$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json) Hash identifier: UPmCGARDDskezK4JcktOFu0RSSCwY7yg4+DuQZjC7iA= Subject key identifier: 4B:15:71:B6:C3:89:27:E7:96:37:0B:91:BC:7A:FD:0B:B4:7E:59:AA Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: D5 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa Signing time: Wed 09 Apr 2025 07:19:14 +0000 ROA not before: Wed 09 Apr 2025 07:19:14 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 146943 IP address blocks: 43.230.203.0/24 maxlen: 24 45.113.224.0/24 maxlen: 24 45.113.226.0/24 maxlen: 24 45.113.227.0/24 maxlen: 24 45.120.137.0/24 maxlen: 24 45.120.138.0/24 maxlen: 24 157.119.41.0/24 maxlen: 24 157.119.42.0/24 maxlen: 24 157.119.43.0/24 maxlen: 24 2405:7140:2::/48 maxlen: 48 2405:7140:4::/48 maxlen: 48 2405:7140:5::/48 maxlen: 48 2405:7140:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Apr 9 07:19:14 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67f61f72-f5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:75:06:0b:e3:fb:9d:26:94:38:f3:97:00: ed:a3:f5:17:27:e5:c7:db:ee:ea:50:c6:05:2f:2f: ad:28:08:77:a1:05:5c:69:ce:10:bb:2b:66:3d:ca: 63:a3:8d:2f:c8:9b:5d:95:41:26:38:68:98:27:a4: 87:1b:c8:4e:a8:2f:92:80:11:0d:5f:b4:ab:f9:72: 2a:9c:0b:76:bf:57:44:81:06:f8:0d:b8:3f:8a:d3: 99:b1:e7:ce:ae:b8:98:b8:5f:a9:a6:d6:58:53:81: bf:fd:86:bb:ca:d1:05:26:4a:bb:59:f4:2e:64:7b: 72:54:d2:6f:3a:39:01:7f:6c:11:de:95:3c:50:26: 57:c3:07:b9:32:23:66:78:ca:28:ad:c0:71:c1:e5: 13:d4:fa:43:01:38:e9:cc:cb:c1:c9:29:53:22:dc: 74:d2:cf:e7:84:64:cc:ce:69:df:52:a9:f8:59:97: 55:4a:00:2b:c7:11:d2:15:b4:a2:6b:78:cb:33:22: 2a:5a:a2:bc:3a:19:e5:84:3f:c8:85:c4:02:4b:71: 83:af:63:2f:92:9f:d6:e4:55:da:b9:d6:6e:58:55: f7:08:c1:ed:e6:bc:10:71:16:c4:85:29:01:6b:44: b5:2a:47:6a:15:a3:8e:87:53:e9:76:cd:c3:4b:4d: f1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:15:71:B6:C3:89:27:E7:96:37:0B:91:BC:7A:FD:0B:B4:7E:59:AA X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.203.0/24 45.113.224.0/24 45.113.226.0/23 45.120.137.0-45.120.138.255 157.119.41.0-157.119.43.255 IPv6: 2405:7140:2::/48 2405:7140:4::-2405:7140:6:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 99:36:9d:2d:b2:89:d5:ec:b6:8f:9a:8a:ea:22:a1:5e:94:de: 29:a2:ba:e8:f5:d8:7b:e0:a8:5a:04:43:26:03:3c:0b:fc:ab: cf:0d:ac:d8:6c:e2:d6:4b:39:c6:f3:c3:2f:6b:5b:1e:fe:04: 23:9a:0c:53:e7:b9:a8:4e:08:4d:e5:57:c8:80:50:e0:fe:ff: 8d:b0:1a:c7:82:39:77:42:20:b0:04:f0:74:5b:34:b1:24:34: b4:c8:1c:33:f5:fb:c6:1d:e7:f3:a2:ce:bd:35:eb:76:b3:99: f1:5e:ad:44:ff:d5:9a:f9:8d:dd:c4:5d:0b:3f:ee:d9:eb:40: 18:10:24:5a:50:50:ca:8a:1c:9c:78:ea:1e:e6:e9:c1:c5:4b: ff:8d:bc:7c:a2:e9:fc:20:a0:cf:fd:11:36:8e:85:88:cf:3f: 14:34:9f:aa:8c:fc:8a:f0:d3:3a:54:51:c5:a8:16:00:e2:ad: 0a:1b:29:96:31:7a:9f:f2:49:75:6c:a1:1b:52:74:17:0b:a4: 85:1c:28:ba:b4:38:a7:c4:ca:70:4f:64:ff:1c:b3:58:60:0e: 7d:c2:92:c4:eb:c3:c1:3a:c4:f8:74:05:a3:e9:8b:59:55:b6: 1d:fd:c3:a3:b7:13:df:15:5d:b2:1e:2a:69:25:5b:3a:5d:14: bf:6f:45:9c -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUwNDA5MDcxOTE0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y2MWY3Mi1mNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXF1Bgvj+50mlDjzlwDto/UXJ+XH2+7qUMYFLy+tKAh3oQVcac4QuytmPcpj o40vyJtdlUEmOGiYJ6SHG8hOqC+SgBENX7Sr+XIqnAt2v1dEgQb4Dbg/itOZsefO rriYuF+pptZYU4G//Ya7ytEFJkq7WfQuZHtyVNJvOjkBf2wR3pU8UCZXwwe5MiNm eMoorcBxweUT1PpDATjpzMvBySlTItx00s/nhGTMzmnfUqn4WZdVSgArxxHSFbSi a3jLMyIqWqK8OhnlhD/IhcQCS3GDr2Mvkp/W5FXaudZuWFX3CMHt5rwQcRbEhSkB a0S1KkdqFaOOh1Ppds3DS03xPQIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFEsVcbbD iSfnljcLkbx6/Qu0flmqMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMzNjIvNkEwOEY0OTIyNTc3MTFFRkJCMEI4MjUxQzRGOUFFMDIvNjQ5MkQ0OTg1 QjkwMTFFRjhEQjQ4QzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbAYIKwYBBQUHAQcBAf8E XTBbMDQEAgABMC4DBAAr5ssDBAAtceADBAEtceIwDAMEAC14iQMEAC14ijAMAwQA nXcpAwQCnXcoMCMEAgACMB0DBwAkBXFAAAIwEgMHAiQFcUAABAMHACQFcUAABjAN BgkqhkiG9w0BAQsFAAOCAQEAmTadLbKJ1ey2j5qK6iKhXpTeKaK66PXYe+CoWgRD JgM8C/yrzw2s2Gzi1ks5xvPDL2tbHv4EI5oMU+e5qE4ITeVXyIBQ4P7/jbAax4I5 d0IgsATwdFs0sSQ0tMgcM/X7xh3n86LOvTXrdrOZ8V6tRP/VmvmN3cRdCz/u2etA GBAkWlBQyoocnHjqHubpwcVL/428fKLp/CCgz/0RNo6FiM8/FDSfqoz8ivDTOlRR xagWAOKtChspljF6n/JJdWyhG1J0FwukhRwourQ4p8TKcE9k/xyzWGAOfcKSxOvD wTrE+HQFo+mLWVW2Hf3Do7cT3xVdsh4qaSVbOl0Uv29FnA== -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net