$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/1909718EDE4A11EF90C89D39C4F9AE02.roa File: 1909718EDE4A11EF90C89D39C4F9AE02.roa (raw, json) Hash identifier: /eMiLKYYsNEMi2i4zLS61WcIPXTg0PjTSgCz7Tex+Ec= Subject key identifier: CE:EA:49:35:12:A5:F9:05:FB:3C:BD:29:FE:FC:FE:A7:48:8B:3F:76 Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Certificate serial: 2C Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/1909718EDE4A11EF90C89D39C4F9AE02.roa Signing time: Wed 29 Jan 2025 14:06:00 +0000 ROA not before: Wed 29 Jan 2025 14:06:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139921 IP address blocks: 160.191.128.0/24 maxlen: 24 160.191.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Validity Not Before: Jan 29 14:06:00 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=679a35c8-e87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:4d:3c:fb:3d:e5:23:df:4b:42:11:75:bb: 6d:e9:ef:55:9b:98:f0:0c:1f:6a:cf:c9:12:74:59: 7c:ba:1e:54:23:ca:d2:43:6b:2f:59:0c:1b:73:09: 1c:8e:bf:b4:8d:ed:f0:f1:e1:52:a8:00:92:8e:45: 5b:d9:26:ac:ee:2a:ab:ba:15:85:c6:1a:09:3f:f3: f1:24:f3:96:99:94:f5:08:22:2a:0a:24:45:37:f1: 46:f1:f4:ef:8d:95:f6:9d:54:86:60:13:8c:de:0b: 55:0b:c5:84:93:8b:5c:6a:fb:a6:2e:fd:e2:0e:8d: 39:1d:d1:b0:99:95:64:63:82:72:99:9b:35:23:e1: 42:46:ac:d9:2e:2a:86:43:ff:ca:80:36:b5:16:68: ae:97:ed:91:9d:5d:f4:1d:f6:46:54:12:94:74:32: c9:f7:3e:6d:cb:f2:17:7d:c1:57:d0:b7:74:6d:25: d2:73:d7:ca:c7:d3:22:bf:20:a8:33:71:3a:0d:30: a5:5c:f1:7c:ff:83:60:c9:bb:38:b3:e3:18:52:d1: ec:d5:30:26:4a:a2:70:3a:10:9f:f9:93:cc:d0:e7: 9b:71:3e:42:44:b0:89:4d:e7:33:b1:70:5b:58:3d: 15:35:39:e2:bf:ff:5f:53:ab:ac:24:ae:a8:54:b4: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:49:35:12:A5:F9:05:FB:3C:BD:29:FE:FC:FE:A7:48:8B:3F:76 X509v3 Authority Key Identifier: keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/1909718EDE4A11EF90C89D39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.128.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:d8:3b:c3:ee:3f:ed:25:5b:77:7e:bb:61:86:28:1e:23:c0: 70:19:b3:5b:5d:ab:5d:7e:32:15:45:9f:cb:fb:ab:ff:d6:12: 66:5b:cf:68:79:a2:82:c2:30:a6:4e:f6:18:30:30:f4:da:46: 03:e3:f9:9c:42:fd:c1:6a:41:08:31:43:81:e0:3e:e5:d6:2a: 3b:1d:9a:81:f3:c5:fe:14:eb:75:81:a4:7d:c4:b1:41:24:31: d0:8d:74:be:b5:0f:a4:5b:42:09:52:f7:11:b6:37:a9:5b:9c: 00:9a:60:0a:66:3e:4b:94:2c:95:6b:e9:34:94:cd:3a:38:74: 41:5f:1b:dc:85:43:98:d0:63:2e:ff:f6:95:64:7d:5d:a8:48: f3:0c:48:b9:ee:f7:1b:0b:5d:bf:ed:b4:8c:ac:24:c5:15:5b: 0d:48:d3:f2:5e:fd:99:56:2a:bc:e0:cc:9d:5b:a1:42:5e:13: 0c:20:61:d4:3a:95:20:3a:5d:32:87:b6:62:a1:df:bd:96:b7: 5c:e3:11:46:fb:b2:23:3d:ed:9c:92:0c:6b:0b:cb:f1:7c:9a: 0d:5e:de:50:76:62:93:f2:d4:2a:5f:c7:dd:63:39:2a:95:3a: a1:98:d9:68:58:43:96:8e:34:d1:bd:4f:3a:9f:c7:a7:1b:ea: 56:a8:97:a3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTg3RTExMC8GA1UEBRMoMDRDNzlBNEREMjRGRkEwM0ZBOEY5Mjk2NzY2RjgyQTAz ODVDRTI5MzAeFw0yNTAxMjkxNDA2MDBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OWEzNWM4LWU4N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjsE08+z3lI99LQhF1u23p71WbmPAMH2rPyRJ0WXy6HlQjytJDay9ZDBtzCRyO v7SN7fDx4VKoAJKORVvZJqzuKqu6FYXGGgk/8/Ek85aZlPUIIioKJEU38Ubx9O+N lfadVIZgE4zeC1ULxYSTi1xq+6Yu/eIOjTkd0bCZlWRjgnKZmzUj4UJGrNkuKoZD /8qANrUWaK6X7ZGdXfQd9kZUEpR0Msn3Pm3L8hd9wVfQt3RtJdJz18rH0yK/IKgz cToNMKVc8Xz/g2DJuziz4xhS0ezVMCZKonA6EJ/5k8zQ55txPkJEsIlN5zOxcFtY PRU1OeK//19Tq6wkrqhUtN35AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzupJNRKl +QX7PL0p/vz+p0iLP3YwHwYDVR0jBBgwFoAUBMeaTdJP+gP6j5KWdm+CoDhc4pMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFODdFLzdDNkVEQThDQTFD RjExRUY4NzhFNjA2MUM0RjlBRTAyL0JNZWFUZEpQLWdQNmo1S1dkbS1Db0RoYzRw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQk1lYVRkSlAtZ1A2ajVLV2RtLUNvRGhjNHBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS83QzZFREE4Q0ExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi8xOTA5NzE4RURF NEExMUVGOTBDODlEMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/gDANBgkqhkiG9w0BAQsFAAOCAQEAbtg7w+4/7SVbd367 YYYoHiPAcBmzW12rXX4yFUWfy/ur/9YSZlvPaHmigsIwpk72GDAw9NpGA+P5nEL9 wWpBCDFDgeA+5dYqOx2agfPF/hTrdYGkfcSxQSQx0I10vrUPpFtCCVL3EbY3qVuc AJpgCmY+S5QslWvpNJTNOjh0QV8b3IVDmNBjLv/2lWR9XahI8wxIue73Gwtdv+20 jKwkxRVbDUjT8l79mVYqvODMnVuhQl4TDCBh1DqVIDpdMoe2YqHfvZa3XOMRRvuy Iz3tnJIMawvL8XyaDV7eUHZik/LUKl/H3WM5KpU6oZjZaFhDlo400b1POp/Hpxvq VqiXow== -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net