$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DC5ECE1816EE11F097A64F85C4F9AE02.roa File: DC5ECE1816EE11F097A64F85C4F9AE02.roa (raw, json) Hash identifier: 3I5NuV8UPYvfsF04ShxS5VeyRR5Sv1yc4MFcSv253Dw= Subject key identifier: F4:FD:05:AF:39:EC:C9:D0:27:83:99:6A:01:A6:DA:68:84:01:74:25 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 07A8 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DC5ECE1816EE11F097A64F85C4F9AE02.roa Signing time: Fri 11 Apr 2025 16:21:44 +0000 ROA not before: Fri 11 Apr 2025 16:21:44 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 9304 IP address blocks: 43.252.209.0/24 maxlen: 24 103.234.54.0/24 maxlen: 24 150.107.1.0/24 maxlen: 24 150.107.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 23:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Apr 11 16:21:44 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67f94198-0236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:74:d0:3f:93:ec:1c:a7:c9:3a:37:ce:f0: 59:42:82:54:86:8a:8c:83:6b:ce:fa:29:aa:ca:1d: 5b:61:d3:7d:43:81:c8:f1:c4:90:ed:d1:ce:49:21: 62:f2:54:28:49:cb:12:a9:20:5d:7b:9d:dd:7b:fd: bb:da:28:cb:10:13:f2:12:6b:27:d0:32:36:8e:c5: 33:0c:4f:9e:5a:c8:59:3e:2e:de:b1:40:e0:92:8c: df:47:d1:08:70:78:b5:a1:47:a3:de:0a:7c:44:3c: 47:f4:69:f7:ff:6a:e3:1b:97:54:b0:cd:6e:18:a0: 2c:70:3e:e3:33:be:4e:02:9a:4f:ee:85:3e:4e:9c: 23:62:4b:ab:6b:4c:fc:d1:07:97:f0:95:81:1f:35: 92:5d:c0:c2:7b:41:e9:dd:b8:10:2f:ad:b4:ec:75: fc:26:ee:30:0c:88:f4:3e:6e:b9:eb:a2:c6:2b:cf: 6b:57:34:56:19:bd:d4:e9:51:07:13:c7:8e:1b:5a: 74:3b:fa:02:53:df:35:a6:9a:17:85:d4:34:49:4f: 8a:2b:d9:bf:c7:f3:46:53:ee:20:3f:a2:ad:0b:ae: 95:61:27:54:a1:50:a9:11:43:a1:ce:ae:f3:ba:a0: 81:f1:ca:f5:cb:c4:23:c3:a3:ec:3e:91:a0:de:f2: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FD:05:AF:39:EC:C9:D0:27:83:99:6A:01:A6:DA:68:84:01:74:25 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DC5ECE1816EE11F097A64F85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.209.0/24 103.234.54.0/24 150.107.1.0-150.107.2.255 Signature Algorithm: sha256WithRSAEncryption 87:bc:64:3e:f6:ba:91:b7:ce:fd:a2:ba:63:d9:2d:78:0a:d7: 2c:07:c3:fb:ce:c2:f8:94:bf:46:02:51:cd:84:f1:c4:32:d6: a1:b7:60:22:85:f3:b5:51:51:99:eb:1b:83:56:a8:c8:f5:f6: 0a:22:30:26:b3:e8:47:89:33:e8:1a:4f:4e:5b:3f:c7:36:5e: b8:48:cd:0a:7a:70:18:a6:59:21:da:2f:89:a7:5c:8a:2d:04: 0b:87:65:3c:ae:f2:46:13:7b:de:d4:74:86:49:ad:4e:b3:9d: 7a:2f:0c:e5:ef:25:ca:6a:2d:14:df:36:c9:76:b1:a3:27:0b: dd:98:03:88:76:84:2c:8d:66:f9:d1:fa:ee:1b:17:fe:ce:99: 03:ec:39:5a:44:73:95:67:f6:57:99:4d:ee:ab:c8:11:4b:df: a5:8a:96:0f:ca:14:52:c1:af:3c:63:4e:6f:a7:40:8d:8f:df: 66:54:4c:36:24:52:ae:44:19:2a:92:b7:e2:8f:ff:7f:2a:63: f2:b9:03:25:44:f8:5e:36:8d:83:03:18:87:46:fe:32:e9:97: 66:ff:29:3e:7b:ae:59:31:ae:6e:03:6e:63:64:4a:12:0d:21: 83:7f:ee:07:86:c3:f3:91:a4:9b:be:35:9d:98:28:19:23:9f: 69:bd:21:76 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNDExMTYyMTQ0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y5NDE5OC0wMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufx00D+T7BynyTo3zvBZQoJUhoqMg2vO+imqyh1bYdN9Q4HI8cSQ7dHOSSFi 8lQoScsSqSBde53de/272ijLEBPyEmsn0DI2jsUzDE+eWshZPi7esUDgkozfR9EI cHi1oUej3gp8RDxH9Gn3/2rjG5dUsM1uGKAscD7jM75OAppP7oU+TpwjYkura0z8 0QeX8JWBHzWSXcDCe0Hp3bgQL6207HX8Ju4wDIj0Pm6566LGK89rVzRWGb3U6VEH E8eOG1p0O/oCU981ppoXhdQ0SU+KK9m/x/NGU+4gP6KtC66VYSdUoVCpEUOhzq7z uqCB8cr1y8Qjw6PsPpGg3vKPMQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFPT9Ba85 7MnQJ4OZagGm2miEAXQlMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvREM1RUNFMTgx NkVFMTFGMDk3QTY0Rjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAAr/NEDBABn6jYwDAMEAJZrAQMEAJZrAjANBgkqhkiG9w0B AQsFAAOCAQEAh7xkPva6kbfO/aK6Y9kteArXLAfD+87C+JS/RgJRzYTxxDLWobdg IoXztVFRmesbg1aoyPX2CiIwJrPoR4kz6BpPTls/xzZeuEjNCnpwGKZZIdoviadc ii0EC4dlPK7yRhN73tR0hkmtTrOdei8M5e8lymotFN82yXaxoycL3ZgDiHaELI1m +dH67hsX/s6ZA+w5WkRzlWf2V5lN7qvIEUvfpYqWD8oUUsGvPGNOb6dAjY/fZlRM NiRSrkQZKpK34o//fypj8rkDJUT4XjaNgwMYh0b+MumXZv8pPnuuWTGubgNuY2RK Eg0hg3/uB4bD85Gkm741nZgoGSOfab0hdg== -----END CERTIFICATE-----Generated at Wed Apr 23 04:14:34 2025 by rpki-client on console.sobornost.net