$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa File: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (raw, json) Hash identifier: 2M0t54ZWVSyH7zW4xiy91/NSsBSKVlPooU2mIewxcFg= Subject key identifier: F4:F7:A1:98:D4:B0:58:5A:6B:4F:9B:6F:56:4E:9E:B5:F3:CE:A1:66 Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0245 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa Signing time: Thu 16 Jan 2025 07:53:56 +0000 ROA not before: Thu 16 Jan 2025 07:53:56 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140224 IP address blocks: 103.189.255.0/24 maxlen: 24 2407:2440:1a::/48 maxlen: 48 2407:2440:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Jan 16 07:53:56 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6788bb14-b7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:47:92:fe:5d:73:90:cf:42:fd:47:89:41: d1:a1:9a:07:8f:4e:67:ca:60:99:de:36:7b:de:5c: 42:39:43:d0:ab:b9:b3:0e:1d:85:27:60:45:36:2c: 12:a7:f5:d2:48:94:a1:6e:38:b4:77:59:7b:3c:99: 42:d8:a7:85:43:20:b0:0b:f8:82:e5:9e:a7:15:da: 81:f9:86:fb:1e:e7:28:1b:eb:ef:4a:07:7b:01:96: 8f:78:34:9d:35:74:7b:3a:64:a2:ce:0e:4b:f5:09: 02:d0:fb:49:3c:e2:d2:aa:b7:a9:37:e0:33:7b:3a: e3:42:d8:29:4e:22:35:d1:22:cd:00:8c:1b:68:40: d6:44:16:16:c3:85:2d:08:6e:64:35:7c:6f:e0:9a: a3:19:bb:1f:6e:b5:d2:84:04:b8:38:2d:00:bc:29: a0:d0:89:8c:6d:18:23:d6:1c:0d:82:0b:8f:ca:54: 5c:29:51:67:eb:de:c7:63:d5:b5:15:75:8e:d0:d9: 95:db:ce:50:52:22:5c:7d:02:64:7c:d7:5b:ad:0b: b2:b9:51:aa:e9:7b:b0:96:23:ca:0f:51:ca:52:f0: 64:0c:07:cf:e7:24:88:30:84:08:70:d0:50:6d:39: d9:55:9c:c5:5c:7a:21:e0:75:4b:d0:a4:f3:62:42: b3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F7:A1:98:D4:B0:58:5A:6B:4F:9B:6F:56:4E:9E:B5:F3:CE:A1:66 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.255.0/24 IPv6: 2407:2440:1a::/48 2407:2440:29::/48 Signature Algorithm: sha256WithRSAEncryption 7d:ef:f8:0e:86:de:71:68:0e:95:17:52:0f:b2:d6:cb:df:b7: 75:2c:56:8d:d3:19:a9:3b:20:f3:0b:13:3d:a9:6b:85:3d:7d: f0:2e:1c:15:36:8d:ed:6f:41:20:86:e0:22:5b:6d:cd:29:3f: dc:68:32:95:e3:a2:d1:6b:b3:fc:44:19:8e:84:4d:2b:fc:54: 53:8c:d2:ce:5e:09:8b:91:98:da:1e:24:4a:07:32:d5:c1:34: 0e:fd:04:73:ba:74:4a:73:1b:13:49:1c:58:84:dd:07:a4:1b: e5:66:ec:eb:b8:c3:d8:b6:44:95:7e:9e:db:50:f8:7a:a9:1e: d8:5e:f8:bb:0e:48:cd:3e:23:b6:84:ff:44:e6:67:b9:b9:67: ce:46:be:c6:1a:72:18:5c:9c:b7:05:f1:e1:cc:2b:69:8c:65: 64:ef:7e:4b:61:02:ad:32:bf:8b:58:72:9e:82:57:81:3f:bd: a3:00:28:0f:92:55:1f:f4:2a:90:72:f5:b2:b7:43:98:83:25: 09:95:51:f5:cd:6f:0b:78:7a:79:06:77:72:df:55:27:79:66: 6d:30:ac:e6:6c:cf:3b:cc:b6:66:25:b9:59:a0:8d:57:b7:7f: 49:28:7f:65:68:fe:0f:ad:b4:cd:ff:14:a9:ac:bb:50:18:f5: 28:eb:e6:59 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwMTE2MDc1MzU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg4YmIxNC1iN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMNHkv5dc5DPQv1HiUHRoZoHj05nymCZ3jZ73lxCOUPQq7mzDh2FJ2BFNiwS p/XSSJShbji0d1l7PJlC2KeFQyCwC/iC5Z6nFdqB+Yb7HucoG+vvSgd7AZaPeDSd NXR7OmSizg5L9QkC0PtJPOLSqrepN+AzezrjQtgpTiI10SLNAIwbaEDWRBYWw4Ut CG5kNXxv4JqjGbsfbrXShAS4OC0AvCmg0ImMbRgj1hwNgguPylRcKVFn697HY9W1 FXWO0NmV285QUiJcfQJkfNdbrQuyuVGq6XuwliPKD1HKUvBkDAfP5ySIMIQIcNBQ bTnZVZzFXHoh4HVL0KTzYkKz/wIDAQABo4ICrzCCAqswHQYDVR0OBBYEFPT3oZjU sFhaa0+bb1ZOnrXzzqFmMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvQTQ4RDZDRUVF RDYzMTFFREI2OUVCNjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBABnvf8wGAQCAAIwEgMHACQHJEAAGgMHACQHJEAAKTANBgkq hkiG9w0BAQsFAAOCAQEAfe/4DobecWgOlRdSD7LWy9+3dSxWjdMZqTsg8wsTPalr hT198C4cFTaN7W9BIIbgIlttzSk/3GgyleOi0Wuz/EQZjoRNK/xUU4zSzl4Ji5GY 2h4kSgcy1cE0Dv0Ec7p0SnMbE0kcWITdB6Qb5Wbs67jD2LZElX6e21D4eqke2F74 uw5IzT4jtoT/ROZnublnzka+xhpyGFyctwXx4cwraYxlZO9+S2ECrTK/i1hynoJX gT+9owAoD5JVH/QqkHL1srdDmIMlCZVR9c1vC3h6eQZ3ct9VJ3lmbTCs5mzPO8y2 ZiW5WaCNV7d/SSh/ZWj+D620zf8Uqay7UBj1KOvmWQ== -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:18 2025 by rpki-client on console.sobornost.net