$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa File: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (raw, json) Hash identifier: fVTj+Nhy/WhakS8dFaROX7k0zNO3tiUAb5xWLcSpOW0= Subject key identifier: 97:97:CB:26:DC:70:62:B0:00:CB:06:5E:63:F4:C4:2C:5C:81:9A:7C Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Certificate serial: 1BBF Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa Signing time: Thu 06 Mar 2025 16:34:19 +0000 ROA not before: Thu 06 Mar 2025 16:34:19 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 20546 IP address blocks: 45.112.84.0/24 maxlen: 24 45.112.85.0/24 maxlen: 24 45.112.86.0/24 maxlen: 24 45.112.87.0/24 maxlen: 24 103.51.164.0/24 maxlen: 24 103.51.165.0/24 maxlen: 24 103.51.166.0/24 maxlen: 24 103.51.167.0/24 maxlen: 24 2402:1880::/32 maxlen: 32 2402:1881::/32 maxlen: 32 2402:1882::/32 maxlen: 32 2402:1883::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7103 (0x1bbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Validity Not Before: Mar 6 16:34:19 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c9ce8b-35b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0f:84:fa:10:5b:ec:96:d2:66:0d:af:5a:6e: 21:c9:e4:58:8c:e8:16:fd:8a:53:cd:be:0d:92:a2: 02:ec:55:16:4d:a2:04:21:14:8c:d1:13:7c:05:e1: 02:65:eb:a9:42:85:df:86:57:cf:5b:c7:25:f3:61: 88:0c:40:84:a5:d9:8a:4a:40:e0:86:10:61:a9:cb: 37:50:92:40:b5:e1:38:fe:c2:28:63:4d:42:41:fa: 6c:7c:27:54:fc:4f:4f:2b:8c:93:1f:cc:85:17:20: 03:b1:9c:ca:f3:32:35:53:98:35:53:2d:4e:ff:f5: fc:33:16:bf:c7:7e:53:5a:eb:d7:45:67:b1:e5:4e: 8f:af:eb:ee:0c:78:fa:f1:ce:fa:c5:7e:c1:a9:90: 8e:ed:13:65:f9:94:48:56:a8:17:e8:33:90:b6:e7: e4:87:64:f8:38:61:ff:1a:7b:ff:04:6d:50:6a:88: f7:56:e4:1e:5c:1c:43:de:e1:90:2a:73:1e:3f:b4: f7:c9:b8:eb:0a:16:10:47:b2:86:26:53:5f:07:65: 7e:9d:20:43:c3:c2:6b:e1:fd:ed:2c:1d:d4:c1:2f: 9a:3b:79:0c:e4:79:10:d7:41:6c:ea:6a:5c:bf:1f: 76:01:b3:1a:b1:8c:12:90:60:d7:90:b9:27:25:df: 83:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:97:CB:26:DC:70:62:B0:00:CB:06:5E:63:F4:C4:2C:5C:81:9A:7C X509v3 Authority Key Identifier: keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.84.0/22 103.51.164.0/22 IPv6: 2402:1880::/30 Signature Algorithm: sha256WithRSAEncryption 7a:d6:c4:c6:b0:92:26:c1:7f:99:f4:2d:29:f0:6e:01:70:67: 52:50:0f:ec:db:5a:c7:eb:35:20:80:68:df:34:99:53:23:9a: 2a:21:dc:38:00:c1:6d:15:92:b2:c3:f3:3c:a0:a7:34:75:cb: 3a:b2:bb:a6:6a:05:ab:e9:3d:e4:13:06:f6:1d:ba:a6:99:1e: 40:05:95:e1:4b:15:9c:5d:a9:c9:86:87:7f:a2:94:01:d6:b7: 97:d0:6e:c4:d7:ba:cf:d9:9d:57:b2:72:c4:d1:ad:0f:5c:b8: eb:0b:7f:61:2b:93:6c:8b:2e:75:39:f2:bf:e7:a7:6b:b8:c2: 54:77:08:46:c3:72:ec:72:cd:fd:70:36:ec:39:be:b6:26:fb: ce:43:c9:29:14:98:c0:a6:9b:9b:4a:20:0b:39:44:d1:9f:b9: a3:d9:91:d4:10:14:94:c0:6c:42:d8:1f:88:91:62:cc:fb:15: c3:ac:67:a7:9f:49:5e:70:48:af:02:37:58:cb:f8:a2:d3:77: 84:2b:c1:dd:42:d9:7f:46:0f:d6:a3:c9:b5:6b:ff:a2:98:ea: 48:cb:db:b6:35:e6:1b:c5:76:fb:41:bd:44:c2:2a:55:38:e7: d6:ea:ee:1b:70:30:c9:8f:eb:20:f9:d3:57:2e:b7:c0:2b:47: b7:1c:60:d8 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICG78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1 QUEwRTk0NjcwHhcNMjUwMzA2MTYzNDE5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M5Y2U4Yi0zNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A+E+hBb7JbSZg2vWm4hyeRYjOgW/YpTzb4NkqIC7FUWTaIEIRSM0RN8BeEC ZeupQoXfhlfPW8cl82GIDECEpdmKSkDghhBhqcs3UJJAteE4/sIoY01CQfpsfCdU /E9PK4yTH8yFFyADsZzK8zI1U5g1Uy1O//X8Mxa/x35TWuvXRWex5U6Pr+vuDHj6 8c76xX7BqZCO7RNl+ZRIVqgX6DOQtufkh2T4OGH/Gnv/BG1Qaoj3VuQeXBxD3uGQ KnMeP7T3ybjrChYQR7KGJlNfB2V+nSBDw8Jr4f3tLB3UwS+aO3kM5HkQ10Fs6mpc vx92AbMasYwSkGDXkLknJd+DgQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJeXyybc cGKwAMsGXmP0xCxcgZp8MB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1 QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFGMjAvNjVBOUEyNDJGNUM0MTFFNjhBQUEwMDg1QzRGOUFFMDIvRDU5RUE2RjRG NUM2MTFFNkE0RkZFRjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItcFQDBAJnM6QwDQQCAAIwBwMFAiQCGIAwDQYJKoZIhvcN AQELBQADggEBAHrWxMawkibBf5n0LSnwbgFwZ1JQD+zbWsfrNSCAaN80mVMjmioh 3DgAwW0VkrLD8zygpzR1yzqyu6ZqBavpPeQTBvYduqaZHkAFleFLFZxdqcmGh3+i lAHWt5fQbsTXus/ZnVeycsTRrQ9cuOsLf2Erk2yLLnU58r/np2u4wlR3CEbDcuxy zf1wNuw5vrYm+85DySkUmMCmm5tKIAs5RNGfuaPZkdQQFJTAbELYH4iRYsz7FcOs Z6efSV5wSK8CN1jL+KLTd4Qrwd1C2X9GD9ajybVr/6KY6kjL27Y15hvFdvtBvUTC KlU459bq7htwMMmP6yD501cut8ArR7ccYNg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:17 2025 by rpki-client on console.sobornost.net