$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa File: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (raw, json) Hash identifier: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk= Subject key identifier: 83:3B:6E:DA:37:0E:4F:20:DD:E6:F8:00:9C:A3:D0:F5:EF:A2:5F:54 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 345C Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa Signing time: Thu 20 Feb 2025 15:20:46 +0000 ROA not before: Thu 20 Feb 2025 15:20:46 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 23838 IP address blocks: 203.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13404 (0x345c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Feb 20 15:20:46 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67b7484e-f88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:1d:d6:4b:df:6c:21:85:1c:d5:28:c8:c8: 2b:4d:63:c5:ee:45:8f:2e:2f:0a:13:05:2d:03:0a: 55:df:97:df:ae:0c:50:57:a4:15:20:f5:d3:6a:ec: f1:e5:50:91:49:a4:a7:38:70:c9:f4:0d:ae:b8:7d: b0:3f:7c:81:14:71:23:cf:12:0d:55:43:20:a2:92: 67:34:19:f6:2b:f2:e2:af:ef:17:54:dc:1f:64:9c: 14:1d:50:7b:e7:c2:b9:1d:f1:30:fc:0e:23:65:8e: 2b:46:0b:68:df:5c:66:69:37:56:4f:51:d0:b7:35: fa:b3:3d:58:1d:ab:1b:82:22:2f:e6:4b:4c:b8:49: 8a:66:ce:4c:a8:ba:56:96:7b:36:cb:eb:e8:0f:9b: 74:19:dc:57:22:58:1c:ee:15:fa:92:e0:d8:b0:f0: 03:b2:a9:fc:77:b6:48:8c:74:d7:5a:3b:8d:d2:c3: 59:03:02:5c:a1:23:7d:57:98:d0:76:10:c1:86:ea: 37:3e:6d:90:8b:4b:12:65:b2:17:8c:1b:a7:e6:80: 8d:26:bd:94:c0:74:e4:5b:05:2a:91:df:08:9e:f4: 25:8a:a9:97:7b:f5:d9:07:f6:9d:26:6f:2a:a3:ee: 56:81:ad:2a:6d:4e:ce:af:75:b6:88:cc:19:1d:f3: 58:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3B:6E:DA:37:0E:4F:20:DD:E6:F8:00:9C:A3:D0:F5:EF:A2:5F:54 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.170.56.0/24 Signature Algorithm: sha256WithRSAEncryption 70:33:8f:44:a1:6f:49:b8:12:66:ee:75:c8:1a:a5:08:b8:86: 71:91:07:c5:e3:4d:03:c5:52:2e:74:14:ec:39:10:2f:15:f9: 5e:85:36:d5:ea:ef:f8:ae:42:cd:b9:49:76:c9:13:bc:64:d0: a0:24:61:d2:3e:10:39:b5:a2:a2:ee:31:5b:eb:5f:04:ee:6f: 94:43:c2:84:95:a7:0c:05:1e:08:e1:70:eb:e5:8a:2d:7a:b5: af:78:01:5c:ff:23:7c:68:e5:be:80:29:d8:20:68:11:62:12: 75:46:c4:24:d0:a1:f8:ba:1d:7f:40:8d:5c:c1:6e:8d:5e:e7: 3a:28:c2:2a:19:6c:3b:fb:83:ae:b9:15:88:bd:5c:ec:e5:ad: e9:4c:87:27:dd:87:39:3f:b4:51:52:c6:9d:56:8d:28:44:d5: 9e:86:e9:da:d1:82:b4:53:03:27:8f:46:45:fc:08:fb:8d:14: ee:35:1b:34:ed:c6:a8:2c:94:c8:af:f9:27:09:bf:87:e1:d6: 00:20:13:8e:84:1b:a8:78:c7:dc:d7:36:67:5a:d4:a9:c6:47: 94:47:44:4b:d1:94:96:30:97:8c:e1:ab:38:ac:d2:cd:8f:4c: 00:69:a0:77:01:1b:2d:f1:a4:96:94:79:2f:0e:9d:0f:94:bf: 98:5f:7b:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUwMjIwMTUyMDQ2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I3NDg0ZS1mODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6Ad1kvfbCGFHNUoyMgrTWPF7kWPLi8KEwUtAwpV35ffrgxQV6QVIPXTauzx 5VCRSaSnOHDJ9A2uuH2wP3yBFHEjzxINVUMgopJnNBn2K/Lir+8XVNwfZJwUHVB7 58K5HfEw/A4jZY4rRgto31xmaTdWT1HQtzX6sz1YHasbgiIv5ktMuEmKZs5MqLpW lns2y+voD5t0GdxXIlgc7hX6kuDYsPADsqn8d7ZIjHTXWjuN0sNZAwJcoSN9V5jQ dhDBhuo3Pm2Qi0sSZbIXjBun5oCNJr2UwHTkWwUqkd8InvQliqmXe/XZB/adJm8q o+5Wga0qbU7Or3W2iMwZHfNYZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIM7bto3 Dk8g3eb4AJyj0PXvol9UMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDk5MDUvMzk0RDA2NEExRDlCMTFFMkJFMTJFRjg4MDhCMDJDRDIvQTZENkNBN0Uw MjJDMTFFQkFDNDdBODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLqjgwDQYJKoZIhvcNAQELBQADggEBAHAzj0Shb0m4Embu dcgapQi4hnGRB8XjTQPFUi50FOw5EC8V+V6FNtXq7/iuQs25SXbJE7xk0KAkYdI+ EDm1oqLuMVvrXwTub5RDwoSVpwwFHgjhcOvlii16ta94AVz/I3xo5b6AKdggaBFi EnVGxCTQofi6HX9AjVzBbo1e5zoowioZbDv7g665FYi9XOzlrelMhyfdhzk/tFFS xp1WjShE1Z6G6drRgrRTAyePRkX8CPuNFO41GzTtxqgslMiv+ScJv4fh1gAgE46E G6h4x9zXNmda1KnGR5RHREvRlJYwl4zhqzis0s2PTABpoHcBGy3xpJaUeS8OnQ+U v5hfe28= -----END CERTIFICATE-----Generated at Sat Apr 26 18:19:40 2025 by rpki-client on console.sobornost.net