$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7A35195A0A1811F0ADFE8D2DC4F9AE02.roa File: 7A35195A0A1811F0ADFE8D2DC4F9AE02.roa (raw, json) Hash identifier: kzCmoo+IjhlPEf88D9nrDgIHNSfXTuGVVGf2u6U7d4w= Subject key identifier: CE:7B:2B:7D:F1:9C:3A:B9:7B:38:D6:4A:81:FE:04:BE:59:35:2C:F8 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0BB7 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7A35195A0A1811F0ADFE8D2DC4F9AE02.roa Signing time: Sun 20 Apr 2025 12:27:29 +0000 ROA not before: Sun 20 Apr 2025 12:27:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 5065 IP address blocks: 43.230.52.0/24 maxlen: 24 43.230.53.0/24 maxlen: 24 103.7.117.0/24 maxlen: 24 103.13.19.0/24 maxlen: 24 103.15.32.0/24 maxlen: 24 103.15.33.0/24 maxlen: 24 103.15.34.0/24 maxlen: 24 103.15.35.0/24 maxlen: 24 103.248.150.0/24 maxlen: 24 103.248.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2999 (0xbb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Apr 20 12:27:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6804e831-abd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:e0:3e:40:13:6d:37:d2:50:59:ae:5f:d9: 8c:82:b7:92:0e:2b:f7:c4:88:63:00:7d:bb:82:e6: 3b:68:cc:4c:09:5a:33:d2:76:94:97:ef:53:24:5d: 12:a2:dc:ce:a5:b5:a3:66:83:11:36:21:93:d7:c9: e4:1b:47:57:a6:14:62:0a:f2:f7:0c:d1:18:83:d9: 6c:a3:e1:ec:8d:21:b0:d8:26:e3:3f:f0:75:fd:15: 8a:9e:53:e0:5b:2f:b5:31:1e:b5:32:de:f3:33:f3: 2f:d8:c7:e3:ea:34:ee:9d:cd:97:bb:00:3d:1c:7e: 68:b7:8e:54:88:dc:da:55:dc:e4:54:8e:a0:a5:e4: f0:99:b4:13:9b:0a:30:2f:91:c7:64:79:68:f6:4d: 2a:4d:c9:b9:77:19:20:42:27:5a:10:37:23:e4:a1: d3:a8:7b:57:46:0e:8c:09:d1:7f:e6:09:81:cf:ec: 28:9e:56:b0:a4:57:30:86:60:a5:38:be:bd:f0:a4: b5:92:ed:02:09:f8:73:6d:2e:7f:10:31:02:93:2f: e2:d6:e6:4a:4a:93:48:e4:46:8f:32:0a:1c:55:9b: 71:49:3f:b1:99:d0:b8:27:b8:c4:9f:c1:80:58:b5: b3:1c:7d:89:1e:3e:bc:90:72:02:da:07:ca:aa:2b: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7B:2B:7D:F1:9C:3A:B9:7B:38:D6:4A:81:FE:04:BE:59:35:2C:F8 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7A35195A0A1811F0ADFE8D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.52.0/23 103.7.117.0/24 103.13.19.0/24 103.15.32.0/22 103.248.150.0/23 Signature Algorithm: sha256WithRSAEncryption cf:c7:4c:58:97:c9:7f:2e:5a:c0:bb:09:c4:5b:60:f4:04:a2: 8c:b4:7a:d7:f2:77:94:b8:3d:e0:46:e4:c7:cf:9e:b1:68:4b: 47:5a:f7:54:27:e5:cc:29:fb:d5:e2:6f:7b:df:ee:0b:92:74: 21:1e:91:6e:24:5e:e2:f3:eb:d3:9e:99:84:8d:74:80:3e:a5: 28:e5:f4:74:55:3f:6a:bf:aa:c7:c0:93:43:62:28:bb:f9:6a: bf:77:76:cf:1f:5a:e7:94:bf:f1:ca:a1:e4:a1:fd:ea:9d:fe: 44:17:e7:d4:57:72:62:1b:90:ce:45:84:95:59:50:3d:98:23: 56:7f:41:f1:14:67:44:cb:50:d3:63:b6:5e:b9:9d:85:77:d2: 04:c0:e7:d2:19:0d:9d:77:db:3a:09:c7:a9:8a:eb:2a:f9:20: fb:58:95:0e:45:88:5e:04:f1:7d:ab:7c:da:97:7a:2b:e9:6d: 39:13:f6:72:3d:aa:4b:27:57:18:ae:cc:1e:16:f8:a6:61:d0: 47:f7:27:19:36:ea:6b:bc:e4:2c:41:bf:bf:ac:da:b1:a1:f3: 22:aa:92:85:70:74:20:ab:8e:0b:c9:c9:ee:00:ea:c3:73:39: 2e:d8:eb:2a:42:16:fd:af:40:e2:f1:53:0a:7c:c2:72:b6:0e: 54:4f:25:a9 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNDIwMTIyNzI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA0ZTgzMS1hYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cTgPkATbTfSUFmuX9mMgreSDiv3xIhjAH27guY7aMxMCVoz0naUl+9TJF0S otzOpbWjZoMRNiGT18nkG0dXphRiCvL3DNEYg9lso+HsjSGw2CbjP/B1/RWKnlPg Wy+1MR61Mt7zM/Mv2Mfj6jTunc2XuwA9HH5ot45UiNzaVdzkVI6gpeTwmbQTmwow L5HHZHlo9k0qTcm5dxkgQidaEDcj5KHTqHtXRg6MCdF/5gmBz+wonlawpFcwhmCl OL698KS1ku0CCfhzbS5/EDECky/i1uZKSpNI5EaPMgocVZtxST+xmdC4J7jEn8GA WLWzHH2JHj68kHIC2gfKqitcBwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFM57K33x nDq5ezjWSoH+BL5ZNSz4MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvN0EzNTE5NUEw QTE4MTFGMEFERkU4RDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAEr5jQDBABnB3UDBABnDRMDBAJnDyADBAFn+JYwDQYJKoZI hvcNAQELBQADggEBAM/HTFiXyX8uWsC7CcRbYPQEooy0etfyd5S4PeBG5MfPnrFo S0da91Qn5cwp+9Xib3vf7guSdCEekW4kXuLz69OemYSNdIA+pSjl9HRVP2q/qsfA k0NiKLv5ar93ds8fWueUv/HKoeSh/eqd/kQX59RXcmIbkM5FhJVZUD2YI1Z/QfEU Z0TLUNNjtl65nYV30gTA59IZDZ132zoJx6mK6yr5IPtYlQ5FiF4E8X2rfNqXeivp bTkT9nI9qksnVxiuzB4W+KZh0Ef3Jxk26mu85CxBv7+s2rGh8yKqkoVwdCCrjgvJ ye4A6sNzOS7Y6ypCFv2vQOLxUwp8wnK2DlRPJak= -----END CERTIFICATE-----Generated at Tue Apr 22 21:25:26 2025 by rpki-client on console.sobornost.net