$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa File: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (raw, json) Hash identifier: LcxIbKxK3jutvAgu3ThkdTt7YT68VEQAWEq5z0WaOxY= Subject key identifier: 26:52:76:6A:BA:37:49:38:99:22:E8:77:80:10:B2:E4:82:40:5E:A8 Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0BCB Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa Signing time: Tue 04 Feb 2025 18:47:32 +0000 ROA not before: Tue 04 Feb 2025 18:47:32 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 8739 IP address blocks: 116.251.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Feb 4 18:47:32 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a260c4-5a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:ac:9b:41:12:68:7b:62:ed:df:47:52:90: 95:60:12:79:b7:5c:19:a6:1b:53:e9:f4:5d:c9:c9: 13:5a:1d:a0:e0:40:3a:b8:82:9b:3e:d8:2e:7f:ce: c7:e7:25:a7:73:2d:62:79:cf:8e:43:03:5d:1c:c5: 80:eb:0c:ea:8a:7f:36:c9:b0:fb:53:b0:f3:eb:8e: b6:3a:8f:a9:62:23:bc:e7:29:97:19:c9:fc:fe:59: 1e:a1:70:8a:94:89:94:17:f3:cc:68:49:5b:70:6b: 34:82:68:5e:76:6a:e6:cd:26:21:73:49:54:0a:bb: 6e:f6:24:f1:1c:a6:94:5b:a9:3f:12:90:0f:cd:60: c3:4f:98:de:9c:d7:62:eb:b9:ef:e6:7c:1d:33:68: 7f:4c:58:f3:65:f1:16:91:37:65:4d:92:4e:68:23: 0f:75:00:0b:70:76:f5:71:4c:05:8a:3d:0d:1f:68: 81:8d:43:56:24:e3:be:77:f3:d8:01:51:c5:af:ab: 87:34:f6:42:53:bf:25:1d:d3:5f:c6:e6:b6:a6:4d: b2:1e:9f:ea:b9:06:ca:64:8b:e5:31:31:3c:65:26: c9:4c:37:28:f9:8f:fd:3f:34:cd:e1:16:7e:8b:fa: a2:50:46:bd:5a:4c:ce:32:8d:1f:36:86:18:04:d9: 3e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:52:76:6A:BA:37:49:38:99:22:E8:77:80:10:B2:E4:82:40:5E:A8 X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.251.204.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:81:76:74:84:7c:4b:7e:0f:dc:11:cc:26:cf:aa:39:45:92: c4:61:3f:21:cc:19:f7:4b:fc:2b:a3:9a:ab:2a:8c:04:91:03: c3:50:e0:0a:4a:05:cf:46:9a:68:c2:f6:ae:57:48:05:8f:cb: 54:b8:24:71:70:11:8c:46:03:7e:49:82:b6:fb:7d:2d:77:97: 92:33:6c:88:e2:03:5f:c5:22:bb:30:46:da:b7:0d:ca:1e:1a: 25:96:c8:dd:9a:bb:e3:d8:ce:62:7b:7b:19:de:b0:c6:b8:fa: 36:c5:43:09:60:29:0d:2f:2e:23:c0:e5:3d:08:02:4d:00:40: eb:93:3a:f7:e3:1c:df:b8:7a:75:04:5f:3a:07:2f:da:f0:c8: f1:54:6b:7b:47:dc:ef:81:19:db:0d:00:b1:9d:d1:07:5c:93: 1e:69:56:1b:77:3f:40:28:c1:c6:7a:fb:ee:14:22:68:70:4a: cc:8f:79:1b:7f:30:54:ca:88:c6:9a:93:a9:21:af:ca:5f:a7: 4c:cf:af:65:c2:e7:d6:dd:a7:49:d9:05:9f:dd:48:56:27:15: b6:88:61:78:f5:33:3c:5d:29:02:fc:36:a5:0d:77:99:c8:2c: 3a:0d:d8:ad:ff:ce:a9:ab:22:78:9f:e1:2a:40:71:02:9f:85: 58:65:25:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjUwMjA0MTg0NzMyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyNjBjNC01YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApk2sm0ESaHti7d9HUpCVYBJ5t1wZphtT6fRdyckTWh2g4EA6uIKbPtguf87H 5yWncy1iec+OQwNdHMWA6wzqin82ybD7U7Dz6462Oo+pYiO85ymXGcn8/lkeoXCK lImUF/PMaElbcGs0gmhedmrmzSYhc0lUCrtu9iTxHKaUW6k/EpAPzWDDT5jenNdi 67nv5nwdM2h/TFjzZfEWkTdlTZJOaCMPdQALcHb1cUwFij0NH2iBjUNWJOO+d/PY AVHFr6uHNPZCU78lHdNfxua2pk2yHp/quQbKZIvlMTE8ZSbJTDco+Y/9PzTN4RZ+ i/qiUEa9WkzOMo0fNoYYBNk+oQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCZSdmq6 N0k4mSLod4AQsuSCQF6oMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg1NjgvRDMxMzA2NzYxODU3MTFFQTk4NjM0MTVFQzRGOUFFMDIvM0E1QTg0RjhD QjcxMTFFQkE5RUVGNDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ0+8wwDQYJKoZIhvcNAQELBQADggEBAH6BdnSEfEt+D9wR zCbPqjlFksRhPyHMGfdL/CujmqsqjASRA8NQ4ApKBc9GmmjC9q5XSAWPy1S4JHFw EYxGA35Jgrb7fS13l5IzbIjiA1/FIrswRtq3DcoeGiWWyN2au+PYzmJ7exnesMa4 +jbFQwlgKQ0vLiPA5T0IAk0AQOuTOvfjHN+4enUEXzoHL9rwyPFUa3tH3O+BGdsN ALGd0Qdckx5pVht3P0AowcZ6++4UImhwSsyPeRt/MFTKiMaak6khr8pfp0zPr2XC 59bdp0nZBZ/dSFYnFbaIYXj1MzxdKQL8NqUNd5nILDoN2K3/zqmrInif4SpAcQKf hVhlJZY= -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:13 2025 by rpki-client on console.sobornost.net