$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/BF07B0DA16AF11F08B8C4061C4F9AE02.roa File: BF07B0DA16AF11F08B8C4061C4F9AE02.roa (raw, json) Hash identifier: m5fvUWDyLmphSj+hveftDjH5v8ZvHtc3dCRNArmrofc= Subject key identifier: 03:7A:C4:EB:AF:13:3A:AD:1C:11:4E:6F:FA:F7:60:22:AD:C7:8A:E3 Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 07DA Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/BF07B0DA16AF11F08B8C4061C4F9AE02.roa Signing time: Fri 11 Apr 2025 08:34:13 +0000 ROA not before: Fri 11 Apr 2025 08:34:13 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 6134 IP address blocks: 45.125.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Apr 11 08:34:13 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f8d405-271e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:31:00:c0:21:84:fc:e9:25:78:3d:5c:d3: c5:55:df:c8:8a:b6:9e:e1:19:4c:cb:c6:50:03:65: 8d:f6:13:91:40:fd:cd:0e:be:e8:2c:1d:6b:34:59: ff:16:cf:69:a9:bf:80:62:74:bc:8a:7a:dd:d8:47: 48:f3:77:18:be:74:1a:c8:d1:77:e6:ed:ff:10:d7: 07:fc:5e:ed:c7:57:53:ff:b3:57:9f:87:e2:ca:cc: 4f:e2:ba:c3:bb:5a:45:23:13:00:5d:92:44:78:aa: 34:41:74:77:98:d6:ef:32:b4:8f:de:4c:1e:94:e3: a1:de:8e:1e:b3:f6:2d:17:3e:dd:83:b0:d4:6a:99: ee:6d:1c:e6:7c:6c:18:ee:9e:9f:00:89:c3:7f:0c: 29:f8:a8:32:79:da:d3:c2:5e:f7:de:a7:cf:1e:52: 19:28:d8:fb:4b:33:01:07:6b:a7:0f:bc:d5:63:2c: ad:8a:7b:69:af:9c:f0:23:90:1c:16:59:fb:68:44: d2:52:9f:10:0e:f0:d0:0e:93:c8:2e:69:46:53:6a: da:82:2e:db:2e:51:af:23:8d:75:03:30:b5:7e:e2: 51:ed:61:bb:ac:e4:6a:03:68:62:ef:86:49:59:04: 47:2f:46:aa:a8:0c:01:37:59:11:22:c4:ca:57:54: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7A:C4:EB:AF:13:3A:AD:1C:11:4E:6F:FA:F7:60:22:AD:C7:8A:E3 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/BF07B0DA16AF11F08B8C4061C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.32.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ab:9b:7b:96:67:37:ef:71:5d:59:8d:1e:e7:28:5c:34:b0: d4:94:01:c6:5a:ca:3b:4b:7c:d8:92:ac:99:79:ed:9c:e1:19: a5:de:63:15:b6:e4:db:9d:cc:1c:f6:fd:53:86:54:b0:ed:e4: 50:cb:3e:5b:55:85:cc:f7:98:86:e0:4e:5b:58:ca:db:49:73: bc:55:d4:db:76:60:20:01:1d:46:0c:f3:4f:10:1a:49:12:25: ba:5b:a9:90:d6:6c:92:0a:ea:fa:77:de:31:66:b9:7b:03:3b: 09:46:a9:80:20:4a:cd:fb:45:bc:e2:4c:7a:af:b6:0f:28:70: ef:77:7f:ec:5a:d7:ff:5f:5b:e7:d8:ad:f2:f8:df:d7:a6:11: e9:b2:c9:c6:0f:c3:2e:ee:c3:11:99:c6:ed:77:2b:4a:90:3d: c8:81:9c:63:ca:62:0f:c3:c5:fc:a9:43:35:89:90:df:d4:ae: f2:90:5b:ba:2d:4e:64:0a:1c:61:7b:e0:37:25:2f:b6:28:b3: 34:d2:f4:72:f0:b1:43:73:dd:1b:55:ed:81:e2:9b:9f:9f:ee: 74:9e:ae:a3:fa:9d:ed:ba:ac:c3:49:0d:6c:c5:08:f2:a8:2d: fb:fb:95:ec:f1:f7:29:98:df:7d:62:0c:cd:f7:c7:9c:e8:7f: 9d:d4:75:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjUwNDExMDgzNDEzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4ZDQwNS0yNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGcxAMAhhPzpJXg9XNPFVd/Iirae4RlMy8ZQA2WN9hORQP3NDr7oLB1rNFn/ Fs9pqb+AYnS8inrd2EdI83cYvnQayNF35u3/ENcH/F7tx1dT/7NXn4fiysxP4rrD u1pFIxMAXZJEeKo0QXR3mNbvMrSP3kwelOOh3o4es/YtFz7dg7DUapnubRzmfGwY 7p6fAInDfwwp+KgyedrTwl733qfPHlIZKNj7SzMBB2unD7zVYyytintpr5zwI5Ac Fln7aETSUp8QDvDQDpPILmlGU2ragi7bLlGvI411AzC1fuJR7WG7rORqA2hi74ZJ WQRHL0aqqAwBN1kRIsTKV1T9vQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAN6xOuv EzqtHBFOb/r3YCKtx4rjMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvQkYwN0IwREEx NkFGMTFGMDhCOEM0MDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtfSAwDQYJKoZIhvcNAQELBQADggEBABKrm3uWZzfvcV1Z jR7nKFw0sNSUAcZayjtLfNiSrJl57ZzhGaXeYxW25NudzBz2/VOGVLDt5FDLPltV hcz3mIbgTltYyttJc7xV1Nt2YCABHUYM808QGkkSJbpbqZDWbJIK6vp33jFmuXsD OwlGqYAgSs37RbziTHqvtg8ocO93f+xa1/9fW+fYrfL439emEemyycYPwy7uwxGZ xu13K0qQPciBnGPKYg/DxfypQzWJkN/UrvKQW7otTmQKHGF74DclL7YoszTS9HLw sUNz3RtV7YHim5+f7nSerqP6ne26rMNJDWzFCPKoLfv7lezx9ymY331iDM33x5zo f53UdVA= -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:20 2025 by rpki-client on console.sobornost.net