$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/03BA6992ED7711EE9998FC11C4F9AE02.roa File: 03BA6992ED7711EE9998FC11C4F9AE02.roa (raw, json) Hash identifier: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8= Subject key identifier: D9:17:71:5E:5E:68:55:FF:1B:53:7E:56:AA:E7:9F:CD:0C:B9:79:7B Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: B8 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/03BA6992ED7711EE9998FC11C4F9AE02.roa Signing time: Fri 07 Mar 2025 05:21:43 +0000 ROA not before: Fri 07 Mar 2025 05:21:43 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9311 IP address blocks: 202.58.20.0/24 maxlen: 24 202.58.22.0/24 maxlen: 24 202.58.26.0/24 maxlen: 24 202.58.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Mar 7 05:21:43 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca8266-656b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:d2:ca:b9:b7:bd:85:83:f9:24:f9:06:ee: 73:76:09:9c:8a:82:18:0a:38:f2:4c:99:86:b9:d9: 47:df:96:4a:55:b1:51:62:87:83:2b:1e:fb:72:d9: 9a:17:47:72:60:b8:ae:f8:4f:9b:9b:02:3e:47:57: e7:dc:db:6f:fc:30:94:bd:31:30:68:17:76:c0:21: 6c:ad:7f:6f:61:70:28:99:33:d9:0b:11:60:0c:72: e3:a3:82:aa:3c:b7:7b:5a:65:de:67:0b:49:3a:e4: 10:66:e7:e1:40:44:12:e6:0a:d6:a8:7f:26:91:9b: bb:96:c3:82:e7:8e:8e:52:81:96:50:09:1d:6a:2e: 70:75:b0:ba:33:a4:27:40:84:7e:83:80:34:b3:7e: 82:99:62:36:a8:19:0b:27:2e:11:17:9f:23:7d:ae: 22:cd:48:5f:c0:64:17:fc:75:9d:8d:dd:21:91:30: 1c:c2:02:95:78:7e:93:60:db:12:76:5d:bc:df:05: 60:ee:ae:a1:44:90:fb:a9:64:97:36:36:bc:b0:1f: 34:21:2c:26:7c:33:ae:49:bc:89:04:30:e3:4d:21: c2:03:26:11:5e:80:7a:38:0c:ca:44:69:0e:1b:99: 49:72:9c:2c:a0:c3:e9:1f:0a:84:30:83:aa:a3:8b: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:17:71:5E:5E:68:55:FF:1B:53:7E:56:AA:E7:9F:CD:0C:B9:79:7B X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/03BA6992ED7711EE9998FC11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.20.0/24 202.58.22.0/24 202.58.26.0/23 Signature Algorithm: sha256WithRSAEncryption 42:1b:bd:66:66:26:99:ea:84:bf:19:b7:4a:2b:6a:df:c3:0a: d0:3c:0e:b7:7f:1d:75:6e:3a:e0:9a:cf:9a:68:62:05:3a:dc: 98:c7:fc:f7:7e:d0:09:a6:a1:71:7d:6c:6a:66:06:f4:49:30: 85:dc:b9:3a:ca:8d:cd:50:d6:87:82:cb:a4:9b:d9:16:20:51: c2:72:60:c9:09:43:88:bb:11:b1:36:a2:9c:ad:ff:6d:d0:73: f3:2c:26:8e:8b:6e:a7:78:47:ef:84:22:93:7a:51:ba:98:f6: da:b6:df:09:06:4d:ef:8c:6c:a6:16:ba:c4:fb:de:3b:06:0c: 49:c8:ec:26:24:14:ea:d0:c2:82:46:6a:6d:37:eb:d8:b2:5a: 53:19:8c:61:64:cb:d0:3a:6e:14:6b:b3:ea:51:7a:a2:de:03: 2f:08:50:83:ff:79:0c:7b:62:47:93:45:b5:10:e8:0a:5e:0b: cf:cf:f3:48:bd:2b:96:63:c6:f2:be:ef:22:f9:67:5b:f4:4e: f9:43:35:8a:d2:e5:29:ac:5f:fa:42:33:6a:39:6e:31:77:a4: df:a2:06:ec:ad:58:84:4d:11:6c:db:89:f2:ac:53:3a:ad:7a: bf:56:25:d4:36:2d:0e:02:17:8f:1d:6e:fe:b2:f2:9e:07:9f: fb:d0:a5:f3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUwMzA3MDUyMTQzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhODI2Ni02NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwprSyrm3vYWD+ST5Bu5zdgmcioIYCjjyTJmGudlH35ZKVbFRYoeDKx77ctma F0dyYLiu+E+bmwI+R1fn3Ntv/DCUvTEwaBd2wCFsrX9vYXAomTPZCxFgDHLjo4Kq PLd7WmXeZwtJOuQQZufhQEQS5grWqH8mkZu7lsOC546OUoGWUAkdai5wdbC6M6Qn QIR+g4A0s36CmWI2qBkLJy4RF58jfa4izUhfwGQX/HWdjd0hkTAcwgKVeH6TYNsS dl283wVg7q6hRJD7qWSXNja8sB80ISwmfDOuSbyJBDDjTSHCAyYRXoB6OAzKRGkO G5lJcpwsoMPpHwqEMIOqo4sQjwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNkXcV5e aFX/G1N+Vqrnn80MuXl7MB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U5NTkvQUE0Qzc3RUNFRDc2MTFFRUFEODcxQTExQzRGOUFFMDIvMDNCQTY5OTJF RDc3MTFFRTk5OThGQzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBADKOhQDBADKOhYDBAHKOhowDQYJKoZIhvcNAQELBQADggEB AEIbvWZmJpnqhL8Zt0orat/DCtA8Drd/HXVuOuCaz5poYgU63JjH/Pd+0AmmoXF9 bGpmBvRJMIXcuTrKjc1Q1oeCy6Sb2RYgUcJyYMkJQ4i7EbE2opyt/23Qc/MsJo6L bqd4R++EIpN6UbqY9tq23wkGTe+MbKYWusT73jsGDEnI7CYkFOrQwoJGam0369iy WlMZjGFky9A6bhRrs+pReqLeAy8IUIP/eQx7YkeTRbUQ6ApeC8/P80i9K5ZjxvK+ 7yL5Z1v0TvlDNYrS5SmsX/pCM2o5bjF3pN+iBuytWIRNEWzbifKsUzqter9WJdQ2 LQ4CF48dbv6y8p4Hn/vQpfM= -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:11 2025 by rpki-client on console.sobornost.net