$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa File: C8E40D62260211EB8B2D4373C4F9AE02.roa (raw, json) Hash identifier: ueIFnheKZcCcei/SBnd5Pz+BCHGg/ffggKgD0kRIDuI= Subject key identifier: 37:0A:53:51:C8:08:1F:29:58:2E:0C:3C:42:02:76:E4:C3:2D:0F:1B Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2841 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa Signing time: Thu 28 Dec 2023 16:03:34 +0000 ROA not before: Thu 28 Dec 2023 16:03:34 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9546 IP address blocks: 49.229.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10305 (0x2841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 28 16:03:34 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658d9c55-5d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:bd:ce:3b:c5:5f:26:a0:8b:fd:b9:9b:1d: f9:06:76:5d:d8:09:3d:48:5e:7d:28:99:1c:ef:98: 58:4d:11:78:e6:46:99:e7:80:21:22:b6:02:5b:b9: 64:b8:b3:e3:ce:67:46:16:34:e2:38:4c:b0:3d:1b: 62:54:62:ef:4b:33:19:26:8d:1c:83:78:4e:86:d1: 08:9b:32:9c:c7:bb:5a:d4:b5:ba:41:2d:97:8f:7d: b1:f0:82:3e:dc:06:38:8e:d9:69:38:bd:fe:59:68: 78:86:99:7d:45:93:e6:04:f8:99:ac:5c:ed:39:00: 7c:bb:e7:55:83:0d:d0:5c:9d:2f:b3:34:5d:78:0e: 7c:31:e8:c7:9a:61:06:e3:be:7d:25:60:e5:08:2c: dc:61:c4:d1:db:da:5d:08:41:9d:e7:a2:53:88:9d: 67:87:d8:21:19:88:6e:9f:75:ce:4d:d9:32:55:ce: 9b:9a:c3:c6:3e:cc:a6:42:47:6c:01:be:a5:c2:3a: 4c:91:13:88:7e:71:d9:ba:8c:ba:c7:86:58:67:68: 35:ba:67:d7:33:b2:fa:49:76:ea:eb:9f:dc:ca:4a: c0:63:6f:17:a1:8c:20:67:cb:58:98:66:d7:fc:b0: b1:a2:9d:2c:61:f4:20:27:8f:45:23:33:59:b9:66: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0A:53:51:C8:08:1F:29:58:2E:0C:3C:42:02:76:E4:C3:2D:0F:1B X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.229.111.0/24 Signature Algorithm: sha256WithRSAEncryption 66:e1:82:88:1e:90:4c:eb:7a:bc:b3:1d:94:a3:36:a8:44:5b: e5:d3:30:3d:4f:d9:eb:03:d9:bb:e5:e1:5f:a4:f5:7f:5d:95: 5b:06:9e:cf:67:67:eb:88:e9:2e:4e:2f:da:14:85:68:a0:30: e3:8a:fc:6c:87:9f:1b:a1:6c:bc:33:63:16:03:7a:fe:de:f2: 80:5f:84:b9:48:7c:33:6e:fa:c9:20:98:f5:04:eb:fb:57:c2: c6:29:d5:d1:a0:25:0a:04:03:f1:ca:33:1c:5c:04:fe:98:b6: 4a:d0:c9:d2:f8:1a:da:5f:43:cf:58:31:ae:5e:81:c1:47:91: b3:32:1c:64:ee:c8:82:c0:7a:fc:1e:a7:73:bc:34:ea:f2:a2: 5b:d1:0e:be:43:d0:d2:a0:09:f4:a6:7a:cb:c5:61:a8:e3:14: 96:f7:b3:4c:52:97:bb:96:55:fa:24:3e:63:cc:25:ab:65:12: ec:75:ab:cf:87:14:94:ae:4c:3e:14:d6:04:d0:71:78:e7:c7: de:7d:cc:dd:ce:2c:65:37:42:90:c3:c6:0d:5d:05:27:ad:34: 34:39:c4:9e:38:d8:e1:4a:b3:88:13:11:c2:a2:33:44:5a:6e: a9:07:f4:5a:69:0a:ba:fa:88:b0:86:eb:f0:43:e0:f4:7c:98: 94:a7:be:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjMxMjI4MTYwMzM0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkOWM1NS01ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPa9zjvFXyagi/25mx35BnZd2Ak9SF59KJkc75hYTRF45kaZ54AhIrYCW7lk uLPjzmdGFjTiOEywPRtiVGLvSzMZJo0cg3hOhtEImzKcx7ta1LW6QS2Xj32x8II+ 3AY4jtlpOL3+WWh4hpl9RZPmBPiZrFztOQB8u+dVgw3QXJ0vszRdeA58MejHmmEG 4759JWDlCCzcYcTR29pdCEGd56JTiJ1nh9ghGYhun3XOTdkyVc6bmsPGPsymQkds Ab6lwjpMkROIfnHZuoy6x4ZYZ2g1umfXM7L6SXbq65/cykrAY28XoYwgZ8tYmGbX /LCxop0sYfQgJ49FIzNZuWbojwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDcKU1HI CB8pWC4MPEICduTDLQ8bMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQzhFNDBENjIy NjAyMTFFQjhCMkQ0MzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx5W8wDQYJKoZIhvcNAQELBQADggEBAGbhgogekEzreryz HZSjNqhEW+XTMD1P2esD2bvl4V+k9X9dlVsGns9nZ+uI6S5OL9oUhWigMOOK/GyH nxuhbLwzYxYDev7e8oBfhLlIfDNu+skgmPUE6/tXwsYp1dGgJQoEA/HKMxxcBP6Y tkrQydL4GtpfQ89YMa5egcFHkbMyHGTuyILAevwep3O8NOryolvRDr5D0NKgCfSm esvFYajjFJb3s0xSl7uWVfokPmPMJatlEux1q8+HFJSuTD4U1gTQcXjnx959zN3O LGU3QpDDxg1dBSetNDQ5xJ442OFKs4gTEcKiM0RabqkH9FppCrr6iLCG6/BD4PR8 mJSnvm0= -----END CERTIFICATE-----Generated at Fri May 31 17:44:21 2024 by rpki-client on console-fra.rpki-client.org