$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa File: 1C12F510A05011ED8B25FE52C4F9AE02.roa (raw, json) Hash identifier: laRjE/FXZyosfdYzs+KrogqerFEbxpe5tdAHX5rLq2Y= Subject key identifier: 78:DB:D1:73:40:DF:34:01:64:CA:E4:A5:73:FC:57:B0:71:07:4C:65 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2979 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:01 +0000 ROA not before: Tue 31 Dec 2024 15:53:01 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 147187 IP address blocks: 49.231.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10617 (0x2979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 31 15:53:01 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6774135d-8a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:ce:9d:b2:7e:6d:39:a1:bc:d3:ff:28:05: 75:76:df:45:78:df:6c:a0:91:ff:75:a4:5b:43:5a: 45:f4:99:67:ed:27:86:6d:19:53:ba:13:eb:8e:b2: 7c:7f:9e:02:f0:c3:c7:28:13:f1:9a:80:29:7b:93: d7:86:7f:f3:0c:9d:f6:d0:b0:12:c9:9e:87:c4:cc: 76:59:2f:d3:8b:68:7f:d8:90:54:1c:87:98:5d:5f: 75:a5:4d:24:82:e9:37:fd:ab:d3:c8:76:9a:d5:0c: 99:e8:f9:52:88:18:72:fc:9b:c1:3e:11:8b:e8:20: 8f:a2:c3:48:05:92:85:52:d8:1d:1b:19:21:6a:d7: d5:3e:35:b6:dc:30:d2:4d:31:9e:4c:e2:28:e3:73: d1:8e:b0:eb:53:eb:f5:06:b4:60:f0:ae:58:6e:a4: 69:aa:6a:04:31:4f:c4:6b:1d:90:03:fc:d5:66:fc: 5b:4c:ff:26:05:c4:21:58:cf:62:40:76:a2:49:0e: 64:3a:06:7a:72:d9:31:4b:59:b4:bb:59:c9:e3:62: fe:70:2d:ae:62:f6:04:bf:4b:7d:78:a8:fc:4e:55: a8:e3:24:b6:54:1e:4c:0a:80:8e:14:c8:65:e2:50: 69:c7:0a:30:91:c0:a2:49:ba:ca:df:44:51:e8:05: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DB:D1:73:40:DF:34:01:64:CA:E4:A5:73:FC:57:B0:71:07:4C:65 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.231.72.0/24 Signature Algorithm: sha256WithRSAEncryption 47:64:65:99:92:98:b6:8d:0e:69:25:45:64:bc:91:3e:f1:b2: 3c:61:1d:89:7c:a3:0d:dd:10:f4:6d:6b:b6:47:61:f5:3e:6a: fb:62:5f:0d:d8:ad:72:30:34:fb:a4:30:c0:70:bc:c4:37:61: 49:f3:4b:17:43:b7:af:be:04:04:1d:51:4b:3f:25:b8:22:59: 8e:84:62:b2:2c:a2:5d:99:72:c2:c0:ff:e5:fc:73:bb:17:fc: 1e:76:95:b7:5f:91:54:83:0f:c6:66:3e:91:7e:25:df:5f:95: ad:f5:29:b8:11:e1:c0:31:5c:be:f2:2f:59:f6:17:21:bf:ef: 90:20:b9:17:e9:1c:c1:ab:3b:a0:e6:13:a2:b0:92:23:db:e3: 60:95:fb:f3:64:b8:d5:3e:b0:2d:4d:7c:f0:a6:58:23:c4:63: 1f:e1:05:c6:24:be:f0:93:94:27:ea:53:f2:bd:18:d0:6a:a4: fb:4b:b6:87:77:e6:03:6f:64:f2:3c:c3:0e:07:01:ed:8d:7d: ba:dc:84:5a:7f:9f:5e:a4:b1:08:9f:4a:78:c9:7b:43:3d:ef: f8:5c:c3:f2:22:20:98:8d:b7:71:06:25:aa:20:8f:17:63:c9: 4f:e0:9c:9e:58:5c:74:4c:c9:ab:1e:0a:c8:9a:b5:79:0d:0d: 48:71:8c:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzAxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM1ZC04YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnfOnbJ+bTmhvNP/KAV1dt9FeN9soJH/daRbQ1pF9Jln7SeGbRlTuhPrjrJ8 f54C8MPHKBPxmoApe5PXhn/zDJ320LASyZ6HxMx2WS/Ti2h/2JBUHIeYXV91pU0k guk3/avTyHaa1QyZ6PlSiBhy/JvBPhGL6CCPosNIBZKFUtgdGxkhatfVPjW23DDS TTGeTOIo43PRjrDrU+v1BrRg8K5YbqRpqmoEMU/Eax2QA/zVZvxbTP8mBcQhWM9i QHaiSQ5kOgZ6ctkxS1m0u1nJ42L+cC2uYvYEv0t9eKj8TlWo4yS2VB5MCoCOFMhl 4lBpxwowkcCiSbrK30RR6AVh3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHjb0XNA 3zQBZMrkpXP8V7BxB0xlMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMUMxMkY1MTBB MDUwMTFFRDhCMjVGRTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx50gwDQYJKoZIhvcNAQELBQADggEBAEdkZZmSmLaNDmkl RWS8kT7xsjxhHYl8ow3dEPRta7ZHYfU+avtiXw3YrXIwNPukMMBwvMQ3YUnzSxdD t6++BAQdUUs/JbgiWY6EYrIsol2ZcsLA/+X8c7sX/B52lbdfkVSDD8ZmPpF+Jd9f la31KbgR4cAxXL7yL1n2FyG/75AguRfpHMGrO6DmE6KwkiPb42CV+/NkuNU+sC1N fPCmWCPEYx/hBcYkvvCTlCfqU/K9GNBqpPtLtod35gNvZPI8ww4HAe2NfbrchFp/ n16ksQifSnjJe0M97/hcw/IiIJiNt3EGJaogjxdjyU/gnJ5YXHRMyaseCsiatXkN DUhxjPE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:04 2025 by rpki-client