$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa File: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (raw, json) Hash identifier: xcq/WEUSR+w06b6Nwt1nxiayT1ulPnzU6uAyB0f2hwE= Subject key identifier: C5:DB:B1:64:04:47:9D:93:F0:E6:8F:30:87:D7:B5:A5:45:6D:AC:9D Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 35F2 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa Signing time: Sat 01 Feb 2025 06:55:36 +0000 ROA not before: Sat 01 Feb 2025 06:55:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150675 IP address blocks: 175.29.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13810 (0x35f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Validity Not Before: Feb 1 06:55:36 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=679dc568-cd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:41:58:80:6b:bf:2c:ff:91:b7:48:2e:a1: 83:9b:83:47:79:52:58:e0:0c:00:af:ee:a4:be:43: 08:3d:ea:3b:95:e1:03:6c:6f:8b:57:21:3c:e2:0b: d8:73:f0:4c:61:51:e5:26:67:c5:7f:c2:90:65:bd: 92:4c:6e:d0:49:f5:9c:af:62:0f:69:40:d5:ee:5e: f4:44:0a:8c:8c:b0:b7:2e:15:38:c6:79:e5:03:c6: 5a:42:af:3e:25:d1:79:32:99:83:0c:ba:f3:79:f7: d6:fe:df:d6:a6:79:e8:a5:01:a0:43:20:77:c2:a8: c2:da:18:b6:1d:cf:b7:7b:fc:5c:3a:55:5d:cc:9f: 5b:7a:94:45:ba:ae:6a:db:48:1a:12:d4:bb:d5:e9: 4f:92:bd:16:1b:21:aa:33:e2:17:e4:0d:e7:2b:57: 9e:58:e6:19:81:50:3c:de:a8:2e:2b:9b:05:cd:36: 7a:57:df:a9:f2:99:8a:66:ee:cf:b8:06:2d:75:2c: fa:aa:85:a6:ca:b4:af:6d:4e:c6:5a:7e:ff:1d:a6: f8:80:37:f1:dd:7b:73:4b:6b:0b:06:0f:a1:74:46: 73:d7:4e:5d:81:c1:07:2e:1d:40:89:3b:96:34:3c: e1:f5:e0:e6:e7:cd:bf:15:6b:6d:59:f1:21:4f:f2: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DB:B1:64:04:47:9D:93:F0:E6:8F:30:87:D7:B5:A5:45:6D:AC:9D X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.29.18.0/24 Signature Algorithm: sha256WithRSAEncryption 84:ea:f9:95:94:76:1b:3b:9d:b9:13:c6:b0:36:ac:d7:c2:0c: 5f:57:5e:85:4b:b5:f4:99:c1:31:83:ba:d3:30:13:c6:a2:c4: 6f:6c:b4:11:20:fe:96:b7:66:f0:19:ea:0b:84:a6:6d:b8:35: dc:48:4a:3e:e7:50:d7:b9:b3:ca:9c:1c:93:35:a0:15:e3:2a: 11:cd:06:8b:c7:d0:bd:84:b9:da:6a:05:90:7e:f0:4a:57:ae: cd:1a:1a:06:15:46:2e:f2:1f:8e:7e:44:1d:82:9a:aa:7d:b4: c6:f0:37:f0:35:5f:56:eb:09:19:80:92:1c:4d:18:38:aa:e6: 68:7a:0b:20:cf:ff:8d:68:91:0e:9c:91:39:b2:93:df:75:94: c5:f9:db:9c:7e:62:09:5d:76:e2:1a:ba:6e:44:2c:72:24:2b: be:d9:cd:4a:49:5e:89:22:3e:5f:93:f9:b8:47:e1:4d:91:c1: 62:68:08:5c:00:42:5a:8a:9f:09:11:17:0a:b7:48:6b:9b:96: cf:05:4c:87:18:6e:26:7f:6b:57:32:d3:9c:6b:31:a6:35:7e: 37:b2:a3:80:7d:e6:f7:51:4b:7c:ec:df:07:af:01:60:50:97: 28:10:ae:bd:72:9c:50:e2:bf:c5:23:91:b6:85:cd:37:db:0a: d4:2b:37:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjUwMjAxMDY1NTM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzlkYzU2OC1jZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArflBWIBrvyz/kbdILqGDm4NHeVJY4AwAr+6kvkMIPeo7leEDbG+LVyE84gvY c/BMYVHlJmfFf8KQZb2STG7QSfWcr2IPaUDV7l70RAqMjLC3LhU4xnnlA8ZaQq8+ JdF5MpmDDLrzeffW/t/WpnnopQGgQyB3wqjC2hi2Hc+3e/xcOlVdzJ9bepRFuq5q 20gaEtS71elPkr0WGyGqM+IX5A3nK1eeWOYZgVA83qguK5sFzTZ6V9+p8pmKZu7P uAYtdSz6qoWmyrSvbU7GWn7/Hab4gDfx3XtzS2sLBg+hdEZz105dgcEHLh1AiTuW NDzh9eDm582/FWttWfEhT/Jl8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMXbsWQE R52T8OaPMIfXtaVFbaydMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvODlBNkJCODhF MDY5MTFFRjlDNkNGNTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACvHRIwDQYJKoZIhvcNAQELBQADggEBAITq+ZWUdhs7nbkT xrA2rNfCDF9XXoVLtfSZwTGDutMwE8aixG9stBEg/pa3ZvAZ6guEpm24NdxISj7n UNe5s8qcHJM1oBXjKhHNBovH0L2EudpqBZB+8EpXrs0aGgYVRi7yH45+RB2Cmqp9 tMbwN/A1X1brCRmAkhxNGDiq5mh6CyDP/41okQ6ckTmyk991lMX525x+YgldduIa um5ELHIkK77ZzUpJXokiPl+T+bhH4U2RwWJoCFwAQlqKnwkRFwq3SGubls8FTIcY biZ/a1cy05xrMaY1fjeyo4B95vdRS3zs3wevAWBQlygQrr1ynFDiv8UjkbaFzTfb CtQrNyg= -----END CERTIFICATE-----Generated at Thu Apr 24 15:52:12 2025 by rpki-client on console.sobornost.net