$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8FF4959A105311F08C016934C4F9AE02.roa File: 8FF4959A105311F08C016934C4F9AE02.roa (raw, json) Hash identifier: WgLwCgMHNp/2EJeAVD9yaIJVe4Tqf5gxLE/bNK7FFpc= Subject key identifier: 77:97:8A:AA:D2:01:CF:DE:05:EA:1E:8D:5E:6F:68:A6:33:31:5E:DF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AF81 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8FF4959A105311F08C016934C4F9AE02.roa Signing time: Thu 24 Apr 2025 07:04:26 +0000 ROA not before: Thu 24 Apr 2025 07:04:26 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134032 IP address blocks: 45.118.32.0/22 maxlen: 24 103.57.150.0/24 maxlen: 24 103.58.64.0/22 maxlen: 24 103.58.115.0/24 maxlen: 24 103.58.116.0/23 maxlen: 24 103.135.46.0/24 maxlen: 24 103.135.47.0/24 maxlen: 24 103.148.8.0/24 maxlen: 24 103.163.44.0/23 maxlen: 24 103.168.198.0/23 maxlen: 24 103.171.12.0/23 maxlen: 24 103.178.158.0/23 maxlen: 24 103.186.172.0/23 maxlen: 24 2001:df2:9900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44929 (0xaf81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 24 07:04:26 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6809e27a-6904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:0a:1e:a2:41:82:83:bd:14:79:88:ca:4c: 9f:2e:2c:03:14:9c:27:15:11:a7:34:a9:32:9d:e1: c9:2a:cf:80:92:74:0f:da:e5:12:63:01:8c:e6:f8: ba:17:a7:7c:a1:05:5b:b5:61:06:b5:16:dc:c4:4a: f8:ea:8f:68:1d:60:22:65:d2:8d:56:5b:9b:8c:ea: 25:c4:79:a9:6c:26:42:82:3b:fe:50:df:63:01:bf: b4:d9:ba:a5:82:d6:83:73:01:64:71:18:ac:80:2b: 68:e8:ce:22:a1:68:7c:ce:e6:b3:f1:63:64:1e:b2: 1e:31:6e:4c:5e:b6:59:29:ab:7a:10:97:f1:27:e1: 8a:b6:7e:11:20:84:63:4c:1e:90:ac:c5:4d:7c:11: 62:57:02:d9:11:45:92:87:79:94:57:96:d2:c8:91: 1c:a9:fb:4c:98:39:e0:17:14:51:b2:58:7a:57:77: c2:da:8f:d2:57:c2:dd:8f:25:29:a5:54:06:eb:2e: 14:26:38:e8:2a:d8:e0:cc:7d:bd:c8:a4:92:67:68: 71:c0:4e:f4:07:36:90:7a:40:41:e8:05:be:13:f5: b6:a3:6b:dc:b7:39:b0:ea:49:ab:95:ba:85:5a:ec: fe:9e:2f:1f:fe:47:7f:86:89:13:bc:2a:b3:b7:8a: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:97:8A:AA:D2:01:CF:DE:05:EA:1E:8D:5E:6F:68:A6:33:31:5E:DF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8FF4959A105311F08C016934C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.32.0/22 103.57.150.0/24 103.58.64.0/22 103.58.115.0-103.58.117.255 103.135.46.0/23 103.148.8.0/24 103.163.44.0/23 103.168.198.0/23 103.171.12.0/23 103.178.158.0/23 103.186.172.0/23 IPv6: 2001:df2:9900::/48 Signature Algorithm: sha256WithRSAEncryption 4f:17:13:f8:30:d2:87:68:1e:19:f5:22:c4:13:6b:1f:58:1b: 4f:b0:dc:7e:9c:78:ca:e4:6c:c9:88:f0:bb:ef:70:8f:41:80: 54:40:a8:10:2d:80:a4:ab:77:5f:be:05:2c:3c:34:80:74:82: 9b:b2:d6:0e:a4:00:e7:89:7c:17:1a:d6:89:e1:68:ab:87:99: b6:14:c7:31:d5:2c:d5:7d:05:10:5e:f0:c3:b4:59:08:85:b5: 0f:f4:47:d1:e3:1c:b1:fd:5b:0b:dc:56:69:77:fb:b2:c2:d4: 3f:d8:af:8a:e1:76:3e:8d:e4:ba:7a:de:68:a5:1a:31:fb:cd: 45:99:1e:3f:e4:9a:d2:9e:91:8d:3a:dc:5b:ab:9e:9d:10:92: c7:e2:e6:c8:b1:8a:47:5e:b5:0a:90:d5:a1:74:ea:30:c9:73: 4c:70:e8:30:75:df:01:9e:ae:bc:4c:43:4a:69:01:06:42:fb: f3:3e:91:41:19:f2:72:76:6f:dc:25:b4:65:1f:11:d1:61:c6: 5e:af:c9:08:4f:6a:d7:17:f6:e3:7f:e1:5f:4c:9a:70:cc:47: 8f:4d:22:5f:dd:df:4d:bd:2d:0f:37:83:a6:a4:03:f0:6a:1a: 16:2a:39:ea:9e:71:49:5b:40:3b:a9:8e:ce:a0:9d:42:0b:91: fb:11:43:1a -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIDAK+BMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQyNDA3MDQyNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgwOWUyN2EtNjkwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwwCh6iQYKDvRR5iMpMny4sAxScJxURpzSpMp3hySrPgJJ0D9rlEmMBjOb4 uhenfKEFW7VhBrUW3MRK+OqPaB1gImXSjVZbm4zqJcR5qWwmQoI7/lDfYwG/tNm6 pYLWg3MBZHEYrIAraOjOIqFofM7ms/FjZB6yHjFuTF62WSmrehCX8SfhirZ+ESCE Y0wekKzFTXwRYlcC2RFFkod5lFeW0siRHKn7TJg54BcUUbJYeld3wtqP0lfC3Y8l KaVUBusuFCY46CrY4Mx9vcikkmdoccBO9Ac2kHpAQegFvhP1tqNr3Lc5sOpJq5W6 hVrs/p4vH/5Hf4aJE7wqs7eKBPMCAwEAAaOCAuowggLmMB0GA1UdDgQWBBR3l4qq 0gHP3gXqHo1eb2imMzFe3zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhGRjQ5NTlB MTA1MzExRjA4QzAxNjkzNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMHQGCCsGAQUFBwEHAQH/ BGUwYzBQBAIAATBKAwQCLXYgAwQAZzmWAwQCZzpAMAwDBABnOnMDBAFnOnQDBAFn hy4DBABnlAgDBAFnoywDBAFnqMYDBAFnqwwDBAFnsp4DBAFnuqwwDwQCAAIwCQMH ACABDfKZADANBgkqhkiG9w0BAQsFAAOCAQEATxcT+DDSh2geGfUixBNrH1gbT7Dc fpx4yuRsyYjwu+9wj0GAVECoEC2ApKt3X74FLDw0gHSCm7LWDqQA54l8FxrWieFo q4eZthTHMdUs1X0FEF7ww7RZCIW1D/RH0eMcsf1bC9xWaXf7ssLUP9iviuF2Po3k unreaKUaMfvNRZkeP+Sa0p6RjTrcW6uenRCSx+LmyLGKR161CpDVoXTqMMlzTHDo MHXfAZ6uvExDSmkBBkL78z6RQRnycnZv3CW0ZR8R0WHGXq/JCE9q1xf243/hX0ya cMxHj00iX93fTb0tDzeDpqQD8GoaFio56p5xSVtAO6mOzqCdQguR+xFDGg== -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:42 2025 by rpki-client on console.sobornost.net