$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa File: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (raw, json) Hash identifier: CZNc6WzONNJeWPZ6+n2sowdun9wtquppPoiv3hGmfQ8= Subject key identifier: ED:4C:52:4C:90:D6:06:E2:8D:DC:47:07:AD:B7:07:EC:8F:A2:4B:94 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1A14 Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa Signing time: Sat 26 Apr 2025 16:24:30 +0000 ROA not before: Sat 26 Apr 2025 16:24:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133453 IP address blocks: 103.229.176.0/22 maxlen: 22 103.229.176.0/24 maxlen: 24 103.229.177.0/24 maxlen: 24 103.229.178.0/24 maxlen: 24 103.229.179.0/24 maxlen: 24 2401:3f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6676 (0x1a14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Apr 26 16:24:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680d08be-a04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:ed:a3:19:e8:bb:40:19:82:76:27:60:20: 8a:bd:2b:4f:e8:2f:18:04:ab:29:13:c7:ee:75:90: bb:71:65:61:da:35:ad:49:9f:00:84:18:f2:30:75: aa:17:ab:42:aa:b2:b3:a5:b0:b9:5f:45:e1:36:ad: 4a:19:9e:ee:ec:8e:34:8f:3a:5d:61:a8:4a:6f:e2: 8e:70:60:64:25:5d:9c:b9:23:28:76:28:ba:f2:5b: 59:00:91:be:29:e4:14:8a:87:2b:d5:50:a5:18:2b: 77:57:f6:c3:89:ab:f9:ac:06:f2:e9:a4:fc:49:24: ca:81:b6:f3:e6:89:ab:e0:15:2b:3d:66:07:1e:a8: 81:12:2d:b0:58:b2:87:44:4e:33:32:00:65:72:d4: 74:73:9f:ff:24:fe:89:88:68:8c:47:a6:ed:4b:f3: e7:0a:2f:07:5a:5c:87:d1:ff:75:50:77:17:20:d9: 82:6e:45:2d:81:41:94:4c:de:22:7f:dd:0c:98:80: ce:f6:b8:d8:12:f5:53:01:18:dd:47:68:4f:4a:ec: 9a:9b:06:73:fa:93:2d:8b:1f:ca:70:a9:e1:67:66: 1f:cf:3e:10:a5:44:3a:12:29:e1:ae:db:7d:b3:47: 38:8e:f2:d7:2a:b8:e1:3a:50:93:cb:75:09:99:17: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4C:52:4C:90:D6:06:E2:8D:DC:47:07:AD:B7:07:EC:8F:A2:4B:94 X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.176.0/22 IPv6: 2401:3f60::/32 Signature Algorithm: sha256WithRSAEncryption 15:38:f6:6a:79:9e:16:43:3d:c5:2b:bc:02:1c:78:b0:1c:ac: 1c:f5:80:ff:81:a8:85:98:44:9b:d1:77:59:29:48:61:33:55: 60:df:4d:b9:09:89:88:58:d2:27:ad:aa:31:29:e8:1f:00:ae: f2:75:3a:17:0d:29:39:9f:79:24:df:bf:da:55:7b:44:1a:9c: df:dc:13:1c:74:bc:a6:c2:65:9e:65:bf:f6:b1:85:c0:ea:16: 93:8c:12:43:e9:3b:17:95:0b:17:11:17:0d:8a:c7:e3:d2:68: af:bd:8d:5f:96:2c:5e:a6:15:54:36:4e:21:6d:8c:9b:7d:8a: 31:62:e9:75:97:ce:59:29:b5:74:18:a1:23:b0:9c:2f:54:b2: 54:fb:06:99:e5:3f:d3:d2:b9:61:7a:2b:34:3c:84:d7:18:38: 83:42:32:41:5e:77:7d:93:35:15:a0:70:60:b5:90:d5:2f:d7: 1a:20:7e:43:9c:c4:3d:5f:c9:db:e6:5e:88:8a:87:1f:ed:09: fc:76:6f:57:b9:4e:c4:3f:51:9d:d4:15:94:69:12:4f:b7:73: c0:6e:42:32:4c:7d:80:8b:0c:8e:d7:f6:de:8e:47:77:78:2b: e8:8a:a5:15:e4:1d:4d:5f:6a:7a:60:f5:1c:ec:13:69:ac:a3: fb:1f:dd:df -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjUwNDI2MTYyNDMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBkMDhiZS1hMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlHntoxnou0AZgnYnYCCKvStP6C8YBKspE8fudZC7cWVh2jWtSZ8AhBjyMHWq F6tCqrKzpbC5X0XhNq1KGZ7u7I40jzpdYahKb+KOcGBkJV2cuSModii68ltZAJG+ KeQUiocr1VClGCt3V/bDiav5rAby6aT8SSTKgbbz5omr4BUrPWYHHqiBEi2wWLKH RE4zMgBlctR0c5//JP6JiGiMR6btS/PnCi8HWlyH0f91UHcXINmCbkUtgUGUTN4i f90MmIDO9rjYEvVTARjdR2hPSuyamwZz+pMtix/KcKnhZ2Yfzz4QpUQ6Einhrtt9 s0c4jvLXKrjhOlCTy3UJmReRWQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO1MUkyQ 1gbijdxHB623B+yPokuUMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkwMzIvNDVGQ0Y1RTA0RkVBMTFFNzk3MTBERTNFQzRGOUFFMDIvOEFGRDdEODg1 RENFMTFFRUE3NEZDMDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn5bAwDQQCAAIwBwMFACQBP2AwDQYJKoZIhvcNAQELBQAD ggEBABU49mp5nhZDPcUrvAIceLAcrBz1gP+BqIWYRJvRd1kpSGEzVWDfTbkJiYhY 0ietqjEp6B8ArvJ1OhcNKTmfeSTfv9pVe0QanN/cExx0vKbCZZ5lv/axhcDqFpOM EkPpOxeVCxcRFw2Kx+PSaK+9jV+WLF6mFVQ2TiFtjJt9ijFi6XWXzlkptXQYoSOw nC9UslT7BpnlP9PSuWF6KzQ8hNcYOINCMkFed32TNRWgcGC1kNUv1xogfkOcxD1f ydvmXoiKhx/tCfx2b1e5TsQ/UZ3UFZRpEk+3c8BuQjJMfYCLDI7X9t6OR3d4K+iK pRXkHU1fanpg9RzsE2mso/sf3d8= -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:36 2025 by rpki-client on console.sobornost.net