$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/2F0B3DD21FD111F08FDADC82C4F9AE02.roa File: 2F0B3DD21FD111F08FDADC82C4F9AE02.roa (raw, json) Hash identifier: OBbAfo3t9oBm5taqH8Dx2Z5EJ0B8Teydei4lanDMfHs= Subject key identifier: 4B:AA:16:CD:3B:7A:DB:FC:E1:A4:BF:E7:AF:EA:46:DC:C0:22:D5:7C Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 0320 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/2F0B3DD21FD111F08FDADC82C4F9AE02.roa Signing time: Thu 24 Apr 2025 03:54:37 +0000 ROA not before: Thu 24 Apr 2025 03:54:37 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 834 IP address blocks: 202.155.137.0/24 maxlen: 24 202.155.140.0/24 maxlen: 24 202.155.142.0/24 maxlen: 24 218.33.80.0/22 maxlen: 24 218.33.92.0/22 maxlen: 24 218.33.100.0/22 maxlen: 24 218.33.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Apr 24 03:54:37 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6809b5fd-153e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:5b:57:1b:57:20:c6:2c:68:4b:6d:43:d9: 0d:75:b3:4a:21:48:c6:b8:fb:d2:28:77:36:84:77: da:04:0a:6a:8f:e2:83:41:9b:7d:5f:38:77:ba:ee: 0b:17:ec:cf:0f:37:80:0f:8d:6b:be:b8:ee:4a:32: 16:42:98:45:ea:f1:4f:e0:5f:52:79:f9:87:5a:b4: 8d:cd:e2:28:eb:f2:af:81:c7:07:ff:a5:75:c9:68: a0:56:65:bf:ad:c2:5e:d0:88:48:25:b8:a3:36:84: 47:44:c0:e8:4e:d8:22:84:24:27:2e:1e:f1:84:fc: 7c:5f:d2:9f:41:e8:37:86:ab:ff:11:cb:07:d1:81: 75:c6:87:96:c8:75:d0:13:b2:b8:81:f7:51:58:54: 9d:02:6a:ec:a1:b6:78:90:5c:7b:38:8e:c2:a7:4c: 2d:c0:28:c1:b5:10:82:f5:a0:cd:f9:4a:00:04:53: a6:b7:93:96:f6:56:93:56:e9:6d:59:11:a5:1b:65: 64:79:60:f7:9f:35:d7:64:56:88:29:69:8f:c9:2f: 66:8e:9e:2a:7d:8b:81:20:3d:c8:8c:7c:d0:cd:75: 68:58:50:c9:e3:af:7b:df:bb:4b:4d:2b:b1:c6:74: 93:96:37:62:f2:a0:9f:1c:f6:fa:a4:4b:89:31:5b: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:16:CD:3B:7A:DB:FC:E1:A4:BF:E7:AF:EA:46:DC:C0:22:D5:7C X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/2F0B3DD21FD111F08FDADC82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.137.0/24 202.155.140.0/24 202.155.142.0/24 218.33.80.0/22 218.33.92.0/22 218.33.100.0/22 218.33.124.0/22 Signature Algorithm: sha256WithRSAEncryption 89:ca:fe:1a:7e:a4:f9:94:84:2b:58:75:2a:59:37:aa:c3:58: fb:c9:e0:3a:e4:7f:6a:6b:3d:45:4b:cc:86:93:85:33:a6:8e: 02:f8:c6:78:bf:a6:cc:18:53:fa:59:ba:98:1a:de:ad:94:94: 38:ef:d1:2d:0c:23:83:e0:7b:02:4d:a9:72:53:ef:16:1d:a8: fe:e8:f8:65:6c:7d:98:ae:6b:8d:e8:b8:e0:5d:f5:18:57:fb: 15:1e:db:9c:b8:03:2c:2f:85:f4:ba:a1:dc:8e:a9:60:07:89: 98:42:da:b6:ea:a7:2f:52:4d:69:7c:93:07:ff:0f:1e:66:fe: 51:fa:5c:2d:e6:65:1f:f1:8b:88:25:50:a6:9a:2e:39:33:13: 58:d5:07:ed:34:7c:e3:e7:46:39:d0:8f:c3:18:97:73:bb:7a: 8b:22:cb:fc:f2:be:32:fe:54:c4:9c:7a:29:19:4b:72:d8:47: 5c:c3:a0:12:bd:01:45:c0:f8:bf:d9:75:b3:29:71:ce:2c:d0: 4e:90:ae:e0:d0:57:87:dc:d5:a5:68:17:9c:b3:7f:14:0d:45: 3d:9b:33:27:40:b8:e9:26:dc:54:47:41:90:fa:07:9c:1c:36: be:06:f8:0a:f1:e3:87:28:bd:8d:b3:29:9e:ac:fc:22:1b:78: d0:79:18:b1 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwNDI0MDM1NDM3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA5YjVmZC0xNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwFbVxtXIMYsaEttQ9kNdbNKIUjGuPvSKHc2hHfaBApqj+KDQZt9Xzh3uu4L F+zPDzeAD41rvrjuSjIWQphF6vFP4F9SefmHWrSNzeIo6/KvgccH/6V1yWigVmW/ rcJe0IhIJbijNoRHRMDoTtgihCQnLh7xhPx8X9KfQeg3hqv/EcsH0YF1xoeWyHXQ E7K4gfdRWFSdAmrsobZ4kFx7OI7Cp0wtwCjBtRCC9aDN+UoABFOmt5OW9laTVult WRGlG2VkeWD3nzXXZFaIKWmPyS9mjp4qfYuBID3IjHzQzXVoWFDJ469737tLTSux xnSTljdi8qCfHPb6pEuJMVtNmwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFEuqFs07 etv84aS/56/qRtzAItV8MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMkYwQjNERDIx RkQxMTFGMDhGREFEQzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBADKm4kDBADKm4wDBADKm44DBALaIVADBALaIVwDBALaIWQD BALaIXwwDQYJKoZIhvcNAQELBQADggEBAInK/hp+pPmUhCtYdSpZN6rDWPvJ4Drk f2prPUVLzIaThTOmjgL4xni/pswYU/pZupga3q2UlDjv0S0MI4PgewJNqXJT7xYd qP7o+GVsfZiua43ouOBd9RhX+xUe25y4AywvhfS6odyOqWAHiZhC2rbqpy9STWl8 kwf/Dx5m/lH6XC3mZR/xi4glUKaaLjkzE1jVB+00fOPnRjnQj8MYl3O7eosiy/zy vjL+VMSceikZS3LYR1zDoBK9AUXA+L/ZdbMpcc4s0E6QruDQV4fc1aVoF5yzfxQN RT2bMydAuOkm3FRHQZD6B5wcNr4G+Arx44covY2zKZ6s/CIbeNB5GLE= -----END CERTIFICATE-----Generated at Thu Apr 24 06:54:45 2025 by rpki-client on console.sobornost.net