$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa File: 25C80478053A11F08A0D6F31C4F9AE02.roa (raw, json) Hash identifier: PQY0mTJA0slWwObUdYpstelwiTL+prFfmuh+/qU35kg= Subject key identifier: 1D:46:2C:45:54:07:42:1B:37:C8:B9:18:7F:1B:E8:10:48:ED:66:21 Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Certificate serial: 0C Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa Signing time: Thu 20 Mar 2025 03:19:35 +0000 ROA not before: Thu 20 Mar 2025 03:19:35 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 4764 IP address blocks: 203.23.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Validity Not Before: Mar 20 03:19:35 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67db8947-65f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:4f:08:80:30:91:40:59:1e:44:68:d9:dd: e2:c9:de:73:db:cb:6c:48:52:71:b5:0a:04:90:82: 1c:29:af:49:a0:9a:be:cb:d5:b4:75:54:31:4c:a1: c4:28:49:7d:89:d4:06:0b:3b:b1:87:4b:30:25:55: 60:69:d6:d9:c6:4a:51:62:13:5a:21:65:0d:e6:8f: 83:6a:79:90:39:d8:5a:82:f4:dc:4b:c1:20:78:78: 14:6a:16:99:db:e0:67:97:3a:e0:87:14:3c:96:18: 63:22:17:18:c1:5a:46:d6:a3:a9:52:28:fa:cc:4d: b2:80:d6:64:2d:c7:76:1c:dc:03:26:f5:69:dd:17: 1d:31:0f:0e:09:5e:c4:16:ad:95:fd:31:e0:4d:2b: 13:cf:a1:73:82:3b:18:eb:4a:68:b8:a9:e0:0f:5b: a5:51:2d:16:ad:33:03:0d:e3:72:7d:43:5f:4c:3c: 92:34:05:06:a5:f4:c3:b5:e3:19:26:77:90:0f:f4: fb:33:00:c3:6c:b8:ab:c1:34:aa:43:35:d6:d1:62: 97:d7:5b:cb:68:64:98:d3:4e:fc:4d:2c:ea:46:3f: 81:2d:11:f3:d7:fb:21:0a:20:fb:03:88:be:29:7a: 25:1e:35:3c:41:2b:b6:e9:38:14:1a:54:dd:c8:41: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:46:2C:45:54:07:42:1B:37:C8:B9:18:7F:1B:E8:10:48:ED:66:21 X509v3 Authority Key Identifier: keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.57.0/24 Signature Algorithm: sha256WithRSAEncryption 76:c8:27:22:82:58:1f:e7:ed:32:db:42:e7:f2:cb:b9:f7:35: bd:be:57:a0:21:c1:2c:32:60:ce:c9:eb:63:26:85:d4:22:cb: af:47:46:42:21:d9:88:da:4d:d7:b0:37:b1:0d:ab:b7:1d:f9: 2a:04:0a:f2:ad:83:42:54:4c:e0:fa:85:0f:ca:57:b7:07:a5: 2e:3b:f4:f0:78:5f:86:23:33:a5:65:46:40:69:c6:c0:1d:2f: 85:56:06:d7:8c:e3:b2:87:2a:33:01:b6:54:89:5b:85:2d:ba: 32:98:f3:dc:f7:b3:d2:e9:97:4c:f5:14:17:24:99:49:74:8f: 0d:57:48:8a:f6:10:dd:e5:3c:de:ba:71:f9:83:b9:8b:7d:20: 59:cc:8c:9e:49:95:37:05:d1:87:cd:af:51:4a:81:b6:98:c3: 40:24:6b:4f:4b:87:9c:68:d3:b5:33:9b:e6:9c:f7:b3:c2:0a: d9:72:58:56:b9:fe:e8:9a:bb:e1:b6:39:bc:15:50:ac:79:27: d6:d9:45:09:e9:1e:df:50:aa:ca:d6:af:5b:a7:e5:7b:e4:81: ff:88:1d:c8:c2:ed:0c:8e:5e:43:5c:21:92:72:17:22:e0:73: e1:e5:6e:6a:db:ab:67:64:05:49:d8:68:4c:62:80:6a:97:7e: 73:3a:e1:67 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QkE4NDExMC8GA1UEBRMoRjQ5NDk2Rjk1REY5NTg4ODFCRjRCN0U5NzJFNTFCNkYz Q0E1OURGQTAeFw0yNTAzMjAwMzE5MzVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZGI4OTQ3LTY1ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Jk8IgDCRQFkeRGjZ3eLJ3nPby2xIUnG1CgSQghwpr0mgmr7L1bR1VDFMocQo SX2J1AYLO7GHSzAlVWBp1tnGSlFiE1ohZQ3mj4NqeZA52FqC9NxLwSB4eBRqFpnb 4GeXOuCHFDyWGGMiFxjBWkbWo6lSKPrMTbKA1mQtx3Yc3AMm9WndFx0xDw4JXsQW rZX9MeBNKxPPoXOCOxjrSmi4qeAPW6VRLRatMwMN43J9Q19MPJI0BQal9MO14xkm d5AP9PszAMNsuKvBNKpDNdbRYpfXW8toZJjTTvxNLOpGP4EtEfPX+yEKIPsDiL4p eiUeNTxBK7bpOBQaVN3IQfhvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHUYsRVQH Qhs3yLkYfxvoEEjtZiEwHwYDVR0jBBgwFoAU9JSW+V35WIgb9LfpcuUbbzylnfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCQTg0LzcyQzEwNDVDMDUx RjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0lnYjlMZnBjdVViYnp5bG5m by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUpTVy1WMzVXSWdiOUxmcGN1VWJienlsbmZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkE4NC83MkMxMDQ1QzA1MUYxMUYwQUJGREQ1M0VDNEY5QUUwMi8yNUM4MDQ3ODA1 M0ExMUYwOEEwRDZGMzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsXOTANBgkqhkiG9w0BAQsFAAOCAQEAdsgnIoJYH+ftMttC 5/LLufc1vb5XoCHBLDJgzsnrYyaF1CLLr0dGQiHZiNpN17A3sQ2rtx35KgQK8q2D QlRM4PqFD8pXtwelLjv08HhfhiMzpWVGQGnGwB0vhVYG14zjsocqMwG2VIlbhS26 Mpjz3Pez0umXTPUUFySZSXSPDVdIivYQ3eU83rpx+YO5i30gWcyMnkmVNwXRh82v UUqBtpjDQCRrT0uHnGjTtTOb5pz3s8IK2XJYVrn+6Jq74bY5vBVQrHkn1tlFCeke 31CqytavW6fle+SB/4gdyMLtDI5eQ1whknIXIuBz4eVuaturZ2QFSdhoTGKAapd+ czrhZw== -----END CERTIFICATE-----Generated at Fri Apr 25 10:44:26 2025 by rpki-client on console.sobornost.net