$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa File: A3C2B7D25DBC11EE80E75075C4F9AE02.roa (raw, json) Hash identifier: UbiRQrcXWPQDb9wyaWz6Q8B0NnWEfYNSg692gny7rzo= Subject key identifier: 02:56:D7:A6:67:94:F0:B2:73:4F:A2:FD:6A:E7:D9:23:32:7D:02:CC Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2962 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:52:41 +0000 ROA not before: Tue 31 Dec 2024 15:52:41 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132821 IP address blocks: 58.64.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10594 (0x2962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 31 15:52:41 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741349-6450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:33:31:a7:20:9c:91:ad:29:20:5d:50:a4: 4c:48:e6:7c:0e:9a:9e:59:a3:bb:af:4a:8d:49:fa: 23:8b:c3:8c:23:73:bc:95:43:9d:44:f5:5c:91:6e: 81:c1:ea:ac:fc:53:a6:7d:8b:7a:c1:38:9e:aa:5b: 58:ed:ed:4b:ba:e5:42:91:24:47:62:1b:54:8f:9f: 87:e9:8d:0c:9d:de:ff:ca:94:30:bb:c3:3b:59:bc: 6d:ef:c7:02:1d:f9:ff:c7:4f:58:fa:8a:d5:6c:97: a5:fa:f4:ee:fa:8d:15:81:a8:d5:43:97:78:60:66: f8:e1:34:f9:6a:2d:91:87:7a:b5:5a:30:d1:73:20: 1e:26:a7:47:8b:e6:e1:09:eb:25:3d:13:8a:1c:10: 8a:1d:09:fd:d2:8c:a6:2d:e8:7c:57:67:e7:45:5c: 64:cb:38:93:9d:0f:4d:c2:87:30:2b:b0:46:c5:1c: 78:57:1a:d6:64:49:d0:1f:42:74:8f:b2:ef:2a:d3: 27:bf:ad:bb:e3:86:af:93:e4:08:76:08:f1:63:67: e4:5a:43:ce:22:b9:44:6b:d6:ac:c5:5a:07:96:26: b7:f4:26:54:cd:93:8c:67:3d:56:17:ea:4b:b0:6f: 00:ef:e6:e6:a8:8b:2d:93:36:f3:be:92:0c:c2:8a: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:56:D7:A6:67:94:F0:B2:73:4F:A2:FD:6A:E7:D9:23:32:7D:02:CC X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.36.0/24 Signature Algorithm: sha256WithRSAEncryption 64:d5:c5:e4:ce:a8:8d:63:72:9c:ec:4d:a1:c8:6b:42:2d:83: 66:a2:3e:b9:83:39:df:61:6a:15:4c:2d:85:6c:b1:7e:cc:c7: ef:fe:eb:84:2a:a8:1b:59:35:66:18:6b:3c:6c:53:a2:28:50: c7:51:74:ed:a0:60:30:9f:d4:38:7b:df:42:4a:ce:ea:b8:54: 46:ca:45:77:d5:17:ab:04:ae:01:88:07:b1:b7:cc:c6:00:cd: 87:ba:2c:95:28:f7:b5:4d:0d:8e:e1:07:9a:51:bc:9e:f0:07: 51:3c:29:2e:01:46:3b:da:f0:b8:ec:2c:1f:30:71:16:d8:f2: 16:8b:32:05:1a:6e:63:07:0d:f1:5f:af:c9:95:d0:66:ef:b6: 65:d6:1a:ed:09:1c:cf:8e:f5:30:0f:55:e2:e5:68:26:9a:aa: 65:c7:2a:a3:94:7f:2b:26:82:16:5e:68:86:7e:2f:bb:19:0b: 1b:53:d0:c2:7b:72:8b:e6:c8:ac:7b:08:b9:ee:f2:23:80:b2: e3:69:bc:09:63:3a:c8:f5:5b:66:7b:d0:82:f6:ae:67:cb:63: dd:5e:7c:e3:31:50:e8:be:17:fd:83:1c:a4:f9:0f:05:c3:45: 11:46:0b:ab:6e:d7:c0:3e:f0:08:61:27:15:f9:99:0e:b3:8c: 2c:df:7d:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MjQxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM0OS02NDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwkzMacgnJGtKSBdUKRMSOZ8DpqeWaO7r0qNSfoji8OMI3O8lUOdRPVckW6B weqs/FOmfYt6wTieqltY7e1LuuVCkSRHYhtUj5+H6Y0Mnd7/ypQwu8M7Wbxt78cC Hfn/x09Y+orVbJel+vTu+o0VgajVQ5d4YGb44TT5ai2Rh3q1WjDRcyAeJqdHi+bh CeslPROKHBCKHQn90oymLeh8V2fnRVxkyziTnQ9NwocwK7BGxRx4VxrWZEnQH0J0 j7LvKtMnv62744avk+QIdgjxY2fkWkPOIrlEa9asxVoHlia39CZUzZOMZz1WF+pL sG8A7+bmqIstkzbzvpIMwoqFZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAJW16Zn lPCyc0+i/Wrn2SMyfQLMMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQTNDMkI3RDI1 REJDMTFFRTgwRTc1MDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6QCQwDQYJKoZIhvcNAQELBQADggEBAGTVxeTOqI1jcpzs TaHIa0Itg2aiPrmDOd9hahVMLYVssX7Mx+/+64QqqBtZNWYYazxsU6IoUMdRdO2g YDCf1Dh730JKzuq4VEbKRXfVF6sErgGIB7G3zMYAzYe6LJUo97VNDY7hB5pRvJ7w B1E8KS4BRjva8LjsLB8wcRbY8haLMgUabmMHDfFfr8mV0GbvtmXWGu0JHM+O9TAP VeLlaCaaqmXHKqOUfysmghZeaIZ+L7sZCxtT0MJ7covmyKx7CLnu8iOAsuNpvAlj Osj1W2Z70IL2rmfLY91efOMxUOi+F/2DHKT5DwXDRRFGC6tu18A+8AhhJxX5mQ6z jCzffZ4= -----END CERTIFICATE-----Generated at Thu Apr 24 18:07:58 2025 by rpki-client on console.sobornost.net