$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C7E33F14260211EB8B2D4373C4F9AE02.roa File: C7E33F14260211EB8B2D4373C4F9AE02.roa (raw, json) Hash identifier: j89tF1klgTISWWtFUzaOjvYdu6yc4H8ECiRL+BcoFpQ= Subject key identifier: 65:42:6B:52:BE:A7:60:81:59:41:9C:A8:3B:E4:D2:0E:4F:FA:4A:44 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 296F Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C7E33F14260211EB8B2D4373C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:52:53 +0000 ROA not before: Tue 31 Dec 2024 15:52:52 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 136897 IP address blocks: 49.229.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10607 (0x296f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 31 15:52:52 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741354-1d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:d3:0c:75:48:46:d7:f9:62:07:9d:1b:93: 0e:4a:9a:c1:ea:ad:8d:59:41:7d:48:ed:b2:8f:f1: 42:d0:73:6e:1e:ef:e0:43:03:6c:0f:e3:30:03:cf: 9c:28:8c:40:25:b4:61:6b:d2:07:a7:30:43:4b:89: 6a:71:64:a1:e0:d1:f1:6f:8a:19:0d:f3:4a:af:b7: f9:bd:85:e0:d4:98:b3:4d:55:7b:6f:55:23:c1:8a: 8e:99:12:f5:b8:6a:21:47:54:04:31:90:ea:4e:10: 34:07:18:4d:f1:1a:74:a6:ec:48:ac:08:03:65:10: 48:e7:b5:2e:21:d6:93:06:72:68:ce:d2:5e:ec:67: 54:5e:78:a5:6d:b4:b5:7a:36:36:83:e0:d8:05:80: ae:a0:81:e1:a4:bc:8b:f2:5f:48:33:cc:57:d4:fa: 6c:68:f8:3b:b8:78:cd:3b:a2:36:f3:50:e1:2a:4c: 4e:04:46:12:64:4c:d2:e7:08:2d:25:56:7d:cb:12: 7e:ab:7d:5c:a8:66:09:62:d6:29:3a:74:e7:00:1f: cd:56:60:a1:c0:a9:b9:81:b7:ac:30:89:b0:97:15: f6:09:62:5a:e9:d2:8d:f7:16:e3:74:ec:09:11:0c: c9:7f:e6:4b:59:71:be:9b:b5:22:72:cb:00:5e:f6: 67:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:42:6B:52:BE:A7:60:81:59:41:9C:A8:3B:E4:D2:0E:4F:FA:4A:44 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C7E33F14260211EB8B2D4373C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.229.92.0/24 Signature Algorithm: sha256WithRSAEncryption b6:78:45:e5:60:7f:46:be:f1:ff:06:5b:10:9d:0f:3a:0d:bc: 8b:95:45:c5:92:01:4a:91:9d:a7:48:13:06:94:d4:aa:91:4a: 78:84:9f:f5:ea:c8:f5:9a:a5:67:ab:f7:59:5d:e5:3a:0b:2e: 7e:0e:a2:f1:63:1f:02:b8:27:02:ea:92:e3:6d:85:39:b8:c3: db:49:d3:6d:5c:be:2d:a3:70:f2:85:4b:8d:95:aa:db:2a:ce: 12:db:c7:6f:1c:32:b6:23:2d:72:41:93:0b:dc:ce:f9:cc:3b: 80:1f:c3:4e:28:b6:b7:29:03:f1:0e:56:ae:d2:db:d8:f4:7c: 14:7d:2b:5a:35:ae:9d:82:95:f9:d5:29:8f:6b:37:11:ff:e6: 68:59:4e:dc:e8:71:33:32:93:fc:d7:1e:ea:b8:9b:c5:6d:75: 83:d1:83:e6:89:77:00:25:f2:9a:0e:3e:88:3d:d5:84:f6:f2: 54:b1:83:59:3f:c1:62:96:0f:ce:93:db:45:59:e0:2c:74:54: 53:7e:4d:ce:17:85:5f:08:0f:77:b4:10:4d:e3:df:f1:df:16: 4a:bc:14:d1:9f:cd:6f:5e:4f:89:f6:d5:81:13:04:34:52:72: ab:6f:1a:c2:c7:39:84:69:2e:d9:a4:68:c2:db:8a:5e:3f:70: e9:97:cf:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MjUyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM1NC0xZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+XTDHVIRtf5YgedG5MOSprB6q2NWUF9SO2yj/FC0HNuHu/gQwNsD+MwA8+c KIxAJbRha9IHpzBDS4lqcWSh4NHxb4oZDfNKr7f5vYXg1JizTVV7b1UjwYqOmRL1 uGohR1QEMZDqThA0BxhN8Rp0puxIrAgDZRBI57UuIdaTBnJoztJe7GdUXnilbbS1 ejY2g+DYBYCuoIHhpLyL8l9IM8xX1PpsaPg7uHjNO6I281DhKkxOBEYSZEzS5wgt JVZ9yxJ+q31cqGYJYtYpOnTnAB/NVmChwKm5gbesMImwlxX2CWJa6dKN9xbjdOwJ EQzJf+ZLWXG+m7UicssAXvZn0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGVCa1K+ p2CBWUGcqDvk0g5P+kpEMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQzdFMzNGMTQy NjAyMTFFQjhCMkQ0MzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx5VwwDQYJKoZIhvcNAQELBQADggEBALZ4ReVgf0a+8f8G WxCdDzoNvIuVRcWSAUqRnadIEwaU1KqRSniEn/XqyPWapWer91ld5ToLLn4OovFj HwK4JwLqkuNthTm4w9tJ021cvi2jcPKFS42VqtsqzhLbx28cMrYjLXJBkwvczvnM O4Afw04otrcpA/EOVq7S29j0fBR9K1o1rp2ClfnVKY9rNxH/5mhZTtzocTMyk/zX Huq4m8VtdYPRg+aJdwAl8poOPog91YT28lSxg1k/wWKWD86T20VZ4Cx0VFN+Tc4X hV8ID3e0EE3j3/HfFkq8FNGfzW9eT4n21YETBDRScqtvGsLHOYRpLtmkaMLbil4/ cOmXz0k= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:31 2025 by rpki-client