$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa File: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (raw, json) Hash identifier: 68iXhMXoCKzkvFm4ZJIC/ibhTxkbyNkKn12MmIsJUjc= Subject key identifier: F5:2B:B7:B1:C5:FA:52:F9:18:C5:B0:0C:7A:AB:89:86:58:D4:CF:A5 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1AB1 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa Signing time: Mon 24 Mar 2025 14:50:31 +0000 ROA not before: Mon 24 Mar 2025 14:50:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 12008 IP address blocks: 116.51.28.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6833 (0x1ab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Mar 24 14:50:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e17137-328a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:94:3e:6f:83:b3:89:ff:e0:67:0c:3e:ec:39: c8:04:18:a4:0a:e2:95:a0:8d:3e:37:fc:c8:4a:da: 70:7c:80:b4:26:67:14:0c:02:f0:60:7f:44:35:8d: c2:2d:32:b1:b0:54:1f:3c:10:55:fe:15:4a:2d:da: b5:24:4d:1d:00:16:7f:71:6b:59:96:f9:54:b6:89: 25:41:cd:f9:17:cb:c3:d0:92:70:b5:e0:57:19:cf: df:a4:fd:d1:85:d6:d2:10:21:4e:6e:41:45:e0:1f: 63:06:42:3c:b2:4a:23:e9:cf:4c:36:11:7a:64:12: 88:c6:7a:b7:85:8c:d8:dc:e1:2d:12:0c:f5:ce:7d: 2c:82:12:81:97:dc:eb:1c:7c:3b:9c:1a:43:45:26: 9f:6d:a0:f2:c0:18:3f:1d:05:9c:74:9d:c7:de:7e: 62:90:7c:8d:ba:4d:89:8b:71:94:f1:1f:26:fe:be: 9b:9a:38:52:0e:0e:43:65:43:54:0a:76:db:af:12: 14:52:76:a2:18:d2:14:3f:aa:85:67:c3:69:32:4f: 54:30:bc:f3:57:a0:8e:27:b4:37:d8:db:8b:44:27: 9b:9d:ec:52:87:d4:f5:28:f3:da:9d:15:a3:05:9c: f9:b6:92:df:0a:bb:ba:fb:79:d8:ea:9b:ec:67:08: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2B:B7:B1:C5:FA:52:F9:18:C5:B0:0C:7A:AB:89:86:58:D4:CF:A5 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.28.192/26 Signature Algorithm: sha256WithRSAEncryption 2f:88:e2:13:d7:91:cb:93:ff:69:33:34:46:52:4e:7a:81:a9: e1:ef:05:7b:fe:53:95:c0:74:e8:cb:cf:ce:3e:20:d2:86:ac: 54:13:17:b3:3c:ab:37:15:38:6f:72:a5:4c:04:8b:e4:ac:4e: 6f:5f:15:de:74:8e:cc:fe:33:82:87:3e:4d:f1:d0:0c:74:04: 60:fb:b2:35:b2:4b:ae:aa:7b:c5:55:0e:30:c1:34:f8:2b:d2: 39:81:3d:22:34:cb:22:7e:cb:b5:21:cf:1a:34:89:5a:e1:5a: bd:14:80:ec:55:03:af:2f:7f:ee:95:ac:83:a7:52:45:43:22: cd:d3:73:55:2d:83:46:1f:5d:e1:96:c8:43:6a:fa:19:1a:40: 73:11:35:69:bc:b8:81:7c:ee:43:43:95:5e:0d:ac:fb:ec:13: 3b:52:21:c0:a7:1a:13:55:ef:7e:db:70:81:ac:bb:44:f7:35: 7d:8d:fd:d2:d2:eb:af:13:fa:55:4e:af:1c:56:14:8e:23:19: da:27:ba:45:07:7b:b5:ed:df:24:8e:33:d9:25:f3:23:dc:69: 3d:65:ab:ba:ea:40:6b:24:90:b6:81:82:52:59:76:d3:64:1e: 26:be:da:78:b2:10:92:92:ec:41:2d:5a:24:10:92:c3:d0:9d: 6e:8f:85:09 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICGrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwMzI0MTQ1MDMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxNzEzNy0zMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJQ+b4Ozif/gZww+7DnIBBikCuKVoI0+N/zIStpwfIC0JmcUDALwYH9ENY3C LTKxsFQfPBBV/hVKLdq1JE0dABZ/cWtZlvlUtoklQc35F8vD0JJwteBXGc/fpP3R hdbSECFObkFF4B9jBkI8skoj6c9MNhF6ZBKIxnq3hYzY3OEtEgz1zn0sghKBl9zr HHw7nBpDRSafbaDywBg/HQWcdJ3H3n5ikHyNuk2Ji3GU8R8m/r6bmjhSDg5DZUNU CnbbrxIUUnaiGNIUP6qFZ8NpMk9UMLzzV6COJ7Q32NuLRCebnexSh9T1KPPanRWj BZz5tpLfCru6+3nY6pvsZwgwFQIDAQABo4ICljCCApIwHQYDVR0OBBYEFPUrt7HF +lL5GMWwDHqriYZY1M+lMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvMjBDNkYyRUM2 OTlEMTFFQUEzM0VBRTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgABMAcDBQZ0MxzAMA0GCSqGSIb3DQEBCwUAA4IBAQAviOIT15HLk/9p MzRGUk56ganh7wV7/lOVwHToy8/OPiDShqxUExezPKs3FThvcqVMBIvkrE5vXxXe dI7M/jOChz5N8dAMdARg+7I1skuuqnvFVQ4wwTT4K9I5gT0iNMsifsu1Ic8aNIla 4Vq9FIDsVQOvL3/ulayDp1JFQyLN03NVLYNGH13hlshDavoZGkBzETVpvLiBfO5D Q5VeDaz77BM7UiHApxoTVe9+23CBrLtE9zV9jf3S0uuvE/pVTq8cVhSOIxnaJ7pF B3u17d8kjjPZJfMj3Gk9Zau66kBrJJC2gYJSWXbTZB4mvtp4shCSkuxBLVokEJLD 0J1uj4UJ -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net