$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DCDFB82CA17B11EAB16F4954C4F9AE02.roa File: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (raw, json) Hash identifier: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs= Subject key identifier: C1:44:3A:1E:AE:A0:23:EC:E7:82:3B:23:BE:E2:F8:49:1D:F1:98:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 0919 Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DCDFB82CA17B11EAB16F4954C4F9AE02.roa Signing time: Wed 26 Mar 2025 18:27:01 +0000 ROA not before: Wed 26 Mar 2025 18:27:01 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 45.250.72.0/22 maxlen: 24 103.226.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 18:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2329 (0x919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Mar 26 18:27:01 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e446f4-64e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:74:ae:94:83:cb:2b:f4:f2:ae:ed:48:3a: 89:54:24:d4:2f:f8:17:33:15:45:c7:1d:bd:2d:46: 87:2e:3c:86:ea:f7:d7:18:ef:1a:43:21:df:8b:94: 5f:5a:d4:27:ef:fc:37:ae:ff:36:48:6d:df:c8:d2: ea:8b:3a:b8:e6:b5:b8:cf:b0:98:38:8d:fc:ed:2d: 75:e6:17:96:ff:0e:00:c4:0e:16:72:ed:93:e2:ca: 1e:65:67:43:9a:f3:c0:6e:ed:b5:d0:3c:2c:c6:d9: d0:41:f2:b1:b9:d9:5e:f2:22:e9:32:01:fa:40:95: b6:c0:8f:75:1e:79:49:92:45:04:a0:db:a2:71:b2: 0a:6b:08:33:b5:1d:f1:96:27:9c:85:f7:14:ae:d5: 39:a8:40:e0:52:77:e6:fc:48:ed:93:e4:47:00:d5: 6c:43:ff:5d:98:bf:06:49:43:62:60:e6:e7:06:96: f6:80:eb:56:a4:82:bb:3a:1e:49:53:1f:f8:8c:c5: a4:69:b7:d3:c9:49:37:ae:2c:8d:6e:ab:ba:ed:0e: e3:ea:69:64:e9:54:d3:b6:02:13:14:72:f2:00:cc: ef:8b:f3:33:21:2b:79:61:c8:ad:44:3c:09:09:df: 7f:3a:63:9b:e5:e4:53:65:17:65:40:b1:d0:a5:41: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:3A:1E:AE:A0:23:EC:E7:82:3B:23:BE:E2:F8:49:1D:F1:98:11 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DCDFB82CA17B11EAB16F4954C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.250.72.0/22 103.226.68.0/22 Signature Algorithm: sha256WithRSAEncryption 14:8f:17:40:6e:07:74:91:4b:39:bf:3a:21:6f:7b:55:09:80: 10:9b:e7:34:c6:7b:30:94:c8:35:10:81:14:d4:44:65:ca:0c: e8:70:cb:2a:63:29:6f:12:0d:9b:f7:74:ec:c1:6e:8e:f3:25: e5:8a:fa:58:49:b4:f9:a9:27:e2:37:0c:21:79:48:a8:9a:ac: 15:ab:bf:36:fc:93:f7:97:b9:64:f7:09:9c:2d:6b:d8:0e:ac: 57:79:53:e9:2f:e4:9d:1c:46:15:a5:21:1b:88:fe:be:73:b6: 87:7c:4e:6f:86:55:4e:b8:40:02:69:dd:64:13:b8:d5:4d:c1: 76:54:6e:84:b3:4d:b5:5d:22:48:58:2b:0a:43:41:e2:67:49: 81:9e:1d:e6:a2:70:a4:0d:36:11:97:f6:ff:27:5b:0d:f3:eb: dd:f6:a9:51:de:30:bb:77:d5:9c:76:25:b8:23:7f:a0:92:6a: bf:a6:c6:2d:ec:8b:11:f3:e8:9b:d5:db:d5:c3:f6:2b:4f:11: d4:41:41:4e:f9:75:10:37:5a:a2:0b:d2:2e:4c:7a:fa:f1:55: a0:80:34:84:56:b7:80:87:59:75:fd:f5:91:f1:15:a3:50:0b: 85:d1:03:5e:b1:36:df:ee:fc:8f:17:59:56:94:dc:93:5d:e9: b9:71:84:39 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjUwMzI2MTgyNzAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0NDZmNC02NGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9B0rpSDyyv08q7tSDqJVCTUL/gXMxVFxx29LUaHLjyG6vfXGO8aQyHfi5Rf WtQn7/w3rv82SG3fyNLqizq45rW4z7CYOI387S115heW/w4AxA4Wcu2T4soeZWdD mvPAbu210DwsxtnQQfKxudle8iLpMgH6QJW2wI91HnlJkkUEoNuicbIKawgztR3x liechfcUrtU5qEDgUnfm/Ejtk+RHANVsQ/9dmL8GSUNiYObnBpb2gOtWpIK7Oh5J Ux/4jMWkabfTyUk3riyNbqu67Q7j6mlk6VTTtgITFHLyAMzvi/MzISt5YcitRDwJ Cd9/OmOb5eRTZRdlQLHQpUFLzQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMFEOh6u oCPs54I7I77i+Ekd8ZgRMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThGMDgvNUIxN0Y2RDIwN0QwMTFFQUE0ODQ4NjQ0QzRGOUFFMDIvRENERkI4MkNB MTdCMTFFQUIxNkY0OTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt+kgDBAJn4kQwDQYJKoZIhvcNAQELBQADggEBABSPF0Bu B3SRSzm/OiFve1UJgBCb5zTGezCUyDUQgRTURGXKDOhwyypjKW8SDZv3dOzBbo7z JeWK+lhJtPmpJ+I3DCF5SKiarBWrvzb8k/eXuWT3CZwta9gOrFd5U+kv5J0cRhWl IRuI/r5ztod8Tm+GVU64QAJp3WQTuNVNwXZUboSzTbVdIkhYKwpDQeJnSYGeHeai cKQNNhGX9v8nWw3z6932qVHeMLt31Zx2Jbgjf6CSar+mxi3sixHz6JvV29XD9itP EdRBQU75dRA3WqIL0i5MevrxVaCANIRWt4CHWXX99ZHxFaNQC4XRA16xNt/u/I8X WVaU3JNd6blxhDk= -----END CERTIFICATE-----Generated at Tue Apr 22 21:25:17 2025 by rpki-client on console.sobornost.net