$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/AEF266ECD34811EDAD96D95DC4F9AE02.roa File: AEF266ECD34811EDAD96D95DC4F9AE02.roa (raw, json) Hash identifier: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14= Subject key identifier: 9A:19:F1:AE:B9:B7:79:6B:96:85:EF:A0:F9:87:A8:5A:F8:97:C3:AE Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 0181 Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/AEF266ECD34811EDAD96D95DC4F9AE02.roa Signing time: Mon 07 Apr 2025 03:08:44 +0000 ROA not before: Mon 07 Apr 2025 03:08:44 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150315 IP address blocks: 103.99.132.0/24 maxlen: 24 103.99.133.0/24 maxlen: 24 2001:df2:d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: Apr 7 03:08:44 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f341bc-291e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:5e:a0:fc:dc:18:2a:ea:cd:0b:8f:42:b3: dd:a2:e2:14:66:e7:7e:98:2f:fe:0a:8a:2a:53:80: 65:da:10:9e:be:e9:83:dd:fd:64:aa:7a:82:f8:66: 9a:3b:47:99:8d:49:57:c5:9a:fa:cd:b1:28:07:27: 99:f6:f2:09:a8:e1:f1:34:b9:ca:fb:e9:22:6d:50: 8b:eb:31:e3:9f:4b:c4:21:d4:9b:5d:8d:6e:fc:70: 84:f1:db:00:5b:de:a4:cd:c9:30:43:df:3e:40:63: 3e:db:dc:a2:4b:f3:d6:86:52:0a:f5:1e:e9:69:30: 71:1f:d2:17:bd:ce:5f:74:5d:f1:b0:25:28:5c:c3: df:e2:48:c1:ab:1d:39:70:51:ac:7f:9d:7c:ec:2e: b5:6b:f7:2e:17:94:50:ab:a6:a1:3b:39:bd:c6:0c: c7:76:79:55:60:67:6d:90:39:33:55:2a:30:0a:11: 62:f2:8d:31:03:31:47:aa:fc:f8:2c:fc:e0:8b:22: 4f:2f:0c:c4:bb:eb:06:f9:16:dc:8c:b6:6b:80:51: 11:62:e9:17:cb:4f:6c:5f:5b:f8:54:7c:65:12:2b: 1d:12:23:22:9a:70:5c:90:bf:ce:87:3a:59:20:2a: 95:76:71:61:56:4c:e3:b3:5a:7f:ac:52:7f:f1:64: ad:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:19:F1:AE:B9:B7:79:6B:96:85:EF:A0:F9:87:A8:5A:F8:97:C3:AE X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/AEF266ECD34811EDAD96D95DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.132.0/23 IPv6: 2001:df2:d40::/48 Signature Algorithm: sha256WithRSAEncryption 12:40:c4:53:b9:ee:2a:85:f9:4c:c6:19:2c:48:70:dd:2f:09: 70:6c:39:20:4b:84:06:82:7d:c8:4b:a2:c7:cb:c1:5a:59:a5: 0b:ec:d9:c9:fa:52:25:ac:32:4d:e8:46:c0:91:74:de:5a:b8: f5:b9:bb:d6:8f:1d:7a:66:1f:76:c9:0a:7f:01:b4:6f:09:be: e8:08:6c:a4:7a:d1:70:64:ca:a6:67:d5:23:ec:e2:b4:9c:ed: 39:82:91:fd:e7:39:85:37:fd:34:88:8b:27:f6:50:26:58:e9: e5:c5:be:80:c7:7b:39:e7:a5:72:9d:f6:e6:34:01:6d:41:bf: 8c:1f:cf:4c:fa:97:04:e6:9c:78:d6:d2:17:d4:3c:e1:ae:1d: e2:68:54:49:a1:3a:e0:4f:aa:71:80:9a:0b:a4:99:d3:ca:47: fc:f6:37:03:72:61:49:c3:01:94:02:fd:07:a9:c8:7a:4a:68: eb:d0:a2:c1:1b:ea:7b:b5:5b:54:9f:0f:8f:cd:e0:12:23:9a: 75:f5:ee:ef:63:4f:ab:f8:8a:c4:89:f7:70:a4:16:5f:61:9a: 7b:77:c0:d7:a5:70:21:85:39:98:55:2f:ab:f8:52:09:fa:b0: 48:2a:23:7e:df:50:6b:d3:1a:4b:42:b0:2e:6b:16:18:66:29: bc:13:3e:dd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUwNDA3MDMwODQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2YzNDFiYy0yOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8peoPzcGCrqzQuPQrPdouIUZud+mC/+CooqU4Bl2hCevumD3f1kqnqC+Gaa O0eZjUlXxZr6zbEoByeZ9vIJqOHxNLnK++kibVCL6zHjn0vEIdSbXY1u/HCE8dsA W96kzckwQ98+QGM+29yiS/PWhlIK9R7paTBxH9IXvc5fdF3xsCUoXMPf4kjBqx05 cFGsf5187C61a/cuF5RQq6ahOzm9xgzHdnlVYGdtkDkzVSowChFi8o0xAzFHqvz4 LPzgiyJPLwzEu+sG+RbcjLZrgFERYukXy09sX1v4VHxlEisdEiMimnBckL/OhzpZ ICqVdnFhVkzjs1p/rFJ/8WSt+QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJoZ8a65 t3lrloXvoPmHqFr4l8OuMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEQyQkYvMkE3MUU2QkNEMzQ0MTFFRDhFMkM1NDY0QzRGOUFFMDIvQUVGMjY2RUNE MzQ4MTFFREFEOTZEOTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnY4QwDwQCAAIwCQMHACABDfINQDANBgkqhkiG9w0BAQsF AAOCAQEAEkDEU7nuKoX5TMYZLEhw3S8JcGw5IEuEBoJ9yEuix8vBWlmlC+zZyfpS JawyTehGwJF03lq49bm71o8demYfdskKfwG0bwm+6AhspHrRcGTKpmfVI+zitJzt OYKR/ec5hTf9NIiLJ/ZQJljp5cW+gMd7Oeelcp325jQBbUG/jB/PTPqXBOaceNbS F9Q84a4d4mhUSaE64E+qcYCaC6SZ08pH/PY3A3JhScMBlAL9B6nIekpo69CiwRvq e7VbVJ8Pj83gEiOadfXu72NPq/iKxIn3cKQWX2Gae3fA16VwIYU5mFUvq/hSCfqw SCojft9Qa9MaS0KwLmsWGGYpvBM+3Q== -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:43 2025 by rpki-client on console.sobornost.net