$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa File: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (raw, json) Hash identifier: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0= Subject key identifier: FD:E7:3A:C2:76:AF:27:D6:08:7C:DD:19:19:69:8C:FE:8B:62:E9:6A Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 0596 Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa Signing time: Mon 31 Mar 2025 23:54:49 +0000 ROA not before: Mon 31 Mar 2025 23:54:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55293 IP address blocks: 45.120.148.0/22 maxlen: 24 103.227.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Mar 31 23:54:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb2b49-ec26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:93:df:9b:94:6c:f8:39:1d:80:c2:2a:f9: 37:73:52:fa:e1:97:73:e2:a0:19:f6:ca:bf:32:36: e9:14:fd:05:59:7f:b6:cc:47:42:ad:ac:79:6c:e9: e1:07:36:a9:79:10:f9:97:f5:f4:33:91:bd:0f:21: be:55:75:1a:a0:3d:34:5f:37:40:47:26:58:44:47: 23:77:99:64:03:02:15:46:c4:5b:45:ae:07:5d:0e: 54:24:a2:2c:ec:4a:5f:5d:2a:72:63:7e:ea:d7:10: 51:2c:b7:30:6b:ae:0a:4f:64:0a:f2:ec:73:09:4c: d0:68:47:af:37:8d:c6:fc:01:3a:ff:37:30:91:fa: 54:f2:ee:5b:01:34:01:e2:a2:51:24:26:90:fb:d8: 3b:d1:99:6d:c2:09:7f:b7:56:f7:e4:0b:a8:75:c0: b9:91:9b:7d:86:8b:a2:1b:81:09:41:1c:17:eb:e6: 42:0c:c4:35:66:ee:b3:27:ba:a1:b4:3d:de:3a:c2: 42:f5:10:bd:c8:8b:e0:cd:ce:34:17:a5:95:0c:24: c8:78:a1:7d:cf:5e:fa:22:e4:a7:db:0b:a4:4e:b3: 95:c0:e7:a2:2c:fa:41:bc:cf:5a:26:a1:23:41:29: c4:c8:83:c9:ac:c7:88:0c:97:5f:f0:4f:ef:fd:ca: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E7:3A:C2:76:AF:27:D6:08:7C:DD:19:19:69:8C:FE:8B:62:E9:6A X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.148.0/22 103.227.176.0/22 Signature Algorithm: sha256WithRSAEncryption 85:d6:70:75:09:e7:90:fb:85:98:9f:64:8c:b0:7c:2f:d9:b8: 3e:2b:34:b8:6e:8e:af:8e:6b:d6:b3:c2:10:2f:73:2a:1d:4a: 58:1d:61:ee:e8:92:f7:61:1e:54:2b:10:ea:5e:2c:1e:80:41: 66:e6:5f:14:ff:e2:d1:1e:8a:49:48:82:6d:60:9e:5d:49:23: 9f:a5:9e:42:88:e0:0f:4f:ee:4f:27:25:75:24:8f:08:05:a3: 0c:67:34:3b:a3:a5:af:97:7c:90:03:e8:c6:cf:92:9e:71:53: 63:c1:d4:dc:2a:90:5a:81:3b:86:e1:47:65:00:4b:a1:c1:46: 69:a9:f3:aa:94:6b:f0:3b:34:75:69:e6:cc:0a:4f:21:e3:e3: b1:ba:59:bd:0b:07:15:f8:c7:5f:07:94:83:4b:fb:fa:11:05: 95:67:49:80:9e:38:41:96:63:8a:a1:f8:8e:be:dc:37:a5:df: f0:34:59:9c:6c:be:4b:0c:b9:02:46:ed:03:7e:5d:5b:24:13: f3:5e:37:fc:32:69:10:cf:fe:46:85:dd:60:cf:63:cb:f2:b9: 14:ef:97:21:c0:ca:45:00:85:e6:a8:9e:22:04:d7:0c:8f:a0: fc:76:7a:e1:2a:3f:48:3e:76:10:37:b3:41:4d:7d:c9:a6:18: f1:33:d2:53 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjUwMzMxMjM1NDQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViMmI0OS1lYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbOT35uUbPg5HYDCKvk3c1L64Zdz4qAZ9sq/MjbpFP0FWX+2zEdCrax5bOnh BzapeRD5l/X0M5G9DyG+VXUaoD00XzdARyZYREcjd5lkAwIVRsRbRa4HXQ5UJKIs 7EpfXSpyY37q1xBRLLcwa64KT2QK8uxzCUzQaEevN43G/AE6/zcwkfpU8u5bATQB 4qJRJCaQ+9g70Zltwgl/t1b35AuodcC5kZt9houiG4EJQRwX6+ZCDMQ1Zu6zJ7qh tD3eOsJC9RC9yIvgzc40F6WVDCTIeKF9z176IuSn2wukTrOVwOeiLPpBvM9aJqEj QSnEyIPJrMeIDJdf8E/v/cpDjwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP3nOsJ2 ryfWCHzdGRlpjP6LYulqMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVEOEEvQkEyRjFCOUFDQUVFMTFFQkEyRkJEMDU2QzRGOUFFMDIvODE4M0IwRkFD QUYxMTFFQkE0MEFGMTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteJQDBAJn47AwDQYJKoZIhvcNAQELBQADggEBAIXWcHUJ 55D7hZifZIywfC/ZuD4rNLhujq+Oa9azwhAvcyodSlgdYe7okvdhHlQrEOpeLB6A QWbmXxT/4tEeiklIgm1gnl1JI5+lnkKI4A9P7k8nJXUkjwgFowxnNDujpa+XfJAD 6MbPkp5xU2PB1NwqkFqBO4bhR2UAS6HBRmmp86qUa/A7NHVp5swKTyHj47G6Wb0L BxX4x18HlINL+/oRBZVnSYCeOEGWY4qh+I6+3Del3/A0WZxsvksMuQJG7QN+XVsk E/NeN/wyaRDP/kaF3WDPY8vyuRTvlyHAykUAheaoniIE1wyPoPx2euEqP0g+dhA3 s0FNfcmmGPEz0lM= -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:55 2025 by rpki-client on console.sobornost.net