$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/CA44DBE09A9811EBAC99AD22C4F9AE02.roa File: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (raw, json) Hash identifier: ImKwB/9i7zC4SulkNS0V0K2Y4dtluGwCFfX377ZAOBo= Subject key identifier: 5D:1D:2D:56:F5:B0:81:86:14:C0:5E:D9:64:F2:4D:21:F2:0B:CC:F2 Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 0534 Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/CA44DBE09A9811EBAC99AD22C4F9AE02.roa Signing time: Thu 03 Aug 2023 00:00:57 +0000 ROA not before: Thu 03 Aug 2023 00:00:57 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 58693 IP address blocks: 49.249.225.0/24 maxlen: 24 49.249.226.0/24 maxlen: 24 49.249.227.0/24 maxlen: 24 49.249.228.0/24 maxlen: 24 49.249.229.0/24 maxlen: 24 49.249.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 01:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Validity Not Before: Aug 3 00:00:57 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64caee39-e542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:45:ac:5b:1a:94:85:46:e3:f3:f1:a1:08: 39:d5:ba:d4:2a:14:83:45:7a:47:c9:d8:20:1e:b5: a0:fa:26:72:93:bc:e6:cd:e3:d7:bf:3d:ed:a1:7f: c6:ba:5c:39:54:80:bf:69:a8:a4:b9:ac:ec:28:5d: a5:04:54:ef:f7:0e:63:c2:73:03:24:d1:4d:7d:d4: 49:87:e5:28:4c:44:42:0c:4b:f7:3f:fa:59:fc:7a: 9b:a8:a7:6c:60:73:b2:72:27:22:03:cf:29:b9:57: 35:1e:2f:66:39:92:7c:a1:5f:c8:ef:b6:37:04:a2: 56:8f:7f:24:36:4a:b6:8e:99:ed:a2:2c:64:c1:3e: 3e:b8:df:05:21:81:ea:0d:ad:46:59:8a:a0:4f:13: 1a:e1:06:8e:8c:4b:29:af:03:89:9f:99:42:bd:6d: fe:a5:83:12:22:60:4f:2d:d7:5d:7e:da:a0:7c:e0: f8:51:5a:65:cf:c6:f8:08:da:44:80:d7:f7:86:43: 1f:23:6f:87:d7:f5:eb:b1:1b:e7:10:ba:77:fe:65: 21:a6:63:ad:1a:ce:12:a8:a6:cd:71:39:a2:0f:7d: 71:f0:a7:0c:b9:51:95:64:96:c1:d8:12:ae:3d:37: b1:f2:b8:51:fd:17:6e:32:49:c9:fb:5c:7d:ea:72: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1D:2D:56:F5:B0:81:86:14:C0:5E:D9:64:F2:4D:21:F2:0B:CC:F2 X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/CA44DBE09A9811EBAC99AD22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.249.225.0-49.249.230.255 Signature Algorithm: sha256WithRSAEncryption 28:54:fb:4f:8f:e9:94:ae:07:6d:60:9c:f7:70:24:d3:92:7a: 95:28:6b:55:8a:5d:1d:38:3a:09:eb:49:a0:1d:a1:3a:90:a7: ad:2b:e0:39:2b:ef:87:bc:82:62:96:b4:6b:26:31:e7:c0:fc: 10:b1:26:f3:84:46:cc:8a:0f:81:2d:70:f2:d9:ce:73:c4:d9: 2a:ae:2b:51:e1:f8:52:32:e0:d8:88:dc:78:12:e8:56:6a:12: da:c7:c2:68:88:6a:ee:df:c0:24:c5:e6:89:36:a7:48:4e:b1: da:63:18:cd:7e:a7:40:2f:31:48:5e:96:cb:1c:c5:11:a2:57: ed:40:51:05:4b:21:07:f4:d4:16:b0:1c:17:e3:88:a2:8b:3a: e9:90:44:a1:94:7f:4c:0e:26:2f:19:41:38:5d:c0:a0:6a:c7: 53:a7:1c:45:a5:48:68:14:dd:55:dc:e4:d2:8f:88:d4:19:eb: 35:a6:f6:2d:fc:55:5d:95:f3:ba:50:a4:71:3b:50:f9:ff:eb: a0:74:8e:e6:52:43:41:8f:48:b2:84:09:80:d8:c5:84:19:fc: f5:3c:9b:21:21:0c:93:a3:bb:b9:5d:96:53:66:80:4c:b1:64: e1:c2:44:fe:24:a4:51:06:73:40:9a:c0:ca:67:38:10:8f:14: 8d:d3:91:71 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjMwODAzMDAwMDU3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhZWUzOS1lNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A9FrFsalIVG4/PxoQg51brUKhSDRXpHydggHrWg+iZyk7zmzePXvz3toX/G ulw5VIC/aaikuazsKF2lBFTv9w5jwnMDJNFNfdRJh+UoTERCDEv3P/pZ/HqbqKds YHOyciciA88puVc1Hi9mOZJ8oV/I77Y3BKJWj38kNkq2jpntoixkwT4+uN8FIYHq Da1GWYqgTxMa4QaOjEsprwOJn5lCvW3+pYMSImBPLdddftqgfOD4UVplz8b4CNpE gNf3hkMfI2+H1/XrsRvnELp3/mUhpmOtGs4SqKbNcTmiD31x8KcMuVGVZJbB2BKu PTex8rhR/RduMknJ+1x96nIGZwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFF0dLVb1 sIGGFMBe2WTyTSHyC8zyMB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJFOUQvRDMwNUU0RUU5OTBFMTFFQjg5Qjc2RDY4QzRGOUFFMDIvQ0E0NERCRTA5 QTk4MTFFQkFDOTlBRDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEADH54QMEADH55jANBgkqhkiG9w0BAQsFAAOCAQEAKFT7 T4/plK4HbWCc93Ak05J6lShrVYpdHTg6CetJoB2hOpCnrSvgOSvvh7yCYpa0ayYx 58D8ELEm84RGzIoPgS1w8tnOc8TZKq4rUeH4UjLg2IjceBLoVmoS2sfCaIhq7t/A JMXmiTanSE6x2mMYzX6nQC8xSF6WyxzFEaJX7UBRBUshB/TUFrAcF+OIoos66ZBE oZR/TA4mLxlBOF3AoGrHU6ccRaVIaBTdVdzk0o+I1BnrNab2LfxVXZXzulCkcTtQ +f/roHSO5lJDQY9IsoQJgNjFhBn89TybISEMk6O7uV2WU2aATLFk4cJE/iSkUQZz QJrAymc4EI8UjdORcQ== -----END CERTIFICATE-----Generated at Fri Jun 7 03:18:09 2024 by rpki-client on console-ams.rpki-client.org