$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/A3205A2C087A11F0B3E16071C4F9AE02.roa File: A3205A2C087A11F0B3E16071C4F9AE02.roa (raw, json) Hash identifier: BEIVPWqxpMMSqh3PVFhct25NDkvQJDR6AlvWx/meI0s= Subject key identifier: D6:4A:C7:9E:3B:63:FF:04:1D:24:E2:E6:42:CB:8A:FE:B3:7B:90:47 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 091D Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/A3205A2C087A11F0B3E16071C4F9AE02.roa Signing time: Mon 24 Mar 2025 06:38:47 +0000 ROA not before: Mon 24 Mar 2025 06:38:47 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 17497 IP address blocks: 45.253.244.0/24 maxlen: 24 45.253.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509 Validity Not Before: Mar 24 06:38:47 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67e0fdf6-f272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:6b:93:4c:0e:55:7d:98:56:ed:67:3a:7d: 67:8f:91:61:1f:dc:c0:3c:2a:65:2c:31:a2:b3:7b: d6:b2:b4:d0:d0:3c:4f:00:8f:7c:c1:b1:0e:51:af: c3:7d:bd:b2:21:36:2b:4c:a8:69:1a:9d:1f:97:11: 3d:9d:9e:54:8d:7b:ae:c0:b9:c2:f6:23:cf:2a:70: fd:a1:08:16:5d:2c:90:8b:2f:d0:95:cf:a0:2f:fe: 4b:11:4a:dc:72:48:03:b8:27:84:27:a3:13:9e:2e: a5:aa:df:84:60:ca:f9:24:87:10:ce:f4:8b:21:cb: da:77:7a:3f:a5:02:03:de:97:49:64:2d:b9:2f:e6: b3:a5:82:1c:7c:db:a0:4d:c2:85:95:86:2c:94:e0: 0a:42:14:39:87:cd:be:3a:76:7d:b9:db:6e:ab:e1: 9a:6e:53:06:c8:d0:7c:f6:38:48:c3:27:7b:65:9a: e8:69:8d:58:81:97:13:14:ee:09:36:91:bf:28:83: d1:78:27:74:6d:b4:29:13:c6:d3:cc:a3:79:b5:44: f7:3c:42:f8:06:2d:85:e9:03:f0:3e:ee:f5:32:6b: 7a:13:5b:82:e3:30:bd:29:93:30:8f:0c:41:20:9c: bc:aa:dc:21:d6:d2:44:85:ba:ce:55:d5:14:c2:2e: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4A:C7:9E:3B:63:FF:04:1D:24:E2:E6:42:CB:8A:FE:B3:7B:90:47 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/A3205A2C087A11F0B3E16071C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.253.244.0/23 Signature Algorithm: sha256WithRSAEncryption 04:7b:a4:87:0d:ae:cc:09:12:4a:c3:f7:ad:6a:6c:57:fd:72: 1e:13:55:05:45:9a:94:e2:ee:b8:8b:4e:f0:ae:5f:87:d4:a0: 77:0f:5d:02:88:a4:69:f0:1e:54:10:44:f3:a2:0e:04:e5:8a: e2:ba:28:ff:e0:45:ba:bc:7a:d5:e4:9b:56:81:19:67:4f:f2: 79:e7:bc:1c:6d:06:14:5f:fc:b7:f4:67:42:dd:23:83:e9:e1: 27:7e:36:79:93:78:db:d5:4d:e9:79:7b:f4:94:8d:dc:3c:bb: fa:28:c6:e9:29:e6:3d:67:ed:18:31:23:3d:b2:ad:1e:2b:2f: e5:7e:1f:1c:1b:cb:0c:38:c0:62:a6:b7:d9:47:e8:e9:d0:98: b3:a6:fc:07:d8:18:ed:a3:32:e1:2f:53:b9:91:2a:a7:5d:44: 49:7f:44:bb:81:7f:63:fb:33:cf:02:31:c7:56:56:2d:d5:2b: 92:39:75:02:6d:ed:8e:89:8d:ea:08:cc:d4:25:35:4d:83:31: ac:6b:9e:e8:dc:df:c8:a1:23:17:71:0e:e2:10:9a:03:77:a3: 63:8e:79:6b:76:cb:df:95:68:25:fd:8c:3b:dd:90:35:07:55: 34:58:2c:d5:69:a0:8a:8f:51:2a:c3:e2:2c:6b:93:f6:16:a4: a1:be:ec:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUwMzI0MDYzODQ3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2UwZmRmNi1mMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIJrk0wOVX2YVu1nOn1nj5FhH9zAPCplLDGis3vWsrTQ0DxPAI98wbEOUa/D fb2yITYrTKhpGp0flxE9nZ5UjXuuwLnC9iPPKnD9oQgWXSyQiy/Qlc+gL/5LEUrc ckgDuCeEJ6MTni6lqt+EYMr5JIcQzvSLIcvad3o/pQID3pdJZC25L+azpYIcfNug TcKFlYYslOAKQhQ5h82+OnZ9udtuq+GablMGyNB89jhIwyd7ZZroaY1YgZcTFO4J NpG/KIPReCd0bbQpE8bTzKN5tUT3PEL4Bi2F6QPwPu71Mmt6E1uC4zC9KZMwjwxB IJy8qtwh1tJEhbrOVdUUwi4wfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNZKx547 Y/8EHSTi5kLLiv6ze5BHMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvQTMyMDVBMkMw ODdBMTFGMEIzRTE2MDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEt/fQwDQYJKoZIhvcNAQELBQADggEBAAR7pIcNrswJEkrD 961qbFf9ch4TVQVFmpTi7riLTvCuX4fUoHcPXQKIpGnwHlQQRPOiDgTliuK6KP/g Rbq8etXkm1aBGWdP8nnnvBxtBhRf/Lf0Z0LdI4Pp4Sd+NnmTeNvVTel5e/SUjdw8 u/ooxukp5j1n7RgxIz2yrR4rL+V+Hxwbyww4wGKmt9lH6OnQmLOm/AfYGO2jMuEv U7mRKqddREl/RLuBf2P7M88CMcdWVi3VK5I5dQJt7Y6JjeoIzNQlNU2DMaxrnujc 38ihIxdxDuIQmgN3o2OOeWt2y9+VaCX9jDvdkDUHVTRYLNVpoIqPUSrD4ixrk/YW pKG+7IQ= -----END CERTIFICATE-----Generated at Sun Apr 6 18:06:53 2025 by rpki-client