$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/3A827C88AE0C11EB9325C43EC4F9AE02.roa File: 3A827C88AE0C11EB9325C43EC4F9AE02.roa (raw, json) Hash identifier: O1RrvUvmMAJ+x1DPrVhQITlRBz19QPohpt51JCcm+1A= Subject key identifier: 7C:48:95:BD:2E:8F:5A:61:0E:55:D7:62:2D:FA:2E:AA:BA:3C:A7:46 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2826 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/3A827C88AE0C11EB9325C43EC4F9AE02.roa Signing time: Thu 28 Dec 2023 16:03:09 +0000 ROA not before: Thu 28 Dec 2023 16:03:09 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 15133 IP address blocks: 49.231.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 14:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10278 (0x2826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 28 16:03:09 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658d9c3d-f82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9e:ae:36:b1:f0:22:7d:b3:64:5c:d8:ea:91: cb:fc:fe:70:cc:ce:29:f9:2a:d6:06:c6:7c:86:44: 90:f8:ce:b2:b5:ef:83:21:ac:c6:b0:71:08:90:4f: 18:7b:c2:c8:02:af:63:c1:9c:fd:7c:b3:df:19:2d: 48:6e:96:9d:bb:c7:15:53:db:83:16:3c:fc:c4:9d: b5:b3:56:53:b6:27:94:fc:30:32:c3:c1:63:c2:b3: 0c:8a:b0:cc:7f:39:bf:2a:2d:b3:16:22:7f:7e:a5: ea:99:19:a1:89:c7:43:a1:a4:1b:dd:c1:38:29:34: 97:61:17:32:ff:07:82:d4:b2:a0:43:ac:39:4e:3e: 9d:54:84:97:62:fd:36:8a:dc:9b:7c:50:e8:6b:58: cc:7a:09:24:30:cb:9d:75:ae:6f:ed:4a:4d:c6:91: 82:6d:3a:c8:9a:f2:02:9d:5c:4d:de:ca:1b:6b:30: 1b:45:2f:3b:6f:8a:c5:72:55:a7:18:af:79:d3:6d: bf:cf:76:d5:a6:8f:ff:18:6e:1e:40:d4:30:64:84: ae:fc:a5:a6:cd:45:df:0e:74:40:44:b0:54:f6:37: 77:60:36:d4:4a:55:e0:ea:17:45:c8:e9:41:5f:61: ca:77:92:30:a4:04:de:ee:1b:8e:f8:53:7b:08:ba: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:95:BD:2E:8F:5A:61:0E:55:D7:62:2D:FA:2E:AA:BA:3C:A7:46 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/3A827C88AE0C11EB9325C43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.231.126.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a5:c6:64:c6:0d:a3:e2:06:2c:da:c8:83:2e:30:33:a9:86: 4f:0a:34:da:db:e4:d6:06:f1:da:f1:8b:89:8d:fd:86:d8:31: 86:ac:48:62:2c:45:e1:df:d6:98:3a:e1:db:19:bb:60:d3:11: 4f:0d:98:1e:16:42:80:ed:a8:3d:dc:46:01:82:72:87:53:66: 94:91:0c:6b:de:e3:53:d2:25:c5:ad:e6:cd:c9:b7:1f:f7:46: de:48:60:f1:3f:fd:4d:02:71:28:a1:5c:12:b7:f9:9c:38:7d: 1d:e5:35:c1:e5:28:56:2a:1e:72:f5:7f:29:ae:fc:70:9f:4e: f8:f2:9a:14:04:69:fb:59:5f:b5:5e:20:d1:a3:18:fa:e7:7b: 51:76:d2:c6:61:95:5f:80:16:41:8f:00:66:7f:38:14:76:e4: 46:d2:ca:1d:43:92:4f:96:6d:20:3d:65:f8:06:d2:6d:8c:87: 29:9c:5e:2d:30:51:9d:2a:15:35:fa:ce:59:58:f4:e5:d5:b2: 2b:2c:f1:a2:c1:06:9f:cb:e6:42:60:b6:7c:ff:b0:8e:42:b4: ff:cc:37:ac:65:c4:20:90:1a:7b:a7:56:bb:df:6f:e3:f0:f0: c1:21:b5:f8:11:65:6a:09:d7:f6:cc:71:f8:de:df:45:6a:ad: ee:fe:3f:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjMxMjI4MTYwMzA5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkOWMzZC1mODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Z6uNrHwIn2zZFzY6pHL/P5wzM4p+SrWBsZ8hkSQ+M6yte+DIazGsHEIkE8Y e8LIAq9jwZz9fLPfGS1Ibpadu8cVU9uDFjz8xJ21s1ZTtieU/DAyw8FjwrMMirDM fzm/Ki2zFiJ/fqXqmRmhicdDoaQb3cE4KTSXYRcy/weC1LKgQ6w5Tj6dVISXYv02 itybfFDoa1jMegkkMMudda5v7UpNxpGCbTrImvICnVxN3sobazAbRS87b4rFclWn GK95022/z3bVpo//GG4eQNQwZISu/KWmzUXfDnRARLBU9jd3YDbUSlXg6hdFyOlB X2HKd5IwpATe7huO+FN7CLoHqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHxIlb0u j1phDlXXYi36Lqq6PKdGMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvM0E4MjdDODhB RTBDMTFFQjkzMjVDNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx534wDQYJKoZIhvcNAQELBQADggEBAA2lxmTGDaPiBiza yIMuMDOphk8KNNrb5NYG8drxi4mN/YbYMYasSGIsReHf1pg64dsZu2DTEU8NmB4W QoDtqD3cRgGCcodTZpSRDGve41PSJcWt5s3Jtx/3Rt5IYPE//U0CcSihXBK3+Zw4 fR3lNcHlKFYqHnL1fymu/HCfTvjymhQEaftZX7VeINGjGPrne1F20sZhlV+AFkGP AGZ/OBR25EbSyh1Dkk+WbSA9ZfgG0m2MhymcXi0wUZ0qFTX6zllY9OXVsiss8aLB Bp/L5kJgtnz/sI5CtP/MN6xlxCCQGnunVrvfb+Pw8MEhtfgRZWoJ1/bMcfje30Vq re7+P2s= -----END CERTIFICATE-----Generated at Fri Jun 14 16:49:10 2024 by rpki-client on console-fra.rpki-client.org