$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa File: B2ED9AEE913311E79B98C45BC4F9AE02.roa (raw, json) Hash identifier: mJ/2raeCJOKJXKOQjY7G8dT5Ehregj8vjnWxt1la42E= Subject key identifier: 55:68:ED:64:03:06:0C:5D:78:F6:C0:4C:CC:B3:76:7D:B7:FE:0B:CA Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 2483 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa Signing time: Mon 28 Apr 2025 08:00:18 +0000 ROA not before: Mon 28 Apr 2025 08:00:18 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 7500 IP address blocks: 202.12.27.0/24 maxlen: 24 2001:dc3::/32 maxlen: 32 2001:dc3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9347 (0x2483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Apr 28 08:00:18 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=680f3592-d71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:8d:81:f7:d8:86:c8:c1:ad:0c:4e:76:2b: 94:50:82:a6:e8:d4:cf:e2:2a:38:8b:9d:a5:87:7c: ee:b3:36:0b:57:b2:07:20:20:cc:65:31:3e:e2:bc: 3d:71:fc:24:d3:cb:1c:94:ed:f0:d4:81:d3:25:22: 77:8a:44:d0:09:36:db:89:4b:23:91:0e:74:f9:cd: 40:73:44:cd:93:3d:83:0a:57:9f:3e:b7:bd:c2:77: 97:ce:4e:22:15:e6:9d:29:ad:6c:06:05:58:f5:04: 20:10:9f:8f:fd:89:aa:5a:5e:26:f9:5d:a4:8e:c7: 08:df:b4:f2:38:0e:fe:ae:3c:85:7b:7b:9a:1b:7c: 41:8e:18:6d:6f:4d:c9:ba:3c:9b:77:47:28:fb:c1: 2e:3f:7b:bd:39:57:ee:21:6e:0e:44:89:eb:9f:12: 89:94:a7:4b:bc:38:b7:46:81:e3:ef:fd:29:99:1d: c9:31:58:21:3d:bf:18:14:68:98:3e:46:4b:d4:3c: 54:11:e6:bd:63:8f:58:23:de:67:7f:ab:04:b9:34: 77:44:91:33:b6:70:3a:42:43:66:4c:89:f1:74:52: b4:0f:5b:24:e6:43:60:90:f8:89:87:1c:3a:7a:f9: 6d:7a:ee:a5:4b:9c:85:d6:d7:2c:a1:fc:78:7c:2b: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:68:ED:64:03:06:0C:5D:78:F6:C0:4C:CC:B3:76:7D:B7:FE:0B:CA X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.27.0/24 IPv6: 2001:dc3::/32 Signature Algorithm: sha256WithRSAEncryption 68:fb:92:31:fb:c0:28:6d:e9:51:bf:ba:f0:43:9c:77:3d:08: 90:8b:64:06:1e:35:0f:5b:8e:f7:db:c1:58:fa:18:0b:a0:8a: 66:5a:6b:aa:80:01:d3:a1:5c:fa:60:23:1d:e5:d5:99:6c:0e: b3:65:0c:0e:96:c3:74:68:ac:3c:d0:41:cf:78:b6:4e:78:84: 5b:33:3d:5c:8c:e0:b2:21:6c:d1:bb:11:d9:96:1f:89:ff:69: 32:8e:59:5a:af:33:c9:ad:39:73:bc:96:ec:63:71:bb:78:e4: 9f:4a:9c:31:c3:a0:40:66:ce:5c:f7:4b:32:83:f9:4d:33:7a: d6:f2:66:9b:60:21:38:d0:c2:26:57:92:9d:78:f8:ec:81:7a: 1a:69:36:32:c8:fa:85:6e:9f:2c:ca:20:ef:b9:1b:67:a5:c5: e0:8f:5c:77:0e:13:9d:9c:ed:4c:9d:4f:13:9e:28:2a:aa:41: 11:f4:55:9c:ba:0b:e1:25:69:9f:1b:88:fd:12:b1:7e:9d:5e: 2b:b8:9f:3a:ca:84:54:4b:1f:53:26:b8:21:b2:5e:c1:95:d8: fe:1d:7c:47:aa:d4:95:74:91:0d:76:67:ca:ce:99:d7:62:e3: 3d:dd:d9:fe:a0:48:91:71:c4:d7:ba:41:0b:bf:28:e3:77:a3: ae:50:19:f4 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICJIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUwNDI4MDgwMDE4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmMzU5Mi1kNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ECNgffYhsjBrQxOdiuUUIKm6NTP4io4i52lh3zuszYLV7IHICDMZTE+4rw9 cfwk08sclO3w1IHTJSJ3ikTQCTbbiUsjkQ50+c1Ac0TNkz2DClefPre9wneXzk4i FeadKa1sBgVY9QQgEJ+P/YmqWl4m+V2kjscI37TyOA7+rjyFe3uaG3xBjhhtb03J ujybd0co+8EuP3u9OVfuIW4ORInrnxKJlKdLvDi3RoHj7/0pmR3JMVghPb8YFGiY PkZL1DxUEea9Y49YI95nf6sEuTR3RJEztnA6QkNmTInxdFK0D1sk5kNgkPiJhxw6 evlteu6lS5yF1tcsofx4fCtykwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFVo7WQD BgxdePbATMyzdn23/gvKMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI2QUEvNDZDN0YxNzI0RjE2MTFFNThEMkEzMzI3QzRGOUFFMDIvQjJFRDlBRUU5 MTMzMTFFNzlCOThDNDVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBADKDBswDQQCAAIwBwMFACABDcMwDQYJKoZIhvcNAQELBQAD ggEBAGj7kjH7wCht6VG/uvBDnHc9CJCLZAYeNQ9bjvfbwVj6GAugimZaa6qAAdOh XPpgIx3l1ZlsDrNlDA6Ww3RorDzQQc94tk54hFszPVyM4LIhbNG7EdmWH4n/aTKO WVqvM8mtOXO8luxjcbt45J9KnDHDoEBmzlz3SzKD+U0zetbyZptgITjQwiZXkp14 +OyBehppNjLI+oVunyzKIO+5G2elxeCPXHcOE52c7UydTxOeKCqqQRH0VZy6C+El aZ8biP0SsX6dXiu4nzrKhFRLH1MmuCGyXsGV2P4dfEeq1JV0kQ12Z8rOmddi4z3d 2f6gSJFxxNe6QQu/KON3o65QGfQ= -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:09 2025 by rpki-client on console.sobornost.net