296C Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/DFBA2ED05EA611ECB7A8FE42C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:52:49 +0000 ROA not before: Tue 31 Dec 2024 15:52:49 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 136538 IP address blocks: 49.229.120.0/22 maxlen: 24 49.229.124.0/22 maxlen: 24 49.229.128.0/21 maxlen: 24 49.229.136.0/21 maxlen: 24 49.229.144.0/22 maxlen: 24 49.229.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10604 (0x296c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Dec 31 15:52:49 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741351-be5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:0e:8d:e8:5b:11:0c:21:12:df:15:13:f3: 51:0a:d7:db:d2:72:40:58:41:2d:c4:90:7f:03:d9: da:5a:1e:33:f3:21:9c:8b:ca:97:46:90:2b:32:f5: 1d:ca:ac:0e:8d:cc:f6:91:5c:9a:44:e4:a5:86:f2: 61:92:d3:ec:f8:1e:15:20:9a:5f:aa:4e:aa:8f:26: 5b:1c:75:df:34:44:e7:54:86:87:ca:c2:2d:93:4a: ed:a6:5a:92:73:4a:fb:cb:06:62:bb:e5:4e:5c:ad: 1d:c9:5f:aa:9b:ea:4a:90:da:82:fb:19:ee:9a:84: 6e:73:82:58:f2:b5:88:1d:b8:21:1c:d2:66:01:47: 46:07:16:16:65:44:d6:d8:55:04:7f:83:77:a5:c2: 82:0a:0d:4a:5b:a6:39:c9:17:8c:5e:23:c2:3a:20: 4f:ff:fd:49:0d:cf:4e:d4:21:03:57:ce:3c:97:f2: 21:31:f3:5f:78:57:15:b1:85:4e:4b:4c:86:14:4d: da:8f:b2:94:e5:e3:2c:b8:2b:f0:61:05:3c:eb:58: 5f:28:2e:04:0f:c9:56:bd:7e:4f:0c:b6:39:60:7d: d4:36:d2:69:b8:2d:f3:2e:ef:23:32:4e:07:0c:d2: 49:e2:d9:59:ed:42:d3:af:60:07:fd:ba:f6:04:f5: ee:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5E:8B:AF:FE:6C:C7:26:31:52:D5:01:3D:B6:68:64:C1:EA:16:AF X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/DFBA2ED05EA611ECB7A8FE42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.229.120.0-49.229.151.255 Signature Algorithm: sha256WithRSAEncryption 00:ca:c5:0c:df:85:c3:78:0c:3c:3a:07:36:bf:0e:47:de:bb: 00:38:6e:12:e1:6d:21:25:08:30:aa:e7:5c:ae:24:a4:38:fe: 79:85:cc:4e:b6:69:ae:bc:d1:ff:8b:25:eb:86:f2:a8:fe:57: 8b:40:66:72:65:ba:ff:c4:ff:92:d9:04:ad:c3:5d:86:87:0e: 03:4f:cc:1c:0d:31:f6:b7:da:d0:43:7d:86:a0:2d:d5:75:92: 5b:c7:00:51:1f:88:f7:15:4c:31:4c:8b:d8:9a:bc:a1:62:86: 17:9e:ff:7b:dd:89:89:a9:21:95:7a:bd:5e:59:fa:1b:7e:a0: 23:b2:58:48:99:05:61:eb:1f:93:20:bd:02:46:36:0b:72:44: 30:83:36:01:25:0c:2e:2d:c4:1c:d6:b7:35:3e:62:23:b3:12: ee:d3:0a:49:5b:dd:93:f2:45:12:df:f8:fe:0b:ca:00:70:78: e7:95:1c:c3:7a:53:7d:49:8e:77:2d:d4:55:5f:b1:45:8a:7e: 8b:a3:f3:3a:25:9b:b4:a0:4f:95:87:39:7c:81:9f:16:b5:ed: d1:ec:58:ff:45:b6:89:b4:7a:46:89:24:1a:20:2e:67:24:de: 6e:b4:90:ab:2c:8b:f1:59:14:47:62:e9:36:6a:af:e2:7b:25: bf:9f:18:3e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICKWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MjQ5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM1MS1iZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwckOjehbEQwhEt8VE/NRCtfb0nJAWEEtxJB/A9naWh4z8yGci8qXRpArMvUd yqwOjcz2kVyaROSlhvJhktPs+B4VIJpfqk6qjyZbHHXfNETnVIaHysItk0rtplqS c0r7ywZiu+VOXK0dyV+qm+pKkNqC+xnumoRuc4JY8rWIHbghHNJmAUdGBxYWZUTW 2FUEf4N3pcKCCg1KW6Y5yReMXiPCOiBP//1JDc9O1CEDV848l/IhMfNfeFcVsYVO S0yGFE3aj7KU5eMsuCvwYQU861hfKC4ED8lWvX5PDLY5YH3UNtJpuC3zLu8jMk4H DNJJ4tlZ7ULTr2AH/br2BPXuRwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFOJei6/+ bMcmMVLVAT22aGTB6havMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvREZCQTJFRDA1 RUE2MTFFQ0I3QThGRTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAzHleAMEAzHlkDANBgkqhkiG9w0BAQsFAAOCAQEAAMrF DN+Fw3gMPDoHNr8OR967ADhuEuFtISUIMKrnXK4kpDj+eYXMTrZprrzR/4sl64by qP5Xi0BmcmW6/8T/ktkErcNdhocOA0/MHA0x9rfa0EN9hqAt1XWSW8cAUR+I9xVM MUyL2Jq8oWKGF57/e92JiakhlXq9Xln6G36gI7JYSJkFYesfkyC9AkY2C3JEMIM2 ASUMLi3EHNa3NT5iI7MS7tMKSVvdk/JFEt/4/gvKAHB455Ucw3pTfUmOdy3UVV+x RYp+i6PzOiWbtKBPlYc5fIGfFrXt0exY/0W2ibR6RokkGiAuZyTebrSQqyyL8VkU R2LpNmqv4nslv58YPg== -----END CERTIFICATE-----Generated at Sat Apr 5 01:32:17 2025 by rpki-client