$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa File: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (raw, json) Hash identifier: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY= Subject key identifier: 6F:D5:3C:F5:00:09:4A:78:EE:EB:FE:4D:7A:8E:62:02:B8:B3:75:00 Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 03B1 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa Signing time: Wed 12 Mar 2025 12:11:10 +0000 ROA not before: Wed 12 Mar 2025 12:11:10 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 135409 IP address blocks: 14.137.32.0/19 maxlen: 24 103.70.64.0/22 maxlen: 24 103.103.60.0/22 maxlen: 24 182.54.144.0/22 maxlen: 24 182.255.28.0/22 maxlen: 24 202.5.112.0/20 maxlen: 24 203.2.130.0/23 maxlen: 24 203.8.206.0/23 maxlen: 24 203.21.140.0/22 maxlen: 24 203.24.104.0/22 maxlen: 24 203.27.96.0/23 maxlen: 24 2001:df2:2600::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Mar 12 12:11:10 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67d179de-fe03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:75:ff:82:82:7b:41:c6:6e:5f:66:6d:9d: d8:aa:5d:d3:bd:22:46:03:98:2e:06:07:bb:46:be: 6b:e3:cb:8a:9b:1a:9a:04:e4:76:04:ad:41:11:63: 0f:df:52:78:72:ab:eb:46:75:ce:11:a0:4f:e8:2d: fe:ad:e1:4f:7f:87:73:e4:25:89:77:22:91:5c:85: 5c:20:9e:ca:65:4b:9e:c2:3b:d9:53:87:9c:e1:8b: 89:cc:ac:ea:23:1f:2e:3c:bb:d7:24:76:b8:72:8a: 6a:86:61:c3:83:c9:0d:02:3c:36:df:fa:27:bf:57: b8:30:1f:97:c8:fc:6c:65:7a:0b:30:0f:f1:32:16: 4b:2b:d2:6f:5f:b2:40:c0:9b:bc:25:4a:23:9d:18: 33:c8:9d:e1:6a:e7:f3:a4:af:8f:fd:cd:dc:0a:34: 17:ec:58:73:38:65:dd:d3:41:3c:1a:7d:0d:f7:e4: 7e:b1:20:c7:64:85:5c:a8:c4:e7:0b:71:be:b1:f7: 67:89:08:d1:44:67:19:97:2b:6e:ea:eb:d8:cd:04: a7:f1:d7:d8:07:c6:5f:b0:28:24:26:fe:2c:5a:fd: 10:d1:c4:e2:0b:b9:1c:9a:91:1b:75:ae:f5:6b:d1: 5c:ad:f4:c1:a6:0a:87:56:27:7c:4a:63:7e:a1:bb: d7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:3C:F5:00:09:4A:78:EE:EB:FE:4D:7A:8E:62:02:B8:B3:75:00 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.137.32.0/19 103.70.64.0/22 103.103.60.0/22 182.54.144.0/22 182.255.28.0/22 202.5.112.0/20 203.2.130.0/23 203.8.206.0/23 203.21.140.0/22 203.24.104.0/22 203.27.96.0/23 IPv6: 2001:df2:2600::/48 Signature Algorithm: sha256WithRSAEncryption 3c:49:e7:54:3f:3f:57:67:6b:27:44:3b:1e:45:2a:a0:ad:dd: db:04:61:d3:b6:74:46:6c:9e:7b:7b:36:2d:9d:ab:73:6c:8d: 7e:68:5d:65:a1:4f:99:ed:5e:b3:04:b9:61:bd:a3:ab:d3:05: b6:31:25:f7:8c:51:c3:32:28:c7:bf:9b:c8:fa:5c:4d:a9:01: b7:3b:ad:34:15:54:30:a8:99:fa:90:a2:c9:12:53:63:bd:81: b1:49:79:2f:2c:5c:7d:08:65:39:ac:f0:f0:11:c5:b8:2e:e7: 0a:1c:3f:ab:f8:7c:ff:a3:00:0b:30:0a:26:d2:e4:d6:89:ec: b4:ad:b8:41:8b:08:9a:4b:ac:6c:d9:af:64:c2:ea:57:dc:b3: 8e:1f:9c:d9:ef:e8:73:7a:49:45:e4:79:db:9e:99:be:23:dd: 7e:38:52:5d:8d:1a:37:5f:3f:4e:54:23:a9:f2:de:ff:ad:4d: bf:24:7c:99:d0:ae:c2:52:c5:85:cf:b2:69:71:db:f0:eb:01: 19:61:15:35:a0:32:43:a0:23:54:92:a5:7a:c3:4b:40:76:60: b7:8f:06:91:33:ec:59:f6:51:4e:df:b9:62:8f:e0:06:ae:0a: a0:3f:50:d3:43:bf:10:96:e3:49:77:22:88:ce:a2:c4:ce:40: 6c:67:5f:96 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUwMzEyMTIxMTEwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QxNzlkZS1mZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqN1/4KCe0HGbl9mbZ3Yql3TvSJGA5guBge7Rr5r48uKmxqaBOR2BK1BEWMP 31J4cqvrRnXOEaBP6C3+reFPf4dz5CWJdyKRXIVcIJ7KZUuewjvZU4ec4YuJzKzq Ix8uPLvXJHa4copqhmHDg8kNAjw23/onv1e4MB+XyPxsZXoLMA/xMhZLK9JvX7JA wJu8JUojnRgzyJ3haufzpK+P/c3cCjQX7FhzOGXd00E8Gn0N9+R+sSDHZIVcqMTn C3G+sfdniQjRRGcZlytu6uvYzQSn8dfYB8ZfsCgkJv4sWv0Q0cTiC7kcmpEbda71 a9FcrfTBpgqHVid8SmN+obvXTQIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFG/VPPUA CUp47uv+TXqOYgK4s3UAMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YyNDcvNkQyMkVBRjA4RjAzMTFFQ0E1QzlGRTEyQzRGOUFFMDIvMTU1MzA5REFG RjNCMTFFRjg3Q0FCNTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbAYIKwYBBQUHAQcBAf8E XTBbMEgEAgABMEIDBAUOiSADBAJnRkADBAJnZzwDBAK2NpADBAK2/xwDBATKBXAD BAHLAoIDBAHLCM4DBALLFYwDBALLGGgDBAHLG2AwDwQCAAIwCQMHACABDfImADAN BgkqhkiG9w0BAQsFAAOCAQEAPEnnVD8/V2drJ0Q7HkUqoK3d2wRh07Z0Rmyee3s2 LZ2rc2yNfmhdZaFPme1eswS5Yb2jq9MFtjEl94xRwzIox7+byPpcTakBtzutNBVU MKiZ+pCiyRJTY72BsUl5LyxcfQhlOazw8BHFuC7nChw/q/h8/6MACzAKJtLk1ons tK24QYsImkusbNmvZMLqV9yzjh+c2e/oc3pJReR5256ZviPdfjhSXY0aN18/TlQj qfLe/61NvyR8mdCuwlLFhc+yaXHb8OsBGWEVNaAyQ6AjVJKlesNLQHZgt48GkTPs WfZRTt+5Yo/gBq4KoD9Q00O/EJbjSXciiM6ixM5AbGdflg== -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net