$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa File: C8E40D62260211EB8B2D4373C4F9AE02.roa (raw, json) Hash identifier: ZDhi3GDj4Rx26cvMEZz82QZw6xeNeNAXctRFjtAy9QI= Subject key identifier: EE:B8:50:94:7F:7E:3D:85:20:AC:7B:13:DD:0E:0B:FF:E1:B0:6C:7B Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 299A Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:32 +0000 ROA not before: Tue 31 Dec 2024 15:53:32 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9546 IP address blocks: 49.229.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10650 (0x299a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 31 15:53:32 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6774137c-b5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:43:44:bf:f3:cf:77:59:79:4c:e6:15:7c:9a: 97:f1:b2:ca:4c:e8:52:57:24:de:36:8c:8f:bc:e4: 35:ba:aa:f9:91:b1:be:72:82:38:3e:fe:6b:4c:68: d6:88:a7:49:3e:d3:61:72:15:01:10:55:61:db:70: c9:5f:8b:2a:5c:2f:4b:75:f7:e7:a1:b7:06:70:23: 7e:2f:2d:01:be:de:dd:c6:77:39:8d:4c:4c:3f:6c: 37:f5:d2:ac:ec:26:5b:b2:cc:cc:13:f0:7c:80:72: 5a:fe:7b:d3:1e:ea:f3:b0:af:b6:ea:ec:92:0a:28: 94:11:1c:57:39:53:e4:55:5c:2c:63:a7:7d:2a:97: ee:9d:b8:2a:2e:cd:1c:06:f5:4f:21:4a:41:0c:f4: 19:95:65:c4:51:75:3f:96:4a:c4:09:18:ba:79:18: e9:86:da:e5:2d:73:f6:f9:9b:8d:5b:7e:85:4e:75: 0b:5f:22:c8:80:46:4f:40:e0:1b:cb:a3:2c:95:f9: b0:43:ba:5c:cc:13:ae:9a:5f:85:17:cf:f2:4e:5f: 84:86:35:64:07:1e:eb:fc:3b:35:62:50:15:38:7e: ae:2c:e4:28:59:02:7a:99:c4:61:d1:67:4b:2d:af: df:bb:45:52:1f:0c:4a:9f:58:e4:c7:8a:74:1c:d1: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B8:50:94:7F:7E:3D:85:20:AC:7B:13:DD:0E:0B:FF:E1:B0:6C:7B X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.229.111.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:7b:7d:f6:f1:8b:69:ad:de:18:e1:77:5d:63:4c:a4:e1:f2: 47:66:f8:15:0e:69:e7:93:17:ad:99:23:92:f9:1f:11:6f:64: 6b:bd:9c:72:5f:b7:e2:63:b2:26:74:09:b7:ac:97:0e:76:1e: 93:50:8e:c7:f6:bd:09:61:f5:6a:8f:37:03:9d:f4:cc:c4:e9: 7e:59:6c:15:05:67:80:1b:06:73:8b:2c:36:88:fd:38:6f:b3: ea:e1:a2:96:e8:fb:5a:a4:c2:6e:92:01:9f:ca:51:8d:e0:d3: 72:dc:7a:bc:90:ce:d3:a6:cb:78:76:0d:54:a6:5a:3d:39:1a: 56:21:ae:e9:15:21:39:e4:ea:35:57:d2:79:0b:ff:07:90:71: f1:8e:4d:21:e5:c8:72:07:ef:f6:f3:a5:06:8c:c0:1a:ee:fb: 5a:4e:08:c4:41:fa:ca:77:70:9c:b7:cc:22:a4:a8:ce:bb:97: fb:ab:4e:44:dd:b4:e7:65:b0:d6:82:7e:52:56:14:76:2f:7d: 4c:9d:13:4d:a2:fe:77:b3:b7:5b:8e:dd:9c:39:b2:d9:57:ea: 67:75:0d:f9:3a:f8:60:8e:63:2b:44:a0:42:6a:24:03:c7:5b: 77:76:4d:77:1b:3d:e6:35:38:68:02:b3:f5:2a:cb:d2:3d:ca: 9a:56:2b:be -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzMyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM3Yy1iNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ENEv/PPd1l5TOYVfJqX8bLKTOhSVyTeNoyPvOQ1uqr5kbG+coI4Pv5rTGjW iKdJPtNhchUBEFVh23DJX4sqXC9LdffnobcGcCN+Ly0Bvt7dxnc5jUxMP2w39dKs 7CZbsszME/B8gHJa/nvTHurzsK+26uySCiiUERxXOVPkVVwsY6d9KpfunbgqLs0c BvVPIUpBDPQZlWXEUXU/lkrECRi6eRjphtrlLXP2+ZuNW36FTnULXyLIgEZPQOAb y6MslfmwQ7pczBOuml+FF8/yTl+EhjVkBx7r/Ds1YlAVOH6uLOQoWQJ6mcRh0WdL La/fu0VSHwxKn1jkx4p0HNF6RwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO64UJR/ fj2FIKx7E90OC//hsGx7MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQzhFNDBENjIy NjAyMTFFQjhCMkQ0MzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAx5W8wDQYJKoZIhvcNAQELBQADggEBAHp7ffbxi2mt3hjh d11jTKTh8kdm+BUOaeeTF62ZI5L5HxFvZGu9nHJft+JjsiZ0Cbeslw52HpNQjsf2 vQlh9WqPNwOd9MzE6X5ZbBUFZ4AbBnOLLDaI/Thvs+rhopbo+1qkwm6SAZ/KUY3g 03LceryQztOmy3h2DVSmWj05GlYhrukVITnk6jVX0nkL/weQcfGOTSHlyHIH7/bz pQaMwBru+1pOCMRB+sp3cJy3zCKkqM67l/urTkTdtOdlsNaCflJWFHYvfUydE02i /nezt1uO3Zw5stlX6md1Dfk6+GCOYytEoEJqJAPHW3d2TXcbPeY1OGgCs/Uqy9I9 yppWK74= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:18 2025 by rpki-client