$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa File: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (raw, json) Hash identifier: 7DU3GXxB2biRDfFfxqVKJQEvwzXZf1dP2MF5wRULxe8= Subject key identifier: E0:19:77:9C:9F:25:15:36:C2:39:E6:C1:EF:EC:CF:19:75:F8:74:94 Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 03A7 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa Signing time: Tue 22 Apr 2025 09:18:00 +0000 ROA not before: Tue 22 Apr 2025 09:18:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2400:16e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Apr 22 09:18:00 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68075ec8-45bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:d3:45:6a:6d:23:20:b5:43:93:dc:4f:5d: a0:73:7f:4a:bb:dc:5c:08:7d:85:6b:0d:a8:a8:5b: 2e:f9:30:64:8b:36:98:b7:64:19:1a:73:d9:a3:02: 5c:83:2a:b7:c3:60:7f:8d:59:1f:6a:3b:75:6d:36: be:e5:05:6d:bb:f4:45:df:a2:83:77:28:30:0e:5e: ed:6e:70:cd:d0:d4:62:a2:3e:d8:a0:d3:0e:b5:c9: 03:ac:d5:70:3f:4b:c9:04:fa:80:13:c3:bf:a5:aa: fb:ae:10:6f:94:4c:4d:98:af:25:42:f1:f9:d4:65: 25:fa:f4:25:fe:b1:c7:a5:6b:7d:74:86:79:84:ee: 88:73:c4:df:47:c3:cc:d2:b9:2d:c0:7c:a0:70:96: 3e:9e:04:13:99:9e:1b:f0:ac:db:97:d7:8d:4b:b5: 1a:41:47:12:f9:fd:6d:84:11:34:38:92:93:c1:ca: 05:0b:bb:9b:1b:9d:7f:1c:68:2e:2a:87:06:0c:73: ad:0c:40:41:be:4d:00:8b:de:f2:5b:d8:8f:90:05: 77:f7:b0:16:d4:cf:65:76:74:9a:e1:06:46:27:37: 74:e4:97:50:c8:00:6d:3b:6c:2d:07:dc:8e:13:8c: 77:02:fb:29:d2:2b:6c:8b:42:ab:ff:46:0c:f9:23: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:19:77:9C:9F:25:15:36:C2:39:E6:C1:EF:EC:CF:19:75:F8:74:94 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:16e0::/48 Signature Algorithm: sha256WithRSAEncryption 71:a9:a3:95:6a:4f:15:a9:9b:52:cc:2d:f6:c2:01:4c:de:03: 70:eb:d7:5b:32:24:b5:f1:66:ae:4e:d5:92:e8:f1:57:d4:dc: 06:2b:f5:11:a2:27:23:d0:23:40:15:c6:5f:fb:ef:81:18:67: ca:b5:2d:ef:06:04:2f:96:9f:f7:49:b2:72:fd:c0:39:a3:29: ac:5c:b4:75:04:27:f9:72:64:62:d0:86:0a:a6:66:5a:ab:ed: 1a:76:7a:e8:00:9d:f4:d4:bc:55:f4:7a:0b:8f:1d:59:dc:77: 3e:7f:52:7e:10:f1:f6:1f:42:a9:ac:11:f6:4d:dc:d2:ff:4d: 8c:de:be:23:e1:d4:23:33:87:9c:82:2f:8b:39:40:a8:46:b5: 55:53:54:19:07:bd:d1:42:81:7f:7d:74:e3:3e:77:4f:ec:dd: 83:d4:3e:ae:ae:8b:73:ea:97:15:e5:93:ed:f3:46:f3:a8:54: 43:f5:5c:e8:f6:d4:54:50:a3:b5:15:a1:13:73:12:7d:96:c0: 3a:6f:de:84:94:2c:d7:19:fb:8b:cd:14:3c:95:c9:5a:43:08: 70:21:fe:31:aa:82:8c:6e:9f:6d:3a:1d:43:fc:81:0c:8b:92: c4:76:ad:75:70:b6:64:64:a3:72:e6:dd:b2:f0:0d:b0:af:03: f3:f2:2f:80 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUwNDIyMDkxODAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3NWVjOC00NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudDTRWptIyC1Q5PcT12gc39Ku9xcCH2Faw2oqFsu+TBkizaYt2QZGnPZowJc gyq3w2B/jVkfajt1bTa+5QVtu/RF36KDdygwDl7tbnDN0NRioj7YoNMOtckDrNVw P0vJBPqAE8O/par7rhBvlExNmK8lQvH51GUl+vQl/rHHpWt9dIZ5hO6Ic8TfR8PM 0rktwHygcJY+ngQTmZ4b8Kzbl9eNS7UaQUcS+f1thBE0OJKTwcoFC7ubG51/HGgu KocGDHOtDEBBvk0Ai97yW9iPkAV397AW1M9ldnSa4QZGJzd05JdQyABtO2wtB9yO E4x3Avsp0itsi0Kr/0YM+SP13wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOAZd5yf JRU2wjnmwe/szxl1+HSUMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4QzkvNDBFMEMwRUU5MzZDMTFFQ0JEQzExQTIwQzRGOUFFMDIvQUY2QkI2QzIx RjVBMTFGMEJBN0U2OTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkABbgAAAwDQYJKoZIhvcNAQELBQADggEBAHGpo5VqTxWp m1LMLfbCAUzeA3Dr11syJLXxZq5O1ZLo8VfU3AYr9RGiJyPQI0AVxl/774EYZ8q1 Le8GBC+Wn/dJsnL9wDmjKaxctHUEJ/lyZGLQhgqmZlqr7Rp2eugAnfTUvFX0eguP HVncdz5/Un4Q8fYfQqmsEfZN3NL/TYzeviPh1CMzh5yCL4s5QKhGtVVTVBkHvdFC gX99dOM+d0/s3YPUPq6ui3PqlxXlk+3zRvOoVEP1XOj21FRQo7UVoRNzEn2WwDpv 3oSULNcZ+4vNFDyVyVpDCHAh/jGqgoxun206HUP8gQyLksR2rXVwtmRko3Lm3bLw DbCvA/PyL4A= -----END CERTIFICATE-----Generated at Wed Apr 23 04:15:38 2025 by rpki-client on console.sobornost.net