$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa File: 3408D944DC0311EC879DE280C4F9AE02.roa (raw, json) Hash identifier: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o= Subject key identifier: FC:A3:34:F3:E3:D6:7D:25:F7:5E:A6:86:18:2F:AF:D5:F0:D8:4C:07 Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2DC1 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa Signing time: Wed 22 Jan 2025 15:52:01 +0000 ROA not before: Wed 22 Jan 2025 15:52:00 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135097 IP address blocks: 103.255.44.0/22 maxlen: 22 103.255.44.0/24 maxlen: 24 103.255.45.0/24 maxlen: 24 103.255.46.0/24 maxlen: 24 103.255.47.0/24 maxlen: 24 202.61.84.0/22 maxlen: 22 202.61.84.0/24 maxlen: 24 202.61.85.0/24 maxlen: 24 202.61.86.0/24 maxlen: 24 202.61.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11713 (0x2dc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Jan 22 15:52:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67911420-cd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:72:e7:a5:17:f3:e2:ce:e0:e0:7b:e7:5d: a2:25:04:e4:58:76:0e:c3:86:84:23:00:1a:80:dc: ec:e6:a1:41:d3:5e:f9:7f:67:66:c3:61:fb:f0:44: e5:86:e0:c8:c5:b5:50:f8:26:51:c5:70:10:b2:2b: fa:91:28:92:c1:8c:cf:32:50:36:ee:ab:e1:65:40: 39:cf:9d:f8:be:8f:da:96:86:c5:e0:36:78:5f:5c: 9a:c4:c4:ce:96:82:fd:cf:39:62:52:70:8d:92:7c: d5:59:c8:f3:47:89:85:9d:16:44:00:52:e8:1c:41: 01:40:d6:e4:76:92:ff:d8:aa:96:3d:ef:26:85:d5: ba:ea:46:4b:e7:fd:9a:08:25:1f:9d:18:3d:46:2c: 2c:f5:d2:7a:71:80:f4:f5:65:7c:d1:90:50:bd:06: c0:d6:11:de:39:80:82:16:44:a2:78:63:59:43:67: 61:6f:e5:06:73:83:1c:b6:f8:d7:2a:55:7f:a4:0a: 17:68:68:63:88:7c:18:91:95:c5:e3:8c:74:45:b4: 25:8e:26:8f:59:fd:18:34:af:b3:99:13:c5:f7:60: 92:f8:22:ab:7d:d3:91:bd:af:90:6c:87:18:78:a2: 93:9e:60:15:96:06:5b:87:c2:de:d4:6b:79:71:0c: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A3:34:F3:E3:D6:7D:25:F7:5E:A6:86:18:2F:AF:D5:F0:D8:4C:07 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.255.44.0/22 202.61.84.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:0e:cb:9a:df:7b:17:1c:78:44:ec:b0:96:55:16:8c:19:c9: e9:ef:d3:a7:89:76:18:88:89:9d:f5:e1:ee:bd:2e:16:8d:7f: 64:a6:1d:35:aa:a2:8e:ed:e8:04:c9:8b:aa:bc:d7:03:00:d3: 20:cd:05:71:78:22:12:b8:30:7d:cd:dc:4d:fb:38:23:24:dc: f8:a7:71:dd:6c:ac:a2:ec:f0:51:6a:42:ad:e3:02:07:78:61: 87:b7:2d:5d:1c:5f:b1:c8:cf:81:d6:6f:6e:10:4f:0a:d8:75: e5:b5:fa:fa:b4:c1:eb:bf:02:0d:bb:b9:c5:68:de:df:3a:2a: 67:e4:a1:c7:37:5f:57:4d:4d:54:26:91:18:d3:5d:9d:b3:38: f1:85:8f:e3:40:15:19:85:1d:04:3d:93:ec:a6:e9:b4:bc:d3: 9a:09:70:98:99:ce:d4:e0:fb:49:1f:ea:13:b9:12:91:e6:3e: 0a:e7:e8:64:49:5e:e4:e7:c8:9b:39:92:d9:d1:1e:72:1f:cb: 19:af:e2:c8:d4:07:cb:73:9f:e3:64:57:12:74:ac:77:26:23: c3:65:39:36:02:b8:08:e4:5d:b9:32:63:3f:14:ad:60:58:5a: d4:99:10:02:67:15:20:45:d2:31:a3:ae:e4:50:e7:09:51:87: 36:2d:ca:2b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUwMTIyMTU1MjAwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxMTQyMC1jZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTdy56UX8+LO4OB7512iJQTkWHYOw4aEIwAagNzs5qFB0175f2dmw2H78ETl huDIxbVQ+CZRxXAQsiv6kSiSwYzPMlA27qvhZUA5z534vo/alobF4DZ4X1yaxMTO loL9zzliUnCNknzVWcjzR4mFnRZEAFLoHEEBQNbkdpL/2KqWPe8mhdW66kZL5/2a CCUfnRg9Riws9dJ6cYD09WV80ZBQvQbA1hHeOYCCFkSieGNZQ2dhb+UGc4MctvjX KlV/pAoXaGhjiHwYkZXF44x0RbQljiaPWf0YNK+zmRPF92CS+CKrfdORva+QbIcY eKKTnmAVlgZbh8Le1Gt5cQzm4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPyjNPPj 1n0l916mhhgvr9Xw2EwHMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYwMjEvRDk4NzYxRDQ2OTJFMTFFMzg4QzgyNTJFNTkxMUVBMzIvMzQwOEQ5NDRE QzAzMTFFQzg3OURFMjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn/ywDBALKPVQwDQYJKoZIhvcNAQELBQADggEBAFoOy5rf excceETssJZVFowZyenv06eJdhiIiZ314e69LhaNf2SmHTWqoo7t6ATJi6q81wMA 0yDNBXF4IhK4MH3N3E37OCMk3Pincd1srKLs8FFqQq3jAgd4YYe3LV0cX7HIz4HW b24QTwrYdeW1+vq0weu/Ag27ucVo3t86Kmfkocc3X1dNTVQmkRjTXZ2zOPGFj+NA FRmFHQQ9k+ym6bS805oJcJiZztTg+0kf6hO5EpHmPgrn6GRJXuTnyJs5ktnRHnIf yxmv4sjUB8tzn+NkVxJ0rHcmI8NlOTYCuAjkXbkyYz8UrWBYWtSZEAJnFSBF0jGj ruRQ5wlRhzYtyis= -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:06 2025 by rpki-client on console.sobornost.net