$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/12D4E3D41AA411F0A196BA66C4F9AE02.roa File: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (raw, json) Hash identifier: vvnk4u9DNse+nnNTrLADNzPvSMLhalyiJs4z4ddnMBI= Subject key identifier: B3:B9:81:B2:DE:ED:83:28:43:E0:98:49:52:B3:5E:B2:0A:2A:73:7D Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 015D Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/12D4E3D41AA411F0A196BA66C4F9AE02.roa Signing time: Wed 16 Apr 2025 09:20:44 +0000 ROA not before: Wed 16 Apr 2025 09:20:44 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 197537 IP address blocks: 185.254.242.0/24 maxlen: 24 213.139.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Apr 16 09:20:44 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67ff766c-4170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:a1:42:d4:63:67:e8:4b:21:be:50:02:37: 42:d2:b6:79:22:ce:d9:74:4d:16:4b:37:45:18:15: 5f:b4:75:8d:b4:a5:f2:58:37:e9:f6:c0:61:2e:80: b5:19:34:8f:10:a0:fd:d2:fa:01:6f:95:e0:07:92: ce:88:91:e6:46:6f:e4:50:6f:b2:ac:40:d1:a3:0a: a1:0c:55:5e:26:d5:c0:b3:3b:9d:15:1d:97:75:78: 09:4e:46:8f:c5:23:26:91:cc:a8:cd:27:70:c7:ff: 45:23:81:75:96:bc:01:7c:31:e4:ef:a9:68:07:31: e3:57:f5:ae:62:d4:3d:56:15:5c:63:b9:6a:6a:a3: 75:0c:4a:ef:9c:e8:d7:e0:da:7a:98:f5:16:13:74: 5d:2d:f8:dd:00:5f:18:57:78:79:1e:af:9f:9a:d1: bf:4f:91:d2:f2:34:71:4b:c5:be:c8:c3:a6:5b:1f: 40:0b:8b:9a:81:fb:71:1d:4f:d9:ea:79:6b:ac:a6: e1:02:20:14:b6:ff:56:69:49:bc:c1:b4:2c:06:9c: 08:91:c7:6c:99:66:8d:d1:3f:cd:25:eb:f0:32:6e: f8:e8:76:43:6d:9d:c8:95:55:ca:cb:52:b5:61:81: fb:07:80:be:b3:c6:c5:80:12:6b:e6:a5:b6:d0:08: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:81:B2:DE:ED:83:28:43:E0:98:49:52:B3:5E:B2:0A:2A:73:7D X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/12D4E3D41AA411F0A196BA66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.254.242.0/24 213.139.232.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:93:a7:1d:88:a7:88:7f:79:07:c0:2f:39:f6:a6:a8:78:e7: 30:bd:a4:42:af:54:79:76:0c:62:da:83:fb:38:04:5d:6d:db: d3:ce:af:6a:5e:06:1b:e5:9f:7c:fe:61:54:5b:56:76:26:70: b1:2b:30:21:6d:01:4f:98:22:33:67:93:52:2e:6b:1c:7c:ec: e8:ab:0e:53:5e:93:3d:56:30:31:b1:5b:de:44:70:ef:91:e9: e3:67:c7:70:8b:4d:e1:f7:8d:92:89:90:6f:b0:8a:54:46:39: 31:27:8e:78:1f:42:99:63:d4:be:7a:18:06:bc:9e:4c:2c:0f: 16:c9:b1:33:68:78:5c:92:97:7b:3b:d2:49:50:30:e6:c2:a5: 13:2b:ac:2e:89:cd:59:4a:59:4d:88:88:d6:75:c2:f1:4b:92: 72:be:17:21:83:08:4a:4b:84:b0:24:d9:18:a9:bd:61:d0:05: 3b:1f:26:9d:9f:7f:12:01:76:e1:2a:03:de:0c:c9:d1:25:fe: bd:10:b6:fc:f4:12:17:56:b9:4c:ce:c2:48:86:6f:6b:17:e2: 49:67:23:e5:2e:6a:d0:2b:f4:95:06:53:98:0f:d5:0d:fe:6f: 79:48:f2:f4:da:81:49:fa:e9:74:b2:7d:83:a4:02:f8:1c:5e: 0b:39:bb:00 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUwNDE2MDkyMDQ0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZmNzY2Yy00MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorihQtRjZ+hLIb5QAjdC0rZ5Is7ZdE0WSzdFGBVftHWNtKXyWDfp9sBhLoC1 GTSPEKD90voBb5XgB5LOiJHmRm/kUG+yrEDRowqhDFVeJtXAszudFR2XdXgJTkaP xSMmkcyozSdwx/9FI4F1lrwBfDHk76loBzHjV/WuYtQ9VhVcY7lqaqN1DErvnOjX 4Np6mPUWE3RdLfjdAF8YV3h5Hq+fmtG/T5HS8jRxS8W+yMOmWx9AC4uagftxHU/Z 6nlrrKbhAiAUtv9WaUm8wbQsBpwIkcdsmWaN0T/NJevwMm746HZDbZ3IlVXKy1K1 YYH7B4C+s8bFgBJr5qW20AgaowIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLO5gbLe 7YMoQ+CYSVKzXrIKKnN9MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDMvNjI5RThCMjAzQjIzMTFFRUE0M0IwMjE5QzRGOUFFMDIvMTJENEUzRDQx QUE0MTFGMEExOTZCQTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAC5/vIDBADVi+gwDQYJKoZIhvcNAQELBQADggEBAGyTpx2I p4h/eQfALzn2pqh45zC9pEKvVHl2DGLag/s4BF1t29POr2peBhvln3z+YVRbVnYm cLErMCFtAU+YIjNnk1Iuaxx87OirDlNekz1WMDGxW95EcO+R6eNnx3CLTeH3jZKJ kG+wilRGOTEnjngfQplj1L56GAa8nkwsDxbJsTNoeFySl3s70klQMObCpRMrrC6J zVlKWU2IiNZ1wvFLknK+FyGDCEpLhLAk2RipvWHQBTsfJp2ffxIBduEqA94MydEl /r0Qtvz0EhdWuUzOwkiGb2sX4klnI+UuatAr9JUGU5gP1Q3+b3lI8vTagUn66XSy fYOkAvgcXgs5uwA= -----END CERTIFICATE-----Generated at Wed Apr 23 19:52:09 2025 by rpki-client on console.sobornost.net