$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa File: 228647E8639E11ECA24A0411C4F9AE02.roa (raw, json) Hash identifier: zcXBbADBT/C339hRi8INcQt04ZkGcjWLZ5Dkh5i87ao= Subject key identifier: CD:87:D0:64:67:56:06:71:8E:53:2A:08:47:F0:EA:8A:78:B9:65:D6 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2833 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa Signing time: Thu 28 Dec 2023 16:03:21 +0000 ROA not before: Thu 28 Dec 2023 16:03:21 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 45255 IP address blocks: 49.231.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10291 (0x2833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 28 16:03:21 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658d9c48-ea43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:4d:fd:ce:10:1a:51:c2:ed:e0:8a:c6:cf: a1:88:f5:6c:1c:46:c6:aa:98:b6:65:84:d7:c5:51: 81:1b:ee:11:81:c7:07:a7:81:45:28:6c:62:48:2f: 4a:98:9f:ec:b5:e9:08:ab:cd:a7:97:96:ae:2d:bf: 2d:ad:58:cb:36:63:7e:ef:f6:98:12:7e:8f:de:13: 13:b4:97:eb:cd:9c:ff:8c:c5:9d:c8:59:c5:c5:59: 07:74:1d:8a:2d:1b:74:96:1e:47:e3:ed:90:29:b5: fe:43:7c:c2:5e:b3:c7:ba:b1:4a:63:c0:2a:1b:9e: 49:aa:12:6b:e3:68:b2:7d:73:1e:33:3a:75:54:43: 4c:04:ee:7c:01:8b:94:38:9e:48:38:51:44:c8:31: a1:f5:90:54:7f:6e:c0:81:33:87:04:8b:d5:77:c8: 68:67:3b:cd:67:3e:bd:7f:91:b8:35:f1:96:49:f3: 49:a9:09:12:95:85:2d:54:00:19:4e:78:af:72:fd: 24:72:60:91:c4:e5:70:42:41:71:89:35:6d:e5:8d: 85:ef:c2:7e:6e:60:45:45:92:9f:9f:d4:4f:38:f9: 55:24:f1:a9:ae:27:20:c8:f1:44:cd:71:e2:e1:02: ec:bd:8f:4c:9e:21:69:3a:b6:4f:23:37:44:c2:c7: 0d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:87:D0:64:67:56:06:71:8E:53:2A:08:47:F0:EA:8A:78:B9:65:D6 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.231.28.0/24 Signature Algorithm: sha256WithRSAEncryption 53:07:1c:5d:d8:e5:8f:eb:cc:2e:1e:53:2e:68:59:a6:38:5f: 2f:4a:cc:b6:a4:a4:d9:d3:01:67:9e:8a:ad:70:1c:f3:3e:b5: e7:8d:d3:79:a5:08:6c:fc:cb:b6:09:b7:3f:28:40:f3:01:8a: c6:c0:fd:10:57:ee:cc:60:53:ce:b4:98:83:59:90:52:73:ba: a5:89:ba:d9:a9:71:81:ec:53:1a:d3:0f:c5:ff:af:34:22:63: 37:0b:13:12:90:10:21:9b:bc:c6:d0:b0:85:a1:7f:29:6a:99: d0:55:34:3f:02:aa:d5:66:8f:c3:0f:6f:25:f0:4d:98:3f:da: c1:f2:46:63:4d:95:c4:ef:4e:0d:a2:d6:df:b0:a9:b1:d7:d7: 98:7d:00:f4:f6:2b:07:82:06:9d:db:d3:c7:10:3b:02:28:33: 9c:3d:72:0c:26:7e:da:d5:e8:af:36:41:89:ae:5b:80:03:16: 01:05:6c:d8:0b:d7:c7:6f:d3:e9:3c:6b:50:a3:bd:6e:07:31: 2b:10:37:6b:65:ce:64:0f:21:15:de:6a:82:af:84:40:55:35: a7:8f:3a:a3:0e:7c:50:ba:4c:60:58:dd:68:d6:aa:ae:11:c1: 33:78:07:18:98:4e:db:b2:d0:cb:a6:ec:c1:4b:9a:6e:84:02: 32:89:f2:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjMxMjI4MTYwMzIxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkOWM0OC1lYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy11N/c4QGlHC7eCKxs+hiPVsHEbGqpi2ZYTXxVGBG+4RgccHp4FFKGxiSC9K mJ/stekIq82nl5auLb8trVjLNmN+7/aYEn6P3hMTtJfrzZz/jMWdyFnFxVkHdB2K LRt0lh5H4+2QKbX+Q3zCXrPHurFKY8AqG55JqhJr42iyfXMeMzp1VENMBO58AYuU OJ5IOFFEyDGh9ZBUf27AgTOHBIvVd8hoZzvNZz69f5G4NfGWSfNJqQkSlYUtVAAZ Tnivcv0kcmCRxOVwQkFxiTVt5Y2F78J+bmBFRZKfn9RPOPlVJPGpricgyPFEzXHi 4QLsvY9MniFpOrZPIzdEwscNPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM2H0GRn VgZxjlMqCEfw6op4uWXWMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMjI4NjQ3RTg2 MzlFMTFFQ0EyNEEwNDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx5xwwDQYJKoZIhvcNAQELBQADggEBAFMHHF3Y5Y/rzC4e Uy5oWaY4Xy9KzLakpNnTAWeeiq1wHPM+teeN03mlCGz8y7YJtz8oQPMBisbA/RBX 7sxgU860mINZkFJzuqWJutmpcYHsUxrTD8X/rzQiYzcLExKQECGbvMbQsIWhfylq mdBVND8CqtVmj8MPbyXwTZg/2sHyRmNNlcTvTg2i1t+wqbHX15h9APT2KweCBp3b 08cQOwIoM5w9cgwmftrV6K82QYmuW4ADFgEFbNgL18dv0+k8a1CjvW4HMSsQN2tl zmQPIRXeaoKvhEBVNaePOqMOfFC6TGBY3WjWqq4RwTN4BxiYTtuy0Mum7MFLmm6E AjKJ8ps= -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:46 2024 by rpki-client on console-fra.rpki-client.org