$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DF3399ECB84E11EF97E62969C4F9AE02.roa File: DF3399ECB84E11EF97E62969C4F9AE02.roa (raw, json) Hash identifier: YfcH7MvFPCntwU0TJ5xtKSk7jb14lrma7x8uy/kPuIU= Subject key identifier: 7E:B9:98:B4:77:85:B9:04:57:C7:5A:AD:AC:44:DF:94:5C:D5:96:30 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 08B0 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DF3399ECB84E11EF97E62969C4F9AE02.roa Signing time: Thu 12 Dec 2024 06:03:57 +0000 ROA not before: Thu 12 Dec 2024 06:03:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38138 IP address blocks: 114.129.8.0/21 maxlen: 21 114.129.8.0/24 maxlen: 24 114.129.9.0/24 maxlen: 24 114.129.12.0/24 maxlen: 24 2405:eec0::/32 maxlen: 32 2405:eec0:1::/48 maxlen: 48 2405:eec0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 21:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Dec 12 06:03:57 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=675a7ccc-1a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:28:c5:30:bd:b4:d2:20:26:42:b7:06:c2: e1:cc:da:36:47:c0:56:d6:1c:03:65:fd:56:6b:0c: 9f:f7:b7:41:b3:bd:28:de:c0:ed:b9:f5:a6:d4:b7: 5f:b4:cf:f6:8c:74:f8:88:ec:08:69:7b:16:f4:11: d7:d9:5c:f5:c4:6a:6d:f4:be:22:2e:6b:4c:02:43: 86:94:b3:c5:97:3f:b8:40:58:b9:7a:85:2e:10:09: c3:9c:31:a2:e7:75:25:da:74:76:b2:e3:23:5f:06: 79:fb:89:2d:26:2a:79:88:b7:b4:f3:a2:05:98:cb: 43:22:ad:5c:8a:17:94:d3:d8:05:88:05:2c:62:de: 46:6f:fb:2e:73:5c:81:07:99:47:e2:e4:25:51:06: 24:af:2f:4e:fa:60:c5:ee:ef:c6:a1:73:84:6b:8e: cb:5d:fd:9f:1c:78:ff:16:1f:a3:17:78:24:05:5b: f9:af:f0:c2:22:d3:47:90:c4:14:6f:da:ac:0e:07: 2e:f4:64:b0:06:c5:2c:42:5f:fb:62:1a:60:b2:ec: d1:69:b2:60:d4:29:28:ee:ce:78:ff:f8:e7:a5:09: b8:ed:4d:48:1a:62:e5:8d:1c:74:ad:94:68:6a:a6: 93:e0:7e:77:c5:bd:91:9d:0a:23:67:c3:5e:16:8d: d0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B9:98:B4:77:85:B9:04:57:C7:5A:AD:AC:44:DF:94:5C:D5:96:30 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DF3399ECB84E11EF97E62969C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.8.0/21 IPv6: 2405:eec0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:07:f4:07:b1:4b:aa:13:8c:eb:ab:a2:30:dd:da:0c:86:11: 31:d6:93:70:b6:59:38:c9:31:dc:62:5d:ba:0d:76:30:c3:46: 38:e3:d5:13:78:b5:c1:a0:7d:f9:7f:6d:5b:a7:58:25:78:75: 3b:5b:c2:69:59:7c:2d:77:01:c1:f8:cb:f0:80:06:61:23:6f: 82:19:a8:be:3f:dd:34:88:52:92:31:3e:89:34:a9:c8:db:93: 30:ec:e7:45:32:ad:61:53:af:63:42:c4:f6:67:49:3f:8f:c2: de:9b:16:cd:b2:34:6d:7c:20:e5:6d:29:5a:0d:61:dd:9c:1c: ab:b5:0f:57:74:ba:d2:94:9f:ed:42:2e:b6:c9:aa:eb:56:d4: d7:61:e5:f7:ff:84:5a:49:b6:7e:62:b9:88:28:23:f0:03:93: f9:9f:67:0e:0b:8e:e4:20:a6:23:74:e8:be:92:a6:a4:a3:dc: e2:00:75:29:cb:69:2f:65:14:45:57:c1:07:51:49:42:04:e5: 60:01:b5:66:99:61:75:22:02:99:d7:0a:6c:ac:71:69:fa:1b: 11:fc:54:e2:0b:91:82:5c:6e:8d:dc:90:de:93:aa:04:96:c1: af:94:46:e0:f9:27:9a:f2:9e:d0:d1:45:d0:23:92:88:13:28: 0b:57:e5:d6 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjQxMjEyMDYwMzU3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVhN2NjYy0xYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XIoxTC9tNIgJkK3BsLhzNo2R8BW1hwDZf1Wawyf97dBs70o3sDtufWm1Ldf tM/2jHT4iOwIaXsW9BHX2Vz1xGpt9L4iLmtMAkOGlLPFlz+4QFi5eoUuEAnDnDGi 53Ul2nR2suMjXwZ5+4ktJip5iLe086IFmMtDIq1ciheU09gFiAUsYt5Gb/suc1yB B5lH4uQlUQYkry9O+mDF7u/GoXOEa47LXf2fHHj/Fh+jF3gkBVv5r/DCItNHkMQU b9qsDgcu9GSwBsUsQl/7YhpgsuzRabJg1Cko7s54//jnpQm47U1IGmLljRx0rZRo aqaT4H53xb2RnQojZ8NeFo3Q0QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFH65mLR3 hbkEV8daraxE35Rc1ZYwMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvREYzMzk5RUNC ODRFMTFFRjk3RTYyOTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBANygQgwDQQCAAIwBwMFACQF7sAwDQYJKoZIhvcNAQELBQAD ggEBADoH9AexS6oTjOurojDd2gyGETHWk3C2WTjJMdxiXboNdjDDRjjj1RN4tcGg ffl/bVunWCV4dTtbwmlZfC13AcH4y/CABmEjb4IZqL4/3TSIUpIxPok0qcjbkzDs 50UyrWFTr2NCxPZnST+Pwt6bFs2yNG18IOVtKVoNYd2cHKu1D1d0utKUn+1CLrbJ qutW1Ndh5ff/hFpJtn5iuYgoI/ADk/mfZw4LjuQgpiN06L6SpqSj3OIAdSnLaS9l FEVXwQdRSUIE5WABtWaZYXUiApnXCmyscWn6GxH8VOILkYJcbo3ckN6TqgSWwa+U RuD5J5ryntDRRdAjkogTKAtX5dY= -----END CERTIFICATE-----Generated at Wed Feb 19 03:47:57 2025 by rpki-client on console.sobornost.net