$ rpki-client -vvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa File: 54365208708411EDA8B14246C4F9AE02.roa (raw, json) Hash identifier: mCCSZ+9WYvhaMFX9tC0Iaz2gMx4GH4ZGb0UPoAirqT8= Subject key identifier: A5:B8:8D:9B:EF:95:A0:5C:38:CF:99:6A:89:04:55:4A:E8:14:21:18 Certificate issuer: /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Certificate serial: 018F Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa Signing time: Fri 27 Dec 2024 02:16:36 +0000 ROA not before: Fri 27 Dec 2024 02:16:36 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 147181 IP address blocks: 103.42.4.0/23 maxlen: 23 103.42.4.0/24 maxlen: 24 103.42.5.0/24 maxlen: 24 2001:df1:8f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91285E3, serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794 Validity Not Before: Dec 27 02:16:36 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676e0e04-b3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:56:d5:29:16:50:bf:a3:8b:76:d5:58:c8:b2: 52:72:68:2f:ac:96:32:93:79:41:ad:f3:a1:43:b4: e2:ab:32:d2:a4:75:bb:53:0d:fb:c7:53:eb:90:f8: 8e:d2:2a:cb:b8:92:fb:07:72:0e:4e:cf:4a:41:1d: 84:dc:55:99:39:78:ab:fa:98:e1:b1:76:cc:c2:43: 58:76:a3:5b:23:b0:13:33:d5:1a:1c:62:d5:6d:4c: ef:05:15:1c:be:8e:04:d4:06:12:5a:01:28:0b:6b: a7:56:4b:3a:8a:1e:19:40:b3:73:98:fe:67:2b:dd: 07:97:e1:3d:4a:7b:8b:67:a7:27:2b:60:51:6f:fc: 80:70:52:f4:9a:a7:8d:1b:5e:27:fb:b8:12:c1:29: 5e:53:71:27:fa:7d:7b:ca:c2:9f:3b:2c:1b:f0:39: 0b:42:c1:73:5b:82:72:4a:db:da:97:e3:49:9b:03: 3d:d5:82:12:ce:99:30:1c:47:2e:6d:82:79:dd:c7: 77:fa:de:43:30:b4:b3:af:8f:fd:6a:ac:66:cb:4d: a6:c4:22:19:a7:3f:83:c7:d1:52:b8:0c:3b:35:cb: 13:53:06:f8:a3:0f:1a:e7:2d:e6:7d:4a:98:f0:ca: 33:26:4d:31:6f:1c:97:d4:cd:70:2c:78:4e:21:80: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B8:8D:9B:EF:95:A0:5C:38:CF:99:6A:89:04:55:4A:E8:14:21:18 X509v3 Authority Key Identifier: keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.4.0/23 IPv6: 2001:df1:8f40::/48 Signature Algorithm: sha256WithRSAEncryption b5:a7:1c:67:0a:3b:9c:59:d7:59:70:b1:75:e8:c9:8f:1a:bc: 54:39:1f:be:23:a4:f1:93:b7:57:52:6a:2c:e4:ff:4a:76:06: 68:56:a2:b2:70:c5:9c:7f:c9:ef:17:b1:5e:c6:08:dd:be:22: 00:ae:95:5a:4e:8b:34:df:8d:c9:5d:11:a2:8f:f1:81:50:d7: fb:67:37:b5:b4:96:53:83:60:c0:20:34:3e:09:71:40:2e:2d: 75:0d:d7:48:09:3f:fd:98:35:be:82:67:cb:fc:bd:78:aa:d5: 6b:f9:34:c8:43:17:c9:85:b0:04:3c:e9:77:8a:6a:3b:b2:95: ec:82:a2:21:7a:c3:4e:54:78:a2:dd:ef:0e:ad:f6:7d:c8:11: b5:c6:ce:80:15:f1:20:bf:bb:f9:58:60:52:3c:2a:bd:49:5b: c7:a8:6a:ec:ab:40:8a:58:77:93:a1:cc:f2:ba:39:a9:64:c9: 07:09:53:54:44:bc:85:ef:ae:2c:fd:37:2f:bd:b3:94:14:f0: c7:f6:e6:83:c9:9d:c2:ed:ef:ca:39:74:a1:4a:46:10:80:62: 8c:50:40:17:95:73:14:a9:91:34:35:82:44:70:20:29:ee:19: 59:54:a6:a7:7a:0a:6e:c9:31:87:71:15:2e:79:ee:3a:fe:95: ba:fd:74:53 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1RTMxMTAvBgNVBAUTKDFERUZCMjBBN0E1MUVFMThERDdBRDA2QURBQUM0OTEx RTNFMkY3OTQwHhcNMjQxMjI3MDIxNjM2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZlMGUwNC1iM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81bVKRZQv6OLdtVYyLJScmgvrJYyk3lBrfOhQ7TiqzLSpHW7Uw37x1PrkPiO 0irLuJL7B3IOTs9KQR2E3FWZOXir+pjhsXbMwkNYdqNbI7ATM9UaHGLVbUzvBRUc vo4E1AYSWgEoC2unVks6ih4ZQLNzmP5nK90Hl+E9SnuLZ6cnK2BRb/yAcFL0mqeN G14n+7gSwSleU3En+n17ysKfOywb8DkLQsFzW4JyStval+NJmwM91YISzpkwHEcu bYJ53cd3+t5DMLSzr4/9aqxmy02mxCIZpz+Dx9FSuAw7NcsTUwb4ow8a5y3mfUqY 8MozJk0xbxyX1M1wLHhOIYCvpwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKW4jZvv laBcOM+ZaokEVUroFCEYMB8GA1UdIwQYMBaAFB3vsgp6Ue4Y3XrQatqsSRHj4veU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODVFMy8xQjEyQTgyNDcw NzkxMUVEQkFBN0NEMjZDNEY5QUUwMi9IZS15Q25wUjdoamRldEJxMnF4SkVlUGk5 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlLXlDbnBSN2hqZGV0QnEycXhKRWVQaTk1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg1RTMvMUIxMkE4MjQ3MDc5MTFFREJBQTdDRDI2QzRGOUFFMDIvNTQzNjUyMDg3 MDg0MTFFREE4QjE0MjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnKgQwDwQCAAIwCQMHACABDfGPQDANBgkqhkiG9w0BAQsF AAOCAQEAtaccZwo7nFnXWXCxdejJjxq8VDkfviOk8ZO3V1JqLOT/SnYGaFaisnDF nH/J7xexXsYI3b4iAK6VWk6LNN+NyV0Roo/xgVDX+2c3tbSWU4NgwCA0PglxQC4t dQ3XSAk//Zg1voJny/y9eKrVa/k0yEMXyYWwBDzpd4pqO7KV7IKiIXrDTlR4ot3v Dq32fcgRtcbOgBXxIL+7+VhgUjwqvUlbx6hq7KtAilh3k6HM8ro5qWTJBwlTVES8 he+uLP03L72zlBTwx/bmg8mdwu3vyjl0oUpGEIBijFBAF5VzFKmRNDWCRHAgKe4Z WVSmp3oKbskxh3EVLnnuOv6Vuv10Uw== -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:38 2025 by rpki-client on console.sobornost.net