$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa File: 63EBB7C6DDD311E8B6169878C4F9AE02.roa (raw, json) Hash identifier: R2yXoda+8v4EKTUYZWQfzjjo3EZHnJ6pg9dQNLKqGJM= Subject key identifier: A1:48:CA:B5:4E:57:0F:15:F9:87:75:49:7E:F5:09:C7:8A:08:58:66 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2994 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:27 +0000 ROA not before: Tue 31 Dec 2024 15:53:27 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 55476 IP address blocks: 202.80.233.0/24 maxlen: 24 2405:9800:c909::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10644 (0x2994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Dec 31 15:53:27 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741377-11a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:b9:55:40:95:5f:16:3e:f5:92:7f:ee:84: d9:0c:94:47:76:16:f9:1c:b1:63:b6:00:79:9d:6c: 62:08:b4:f6:77:ea:b2:f9:39:c3:ac:29:42:2f:0d: fd:49:50:d1:00:2b:ea:2f:98:51:09:54:56:e3:23: ec:e0:22:a9:36:4c:40:e8:c5:fc:13:d5:6d:a8:78: cf:d2:4e:a1:3a:5d:42:a3:e0:94:87:fa:3a:60:fe: 38:e9:d2:1a:9a:0f:2d:06:5c:25:55:3f:c3:a8:05: 0e:b8:d2:c9:c2:a5:45:e6:2a:b5:60:95:ec:08:5a: 8c:8a:a1:71:8e:7b:c0:da:9d:14:ed:74:83:8d:2f: 19:a4:31:31:1e:49:0f:49:9b:6f:6f:8a:02:ea:4b: 2b:a1:33:d5:a5:80:a7:24:38:40:d2:ef:74:d3:23: 9b:ae:91:b9:60:7e:e7:a5:90:00:50:f6:6c:29:27: 9d:c3:39:ef:9d:42:0e:b5:70:1f:6c:f4:97:62:0c: a1:22:8d:76:a3:ff:ad:7f:42:b6:7b:7a:ba:06:72: 66:9a:a3:61:81:75:92:15:0a:d4:1f:cb:4a:cb:b3: 1f:f3:d4:94:a9:12:20:f6:66:6e:65:ed:e8:b0:07: 2d:28:b8:76:3f:9f:13:d9:07:b2:a2:8e:ac:ee:54: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:48:CA:B5:4E:57:0F:15:F9:87:75:49:7E:F5:09:C7:8A:08:58:66 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.80.233.0/24 IPv6: 2405:9800:c909::/48 Signature Algorithm: sha256WithRSAEncryption 06:a4:31:56:95:b4:6a:33:90:4f:24:5a:d6:31:2b:3e:94:07: 79:f2:29:ef:3f:e3:21:71:d1:ba:8c:36:50:f2:11:47:ea:0a: f4:4a:16:9d:84:a3:2f:fc:77:c1:fc:ce:60:d0:cc:87:8e:ce: 1b:f6:34:18:22:ba:7c:de:9c:2a:70:c1:56:01:a4:f4:87:01: fa:f0:e6:ef:31:28:36:64:c4:79:fb:63:51:c1:30:21:7b:90: 96:e0:59:49:f1:dc:f9:ea:8d:0a:8e:64:af:11:4c:b1:93:4f: 75:69:cc:c4:18:71:d5:c7:65:38:89:d4:30:51:70:9b:7b:2c: dc:d0:33:4a:c3:71:cd:8c:c8:50:b9:40:0f:cb:32:75:22:25: 86:94:01:71:20:ed:5f:60:1c:2d:4a:0b:a4:72:01:5f:f5:66: 2d:2c:27:12:66:40:fd:88:be:c2:6f:cb:8c:a3:e4:f9:6b:39: 31:19:9a:8d:d2:72:48:ba:d9:5f:34:72:7f:33:f0:ec:66:d1: ef:58:8d:c0:49:cd:3d:fb:13:59:2b:66:8a:b2:4f:77:32:2d: eb:77:00:77:7d:24:09:73:63:c4:50:bc:64:a8:aa:13:ed:4a: 6f:ff:a6:f2:ec:0e:9e:36:48:8e:4c:14:ea:7d:7e:fc:5c:d0: 5f:ce:d3:a7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICKZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzI3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM3Ny0xMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kC5VUCVXxY+9ZJ/7oTZDJRHdhb5HLFjtgB5nWxiCLT2d+qy+TnDrClCLw39 SVDRACvqL5hRCVRW4yPs4CKpNkxA6MX8E9VtqHjP0k6hOl1Co+CUh/o6YP446dIa mg8tBlwlVT/DqAUOuNLJwqVF5iq1YJXsCFqMiqFxjnvA2p0U7XSDjS8ZpDExHkkP SZtvb4oC6ksroTPVpYCnJDhA0u900yObrpG5YH7npZAAUPZsKSedwznvnUIOtXAf bPSXYgyhIo12o/+tf0K2e3q6BnJmmqNhgXWSFQrUH8tKy7Mf89SUqRIg9mZuZe3o sActKLh2P58T2Qeyoo6s7lRChwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKFIyrVO Vw8V+Yd1SX71CceKCFhmMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNjNFQkI3QzZE REQzMTFFOEI2MTY5ODc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKUOkwDwQCAAIwCQMHACQFmADJCTANBgkqhkiG9w0BAQsF AAOCAQEABqQxVpW0ajOQTyRa1jErPpQHefIp7z/jIXHRuow2UPIRR+oK9EoWnYSj L/x3wfzOYNDMh47OG/Y0GCK6fN6cKnDBVgGk9IcB+vDm7zEoNmTEeftjUcEwIXuQ luBZSfHc+eqNCo5krxFMsZNPdWnMxBhx1cdlOInUMFFwm3ss3NAzSsNxzYzIULlA D8sydSIlhpQBcSDtX2AcLUoLpHIBX/VmLSwnEmZA/Yi+wm/LjKPk+Ws5MRmajdJy SLrZXzRyfzPw7GbR71iNwEnNPfsTWStmirJPdzIt63cAd30kCXNjxFC8ZKiqE+1K b/+m8uwOnjZIjkwU6n1+/FzQX87Tpw== -----END CERTIFICATE-----Generated at Sun Feb 16 20:11:57 2025 by rpki-client