$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CF53E5E6240411F0B73CB374C4F9AE02.roa File: CF53E5E6240411F0B73CB374C4F9AE02.roa (raw, json) Hash identifier: d0Aa2dhkwbmc35thg8FxejcFY3HZpKRANn1VC0fp3rA= Subject key identifier: F9:D1:C5:AD:BE:20:F3:4D:A8:DA:58:CA:BF:BA:AA:97:4E:9F:F2:35 Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 02 Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CF53E5E6240411F0B73CB374C4F9AE02.roa Signing time: Mon 28 Apr 2025 07:45:53 +0000 ROA not before: Mon 28 Apr 2025 07:45:53 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135425 IP address blocks: 203.34.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 07:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: Apr 28 07:45:53 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=680f3230-3583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:c1:b3:68:d0:06:a1:b7:40:41:8d:e3:75: c2:c2:5d:eb:27:47:c4:72:7e:34:d4:ae:7e:23:2d: 17:2c:2e:96:f8:5f:2c:dd:ae:1e:e0:ff:bf:15:d6: 62:58:a8:40:98:6e:8c:81:a0:e1:7a:7e:cd:5f:03: a1:28:a1:f1:ac:25:82:32:37:4a:e2:29:a9:9a:18: 25:e1:8f:5a:a9:fc:ba:3a:53:5f:e0:73:a6:93:26: 5a:11:c2:5a:78:e8:88:61:ca:bb:6a:df:14:a9:3f: 58:d5:61:c3:82:3f:d4:2e:db:c5:21:6f:b6:13:5b: be:dc:54:c4:d1:ba:e1:f7:42:b7:d1:f7:a6:a2:fa: 55:ff:bf:1a:99:35:1b:30:86:77:ea:ba:83:15:4b: 38:82:1f:f8:dd:22:6d:92:93:78:19:49:ac:ae:0d: d2:3a:3a:81:7d:2a:aa:6f:72:8c:52:81:23:8c:40: 3b:bd:34:9a:41:e0:51:8b:14:6f:22:e3:09:5e:67: 11:57:c2:4a:b9:53:4b:4d:33:4e:8c:06:de:b8:ba: 66:33:83:02:40:93:bf:2d:5e:61:a7:21:77:4a:29: b7:4e:99:2a:c4:ab:06:86:b7:ff:f4:fd:5d:c3:48: f8:33:0b:75:58:7a:73:7b:0e:b0:fe:e9:6a:8a:74: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D1:C5:AD:BE:20:F3:4D:A8:DA:58:CA:BF:BA:AA:97:4E:9F:F2:35 X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CF53E5E6240411F0B73CB374C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.34.212.0/24 Signature Algorithm: sha256WithRSAEncryption 92:bf:ab:a5:2f:92:96:46:b9:a4:76:98:ac:67:82:e5:36:ca: 4f:8e:6a:8d:64:0b:79:a0:d1:52:11:a5:b7:a2:ab:3b:82:c8: ac:32:5b:ff:b5:e5:58:93:07:8e:6f:e0:b0:28:57:f5:a0:54: 41:aa:32:85:84:7b:45:af:cb:0d:aa:82:02:c2:a0:07:ec:56: 5a:f8:c9:9d:45:98:bb:f6:f2:65:cc:0b:72:1c:54:15:81:f6: 5c:8b:bb:c8:a3:32:cf:6b:f5:e8:77:95:f5:70:ee:ed:e5:0a: 8b:85:33:67:f3:6a:09:e0:1d:a7:53:80:d9:f6:58:b3:77:64: 54:6a:8e:60:22:a0:18:d6:eb:57:98:a5:64:7b:48:3c:cb:38: 5a:48:09:1f:cd:a6:57:19:06:1d:fb:4f:50:45:c9:5b:0e:f5: f8:ae:52:82:84:28:24:7b:06:75:ee:e6:2b:d6:b1:65:47:8d: 3d:1a:27:2e:51:f9:31:c6:58:c2:82:bf:e1:58:49:ae:39:03: 52:56:e8:ec:ac:f1:be:53:f4:e5:2b:63:77:28:c7:14:19:3b: 37:91:3a:cb:91:35:24:e8:40:b4:07:56:04:4f:af:82:83:90: 41:8b:8f:03:2a:02:c9:e6:eb:27:da:01:85:f7:84:b6:19:f9: 51:7f:74:79 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA0MjgwNzQ1NTNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MGYzMjMwLTM1ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC98GzaNAGobdAQY3jdcLCXesnR8RyfjTUrn4jLRcsLpb4Xyzdrh7g/78V1mJY qECYboyBoOF6fs1fA6EoofGsJYIyN0riKamaGCXhj1qp/Lo6U1/gc6aTJloRwlp4 6Ihhyrtq3xSpP1jVYcOCP9Qu28Uhb7YTW77cVMTRuuH3QrfR96ai+lX/vxqZNRsw hnfquoMVSziCH/jdIm2Sk3gZSayuDdI6OoF9KqpvcoxSgSOMQDu9NJpB4FGLFG8i 4wleZxFXwkq5U0tNM06MBt64umYzgwJAk78tXmGnIXdKKbdOmSrEqwaGt//0/V3D SPgzC3VYenN7DrD+6WqKdEZ1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+dHFrb4g 802o2ljKv7qql06f8jUwHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTYyQi82MUIzNTYxNjI0MDQxMUYwQTREMDcyNzNDNEY5QUUwMi9DRjUzRTVFNjI0 MDQxMUYwQjczQ0IzNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsi1DANBgkqhkiG9w0BAQsFAAOCAQEAkr+rpS+Slka5pHaY rGeC5TbKT45qjWQLeaDRUhGlt6KrO4LIrDJb/7XlWJMHjm/gsChX9aBUQaoyhYR7 Ra/LDaqCAsKgB+xWWvjJnUWYu/byZcwLchxUFYH2XIu7yKMyz2v16HeV9XDu7eUK i4UzZ/NqCeAdp1OA2fZYs3dkVGqOYCKgGNbrV5ilZHtIPMs4WkgJH82mVxkGHftP UEXJWw71+K5SgoQoJHsGde7mK9axZUeNPRonLlH5McZYwoK/4VhJrjkDUlbo7Kzx vlP05StjdyjHFBk7N5E6y5E1JOhAtAdWBE+vgoOQQYuPAyoCyebrJ9oBhfeEthn5 UX90eQ== -----END CERTIFICATE-----Generated at Mon Apr 28 10:54:26 2025 by rpki-client on console.sobornost.net