$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa File: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (raw, json) Hash identifier: Z/SQA8GAHBj69mDXnfsLMK8qu+tlZ5LxlzdXDGduFGo= Subject key identifier: F4:50:B6:98:73:36:52:9C:47:68:FF:04:2F:09:64:31:00:61:A1:28 Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0405 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa Signing time: Wed 04 Dec 2024 17:25:16 +0000 ROA not before: Wed 04 Dec 2024 17:25:16 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 48266 IP address blocks: 45.129.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 15:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Dec 4 17:25:16 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6750907c-697e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:7c:a6:37:59:04:df:ee:21:e6:c6:12:fc: ac:33:84:cf:58:6c:9e:23:f7:75:7a:e7:da:37:72: 64:7d:1f:1f:14:4f:a2:1c:65:78:3f:87:9a:a4:09: 38:3b:96:1c:bb:39:72:fc:c5:0d:8f:dc:3b:2b:44: 4d:51:a8:82:15:61:16:91:a3:d5:ff:0d:26:a9:ad: 2d:dc:64:ee:16:8a:eb:ae:e2:3f:ee:b7:36:eb:42: bf:1c:96:a9:59:18:7d:e6:2e:ed:af:d4:15:46:2e: 10:41:1c:42:5b:4e:ba:67:be:11:6d:8b:7c:2b:2f: f2:45:38:50:10:a9:19:f3:96:d3:78:46:7e:7c:c3: 99:61:08:79:1f:d7:e4:2d:14:9f:7b:e9:34:fc:78: 34:81:97:ff:cc:5b:a1:38:cd:a7:f4:84:4c:09:d6: 76:bd:e2:a2:c2:9b:48:64:62:0b:e7:c6:06:dc:7a: ab:20:ff:7f:7c:48:58:31:29:a7:ca:76:42:cb:c3: f7:07:48:c0:6f:e6:a1:42:73:0c:ef:4e:c2:8a:a8: b3:65:5a:10:7e:6a:f6:59:0a:d7:53:2a:3f:03:2e: c2:3d:f1:bd:ab:94:67:70:ff:19:c9:9d:dd:32:2f: c1:c4:86:6f:85:df:a9:2a:df:9f:d1:70:a7:16:e1: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:50:B6:98:73:36:52:9C:47:68:FF:04:2F:09:64:31:00:61:A1:28 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/D36F0B6ECF4411ECB6B61825C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.129.228.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:f1:24:00:50:ff:96:06:61:a8:3c:a2:85:98:db:52:86:ab: 4e:8d:2a:ef:32:06:e7:8b:08:de:8c:a7:26:19:d4:f5:d8:ae: c1:b7:e1:2e:1b:94:34:b5:a4:bb:bf:54:bc:c8:a7:a2:2c:87: af:3b:f7:1d:2d:58:56:b6:bb:a8:4f:7d:be:ea:b8:52:84:e8: 33:b6:ec:ad:ec:30:32:90:c1:23:6b:41:07:e9:e1:5f:0c:53: 55:69:37:ef:b9:1c:aa:96:29:27:8b:77:d1:fa:74:65:11:76: 61:97:b4:22:b0:bc:f6:f9:89:54:75:85:17:cc:74:e9:75:bc: 30:b1:4c:b7:cf:af:e2:93:b0:94:a1:14:da:8b:6f:20:4b:ee: 63:5e:c2:87:f3:2e:32:07:8e:1b:b8:e4:b6:d4:36:20:50:b0: cc:6e:68:a5:1b:c0:87:2b:99:e6:aa:da:19:d6:33:74:02:40: 2f:bf:df:c5:93:00:3a:2b:90:b0:61:5d:12:04:b0:1c:bb:ba: b1:1e:f4:c2:ae:5f:8b:2d:35:98:c3:19:94:d2:73:10:c3:81: 55:1d:e0:17:41:5c:ec:b9:86:e8:b6:17:89:45:4a:b5:3d:c2: e9:fb:ad:84:51:dd:c5:ca:e5:01:1e:94:d1:9c:65:83:9a:fa: bc:eb:ee:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjQxMjA0MTcyNTE2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwOTA3Yy02OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfR8pjdZBN/uIebGEvysM4TPWGyeI/d1eufaN3JkfR8fFE+iHGV4P4eapAk4 O5Ycuzly/MUNj9w7K0RNUaiCFWEWkaPV/w0mqa0t3GTuForrruI/7rc260K/HJap WRh95i7tr9QVRi4QQRxCW066Z74RbYt8Ky/yRThQEKkZ85bTeEZ+fMOZYQh5H9fk LRSfe+k0/Hg0gZf/zFuhOM2n9IRMCdZ2veKiwptIZGIL58YG3HqrIP9/fEhYMSmn ynZCy8P3B0jAb+ahQnMM707CiqizZVoQfmr2WQrXUyo/Ay7CPfG9q5RncP8ZyZ3d Mi/BxIZvhd+pKt+f0XCnFuHhEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPRQtphz NlKcR2j/BC8JZDEAYaEoMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNUI0QzRFMzY1OTY5MTFFQzk0QTNFNzcwQzRGOUFFMDIvRDM2RjBCNkVD RjQ0MTFFQ0I2QjYxODI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtgeQwDQYJKoZIhvcNAQELBQADggEBAI7xJABQ/5YGYag8 ooWY21KGq06NKu8yBueLCN6MpyYZ1PXYrsG34S4blDS1pLu/VLzIp6Ish6879x0t WFa2u6hPfb7quFKE6DO27K3sMDKQwSNrQQfp4V8MU1VpN++5HKqWKSeLd9H6dGUR dmGXtCKwvPb5iVR1hRfMdOl1vDCxTLfPr+KTsJShFNqLbyBL7mNewofzLjIHjhu4 5LbUNiBQsMxuaKUbwIcrmeaq2hnWM3QCQC+/38WTADorkLBhXRIEsBy7urEe9MKu X4stNZjDGZTScxDDgVUd4BdBXOy5hui2F4lFSrU9wun7rYRR3cXK5QEelNGcZYOa +rzr7sw= -----END CERTIFICATE-----Generated at Tue Apr 22 19:06:08 2025 by rpki-client on console.sobornost.net