$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa File: BF80484C737D11E8950B2925C4F9AE02.roa (raw, json) Hash identifier: WwW7wxtrAzmFMAGVyRw6J2tecPbBc2dexAQMwyTe3yU= Subject key identifier: A5:74:25:A6:42:13:6F:40:AE:94:4D:1E:65:6C:6D:25:8A:73:51:89 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2908 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa Signing time: Tue 20 Aug 2024 08:02:50 +0000 ROA not before: Tue 20 Aug 2024 08:02:50 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134240 IP address blocks: 27.254.31.0/24 maxlen: 24 27.254.185.0/24 maxlen: 24 27.254.186.0/24 maxlen: 24 27.254.231.0/24 maxlen: 24 27.254.233.0/24 maxlen: 24 49.229.88.0/23 maxlen: 23 49.229.90.0/23 maxlen: 23 58.64.24.0/24 maxlen: 24 58.64.27.0/24 maxlen: 24 103.20.204.0/22 maxlen: 24 110.49.141.0/24 maxlen: 24 110.49.142.0/23 maxlen: 24 2405:9800:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10504 (0x2908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Aug 20 08:02:50 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66c44daa-cced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:09:c9:b5:1e:dc:17:49:2f:4c:03:07:16: 49:c1:2b:22:08:c0:fb:5c:b8:2a:43:7f:3d:9a:a2: 0b:2a:0f:e4:3b:bd:42:fb:e5:8e:ab:9f:ec:f1:bf: df:ca:fe:37:b2:d8:2d:43:8c:60:02:b5:4b:1f:f7: 75:01:e6:ac:f2:87:06:66:bd:00:bd:25:6f:64:5d: 57:ea:d2:b3:c7:24:9d:15:52:b7:9d:53:04:c8:22: 57:89:9d:24:71:01:bc:6b:08:bb:7f:e8:22:56:a1: 33:d2:9b:73:13:05:86:e7:5d:e9:1d:2f:24:06:76: 5b:02:34:78:e2:bd:07:be:87:3b:ec:4f:0e:19:d3: 43:16:47:af:9c:dc:b7:15:0a:a8:c8:98:14:97:43: ff:df:2b:8c:23:49:04:06:82:69:bd:be:52:3e:cb: 38:68:31:07:35:97:7e:6d:68:f6:6c:21:ee:ac:3d: 13:7a:75:e1:2b:bf:46:fa:88:63:6a:59:53:d6:24: ff:ea:b9:7f:7b:57:e1:f1:42:58:01:7d:e4:a1:23: 9c:cf:2f:4e:3f:f1:09:41:53:66:55:05:95:b1:74: 8d:a8:19:40:11:16:21:fc:92:21:b5:82:76:3b:43: f6:57:ae:03:ad:59:b8:3f:64:ce:66:5d:0e:39:19: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:74:25:A6:42:13:6F:40:AE:94:4D:1E:65:6C:6D:25:8A:73:51:89 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.254.31.0/24 27.254.185.0-27.254.186.255 27.254.231.0/24 27.254.233.0/24 49.229.88.0/22 58.64.24.0/24 58.64.27.0/24 103.20.204.0/22 110.49.141.0-110.49.143.255 IPv6: 2405:9800:d000::/36 Signature Algorithm: sha256WithRSAEncryption 46:87:be:67:8c:98:8d:9c:c1:ee:7c:b1:15:31:6e:5d:48:5e: e9:3b:f3:c2:ae:51:a7:7a:7f:84:0c:89:2a:db:3d:0d:13:d4: 10:31:de:23:04:11:9a:bb:91:bb:ed:6f:88:7d:11:d7:d8:1d: 6b:23:00:8b:a8:68:c3:73:36:d7:1f:a9:68:73:18:67:24:d8: ff:84:36:b9:9b:62:ea:6b:92:17:bd:f9:ca:84:b9:c9:ab:e0: 4b:bb:a8:ae:25:16:54:f8:33:73:44:16:96:dd:d5:6b:9c:7a: bf:f0:59:bb:86:0b:f5:02:ba:0a:34:15:ca:7a:f4:73:85:de: 89:4f:9b:83:3e:7d:33:38:df:a0:a4:e6:66:7a:3f:52:25:e5: e3:7e:c4:14:0f:51:f7:7a:8d:44:bc:4c:b6:81:83:e8:7c:52: 62:3b:c5:41:12:4f:cb:41:01:61:c6:a3:ca:62:e7:65:3e:b0: 41:d6:95:c0:ac:b8:6c:80:9b:df:bb:5f:90:21:b8:bd:88:14: a5:02:3f:09:cc:90:fa:57:0c:51:c3:01:aa:14:4a:54:35:0b: b3:e1:d7:cb:f8:61:4e:09:b1:a7:55:5a:0d:a4:dd:ac:b3:3e: 09:0d:a4:f0:38:f1:24:82:e7:21:d5:f2:10:d4:b2:fe:2d:6b: c6:f3:ce:18 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgICKQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQwODIwMDgwMjUwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM0NGRhYS1jY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA058JybUe3BdJL0wDBxZJwSsiCMD7XLgqQ389mqILKg/kO71C++WOq5/s8b/f yv43stgtQ4xgArVLH/d1Aeas8ocGZr0AvSVvZF1X6tKzxySdFVK3nVMEyCJXiZ0k cQG8awi7f+giVqEz0ptzEwWG513pHS8kBnZbAjR44r0Hvoc77E8OGdNDFkevnNy3 FQqoyJgUl0P/3yuMI0kEBoJpvb5SPss4aDEHNZd+bWj2bCHurD0TenXhK79G+ohj allT1iT/6rl/e1fh8UJYAX3koSOczy9OP/EJQVNmVQWVsXSNqBlAERYh/JIhtYJ2 O0P2V64DrVm4P2TOZl0OORlntwIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFKV0JaZC E29ArpRNHmVsbSWKc1GJMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQkY4MDQ4NEM3 MzdEMTFFODk1MEIyOTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbwYIKwYBBQUHAQcBAf8E YDBeMEwEAgABMEYDBAAb/h8wDAMEABv+uQMEABv+ugMEABv+5wMEABv+6QMEAjHl WAMEADpAGAMEADpAGwMEAmcUzDAMAwQAbjGNAwQEbjGAMA4EAgACMAgDBgQkBZgA 0DANBgkqhkiG9w0BAQsFAAOCAQEARoe+Z4yYjZzB7nyxFTFuXUhe6Tvzwq5Rp3p/ hAyJKts9DRPUEDHeIwQRmruRu+1viH0R19gdayMAi6how3M21x+paHMYZyTY/4Q2 uZti6muSF735yoS5yavgS7uoriUWVPgzc0QWlt3Va5x6v/BZu4YL9QK6CjQVynr0 c4XeiU+bgz59MzjfoKTmZno/UiXl437EFA9R93qNRLxMtoGD6HxSYjvFQRJPy0EB YcajymLnZT6wQdaVwKy4bICb37tfkCG4vYgUpQI/CcyQ+lcMUcMBqhRKVDULs+HX y/hhTgmxp1VaDaTdrLM+CQ2k8DjxJILnIdXyENSy/i1rxvPOGA== -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:46 2024 by rpki-client on console-fra.rpki-client.org