$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa File: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (raw, json) Hash identifier: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4= Subject key identifier: 4E:D3:4E:3B:A5:AF:51:6D:58:2F:3A:A3:FC:DC:B4:D8:AC:C1:7B:7D Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 22EB Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa Signing time: Tue 14 Jan 2025 15:52:50 +0000 ROA not before: Tue 14 Jan 2025 15:52:50 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55943 IP address blocks: 43.249.176.0/22 maxlen: 23 103.4.72.0/22 maxlen: 23 113.197.68.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8939 (0x22eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Jan 14 15:52:50 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67868852-1227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:dd:93:ab:f1:19:4b:a9:97:e7:f3:d4:73: 71:b5:8f:3f:1e:07:01:e5:b6:a1:04:43:3f:72:5e: c2:b3:d2:16:1c:2c:1c:d7:9c:df:b3:f2:c0:ac:97: e1:03:d9:1e:6d:b7:8e:f2:bb:5f:20:18:c7:3a:58: 6c:8f:1f:58:de:7d:db:44:56:f3:63:52:ef:e4:53: e7:11:95:05:c0:4e:81:61:9c:d4:67:1f:90:60:4f: ec:c2:76:b1:04:cb:70:1d:1a:cb:bb:00:d8:6c:59: d4:fa:94:4f:b7:b1:67:f2:8d:6c:03:51:03:8e:33: cc:14:e3:c6:3c:3b:c3:c3:86:0e:23:f0:34:fc:f2: 37:9f:f4:42:6d:89:d4:00:a0:a3:08:1b:e4:2f:34: cc:82:ab:ab:67:91:57:60:55:49:2c:e9:57:7c:3e: c4:9f:2e:79:01:f7:58:b5:50:f5:f2:82:58:35:5a: a2:d8:f2:2e:02:15:63:e3:11:7d:cd:fb:e5:2d:28: 75:71:07:b7:5e:5b:ef:58:bf:ef:42:69:d6:bd:8b: cf:9d:f5:bc:80:28:c5:8d:b2:c9:38:d9:dd:ff:0b: 25:b8:6a:20:1b:3f:bb:b5:82:38:58:42:02:48:68: aa:d5:cd:e7:ef:cd:09:0a:9c:33:60:4f:2f:29:df: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D3:4E:3B:A5:AF:51:6D:58:2F:3A:A3:FC:DC:B4:D8:AC:C1:7B:7D X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.176.0/22 103.4.72.0/22 113.197.68.0/22 Signature Algorithm: sha256WithRSAEncryption b4:42:95:52:2d:fc:ee:5e:3a:02:e1:ed:24:ae:50:90:ff:5d: d5:61:94:97:6b:90:2b:b7:4b:f4:0e:36:ec:0f:8a:b5:22:f3: 36:ca:8d:d5:02:c1:95:79:a4:5f:7e:f7:f9:85:5d:2c:4a:cb: 7d:f9:92:88:9c:cd:a4:96:0c:c4:3d:a2:20:3e:7e:c6:b8:04: 2d:48:a8:e1:5c:9d:d8:39:e2:ca:87:80:77:f8:d8:48:82:16: b5:1a:08:e9:5c:c5:da:76:3a:40:ff:af:27:56:41:43:5e:54: 96:92:69:30:f0:af:0b:56:63:b0:d1:4c:fb:9f:d2:17:a7:94: 85:ee:0c:66:83:31:1e:34:96:8d:19:6b:16:55:c4:4f:71:c9: 7a:e9:09:fb:77:96:de:78:df:b4:60:e8:5a:a8:bc:9b:ee:d3: 20:76:de:82:87:0e:a1:83:bb:92:87:b7:64:0e:0e:09:7c:b5: 47:4b:b7:71:db:19:0d:67:72:20:6b:a4:8b:84:85:70:a9:01: f3:b4:05:4f:b9:a9:3f:5c:40:5a:51:f0:df:52:ea:bc:96:4b: 87:02:0d:28:79:c2:4e:bb:0e:e7:f7:86:22:c5:4c:89:90:24: 49:38:bd:13:3a:4f:e1:d8:80:3c:ff:25:35:26:74:7e:73:67: de:eb:68:2c -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUwMTE0MTU1MjUwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2ODg1Mi0xMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6Ldk6vxGUupl+fz1HNxtY8/HgcB5bahBEM/cl7Cs9IWHCwc15zfs/LArJfh A9kebbeO8rtfIBjHOlhsjx9Y3n3bRFbzY1Lv5FPnEZUFwE6BYZzUZx+QYE/swnax BMtwHRrLuwDYbFnU+pRPt7Fn8o1sA1EDjjPMFOPGPDvDw4YOI/A0/PI3n/RCbYnU AKCjCBvkLzTMgqurZ5FXYFVJLOlXfD7Eny55AfdYtVD18oJYNVqi2PIuAhVj4xF9 zfvlLSh1cQe3XlvvWL/vQmnWvYvPnfW8gCjFjbLJONnd/wsluGogGz+7tYI4WEIC SGiq1c3n780JCpwzYE8vKd+QRQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFE7TTjul r1FtWC86o/zctNiswXt9MB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURGRDMvMUZEMUE4QkU5NDg2MTFFNUFFMEM4QjcyQzRGOUFFMDIvNjc4REE4RkU1 OUQyMTFFQUI3N0M4QzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr+bADBAJnBEgDBAJxxUQwDQYJKoZIhvcNAQELBQADggEB ALRClVIt/O5eOgLh7SSuUJD/XdVhlJdrkCu3S/QONuwPirUi8zbKjdUCwZV5pF9+ 9/mFXSxKy335koiczaSWDMQ9oiA+fsa4BC1IqOFcndg54sqHgHf42EiCFrUaCOlc xdp2OkD/rydWQUNeVJaSaTDwrwtWY7DRTPuf0henlIXuDGaDMR40lo0ZaxZVxE9x yXrpCft3lt5437Rg6FqovJvu0yB23oKHDqGDu5KHt2QODgl8tUdLt3HbGQ1nciBr pIuEhXCpAfO0BU+5qT9cQFpR8N9S6ryWS4cCDSh5wk67Duf3hiLFTImQJEk4vRM6 T+HYgDz/JTUmdH5zZ97raCw= -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:01 2025 by rpki-client on console.sobornost.net