$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/EE9F1FB41AAA11F099EC1E37C4F9AE02.roa File: EE9F1FB41AAA11F099EC1E37C4F9AE02.roa (raw, json) Hash identifier: hGo7k+Phtc9cVtpZA39rUYN5eI9x8m7ZK0WTy1C1Fz8= Subject key identifier: C6:F2:45:86:F8:44:16:9C:E2:51:EB:27:FB:D4:20:4D:40:40:03:7F Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 1030 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/EE9F1FB41AAA11F099EC1E37C4F9AE02.roa Signing time: Wed 16 Apr 2025 10:09:50 +0000 ROA not before: Wed 16 Apr 2025 10:09:50 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 397373 IP address blocks: 139.190.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4144 (0x1030) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Apr 16 10:09:50 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67ff81ee-45a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:3f:3f:e8:41:99:b6:21:94:e1:da:9d:c3: 9f:61:ec:f8:2c:88:0d:89:dd:23:88:3e:0e:65:8a: 13:e5:c4:a4:a6:3b:35:88:af:9e:55:21:b7:e5:4b: b8:86:85:50:b2:ae:96:b6:fd:2d:50:64:6d:41:6e: 96:18:5e:be:ad:95:ae:47:e6:41:c5:d5:22:86:79: 7e:ec:d3:e9:fb:d2:04:8e:79:a7:32:c6:b4:d5:b4: b6:c9:d2:1e:7e:74:59:ad:e1:5b:76:12:15:75:12: 5b:6d:e2:cb:73:4f:ef:23:0f:b8:10:59:f5:b9:8b: 9a:0c:09:6b:1e:39:c0:f8:fc:81:93:f4:ef:03:4b: 0c:e0:fd:91:a2:ea:51:7b:b1:5a:7f:12:2f:29:9d: 40:6a:59:79:03:f1:5f:70:9f:b2:f2:69:c8:3a:37: d8:1e:e1:22:43:24:2b:00:cb:b3:94:aa:5f:67:c6: 69:55:e5:85:6d:0e:c2:c8:a8:14:58:cd:1e:73:2f: e9:6d:03:f4:a6:ec:95:2b:b5:36:7c:9a:70:4d:0c: fe:e7:47:fd:e7:ac:8b:5c:e9:55:be:50:b7:56:79: 2a:ec:bc:4f:f3:b1:cd:de:46:2a:8d:e4:8c:bd:0c: 54:f5:dc:98:e5:8c:77:4d:dd:a8:c5:9b:58:3f:e1: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F2:45:86:F8:44:16:9C:E2:51:EB:27:FB:D4:20:4D:40:40:03:7F X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/EE9F1FB41AAA11F099EC1E37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.235.0/24 Signature Algorithm: sha256WithRSAEncryption 22:84:ea:b9:f4:aa:48:6f:4f:b6:b0:2d:79:c0:85:8f:45:96: a2:a2:6f:f9:e0:70:be:b0:08:f2:e1:62:b0:cb:e4:2e:96:33: df:3b:39:79:55:9f:be:0f:4a:61:f9:7a:0e:3d:1f:60:01:a8: ca:96:5f:ef:29:b6:75:7d:b1:a1:94:a2:eb:b3:e0:e8:17:ca: 2f:95:36:de:95:cf:d3:f0:c7:53:5f:58:cd:e5:58:9e:92:f3: 76:1d:a6:e0:ea:41:a9:8d:c8:59:15:b1:3d:36:3a:9e:7c:22: 69:0f:7a:5c:c8:e5:f0:45:57:01:c2:8a:1c:40:87:1c:1b:6b: 03:82:97:8b:a7:c0:96:be:e7:b8:a2:92:19:be:32:1b:3b:cf: 1b:79:9e:3f:0b:5a:76:6d:b6:18:84:cb:a4:96:bf:85:5f:65: eb:a0:fa:44:45:4b:64:f0:5f:f8:c0:48:91:ab:51:cc:7f:45: 1a:c3:e8:9c:a2:15:58:15:d6:f8:ca:e0:2b:95:83:0e:5d:32: 12:99:c7:10:87:f0:29:ce:3e:c5:f1:7b:7a:87:d8:71:aa:0a: 83:00:82:5e:1c:2d:1f:ad:c0:28:50:83:34:3c:fe:c7:45:f9: b9:79:39:89:ad:fb:1d:5a:5f:34:5f:b9:62:6e:75:39:9e:d0: de:48:a0:7c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwNDE2MTAwOTUwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZmODFlZS00NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OY/P+hBmbYhlOHancOfYez4LIgNid0jiD4OZYoT5cSkpjs1iK+eVSG35Uu4 hoVQsq6Wtv0tUGRtQW6WGF6+rZWuR+ZBxdUihnl+7NPp+9IEjnmnMsa01bS2ydIe fnRZreFbdhIVdRJbbeLLc0/vIw+4EFn1uYuaDAlrHjnA+PyBk/TvA0sM4P2RoupR e7FafxIvKZ1Aall5A/FfcJ+y8mnIOjfYHuEiQyQrAMuzlKpfZ8ZpVeWFbQ7CyKgU WM0ecy/pbQP0puyVK7U2fJpwTQz+50f956yLXOlVvlC3Vnkq7LxP87HN3kYqjeSM vQxU9dyY5Yx3Td2oxZtYP+EwoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMbyRYb4 RBac4lHrJ/vUIE1AQAN/MB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRUU5RjFGQjQx QUFBMTFGMDk5RUMxRTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACLvuswDQYJKoZIhvcNAQELBQADggEBACKE6rn0qkhvT7aw LXnAhY9FlqKib/ngcL6wCPLhYrDL5C6WM987OXlVn74PSmH5eg49H2ABqMqWX+8p tnV9saGUouuz4OgXyi+VNt6Vz9Pwx1NfWM3lWJ6S83YdpuDqQamNyFkVsT02Op58 ImkPelzI5fBFVwHCihxAhxwbawOCl4unwJa+57iikhm+Mhs7zxt5nj8LWnZtthiE y6SWv4VfZeug+kRFS2TwX/jASJGrUcx/RRrD6JyiFVgV1vjK4CuVgw5dMhKZxxCH 8CnOPsXxe3qH2HGqCoMAgl4cLR+twChQgzQ8/sdF+bl5OYmt+x1aXzRfuWJudTme 0N5IoHw= -----END CERTIFICATE-----Generated at Fri Apr 25 13:01:17 2025 by rpki-client on console.sobornost.net