$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F1A195F284A511EAB3356318C4F9AE02.roa File: F1A195F284A511EAB3356318C4F9AE02.roa (raw, json) Hash identifier: wqRJomYX0OTYINbwompZ7/vbhBBEgg9g5IawQllcmCg= Subject key identifier: FA:F8:53:9C:36:67:7D:CC:89:23:83:32:42:7C:75:D3:F3:76:F8:7F Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2987 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F1A195F284A511EAB3356318C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:15 +0000 ROA not before: Tue 31 Dec 2024 15:53:15 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38794 IP address blocks: 49.229.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10631 (0x2987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Dec 31 15:53:15 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6774136b-0d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:5b:7c:31:ea:1d:dc:02:3d:2e:0c:1c:b9: 4e:5e:a1:de:b8:71:41:30:9e:28:3c:db:5e:f8:38: e1:ce:e2:70:31:2c:57:43:e1:70:32:79:37:ad:9f: 20:99:48:60:26:1e:10:0e:d7:ab:fa:a3:8b:aa:86: db:3f:1f:62:ae:f1:c9:9d:ce:56:bc:83:43:00:10: 7e:1d:5c:78:47:73:8a:a3:b1:5f:1f:5e:e9:5a:b5: c6:1e:35:a1:8e:13:ef:aa:a9:68:e5:16:d3:44:04: 8e:3b:1d:f1:dd:c7:9a:5c:85:a8:2e:cb:20:6a:7a: d3:72:66:3d:85:bd:53:be:80:12:47:29:db:aa:5d: 8b:6c:72:d9:b6:fe:08:a4:ff:bb:fb:66:62:76:52: 4c:a0:e3:5b:96:a4:d1:66:0c:75:f4:55:08:50:0e: 04:e9:55:53:ea:de:51:0f:8e:38:26:d3:dd:35:db: ee:da:e6:5d:f5:41:d7:e8:07:50:70:1b:0e:85:c9: b4:1a:0e:0c:7b:6e:9a:db:22:c7:8d:d6:20:45:5b: 95:dd:36:40:ac:0d:8d:43:ee:66:60:28:2f:83:b9: ae:31:e4:ab:c1:ed:af:27:3a:5a:bd:b7:4e:b5:64: 73:a2:56:d1:c7:26:32:97:3d:69:e2:92:12:20:a4: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F8:53:9C:36:67:7D:CC:89:23:83:32:42:7C:75:D3:F3:76:F8:7F X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F1A195F284A511EAB3356318C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.229.44.0/24 Signature Algorithm: sha256WithRSAEncryption 39:44:76:7d:94:0e:29:d8:ad:a7:0c:52:9d:e0:55:bb:bd:ac: 95:4a:62:db:44:86:2a:4c:41:f5:85:c0:6c:7e:a9:29:39:5d: c3:b8:0e:6c:5b:d3:5e:02:d1:8a:64:1d:f8:37:51:06:36:43: 77:aa:9a:0c:00:e4:14:b8:59:3e:ab:ae:b9:46:7a:ea:6e:eb: 40:8f:f7:78:27:93:51:35:9a:64:a5:7a:40:d1:9f:d8:c2:2a: f6:fe:df:a0:ea:ba:34:b8:b0:90:84:5e:99:0e:4a:04:d1:da: 9d:b2:02:42:56:2b:77:48:ed:a0:e7:71:64:e6:f7:a6:94:85: 0a:89:0c:2a:61:1a:42:ac:e2:61:e1:16:b5:40:49:82:ae:f1: 73:1b:c3:04:39:e8:8f:b5:4b:01:bc:70:15:e5:56:fe:21:08: c1:ec:b3:00:16:b4:ea:81:de:41:ba:22:fa:a5:f1:d1:54:b7: 53:20:4e:59:1a:a5:24:c5:57:df:44:aa:54:ec:27:68:17:24: 57:2d:98:1e:ed:6f:ef:71:a3:05:1f:08:8e:68:43:14:d8:55: a9:a6:dc:27:03:92:a7:20:4a:bd:77:08:cf:ca:6f:4e:ea:76: e3:8c:ed:9c:e2:71:65:02:aa:72:60:fe:49:43:04:c0:92:73: c7:f1:4c:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzE1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM2Yi0wZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01RbfDHqHdwCPS4MHLlOXqHeuHFBMJ4oPNte+DjhzuJwMSxXQ+FwMnk3rZ8g mUhgJh4QDter+qOLqobbPx9irvHJnc5WvINDABB+HVx4R3OKo7FfH17pWrXGHjWh jhPvqqlo5RbTRASOOx3x3ceaXIWoLssganrTcmY9hb1TvoASRynbql2LbHLZtv4I pP+7+2ZidlJMoONblqTRZgx19FUIUA4E6VVT6t5RD444JtPdNdvu2uZd9UHX6AdQ cBsOhcm0Gg4Me26a2yLHjdYgRVuV3TZArA2NQ+5mYCgvg7muMeSrwe2vJzpavbdO tWRzolbRxyYylz1p4pISIKQ8bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPr4U5w2 Z33MiSODMkJ8ddPzdvh/MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRjFBMTk1RjI4 NEE1MTFFQUIzMzU2MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx5SwwDQYJKoZIhvcNAQELBQADggEBADlEdn2UDinYracM Up3gVbu9rJVKYttEhipMQfWFwGx+qSk5XcO4Dmxb014C0YpkHfg3UQY2Q3eqmgwA 5BS4WT6rrrlGeupu60CP93gnk1E1mmSlekDRn9jCKvb+36DqujS4sJCEXpkOSgTR 2p2yAkJWK3dI7aDncWTm96aUhQqJDCphGkKs4mHhFrVASYKu8XMbwwQ56I+1SwG8 cBXlVv4hCMHsswAWtOqB3kG6Ivql8dFUt1MgTlkapSTFV99EqlTsJ2gXJFctmB7t b+9xowUfCI5oQxTYVamm3CcDkqcgSr13CM/Kb07qduOM7ZzicWUCqnJg/klDBMCS c8fxTDU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:38:12 2025 by rpki-client