$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa File: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (raw, json) Hash identifier: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No= Subject key identifier: 92:EB:79:43:D8:BD:D8:4B:48:BB:C0:E1:9A:41:DE:B7:F3:DE:D8:97 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02B8 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa Signing time: Mon 21 Apr 2025 08:29:32 +0000 ROA not before: Mon 21 Apr 2025 08:29:32 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 4907 IP address blocks: 43.248.172.0/24 maxlen: 24 43.248.173.0/24 maxlen: 24 43.248.174.0/24 maxlen: 24 43.248.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 21 08:29:32 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680601ec-7cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:98:fd:29:a6:d1:a3:5a:f4:f5:42:08:08: 6f:a9:9d:a9:b4:94:90:ad:b7:7b:ab:e3:8c:53:ab: a9:bf:06:43:fa:5c:41:6f:6e:f1:6b:79:04:e6:82: f3:e5:05:fd:e9:6d:1c:1e:ad:d3:39:6a:f9:fe:6a: d1:2d:d5:9b:39:bc:fc:32:f7:ef:4b:95:3f:e9:d7: b7:e5:20:6e:5c:15:42:b9:c4:4c:ba:99:3f:22:c4: 9a:bb:83:3b:43:de:7e:5a:7e:0a:8d:b1:43:03:49: 21:ee:bc:18:87:bb:a2:1c:bc:ca:be:6c:9a:44:2c: 8d:55:b8:b9:b9:30:c2:af:14:11:de:7e:27:a5:bc: 3b:5f:58:41:c3:72:68:4d:1d:ba:fe:d4:4d:a1:4c: d6:51:a7:20:59:ad:c1:49:64:62:f5:c6:97:84:20: e4:de:3a:74:0e:89:8a:17:6a:1d:26:6c:b5:ab:c3: 9f:ad:4e:5c:34:05:e2:a3:f3:78:e0:66:d0:d0:2d: a5:5c:3a:69:63:8c:9f:ea:94:c6:98:12:4a:e3:31: 91:7e:11:d2:d7:12:b1:1e:1c:24:45:13:70:7e:a1: f8:36:4d:7c:73:a4:89:91:27:9d:e9:a1:88:ea:88: e2:17:98:da:c0:56:b5:a1:3d:6f:0a:fb:bb:5f:95: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EB:79:43:D8:BD:D8:4B:48:BB:C0:E1:9A:41:DE:B7:F3:DE:D8:97 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.172.0/22 Signature Algorithm: sha256WithRSAEncryption a0:91:a5:c8:e8:7f:46:eb:b7:73:71:b1:31:02:d3:e6:04:6c: 60:a4:f4:e5:6d:ef:e9:44:67:13:4f:7e:ad:0b:3e:b6:02:b6: 60:1b:bc:5c:b5:89:72:92:a5:46:61:ac:86:f4:7d:b3:3e:f7: 52:96:f1:3a:52:ab:39:7a:53:d0:df:94:bd:95:2d:74:58:d0: 60:03:a4:cc:2c:27:a7:7b:c8:a3:a6:67:09:62:65:21:88:df: 38:12:9f:67:d6:54:68:72:9b:2e:32:e8:21:ac:f6:cb:eb:0c: 89:32:c9:e0:b0:50:7b:d6:81:68:da:e0:52:d4:ef:57:61:85: 73:25:da:a0:d1:f5:4d:98:84:e6:94:60:04:92:99:b0:be:63: dd:29:c0:16:db:d5:f4:af:3d:43:ea:02:56:05:b9:09:6d:51: fe:63:41:cb:0a:ec:91:0e:bc:6d:80:b7:14:99:25:e8:50:b9: 11:f9:82:0e:71:2c:b0:36:48:32:43:7a:b5:a5:f7:42:dc:de: 06:ea:81:18:65:2c:d5:9f:52:58:51:6f:25:75:09:18:2c:d6: cb:ec:02:85:6e:64:47:68:ed:70:85:4d:e7:3a:59:47:90:eb: 66:1c:f0:c2:cf:0d:fe:0d:c0:37:a4:21:30:c8:92:3b:ed:84: f2:60:e1:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNDIxMDgyOTMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA2MDFlYy03Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkuY/Smm0aNa9PVCCAhvqZ2ptJSQrbd7q+OMU6upvwZD+lxBb27xa3kE5oLz 5QX96W0cHq3TOWr5/mrRLdWbObz8MvfvS5U/6de35SBuXBVCucRMupk/IsSau4M7 Q95+Wn4KjbFDA0kh7rwYh7uiHLzKvmyaRCyNVbi5uTDCrxQR3n4npbw7X1hBw3Jo TR26/tRNoUzWUacgWa3BSWRi9caXhCDk3jp0DomKF2odJmy1q8OfrU5cNAXio/N4 4GbQ0C2lXDppY4yf6pTGmBJK4zGRfhHS1xKxHhwkRRNwfqH4Nk18c6SJkSed6aGI 6ojiF5jawFa1oT1vCvu7X5VOgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJLreUPY vdhLSLvA4ZpB3rfz3tiXMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvN0RCNkZCRjYx RTg3MTFGMEJGMzJENTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr+KwwDQYJKoZIhvcNAQELBQADggEBAKCRpcjof0brt3Nx sTEC0+YEbGCk9OVt7+lEZxNPfq0LPrYCtmAbvFy1iXKSpUZhrIb0fbM+91KW8TpS qzl6U9DflL2VLXRY0GADpMwsJ6d7yKOmZwliZSGI3zgSn2fWVGhymy4y6CGs9svr DIkyyeCwUHvWgWja4FLU71dhhXMl2qDR9U2YhOaUYASSmbC+Y90pwBbb1fSvPUPq AlYFuQltUf5jQcsK7JEOvG2AtxSZJehQuRH5gg5xLLA2SDJDerWl90Lc3gbqgRhl LNWfUlhRbyV1CRgs1svsAoVuZEdo7XCFTec6WUeQ62Yc8MLPDf4NwDekITDIkjvt hPJg4Ws= -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net