$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/03D29A521AD611F0BC67FC1CC4F9AE02.roa File: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (raw, json) Hash identifier: rt/eyNRwh3HSmHt+oMSmnpP/31deXcLSwt8yukP8jbw= Subject key identifier: BF:91:66:52:C6:EE:1F:2D:91:C1:6B:C4:1D:A2:98:CE:09:EE:E7:67 Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Certificate serial: 1DF6 Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/03D29A521AD611F0BC67FC1CC4F9AE02.roa Signing time: Wed 16 Apr 2025 15:19:06 +0000 ROA not before: Wed 16 Apr 2025 15:19:06 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 58424 IP address blocks: 146.88.202.0/23 maxlen: 24 146.88.206.0/23 maxlen: 24 167.179.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7670 (0x1df6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Validity Not Before: Apr 16 15:19:06 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67ffca6a-0a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:81:6a:7e:8b:48:bf:8d:2a:d5:c9:f0:1c: d9:96:a8:21:fd:04:19:49:67:98:f5:d0:0d:4f:dc: 43:c8:83:c4:fa:7e:14:62:35:50:4c:f3:65:e3:a4: a3:c1:04:1d:81:16:87:3a:3e:06:0a:3c:42:27:d0: b4:78:84:48:05:eb:39:80:e9:47:fa:c5:8b:bd:72: 75:4c:34:66:be:34:62:5c:b0:68:c6:32:29:1a:a5: 5e:ac:37:2c:14:a4:d4:63:42:76:68:5d:6c:6c:e6: 27:b6:d7:20:31:23:60:7b:da:20:5d:4a:6f:63:eb: 27:0d:9c:2d:43:23:07:02:7c:60:61:7f:20:27:8f: d4:52:00:ab:71:50:32:d6:f2:31:22:8b:3b:21:66: 6b:a6:e1:a8:2a:99:11:1b:fd:76:27:88:27:d0:1a: ea:f7:d0:93:aa:5e:8a:bc:3c:a7:90:ea:9a:f6:0b: 28:bc:2f:d5:81:44:bc:34:16:98:df:5f:f6:15:46: cf:61:cb:54:36:7c:c2:c6:f5:d9:a8:51:42:70:53: 66:8e:bb:41:90:78:09:77:65:4b:cb:e4:fe:e0:3c: 9f:04:36:7a:da:7e:c2:13:a2:13:41:93:22:4f:2a: 94:d7:81:37:ce:05:c8:69:a8:8f:73:b1:06:86:74: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:91:66:52:C6:EE:1F:2D:91:C1:6B:C4:1D:A2:98:CE:09:EE:E7:67 X509v3 Authority Key Identifier: keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/03D29A521AD611F0BC67FC1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.202.0/23 146.88.206.0/23 167.179.0.0/23 Signature Algorithm: sha256WithRSAEncryption 82:40:1d:60:33:92:06:36:39:e4:de:98:66:5f:3e:ff:0c:ca: 63:8a:56:36:18:70:14:5d:74:f3:f2:b9:4f:3c:0a:b7:2c:0c: 95:77:ca:fb:ce:e3:2b:86:6a:bb:2a:70:c8:61:36:c8:1b:76: 54:a1:3f:eb:b3:1f:85:d9:ff:ca:30:58:b8:c4:c7:bf:78:52: 0b:e2:9b:b0:75:12:bf:40:4b:20:fb:c5:1b:26:a8:11:74:98: 38:c9:53:ba:5c:92:81:b9:27:ab:35:6b:dc:d7:d3:82:24:e6: 2b:78:cc:0b:b6:00:46:79:16:09:c7:f4:38:f0:45:9c:51:c3: 7e:cf:93:9b:5e:59:0c:a3:46:35:c2:be:70:c0:dc:e1:36:9a: c5:2c:da:8a:34:07:df:b4:f8:b0:48:42:08:45:34:d9:d8:cb: 40:1e:da:08:43:96:08:a2:89:5b:b5:fd:a6:73:0c:80:aa:73: e5:cb:13:b0:c0:e6:f3:30:78:22:02:8d:78:87:27:97:7f:05: 7b:c4:63:a2:bb:75:5c:26:2a:06:40:c1:ce:76:14:92:a9:bc: a3:bf:c5:be:1a:87:28:e9:78:ea:ea:7f:ac:b0:57:b7:ae:29: 56:80:f4:51:de:bc:cf:3a:8b:c3:34:36:8c:3e:6b:0b:7e:55: ca:b7:e4:68 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICHfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKDUxMzZFMDBEMDNEMUYzODUwMEFCNjcyOUI3MkVEM0Q3 MkNENkExMDUwHhcNMjUwNDE2MTUxOTA2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZmY2E2YS0wYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNeBan6LSL+NKtXJ8BzZlqgh/QQZSWeY9dANT9xDyIPE+n4UYjVQTPNl46Sj wQQdgRaHOj4GCjxCJ9C0eIRIBes5gOlH+sWLvXJ1TDRmvjRiXLBoxjIpGqVerDcs FKTUY0J2aF1sbOYnttcgMSNge9ogXUpvY+snDZwtQyMHAnxgYX8gJ4/UUgCrcVAy 1vIxIos7IWZrpuGoKpkRG/12J4gn0Brq99CTql6KvDynkOqa9gsovC/VgUS8NBaY 31/2FUbPYctUNnzCxvXZqFFCcFNmjrtBkHgJd2VLy+T+4DyfBDZ62n7CE6ITQZMi TyqU14E3zgXIaaiPc7EGhnRrZwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFL+RZlLG 7h8tkcFrxB2imM4J7udnMB8GA1UdIwQYMBaAFFE24A0D0fOFAKtnKbcu09cs1qEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zMDQxOTdFODhG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0VUFxMmNwdHk3VDF5eldv UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VUYmdEUVBSODRVQXEyY3B0eTdUMXl6V29RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIzQkMvMzA0MTk3RTg4RjlCMTFFNkJFQzVDQjI1QzRGOUFFMDIvMDNEMjlBNTIx QUQ2MTFGMEJDNjdGQzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGSWMoDBAGSWM4DBAGnswAwDQYJKoZIhvcNAQELBQADggEB AIJAHWAzkgY2OeTemGZfPv8MymOKVjYYcBRddPPyuU88CrcsDJV3yvvO4yuGarsq cMhhNsgbdlShP+uzH4XZ/8owWLjEx794Ugvim7B1Er9ASyD7xRsmqBF0mDjJU7pc koG5J6s1a9zX04Ik5it4zAu2AEZ5FgnH9DjwRZxRw37Pk5teWQyjRjXCvnDA3OE2 msUs2oo0B9+0+LBIQghFNNnYy0Ae2ghDlgiiiVu1/aZzDICqc+XLE7DA5vMweCIC jXiHJ5d/BXvEY6K7dVwmKgZAwc52FJKpvKO/xb4ahyjpeOrqf6ywV7euKVaA9FHe vM86i8M0Now+awt+Vcq35Gg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:50 2025 by rpki-client on console.sobornost.net