$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa File: 6923942E252711EF948A5E18C4F9AE02.roa (raw, json) Hash identifier: 0x0eSzOxBYHAqof1oT5c9wIXASU8irda6T6qsynIr4E= Subject key identifier: 63:7E:49:4B:FE:A9:A2:7C:F2:EF:A7:41:47:6B:3B:7A:80:92:C4:57 Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: 99 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa Signing time: Wed 05 Mar 2025 06:52:33 +0000 ROA not before: Wed 05 Mar 2025 06:52:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45152 IP address blocks: 103.210.148.0/22 maxlen: 22 103.210.148.0/24 maxlen: 24 103.210.149.0/24 maxlen: 24 103.210.150.0/24 maxlen: 24 103.210.151.0/24 maxlen: 24 119.252.184.0/22 maxlen: 22 119.252.184.0/24 maxlen: 24 119.252.185.0/24 maxlen: 24 119.252.186.0/24 maxlen: 24 119.252.187.0/24 maxlen: 24 119.252.188.0/24 maxlen: 24 139.5.52.0/22 maxlen: 22 139.5.52.0/24 maxlen: 24 139.5.53.0/24 maxlen: 24 139.5.54.0/24 maxlen: 24 139.5.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Mar 5 06:52:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c7f4b1-7019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:84:78:0d:23:d9:7d:07:b3:82:69:98:fe: e4:83:5c:df:f8:d5:b5:85:c8:9b:15:4f:e7:7a:29: b5:e2:15:90:74:17:a8:12:aa:a5:07:68:72:05:d3: 53:d0:75:95:43:58:22:84:7a:6d:12:16:cc:19:54: c9:5a:6b:b9:81:41:9d:ee:71:c2:bd:91:50:e8:04: 05:8f:3b:09:9b:b0:f3:de:18:b7:45:0d:cb:ef:eb: a0:47:9b:e4:74:e7:51:f9:bf:e3:1a:76:dd:a6:7f: 2b:35:19:30:70:9b:a5:0c:f7:9a:f4:fb:df:32:33: ee:76:de:3b:89:9c:a6:33:53:4b:af:28:84:98:97: a5:65:09:23:31:89:4d:e0:3f:97:76:45:e1:8d:bb: d8:a6:55:8b:68:7e:8e:a0:b9:eb:75:33:3f:93:a9: d9:5e:9a:41:5a:2e:16:3a:7e:d0:33:23:7f:ba:87: f5:8b:dd:ba:55:a0:72:65:de:49:f7:7c:2e:49:c8: b8:56:22:83:00:4f:37:29:88:e0:b6:a2:6a:79:3b: b1:c1:66:48:d6:09:20:c2:51:85:92:cb:97:35:3a: 5a:23:89:48:7b:fe:86:e5:ac:dd:bb:fe:d8:cd:90: 2d:28:28:04:19:aa:2d:b1:29:7a:e2:bd:60:f6:4b: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7E:49:4B:FE:A9:A2:7C:F2:EF:A7:41:47:6B:3B:7A:80:92:C4:57 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/6923942E252711EF948A5E18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.210.148.0/22 119.252.184.0-119.252.188.255 139.5.52.0/22 Signature Algorithm: sha256WithRSAEncryption 43:ad:97:56:63:b8:da:e3:b9:ac:af:9e:88:50:78:a4:36:57: 07:83:8b:2e:0e:22:28:d2:7a:10:fc:98:c0:72:62:55:7d:43: 83:08:4f:10:4d:08:29:5c:3c:39:c5:d5:d4:d4:e8:b4:3a:70: db:43:99:34:4c:d1:46:72:32:41:08:0e:4a:47:a3:da:57:95: 16:82:ed:c5:b9:e2:40:3e:45:91:da:6d:60:48:7d:17:2f:1b: 68:4e:8d:d3:13:26:5b:7f:fa:05:04:8a:3e:d3:77:ad:5b:b9: eb:68:69:28:61:a5:a1:c1:1d:fe:b4:f0:b2:a9:64:70:f6:b9: 87:cc:fb:bc:69:cd:a2:07:65:26:4a:43:0a:7d:df:cc:77:80: 49:ca:28:79:8c:ed:6d:fc:f9:ca:b2:46:c1:ec:7d:86:00:10: 65:1a:cc:b9:c0:5c:89:45:55:e8:3b:87:f2:6b:b4:be:cd:e1: fd:c9:aa:a2:27:c4:79:b1:22:37:a2:a9:3a:fe:0b:ae:c6:93: 5a:dd:2a:ea:75:e6:65:24:a9:a2:5b:8a:fa:80:64:5b:37:1d: 82:b9:3c:87:c4:fc:22:e2:ec:3c:a7:1c:af:0f:b1:2a:38:04: fd:79:ee:ee:c4:ce:d9:0b:1c:3c:37:27:7d:7b:bb:af:ed:2a: a3:59:7f:a9 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjUwMzA1MDY1MjMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3ZjRiMS03MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuH+EeA0j2X0Hs4JpmP7kg1zf+NW1hcibFU/neim14hWQdBeoEqqlB2hyBdNT 0HWVQ1gihHptEhbMGVTJWmu5gUGd7nHCvZFQ6AQFjzsJm7Dz3hi3RQ3L7+ugR5vk dOdR+b/jGnbdpn8rNRkwcJulDPea9PvfMjPudt47iZymM1NLryiEmJelZQkjMYlN 4D+XdkXhjbvYplWLaH6OoLnrdTM/k6nZXppBWi4WOn7QMyN/uof1i926VaByZd5J 93wuSci4ViKDAE83KYjgtqJqeTuxwWZI1gkgwlGFksuXNTpaI4lIe/6G5azdu/7Y zZAtKCgEGaotsSl64r1g9kspOwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFGN+SUv+ qaJ88u+nQUdrO3qAksRXMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODRGNjUvQUM2M0FEQzYyNTI0MTFFRjgyQTk1Qjc0QzRGOUFFMDIvNjkyMzk0MkUy NTI3MTFFRjk0OEE1RTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAJn0pQwDAMEA3f8uAMEAHf8vAMEAosFNDANBgkqhkiG9w0B AQsFAAOCAQEAQ62XVmO42uO5rK+eiFB4pDZXB4OLLg4iKNJ6EPyYwHJiVX1DgwhP EE0IKVw8OcXV1NTotDpw20OZNEzRRnIyQQgOSkej2leVFoLtxbniQD5FkdptYEh9 Fy8baE6N0xMmW3/6BQSKPtN3rVu562hpKGGlocEd/rTwsqlkcPa5h8z7vGnNogdl JkpDCn3fzHeAScooeYztbfz5yrJGwex9hgAQZRrMucBciUVV6DuH8mu0vs3h/cmq oifEebEiN6KpOv4LrsaTWt0q6nXmZSSpoluK+oBkWzcdgrk8h8T8IuLsPKccrw+x KjgE/Xnu7sTO2QscPDcnfXu7r+0qo1l/qQ== -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net