$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa File: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (raw, json) Hash identifier: 8RXwq8RXNSR/fht5p4KiYna1zWWPoNLPPrWh0oLtuoE= Subject key identifier: 6B:E4:01:EA:B6:D1:CC:3C:B7:91:F5:A7:E2:25:F2:29:83:0B:9D:D2 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 280E Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa Signing time: Mon 31 Mar 2025 12:55:28 +0000 ROA not before: Mon 31 Mar 2025 12:55:28 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 142594 IP address blocks: 45.249.88.0/24 maxlen: 24 45.249.89.0/24 maxlen: 24 103.217.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10254 (0x280e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Mar 31 12:55:28 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67ea90bf-fce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:fa:7d:a9:ed:03:6c:1f:cc:6f:56:75:bb: a9:1d:d1:60:db:b1:b4:18:f1:6b:f0:6a:60:3b:e3: 49:5d:c3:13:89:d2:62:64:1b:6c:c0:c5:7a:b9:80: bd:97:9e:01:93:71:e4:c8:0b:b3:3a:c6:00:32:a7: c6:8b:4a:c7:2a:25:37:0f:9d:71:17:2c:68:c9:97: 5b:af:fd:d3:76:fa:a6:89:60:80:86:41:71:b7:a3: ab:ec:5f:aa:ed:10:dc:51:d2:b2:29:9d:4c:dc:a4: 49:12:2a:9c:e6:d5:e7:51:29:e0:d0:50:bd:df:6b: 12:b4:4f:d1:96:a7:05:52:65:7b:df:1a:23:5b:71: 11:a2:2b:4d:90:00:07:cb:ba:84:7c:b2:fd:79:c6: 89:48:b9:95:f5:91:00:cd:56:fe:58:f8:d1:fa:86: 5f:00:78:0d:c3:5b:3d:34:03:fa:36:d4:31:bb:f6: fb:25:9a:96:95:b3:bd:18:9b:ea:af:43:a0:b7:37: ce:c7:4c:19:cf:10:4e:97:33:91:4a:a4:c4:f8:cc: ce:1d:90:31:64:3d:1f:4b:a2:4e:ee:cd:6b:71:e2: c4:b0:46:b1:3d:10:62:6f:19:fd:b8:92:d5:e7:94: b5:04:65:8c:d1:b5:44:61:c0:06:a5:4c:e1:75:92: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E4:01:EA:B6:D1:CC:3C:B7:91:F5:A7:E2:25:F2:29:83:0B:9D:D2 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.88.0/23 103.217.254.0/24 Signature Algorithm: sha256WithRSAEncryption 59:8a:b8:fc:a1:b1:2c:21:f2:47:1b:e0:e3:b8:c9:cd:27:0b: e6:b4:f0:f2:78:fd:ce:a0:37:b1:3d:b3:31:43:d8:d7:d4:ec: 75:54:e4:d8:20:9b:63:ab:6e:85:d8:9b:0b:57:0f:35:30:01: ec:6a:70:35:3a:34:fd:b4:68:8e:61:1b:94:6c:d9:a5:dd:d3: 49:56:82:6e:75:ae:66:8f:4a:c5:5f:83:ed:95:f0:05:43:e3: 67:d6:96:e5:8b:68:8f:1d:0f:9b:1c:14:d2:4b:eb:37:3f:41: b6:3e:21:77:d7:b5:6d:1f:59:0e:b9:fc:16:97:97:c9:ec:ad: 0e:da:0f:08:26:f6:a2:cf:e2:a5:fc:6f:2c:44:b9:05:e7:c7: bd:a9:7b:f7:1c:d9:4c:3f:18:df:1c:95:93:16:2f:bf:e6:88: fa:d5:c4:f7:97:f4:85:ec:49:81:9c:75:d2:67:c2:1a:dd:20: 5f:4c:2a:ca:a5:71:37:69:d3:ee:bc:b7:61:d7:45:d8:b3:04: 02:6e:ea:bf:4b:9b:86:28:91:b0:f3:cc:b3:71:bb:5b:38:e3: f2:3d:1f:69:df:55:32:1e:35:b3:7e:e5:a6:cb:e6:c2:19:8a: 50:96:c0:f8:5a:58:83:7f:cd:cc:69:ae:42:1b:a0:ab:8a:24: 3d:f2:1d:ea -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICKA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwMzMxMTI1NTI4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhOTBiZi1mY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jL6fantA2wfzG9WdbupHdFg27G0GPFr8GpgO+NJXcMTidJiZBtswMV6uYC9 l54Bk3HkyAuzOsYAMqfGi0rHKiU3D51xFyxoyZdbr/3TdvqmiWCAhkFxt6Or7F+q 7RDcUdKyKZ1M3KRJEiqc5tXnUSng0FC932sStE/RlqcFUmV73xojW3ERoitNkAAH y7qEfLL9ecaJSLmV9ZEAzVb+WPjR+oZfAHgNw1s9NAP6NtQxu/b7JZqWlbO9GJvq r0OgtzfOx0wZzxBOlzORSqTE+MzOHZAxZD0fS6JO7s1rceLEsEaxPRBibxn9uJLV 55S1BGWM0bVEYcAGpUzhdZLFPwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGvkAeq2 0cw8t5H1p+Il8imDC53SMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQUFGMDcxNThB RkVCMTFFRUJDQUQ4MTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEt+VgDBABn2f4wDQYJKoZIhvcNAQELBQADggEBAFmKuPyh sSwh8kcb4OO4yc0nC+a08PJ4/c6gN7E9szFD2NfU7HVU5Nggm2OrboXYmwtXDzUw AexqcDU6NP20aI5hG5Rs2aXd00lWgm51rmaPSsVfg+2V8AVD42fWluWLaI8dD5sc FNJL6zc/QbY+IXfXtW0fWQ65/BaXl8nsrQ7aDwgm9qLP4qX8byxEuQXnx72pe/cc 2Uw/GN8clZMWL7/miPrVxPeX9IXsSYGcddJnwhrdIF9MKsqlcTdp0+68t2HXRdiz BAJu6r9Lm4YokbDzzLNxu1s44/I9H2nfVTIeNbN+5abL5sIZilCWwPhaWIN/zcxp rkIboKuKJD3yHeo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:19:38 2025 by rpki-client on console.sobornost.net