$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/DE72D5AEBED411EF835BB47AC4F9AE02.roa File: DE72D5AEBED411EF835BB47AC4F9AE02.roa (raw, json) Hash identifier: 5j81/BZOYpTkz0ooChEWGP+uFOoiaPO0/qxC0SgYzdY= Subject key identifier: 99:E8:5E:9D:EB:B5:CF:20:CD:FB:FF:75:00:2C:03:E1:90:74:71:F8 Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Certificate serial: 02 Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/DE72D5AEBED411EF835BB47AC4F9AE02.roa Signing time: Fri 20 Dec 2024 13:18:15 +0000 ROA not before: Fri 20 Dec 2024 13:18:15 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133496 IP address blocks: 161.248.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Validity Not Before: Dec 20 13:18:15 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67656e96-0faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:e1:68:90:6b:8f:d5:03:10:66:39:7b:5f: 38:99:df:d0:66:0c:3f:8d:6e:4f:d2:53:f9:36:f8: 25:e7:eb:5d:7f:72:5b:0e:fa:bf:0d:0a:58:ce:47: a5:00:5f:8d:8f:92:82:25:94:12:41:ae:dd:aa:a7: 9b:fb:27:d7:e6:1f:8e:7c:3e:48:53:37:e2:aa:1f: 45:36:ab:69:b6:0e:ba:55:94:73:e7:ff:aa:41:89: 1a:68:89:a8:e1:31:f4:a1:9d:78:d8:4b:8c:cd:2f: 05:27:a9:9c:70:58:36:7c:c3:2d:91:7d:7a:58:a0: 3e:1b:7e:0e:14:e3:3f:c9:70:fe:53:30:72:f5:a2: 6b:86:9c:73:d8:f8:24:21:b8:1a:d3:8b:ef:f6:f6: d4:3e:48:3f:c7:79:a8:2b:4a:1a:f4:f3:35:ba:1d: cc:aa:4c:df:51:bb:90:89:f9:57:98:3d:82:c3:65: 99:d6:9e:14:33:d4:7f:85:59:67:02:df:fd:d6:d1: d2:90:34:49:86:31:bf:90:53:9a:1a:88:a1:55:29: 23:4c:55:5c:75:19:98:b2:3a:1c:dd:3a:99:2d:3b: f8:b5:1c:95:21:6c:e1:99:12:cf:09:36:c4:58:45: c0:eb:2c:82:c1:41:1a:21:fb:ef:f2:59:86:97:ef: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E8:5E:9D:EB:B5:CF:20:CD:FB:FF:75:00:2C:03:E1:90:74:71:F8 X509v3 Authority Key Identifier: keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/DE72D5AEBED411EF835BB47AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.6.0/23 Signature Algorithm: sha256WithRSAEncryption e5:fc:fb:9d:c2:04:92:07:f5:35:da:e1:29:e4:59:dd:19:d3: 8f:a9:ab:ab:24:bc:29:c6:2f:fb:72:3a:8d:c1:73:58:ce:c4: 21:69:a6:c5:d9:00:45:4c:0b:c1:05:db:24:b2:c0:ef:d3:dc: fd:82:ed:cf:71:eb:7e:89:9b:c3:f8:e2:f1:5b:f6:75:46:41: 59:c5:7c:00:21:b6:57:d6:e9:ec:d2:e2:e9:bb:74:6f:c4:69: 21:01:39:ec:58:9d:6a:1c:46:9f:c4:22:dd:ca:ab:41:01:33: d3:08:91:ba:47:6e:5c:9f:44:5c:1c:5a:ee:2b:d6:69:90:43: 31:4c:24:40:45:df:90:ad:6a:50:ec:71:ac:82:5c:a3:86:d1: e2:d8:77:11:cd:3e:de:a4:70:cc:1d:01:af:eb:b1:f2:c1:11: b4:4b:f5:a2:be:96:e0:a5:bc:8b:28:a1:bb:a5:76:42:72:3f: 9e:a3:81:c7:ad:96:f7:94:ba:5f:4d:93:e4:95:2b:76:d9:68: c6:1c:c2:39:89:2b:9c:60:e0:f7:be:90:dd:c4:70:93:4f:cb: c9:52:df:74:5a:b2:7b:f1:7c:6e:20:6d:42:28:d6:6f:53:b0: 4d:58:b9:c0:cc:07:33:10:83:86:db:1c:31:f0:91:a5:8f:e0: 85:a7:de:43 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODMwNzExMC8GA1UEBRMoNEIwOTJERjEwNDI4MEY0NUJDM0YyNzk2RjQwMUNDMkI0 QzYxNDRFOTAeFw0yNDEyMjAxMzE4MTVaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NjU2ZTk2LTBmYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmJeFokGuP1QMQZjl7XziZ39BmDD+Nbk/SU/k2+CXn611/clsO+r8NCljOR6UA X42PkoIllBJBrt2qp5v7J9fmH458PkhTN+KqH0U2q2m2DrpVlHPn/6pBiRpoiajh MfShnXjYS4zNLwUnqZxwWDZ8wy2RfXpYoD4bfg4U4z/JcP5TMHL1omuGnHPY+CQh uBrTi+/29tQ+SD/HeagrShr08zW6HcyqTN9Ru5CJ+VeYPYLDZZnWnhQz1H+FWWcC 3/3W0dKQNEmGMb+QU5oaiKFVKSNMVVx1GZiyOhzdOpktO/i1HJUhbOGZEs8JNsRY RcDrLILBQRoh++/yWYaX7zaHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmeheneu1 zyDN+/91ACwD4ZB0cfgwHwYDVR0jBBgwFoAUSwkt8QQoD0W8PyeW9AHMK0xhROkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MzA3LzJCQzkyNDUwQkVD RDExRUY5OEM3NDEzMkM0RjlBRTAyL1N3a3Q4UVFvRDBXOFB5ZVc5QUhNSzB4aFJP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3drdDhRUW9EMFc4UHllVzlBSE1LMHhoUk9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODMwNy8yQkM5MjQ1MEJFQ0QxMUVGOThDNzQxMzJDNEY5QUUwMi9ERTcyRDVBRUJF RDQxMUVGODM1QkI0N0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4BjANBgkqhkiG9w0BAQsFAAOCAQEA5fz7ncIEkgf1Ndrh KeRZ3RnTj6mrqyS8KcYv+3I6jcFzWM7EIWmmxdkARUwLwQXbJLLA79Pc/YLtz3Hr fombw/ji8Vv2dUZBWcV8ACG2V9bp7NLi6bt0b8RpIQE57FidahxGn8Qi3cqrQQEz 0wiRukduXJ9EXBxa7ivWaZBDMUwkQEXfkK1qUOxxrIJco4bR4th3Ec0+3qRwzB0B r+ux8sERtEv1or6W4KW8iyihu6V2QnI/nqOBx62W95S6X02T5JUrdtloxhzCOYkr nGDg976Q3cRwk0/LyVLfdFqye/F8biBtQijWb1OwTVi5wMwHMxCDhtscMfCRpY/g hafeQw== -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net