$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/4A3C802012A711F099020A73C4F9AE02.roa File: 4A3C802012A711F099020A73C4F9AE02.roa (raw, json) Hash identifier: EvMFCkIZLxU/4T9yDv4rTrnplB41rjMOAziWwMgP5hQ= Subject key identifier: 52:B0:CE:6D:73:0F:07:06:18:09:5B:9C:0E:C9:53:FF:86:2A:49:B5 Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 05 Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/4A3C802012A711F099020A73C4F9AE02.roa Signing time: Sun 06 Apr 2025 05:23:36 +0000 ROA not before: Sun 06 Apr 2025 05:23:36 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140074 IP address blocks: 103.148.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Apr 6 05:23:36 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f20fd8-9983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:bb:19:8d:ae:ea:87:e6:72:cf:6e:c5:b2: 96:dd:95:e3:6c:46:75:a2:bc:26:93:d4:23:63:66: 93:9a:26:59:af:b0:bd:c5:34:ec:db:37:03:8b:ed: ee:ec:57:f4:49:f0:85:1c:ad:8a:09:c7:7f:a6:42: 37:f8:a2:25:0a:0a:a5:0e:b3:f9:54:92:72:16:21: 23:53:45:b5:60:c2:6e:fd:f9:75:5e:f9:c6:fb:72: a9:85:54:60:c3:e9:56:d1:5d:fe:20:b1:c9:05:76: 11:c8:6f:50:4a:fc:49:d8:ac:82:02:53:08:ee:34: 5a:09:02:27:e8:42:15:24:89:94:cf:2c:33:95:95: ef:4c:64:10:60:82:85:ce:ab:dd:b4:95:8e:29:dd: a2:88:df:7d:bc:54:7f:63:69:79:5d:71:0b:b9:0e: 7c:be:63:0d:9e:ca:5a:d1:5f:6a:1c:a4:69:67:f1: 94:92:84:38:0a:e0:7e:4f:78:56:85:b9:9c:a7:d4: 51:af:4f:61:b8:5c:66:4e:f8:0b:68:8a:39:83:81: ce:29:80:72:06:50:ff:53:f2:89:0b:ae:b8:5b:d2: c3:21:7f:84:73:0f:79:48:5b:48:9c:d4:d2:90:8a: 77:ea:8e:b3:4c:a3:0c:b2:a9:64:1b:f1:7d:23:85: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B0:CE:6D:73:0F:07:06:18:09:5B:9C:0E:C9:53:FF:86:2A:49:B5 X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/4A3C802012A711F099020A73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.34.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:ba:02:22:2b:b8:f5:85:e0:fa:98:22:d0:0e:e3:de:4e:49: 5a:c0:3d:98:9a:3c:8a:6c:70:c5:82:49:1c:bc:1e:c4:4b:9d: 43:19:5c:73:ee:3c:a5:1c:09:5e:64:3b:a8:11:eb:40:ed:54: 70:42:51:c1:89:c8:65:71:4b:b4:5a:24:38:95:8d:25:5e:6e: 1f:15:02:92:ac:38:da:8f:ac:34:ce:7a:65:92:e2:cf:dc:da: 53:f7:3d:52:3f:62:55:96:87:a7:75:73:79:ca:8c:c0:29:2e: 23:39:54:85:73:a3:f4:ef:19:a2:48:35:18:e6:f8:15:32:bf: bf:77:4a:73:8c:f5:28:52:d3:ed:97:7e:4c:b3:fd:a7:3b:7b: 7a:84:84:c1:e3:ed:15:b4:e6:a6:f5:f8:a3:42:64:1c:f3:39: 56:4c:23:5d:ac:e7:f7:98:f3:43:1e:ef:32:ec:b6:f3:d1:2c: de:b8:82:e3:1d:75:63:8c:68:89:b2:6a:5e:63:b5:14:84:5d: d9:ea:75:0d:22:44:e2:b4:af:e0:f6:ae:47:25:f2:b0:1c:14: 19:2d:10:ec:b9:07:1f:27:31:f9:78:e2:71:a1:13:32:ea:25: e8:62:73:a3:7d:9a:44:b4:e8:1f:fc:da:a9:0e:91:ad:4d:8f: 95:bf:58:f8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUYzRTExMC8GA1UEBRMoOUNFOTE3REMzQUUwQzVCQTJFNzdDQjc3NUEzQUQ5OUM2 ODVDNDA2QjAeFw0yNTA0MDYwNTIzMzZaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjIwZmQ4LTk5ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC037sZja7qh+Zyz27FspbdleNsRnWivCaT1CNjZpOaJlmvsL3FNOzbNwOL7e7s V/RJ8IUcrYoJx3+mQjf4oiUKCqUOs/lUknIWISNTRbVgwm79+XVe+cb7cqmFVGDD 6VbRXf4gsckFdhHIb1BK/EnYrIICUwjuNFoJAifoQhUkiZTPLDOVle9MZBBggoXO q920lY4p3aKI3328VH9jaXldcQu5Dny+Yw2eylrRX2ocpGln8ZSShDgK4H5PeFaF uZyn1FGvT2G4XGZO+AtoijmDgc4pgHIGUP9T8okLrrhb0sMhf4RzD3lIW0ic1NKQ infqjrNMowyyqWQb8X0jhQXRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUrDObXMP BwYYCVucDslT/4YqSbUwHwYDVR0jBBgwFoAUnOkX3Drgxboud8t3WjrZnGhcQGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxRjNFLzMzOUVERTY4MTBF NDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk9rWDNEcmd4Ym91ZDh0M1dqclpuR2hjUUdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUYzRS8zMzlFREU2ODEwRTQxMUYwQjc1QjgxNjZDNEY5QUUwMi80QTNDODAyMDEy QTcxMUYwOTkwMjBBNzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeUIjANBgkqhkiG9w0BAQsFAAOCAQEAXLoCIiu49YXg+pgi 0A7j3k5JWsA9mJo8imxwxYJJHLwexEudQxlcc+48pRwJXmQ7qBHrQO1UcEJRwYnI ZXFLtFokOJWNJV5uHxUCkqw42o+sNM56ZZLiz9zaU/c9Uj9iVZaHp3VzecqMwCku IzlUhXOj9O8Zokg1GOb4FTK/v3dKc4z1KFLT7Zd+TLP9pzt7eoSEwePtFbTmpvX4 o0JkHPM5VkwjXazn95jzQx7vMuy289Es3riC4x11Y4xoibJqXmO1FIRd2ep1DSJE 4rSv4PauRyXysBwUGS0Q7LkHHycx+XjicaETMuol6GJzo32aRLToH/zaqQ6RrU2P lb9Y+A== -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net