$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/AD5EE696C0A711EE97A2E984C4F9AE02.roa File: AD5EE696C0A711EE97A2E984C4F9AE02.roa (raw, json) Hash identifier: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A= Subject key identifier: CB:B5:34:7D:4D:3D:73:07:A4:3E:04:67:B3:BA:E2:C2:6B:DF:F5:86 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 045A Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/AD5EE696C0A711EE97A2E984C4F9AE02.roa Signing time: Tue 31 Dec 2024 00:02:21 +0000 ROA not before: Tue 31 Dec 2024 00:02:21 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139604 IP address blocks: 103.176.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Dec 31 00:02:21 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6773348d-b2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:7a:25:be:d9:65:6d:45:03:86:98:e0:33: c7:7f:c7:f6:d8:24:a2:cb:04:8a:b3:bd:70:6d:12: d7:13:80:76:46:24:7a:f3:13:c8:db:6e:e9:e7:29: fb:d6:a4:49:cc:f2:5d:89:2f:ac:3f:c6:32:81:96: 2a:8a:1e:bc:83:86:85:fd:7c:d7:2d:58:49:57:4f: fe:80:7c:75:48:68:a7:c8:67:76:8a:db:0a:30:73: 93:57:37:b6:5e:50:97:69:e6:0d:c6:fc:1e:85:45: 5c:0e:44:51:04:4c:da:13:b9:23:39:f8:80:d0:d1: cf:ec:78:25:8d:d6:98:e3:a2:22:bb:bb:74:5d:9f: a7:78:d6:c7:dd:a0:ce:34:2b:68:60:d2:c2:bc:01: da:e7:da:f6:fd:61:ad:67:1b:2a:87:6f:d7:24:e7: fa:1a:34:99:bf:1a:ca:e7:6f:f0:ac:21:37:ae:72: 56:65:58:50:74:a6:d1:8b:9b:0a:7d:2d:45:fe:19: b4:7b:fe:81:25:e2:12:bf:df:fe:8d:ba:b1:d6:02: 08:93:e1:4b:ea:a4:29:06:39:21:6b:73:c7:37:c5: ec:63:89:10:c4:f2:2f:e6:0b:31:9f:8f:1f:6b:60: fc:72:95:26:25:e5:86:f9:14:e4:78:1b:a2:95:77: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B5:34:7D:4D:3D:73:07:A4:3E:04:67:B3:BA:E2:C2:6B:DF:F5:86 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/AD5EE696C0A711EE97A2E984C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.2.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:6c:ac:d7:e9:b9:62:74:d1:a4:8b:86:9c:26:f1:05:72:00: 12:28:3b:e2:86:d9:9c:1b:3d:bc:01:16:24:e3:3d:df:71:9e: 72:95:99:eb:9f:8e:1b:68:d1:75:1a:b7:52:d9:a9:a3:5b:50: fd:a1:0c:f3:05:13:ed:83:74:70:43:8f:9f:a0:8d:7c:9b:37: b1:1c:cc:e7:6e:45:90:bf:73:41:3a:9c:be:31:a7:dc:b2:0f: ab:aa:0b:5b:4e:d5:e6:bb:b8:86:ce:5a:6f:10:5d:28:e7:a6: 36:5b:8a:bc:4b:8b:0e:0e:7e:05:0e:90:51:22:1e:23:c5:9a: 62:e2:6a:ff:b1:6d:16:09:4b:20:f8:98:a7:d9:68:a9:bd:02: 58:66:6e:ff:b9:1c:6d:cd:c5:64:49:f2:aa:63:be:b7:06:93: 65:36:94:9a:ff:50:c9:60:1c:94:94:6b:02:53:4e:1b:82:2f: 2a:f6:ef:df:ed:74:aa:06:43:c1:7e:c6:22:99:a9:f8:ef:af: ae:12:46:27:89:00:e8:82:21:6a:1f:28:3c:00:8d:91:61:21: 30:21:a6:da:ed:c2:cf:4e:e9:40:c7:e6:e8:ef:bb:6f:3d:a2: 16:b5:f2:69:cf:64:35:a8:83:13:2a:2e:80:a7:24:4d:c8:fc: 88:4c:73:b5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjQxMjMxMDAwMjIxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzczMzQ4ZC1iMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rl6Jb7ZZW1FA4aY4DPHf8f22CSiywSKs71wbRLXE4B2RiR68xPI227p5yn7 1qRJzPJdiS+sP8YygZYqih68g4aF/XzXLVhJV0/+gHx1SGinyGd2itsKMHOTVze2 XlCXaeYNxvwehUVcDkRRBEzaE7kjOfiA0NHP7HgljdaY46Iiu7t0XZ+neNbH3aDO NCtoYNLCvAHa59r2/WGtZxsqh2/XJOf6GjSZvxrK52/wrCE3rnJWZVhQdKbRi5sK fS1F/hm0e/6BJeISv9/+jbqx1gIIk+FL6qQpBjkha3PHN8XsY4kQxPIv5gsxn48f a2D8cpUmJeWG+RTkeBuilXc/yQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMu1NH1N PXMHpD4EZ7O64sJr3/WGMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc0RTgvNDdGNjIwMTI0M0VBMTFFQzg0QUI2MzQ3QzRGOUFFMDIvQUQ1RUU2OTZD MEE3MTFFRTk3QTJFOTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnsAIwDQYJKoZIhvcNAQELBQADggEBABpsrNfpuWJ00aSL hpwm8QVyABIoO+KG2ZwbPbwBFiTjPd9xnnKVmeufjhto0XUat1LZqaNbUP2hDPMF E+2DdHBDj5+gjXybN7EczOduRZC/c0E6nL4xp9yyD6uqC1tO1ea7uIbOWm8QXSjn pjZbirxLiw4OfgUOkFEiHiPFmmLiav+xbRYJSyD4mKfZaKm9Alhmbv+5HG3NxWRJ 8qpjvrcGk2U2lJr/UMlgHJSUawJTThuCLyr279/tdKoGQ8F+xiKZqfjvr64SRieJ AOiCIWofKDwAjZFhITAhptrtws9O6UDH5ujvu289oha18mnPZDWogxMqLoCnJE3I /IhMc7U= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net