$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/A7C0D96E0CDD11F0A8463D28C4F9AE02.roa File: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (raw, json) Hash identifier: QHLRTEx6Qgh4+lTDIbuuL3PGb+4V0jC1oeBCPhaLkPw= Subject key identifier: 99:41:1E:4B:C1:AD:BF:07:7E:7F:B7:44:D1:6A:2C:11:BC:08:06:9B Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: 2A Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/A7C0D96E0CDD11F0A8463D28C4F9AE02.roa Signing time: Sat 29 Mar 2025 20:37:39 +0000 ROA not before: Sat 29 Mar 2025 20:37:39 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 151636 IP address blocks: 160.187.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Validity Not Before: Mar 29 20:37:39 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67e85a13-5497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:81:12:61:b2:ca:eb:2c:09:8f:29:e0:8d:23: a4:a7:ca:2e:bd:50:f4:68:70:7c:a7:77:33:15:07: d9:05:b8:bd:9e:98:f9:d6:cf:74:56:dd:a4:2d:f0: bf:83:37:49:7c:ad:d1:a4:29:97:62:8a:3d:e3:e6: 0b:7a:83:7d:28:4f:89:ac:c3:89:f9:2f:b5:30:30: 31:14:c8:40:4e:b8:ba:fd:43:af:77:85:97:ff:14: a2:e7:7b:af:e5:e3:a0:39:c4:5b:01:82:60:83:dd: ba:54:4a:29:65:1f:17:0a:5c:ca:42:f9:6d:93:c6: 47:6b:6c:69:bd:be:63:39:3d:98:9a:1d:2d:5a:e2: 1e:e7:b8:f7:1e:e5:9b:0c:7a:e4:6c:7b:1e:d0:53: f2:bb:f6:21:b7:23:a8:a2:6d:e1:cc:84:10:b3:bd: 53:5c:43:32:08:c8:0e:ed:69:dd:a0:5e:c0:ff:4b: 4d:54:e5:4a:60:65:36:ce:14:ce:ae:03:ec:d8:3e: c5:af:8e:8c:ec:d3:64:b0:0c:78:12:a9:ee:93:8d: 02:20:4a:d8:5b:91:28:45:1d:dd:da:5f:c7:ad:6a: 95:31:4e:9f:44:ee:18:b4:59:f0:ff:38:55:8a:47: b2:49:40:51:20:b7:ab:bf:ff:24:12:46:11:8b:d9: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:41:1E:4B:C1:AD:BF:07:7E:7F:B7:44:D1:6A:2C:11:BC:08:06:9B X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/A7C0D96E0CDD11F0A8463D28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.127.0/24 Signature Algorithm: sha256WithRSAEncryption a9:b4:a5:88:8e:16:93:f0:f6:f6:74:e4:3a:3f:c6:54:70:a4: 7f:ae:22:62:37:31:da:94:da:d6:34:93:3c:5c:a9:99:10:af: 79:aa:04:c9:c4:40:6b:6f:8f:a0:e7:18:45:86:1c:be:7b:fe: dc:ed:e1:d9:3f:de:88:ca:88:72:06:cd:31:49:3a:e6:79:6d: fa:5c:33:ee:4a:42:8a:51:c7:d6:ac:b6:20:57:8f:67:68:39: 73:cd:80:b7:91:eb:47:dc:e7:6c:2f:ab:03:7f:30:0f:5f:a8: 0e:ae:b7:fa:09:88:2d:6e:76:b3:ae:b0:cb:88:64:07:62:32: 95:eb:5b:1f:89:b5:73:3d:b9:cc:e5:dd:4d:d5:5f:ba:28:e0: bb:c5:37:d8:8b:f7:51:3b:7b:a1:b8:45:e6:a5:21:ac:2f:13: a0:a1:7a:31:2c:33:85:7d:71:c2:7e:20:65:63:8f:62:e7:d6: ef:70:c7:a1:c1:22:b8:dc:8d:ab:b6:6f:97:3c:b6:69:aa:02: 87:f8:4e:8b:d5:d9:87:b4:18:26:d6:bb:3a:34:50:10:80:93: 0f:e9:d2:d5:31:07:8b:e7:86:3e:57:12:7b:14:47:18:e0:dc: b3:40:2a:2b:28:c8:c6:b8:50:cc:6d:f8:42:79:21:a0:b3:70: 95:5a:eb:9f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoRDYwQzMwQjFBOUY1OUM5NTlBRDQ5NjdGMkY2RDU3MkFD Qjc1Mjk5QzAeFw0yNTAzMjkyMDM3MzlaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTg1YTEzLTU0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDogRJhssrrLAmPKeCNI6Snyi69UPRocHyndzMVB9kFuL2emPnWz3RW3aQt8L+D N0l8rdGkKZdiij3j5gt6g30oT4msw4n5L7UwMDEUyEBOuLr9Q693hZf/FKLne6/l 46A5xFsBgmCD3bpUSillHxcKXMpC+W2TxkdrbGm9vmM5PZiaHS1a4h7nuPce5ZsM euRsex7QU/K79iG3I6iibeHMhBCzvVNcQzIIyA7tad2gXsD/S01U5UpgZTbOFM6u A+zYPsWvjozs02SwDHgSqe6TjQIgSthbkShFHd3aX8etapUxTp9E7hi0WfD/OFWK R7JJQFEgt6u//yQSRhGL2VrtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmUEeS8Gt vwd+f7dE0WosEbwIBpswHwYDVR0jBBgwFoAU1gwwsan1nJWa1JZ/L21XKst1KZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0UzRkNEMTQ0RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUta dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWd3d3NhbjFuSldhMUpaX0wyMVhLc3QxS1p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUVFQS9FM0ZDRDE0NEQ0Q0YxMUVGOThERjk4MkJDNEY5QUUwMi9BN0MwRDk2RTBD REQxMUYwQTg0NjNEMjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7fzANBgkqhkiG9w0BAQsFAAOCAQEAqbSliI4Wk/D29nTk Oj/GVHCkf64iYjcx2pTa1jSTPFypmRCveaoEycRAa2+PoOcYRYYcvnv+3O3h2T/e iMqIcgbNMUk65nlt+lwz7kpCilHH1qy2IFePZ2g5c82At5HrR9znbC+rA38wD1+o Dq63+gmILW52s66wy4hkB2IyletbH4m1cz25zOXdTdVfuijgu8U32Iv3UTt7obhF 5qUhrC8ToKF6MSwzhX1xwn4gZWOPYufW73DHocEiuNyNq7Zvlzy2aaoCh/hOi9XZ h7QYJta7OjRQEICTD+nS1TEHi+eGPlcSexRHGODcs0AqKyjIxrhQzG34QnkhoLNw lVrrnw== -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net