$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa File: 651384A6766811EF96E4115EC4F9AE02.roa (raw, json) Hash identifier: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk= Subject key identifier: BD:2E:94:66:7D:83:98:40:95:4C:C6:1E:3B:EE:6E:B1:5C:7C:F7:73 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 09A2 Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa Signing time: Sat 26 Apr 2025 19:59:38 +0000 ROA not before: Sat 26 Apr 2025 19:59:38 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140612 IP address blocks: 103.151.0.0/23 maxlen: 24 2400:8860::/32 maxlen: 32 2400:8860::/33 maxlen: 33 2400:8860:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Apr 26 19:59:38 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680d3b2a-f9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:90:dc:0d:8b:01:07:9b:1c:d4:26:fc:7f: 41:25:b3:fa:fa:65:9c:29:72:3a:ae:31:1a:63:f9: 09:44:64:99:3e:8d:60:6d:f3:6c:b6:9f:d2:c1:16: d7:b9:c8:aa:7e:e2:5d:48:71:12:f8:c3:46:ad:ef: 0d:3d:d3:94:57:e8:84:5a:56:aa:74:22:f6:3c:f9: be:94:d5:b4:61:c6:23:65:ec:01:df:76:e8:2f:27: 41:77:d2:da:65:32:cb:5e:83:2b:85:20:40:4e:48: cd:88:84:a4:f1:df:db:c5:d8:4f:8d:2f:93:d4:ac: 77:9b:2c:82:7d:51:92:4d:83:be:32:78:d2:6c:f6: 91:2b:47:4b:c6:e5:ca:8d:01:77:76:d5:fc:10:fb: 48:43:be:79:bc:33:ad:57:4c:3a:f6:3a:7a:c8:45: f6:34:b5:4c:21:e6:bb:9d:84:88:02:c4:06:d8:a6: ab:e8:09:b7:e5:37:11:e1:3f:83:7f:f3:86:75:ea: 27:f5:2c:38:3d:96:df:c6:42:e6:2a:5b:83:13:ee: 1f:69:19:14:46:66:30:63:f8:93:d8:2d:08:26:b8: 8c:e3:59:08:d1:54:cb:9f:b8:61:e1:b7:ec:19:44: 78:1e:c1:a3:49:15:8c:3a:68:11:d7:ce:fa:12:03: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:94:66:7D:83:98:40:95:4C:C6:1E:3B:EE:6E:B1:5C:7C:F7:73 X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.0.0/23 IPv6: 2400:8860::/32 Signature Algorithm: sha256WithRSAEncryption 6b:d0:d8:e1:f2:7f:f0:93:95:25:31:f5:65:7d:ca:2e:e6:b2: 50:70:94:f1:78:12:0f:00:3d:9f:6d:23:ab:e4:fc:bd:ab:d6: 18:52:b8:80:d3:44:11:4c:e8:c7:4e:2d:a6:1c:9d:05:a0:f6: 02:7e:bb:e4:34:ce:93:0b:66:c5:b9:64:b9:f8:3b:b4:cd:0e: 86:fb:aa:90:27:05:bf:41:44:b4:82:1c:26:e8:2f:0e:45:da: 61:b7:f9:46:c8:5a:af:9c:7f:8e:5e:89:67:f4:04:a5:28:7f: 94:94:0e:21:6d:bc:1d:1f:6f:4a:07:1c:9c:3c:94:7e:23:e9: af:05:75:a0:ba:ab:76:4b:f9:53:d9:2a:0f:cf:4a:c2:b5:39: 2b:25:7b:16:54:b9:07:fd:1e:c4:6a:af:fb:6c:8c:c0:5c:6e: 90:60:a9:ca:0b:be:78:08:09:aa:9c:02:d7:4f:4e:c8:b6:6f: 97:2a:50:d4:f6:42:1e:c0:ab:40:61:8c:c8:7f:4b:f0:ee:2b: 41:d1:bc:c3:45:b5:1c:d4:2b:38:d2:db:81:25:15:2d:56:5e: e3:3b:d7:80:06:c1:7e:30:96:4f:fb:3e:ee:8e:62:86:22:33: 1a:1d:eb:18:ec:5b:1d:05:34:6a:e2:ca:1a:f6:12:d0:a4:b2: 22:ca:e9:2f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUwNDI2MTk1OTM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBkM2IyYS1mOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYCQ3A2LAQebHNQm/H9BJbP6+mWcKXI6rjEaY/kJRGSZPo1gbfNstp/SwRbX uciqfuJdSHES+MNGre8NPdOUV+iEWlaqdCL2PPm+lNW0YcYjZewB33boLydBd9La ZTLLXoMrhSBATkjNiISk8d/bxdhPjS+T1Kx3myyCfVGSTYO+MnjSbPaRK0dLxuXK jQF3dtX8EPtIQ755vDOtV0w69jp6yEX2NLVMIea7nYSIAsQG2Kar6Am35TcR4T+D f/OGdeon9Sw4PZbfxkLmKluDE+4faRkURmYwY/iT2C0IJriM41kI0VTLn7hh4bfs GUR4HsGjSRWMOmgR1876EgOGPQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFL0ulGZ9 g5hAlUzGHjvubrFcfPdzMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZBREYvNTg1MzIwREU4QkQ4MTFFQTk1QUFFQjgzQzRGOUFFMDIvNjUxMzg0QTY3 NjY4MTFFRjk2RTQxMTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnlwAwDQQCAAIwBwMFACQAiGAwDQYJKoZIhvcNAQELBQAD ggEBAGvQ2OHyf/CTlSUx9WV9yi7mslBwlPF4Eg8APZ9tI6vk/L2r1hhSuIDTRBFM 6MdOLaYcnQWg9gJ+u+Q0zpMLZsW5ZLn4O7TNDob7qpAnBb9BRLSCHCboLw5F2mG3 +UbIWq+cf45eiWf0BKUof5SUDiFtvB0fb0oHHJw8lH4j6a8FdaC6q3ZL+VPZKg/P SsK1OSslexZUuQf9HsRqr/tsjMBcbpBgqcoLvngICaqcAtdPTsi2b5cqUNT2Qh7A q0BhjMh/S/DuK0HRvMNFtRzUKzjS24ElFS1WXuM714AGwX4wlk/7Pu6OYoYiMxod 6xjsWx0FNGriyhr2EtCksiLK6S8= -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:57 2025 by rpki-client on console.sobornost.net