$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa File: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (raw, json) Hash identifier: 6PYoBk6/FVHAdrrxpSIqCkv9HzmickfL2Dbl1yj4CUE= Subject key identifier: 82:F5:EB:B8:BE:E7:EC:61:69:3A:2B:8A:C8:CD:30:A1:94:63:25:9F Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 06C3 Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa Signing time: Wed 02 Apr 2025 03:36:10 +0000 ROA not before: Wed 02 Apr 2025 03:36:10 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 32787 IP address blocks: 162.128.3.0/24 maxlen: 24 162.128.42.0/24 maxlen: 24 162.128.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1731 (0x6c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Validity Not Before: Apr 2 03:36:10 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67ecb0a9-472a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:56:2b:c8:d5:58:de:aa:5c:cd:ab:c2:c3: 6a:1d:89:3f:de:89:1c:ab:f4:29:07:26:cc:a1:86: d4:7e:13:58:8d:c2:b5:09:5e:64:fc:27:df:9a:a0: e2:44:0b:f4:f4:e2:9d:61:3c:e6:1d:b7:50:55:68: 9e:2a:a6:44:07:83:d6:d9:ed:d2:40:25:4c:9a:35: 0c:e8:56:78:09:a4:77:6e:4a:74:9c:43:ec:d7:ea: 97:e0:f0:7d:80:b0:a5:37:0c:20:8f:8c:e8:9a:7b: e7:09:05:a7:d3:b2:1b:51:28:94:cf:0a:7d:84:08: e6:87:a2:ab:b5:3d:60:eb:b3:fa:c7:31:15:37:be: 64:0c:b4:1a:e0:ac:5d:0c:ad:67:7c:83:bd:58:cd: 01:00:4e:5b:7b:4a:0c:39:3a:d3:e0:7c:70:0b:54: e3:bb:f7:e2:43:73:db:36:52:84:dd:19:d7:36:b0: 0e:bf:68:b9:56:66:9e:c3:a1:51:b2:d0:74:47:f9: 54:3c:c4:fc:f4:6d:ff:18:20:49:fc:03:87:2c:37: 7d:11:07:b4:26:09:b9:d4:1a:bc:03:6b:9b:b3:50: 13:37:e8:33:64:1e:0c:ac:38:1f:31:88:85:e7:55: dc:5f:82:e0:df:3e:f9:3e:98:bd:1d:e3:32:8a:95: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F5:EB:B8:BE:E7:EC:61:69:3A:2B:8A:C8:CD:30:A1:94:63:25:9F X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 162.128.3.0/24 162.128.42.0/24 162.128.156.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:42:1a:0d:33:34:5d:cd:82:35:79:93:5a:40:e3:4e:c5:87: b5:6b:21:1c:dd:d9:5a:95:56:15:ef:dd:fa:1e:3b:95:a2:0f: 89:19:fe:67:cf:53:9e:b7:c1:61:41:3b:75:4a:dc:9b:8c:cb: 26:fc:26:5f:2a:24:6f:55:ae:91:55:1a:4f:a3:2d:90:8a:f0: a5:4f:ff:be:df:71:8a:d4:fa:3c:f5:4a:af:0f:1d:42:d6:ae: a4:70:bf:39:29:8b:3b:45:6f:17:bc:da:91:d1:32:0b:6a:f9: e5:c1:95:24:4b:75:90:06:a8:54:d0:22:62:f9:08:88:47:aa: 12:82:8f:81:59:94:55:cd:be:a1:c0:f0:3c:9d:b3:e3:b7:65: 15:a4:6e:6f:91:a2:3f:14:6c:8f:66:f1:e0:d6:99:2a:4d:54: b8:4c:00:e6:27:1a:f4:b4:33:ea:c9:72:fe:c0:11:ef:d8:57: 78:4a:57:4b:ac:3c:cf:63:ac:c2:f7:e6:21:8e:20:c2:b6:92: c0:8c:36:f2:d3:46:d3:87:63:7d:50:32:0a:83:e8:95:3a:22: bc:41:c2:2f:2d:71:b3:0f:70:f8:53:d6:ca:56:df:2f:ba:32: 0d:b6:61:0e:d2:8d:0f:3b:1d:f5:10:2f:a4:46:9d:11:ad:40: 36:dc:69:d0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjUwNDAyMDMzNjEwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VjYjBhOS00NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9NWK8jVWN6qXM2rwsNqHYk/3okcq/QpBybMoYbUfhNYjcK1CV5k/CffmqDi RAv09OKdYTzmHbdQVWieKqZEB4PW2e3SQCVMmjUM6FZ4CaR3bkp0nEPs1+qX4PB9 gLClNwwgj4zomnvnCQWn07IbUSiUzwp9hAjmh6KrtT1g67P6xzEVN75kDLQa4Kxd DK1nfIO9WM0BAE5be0oMOTrT4HxwC1Tju/fiQ3PbNlKE3RnXNrAOv2i5Vmaew6FR stB0R/lUPMT89G3/GCBJ/AOHLDd9EQe0Jgm51Bq8A2ubs1ATN+gzZB4MrDgfMYiF 51XcX4Lg3z75Ppi9HeMyipVQ6wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIL167i+ 5+xhaTorisjNMKGUYyWfMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvMThENkQ2QUFC ODRGMTFFRkE1QkIzRTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBACigAMDBACigCoDBACigJwwDQYJKoZIhvcNAQELBQADggEB AC9CGg0zNF3NgjV5k1pA407Fh7VrIRzd2VqVVhXv3foeO5WiD4kZ/mfPU563wWFB O3VK3JuMyyb8Jl8qJG9VrpFVGk+jLZCK8KVP/77fcYrU+jz1Sq8PHULWrqRwvzkp iztFbxe82pHRMgtq+eXBlSRLdZAGqFTQImL5CIhHqhKCj4FZlFXNvqHA8Dyds+O3 ZRWkbm+Roj8UbI9m8eDWmSpNVLhMAOYnGvS0M+rJcv7AEe/YV3hKV0usPM9jrML3 5iGOIMK2ksCMNvLTRtOHY31QMgqD6JU6IrxBwi8tcbMPcPhT1spW3y+6Mg22YQ7S jQ87HfUQL6RGnRGtQDbcadA= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net