$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/D173DA3043B911EDB6AA2D5FC4F9AE02.roa File: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (raw, json) Hash identifier: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM= Subject key identifier: AC:99:1C:48:1D:6E:23:74:0E:BF:3B:D0:AF:60:9D:64:FD:11:C8:57 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 01DF Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/D173DA3043B911EDB6AA2D5FC4F9AE02.roa Signing time: Wed 09 Apr 2025 02:07:48 +0000 ROA not before: Wed 09 Apr 2025 02:07:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 14618 IP address blocks: 2403:8300:a4e0::/48 maxlen: 48 2403:8300:a4e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 01:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Apr 9 02:07:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f5d674-c76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:32:0f:95:fa:2d:3e:43:2b:a4:2f:f2:6e: 92:29:d2:6c:d8:fb:b5:75:d8:d1:7a:3d:4a:d8:f5: 63:33:d8:06:d2:d0:2b:34:27:da:e9:41:3e:da:95: 35:9c:b3:fa:78:a1:2e:41:e3:d1:63:cf:3f:c3:0d: 42:fc:81:66:6d:58:85:89:64:d2:6a:a5:79:51:37: d8:b3:ea:73:21:2c:48:9a:3f:67:d8:ec:89:87:66: 03:a5:e2:07:d4:19:cf:e6:a9:59:81:dc:72:2b:45: 31:e0:5e:fd:e4:42:f7:7f:0d:9f:01:69:70:cb:3f: 12:10:da:fb:f4:1d:b5:8e:4a:9f:55:70:c8:b7:8a: 4a:81:a2:67:69:ff:0b:5f:e6:41:97:c6:81:a2:fc: a6:fc:eb:37:cd:4b:dc:4d:62:6a:4f:26:8d:b5:ce: ad:93:c8:4a:0e:5b:6a:2c:27:2a:71:d2:0e:63:ae: 19:7b:b2:34:66:79:07:11:94:b8:fc:d2:d9:92:be: ef:d4:51:9f:07:af:33:ed:8a:c2:21:d6:df:c6:a2: 2c:14:08:17:70:64:aa:34:63:da:5a:c8:11:42:f7: ab:0e:b8:d5:f0:69:dc:46:a8:11:7b:4a:f8:04:81: ee:37:d1:3d:02:ac:ea:4d:0f:66:a2:36:1a:fe:3b: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:99:1C:48:1D:6E:23:74:0E:BF:3B:D0:AF:60:9D:64:FD:11:C8:57 X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/D173DA3043B911EDB6AA2D5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:8300:a4e0::/47 Signature Algorithm: sha256WithRSAEncryption 17:93:91:24:07:b7:df:17:3e:07:a5:fa:96:ee:ed:bf:ae:c9: 64:b8:2a:02:72:0c:b9:85:a7:ba:ee:33:20:2b:30:47:ee:c3: 28:59:51:c9:3b:2d:f8:36:69:12:56:c9:1a:ac:8a:60:84:de: dd:b5:db:c6:32:a2:06:6b:95:63:9d:25:1d:e9:f3:f2:a4:7e: 8b:24:27:bf:83:5e:d7:17:e8:f9:9b:f5:0b:7a:6f:b5:24:32: ce:a3:62:4b:3d:36:af:83:62:34:79:1e:9a:4a:ba:bd:16:e0: bb:32:c0:62:99:06:db:4a:5f:73:ba:d4:9b:0a:bf:37:7c:e3: 0e:7a:77:d1:d4:34:3a:28:61:01:64:ed:a4:1f:1f:f7:90:cc: 40:55:90:58:12:f0:cb:d0:b6:36:aa:2a:8f:43:f0:fd:05:ad: 8e:d7:05:ef:a1:b7:28:4e:5f:ee:b6:5d:42:cd:6e:94:b3:f5: a6:b0:45:05:d9:c4:22:e4:38:e7:51:24:22:dc:59:b6:61:12: fe:e5:a4:b4:ce:a0:06:52:6c:ed:38:d9:2e:a9:9a:f2:c6:d5: 23:4d:56:e3:2c:fe:d2:84:ea:29:cf:ad:00:51:08:0d:2f:0e: 2f:9f:c1:f6:39:8b:1c:c1:66:29:cb:67:5f:58:85:18:41:e0: f8:48:45:21 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwNDA5MDIwNzQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1ZDY3NC1jNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XsyD5X6LT5DK6Qv8m6SKdJs2Pu1ddjRej1K2PVjM9gG0tArNCfa6UE+2pU1 nLP6eKEuQePRY88/ww1C/IFmbViFiWTSaqV5UTfYs+pzISxImj9n2OyJh2YDpeIH 1BnP5qlZgdxyK0Ux4F795EL3fw2fAWlwyz8SENr79B21jkqfVXDIt4pKgaJnaf8L X+ZBl8aBovym/Os3zUvcTWJqTyaNtc6tk8hKDltqLCcqcdIOY64Ze7I0ZnkHEZS4 /NLZkr7v1FGfB68z7YrCIdbfxqIsFAgXcGSqNGPaWsgRQverDrjV8GncRqgRe0r4 BIHuN9E9AqzqTQ9mojYa/juNYwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKyZHEgd biN0Dr870K9gnWT9EchXMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI1RjIvNEFFRUQ5MUM0M0I3MTFFRDk4RkY0NTVFQzRGOUFFMDIvRDE3M0RBMzA0 M0I5MTFFREI2QUEyRDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkA4MApOAwDQYJKoZIhvcNAQELBQADggEBABeTkSQHt98X Pgel+pbu7b+uyWS4KgJyDLmFp7ruMyArMEfuwyhZUck7Lfg2aRJWyRqsimCE3t21 28YyogZrlWOdJR3p8/KkfoskJ7+DXtcX6Pmb9Qt6b7UkMs6jYks9Nq+DYjR5HppK ur0W4LsywGKZBttKX3O61JsKvzd84w56d9HUNDooYQFk7aQfH/eQzEBVkFgS8MvQ tjaqKo9D8P0FrY7XBe+htyhOX+62XULNbpSz9aawRQXZxCLkOOdRJCLcWbZhEv7l pLTOoAZSbO042S6pmvLG1SNNVuMs/tKE6inPrQBRCA0vDi+fwfY5ixzBZinLZ19Y hRhB4PhIRSE= -----END CERTIFICATE-----Generated at Wed Apr 23 06:35:55 2025 by rpki-client on console.sobornost.net