$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa File: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (raw, json) Hash identifier: Ca6ie1031aXWOzMVO9+1hU4OttxwbWwW5RmhLwoDTf8= Subject key identifier: 65:CD:75:6B:F5:21:60:C5:99:1F:BA:4D:78:F3:20:00:C0:5C:45:8A Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: E6 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa Signing time: Mon 14 Apr 2025 18:36:51 +0000 ROA not before: Mon 14 Apr 2025 18:36:51 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 16509 IP address blocks: 167.103.90.0/24 maxlen: 24 167.103.91.0/24 maxlen: 24 167.103.92.0/24 maxlen: 24 167.103.93.0/24 maxlen: 24 167.103.94.0/24 maxlen: 24 167.103.95.0/24 maxlen: 24 167.103.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Apr 14 18:36:51 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67fd55c3-a93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:22:44:78:d8:06:73:7b:fd:20:03:90:33: 46:1d:9a:f9:25:3a:47:86:82:af:b6:47:02:cd:f6: d0:85:e7:d1:46:a8:7a:ce:6a:20:c1:c9:5c:84:82: 47:03:8a:14:e0:f8:fd:48:73:a1:3d:49:32:8e:64: 65:73:39:d0:88:52:88:49:2e:2c:cb:f2:2b:a4:0d: 66:1c:2a:4f:3e:c8:82:7f:4e:9f:b5:c0:c8:70:e8: bb:81:42:f5:ab:65:a1:41:a0:db:07:fc:1c:8f:20: a8:8c:21:74:48:07:2b:9d:6f:53:92:89:b9:e5:b3: 57:7e:a8:c6:8b:ac:21:44:37:8d:45:d3:26:2f:da: b5:83:ea:42:1f:28:9c:3d:ab:26:2d:02:01:5c:6f: 7f:8c:e7:4b:38:95:5d:b5:5b:1a:4b:0f:af:d6:47: 6f:88:19:89:07:60:0d:89:9e:e5:6c:0c:77:f1:d9: 02:6a:ee:61:e7:91:07:26:eb:b8:9b:3f:72:bd:29: 4a:9e:5c:b9:3b:e6:2a:12:a5:d1:cf:29:aa:22:79: d2:d6:1d:63:1d:6f:d1:5d:53:f9:37:d4:58:0a:c4: 4b:37:f2:ff:84:88:17:37:df:5c:c8:8e:ee:b8:d4: 4f:4e:f4:f3:eb:0a:61:1e:85:3a:74:7b:f7:24:99: 0a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:75:6B:F5:21:60:C5:99:1F:BA:4D:78:F3:20:00:C0:5C:45:8A X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.103.90.0-167.103.95.255 167.103.170.0/24 Signature Algorithm: sha256WithRSAEncryption 09:fa:35:56:15:44:8c:45:7c:46:ea:2b:a1:a4:46:55:86:18: 62:ad:d8:ca:eb:6f:02:67:ab:91:15:79:27:c5:dc:e6:66:16: be:28:08:5a:70:5b:21:5f:89:cb:f5:d7:a0:33:74:be:fc:89: 34:f5:04:5a:0d:97:dc:99:b6:d4:83:69:2f:6e:1c:19:c4:80: 2c:3b:da:b3:2b:39:ab:50:fd:07:1d:47:b6:d7:19:4a:f5:f6: f3:fc:bf:84:b1:df:4c:f7:80:60:64:9c:d2:0e:37:8d:71:a6: 1c:c1:ee:e9:69:66:c1:0b:b3:bb:58:a6:5c:0e:bf:5b:d5:61: 40:c8:7a:61:2d:19:71:dd:ce:0f:f3:1c:13:53:20:7b:ac:23: 82:54:45:61:0b:ec:0b:33:69:ce:8c:40:ff:78:3e:7a:ec:3a: 4e:d5:29:64:81:ac:89:9f:59:8e:cd:76:21:17:36:a6:0d:2c: 8d:c7:ac:96:75:6a:46:c5:8e:ee:44:b5:c9:f6:32:06:4a:f7: 83:03:27:02:35:16:0a:36:08:f4:18:15:a1:54:8b:42:1a:00: 06:65:1c:4b:df:24:dd:ba:58:6d:a9:8f:64:b3:18:80:fc:02: 8e:8a:c8:00:1c:93:c4:9b:e0:a4:c5:4b:5e:f2:99:19:ce:71: f7:77:2f:32 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjUwNDE0MTgzNjUxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZkNTVjMy1hOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbMiRHjYBnN7/SADkDNGHZr5JTpHhoKvtkcCzfbQhefRRqh6zmogwclchIJH A4oU4Pj9SHOhPUkyjmRlcznQiFKISS4sy/IrpA1mHCpPPsiCf06ftcDIcOi7gUL1 q2WhQaDbB/wcjyCojCF0SAcrnW9Tkom55bNXfqjGi6whRDeNRdMmL9q1g+pCHyic PasmLQIBXG9/jOdLOJVdtVsaSw+v1kdviBmJB2ANiZ7lbAx38dkCau5h55EHJuu4 mz9yvSlKnly5O+YqEqXRzymqInnS1h1jHW/RXVP5N9RYCsRLN/L/hIgXN99cyI7u uNRPTvTz6wphHoU6dHv3JJkKyQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFGXNdWv1 IWDFmR+6TXjzIADAXEWKMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvM0UwQkEyMUNF QkIyMTFFRUE5M0Q5QjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEAadnWgMEBadnQAMEAKdnqjANBgkqhkiG9w0BAQsFAAOC AQEACfo1VhVEjEV8RuoroaRGVYYYYq3YyutvAmerkRV5J8Xc5mYWvigIWnBbIV+J y/XXoDN0vvyJNPUEWg2X3Jm21INpL24cGcSALDvasys5q1D9Bx1HttcZSvX28/y/ hLHfTPeAYGSc0g43jXGmHMHu6WlmwQuzu1imXA6/W9VhQMh6YS0Zcd3OD/McE1Mg e6wjglRFYQvsCzNpzoxA/3g+euw6TtUpZIGsiZ9Zjs12IRc2pg0sjceslnVqRsWO 7kS1yfYyBkr3gwMnAjUWCjYI9BgVoVSLQhoABmUcS98k3bpYbamPZLMYgPwCjorI AByTxJvgpMVLXvKZGc5x93cvMg== -----END CERTIFICATE-----Generated at Wed Apr 23 06:35:54 2025 by rpki-client on console.sobornost.net