$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa File: 38E45CE08C2511EDB64DB410C4F9AE02.roa (raw, json) Hash identifier: nGoAAcc8EiGUc2jIX6TFO/zcGFhh7Cn96wb0ZRxZplE= Subject key identifier: 81:95:88:E7:95:7F:C6:5A:DF:7D:FF:E4:BB:93:86:E2:17:18:68:2A Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 01D0 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa Signing time: Fri 25 Apr 2025 02:29:11 +0000 ROA not before: Fri 25 Apr 2025 02:29:11 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 131471 IP address blocks: 103.152.42.0/24 maxlen: 24 103.152.43.0/24 maxlen: 24 2001:df7:1f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Apr 25 02:29:11 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=680af377-2559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:16:87:11:df:f1:9f:cb:83:73:13:7e:55: 54:41:cc:a4:58:92:44:dc:bc:98:c4:e7:74:36:98: e9:62:4a:a3:96:54:25:62:18:4f:11:1d:ff:de:40: 9b:72:12:5d:d9:99:41:a5:f5:c1:c9:02:39:d4:a5: 2d:c6:da:33:f5:5b:80:d5:77:22:19:bc:f0:1b:80: 1a:f9:a3:71:c2:f6:dc:03:32:93:c1:45:a9:9c:d9: b4:c0:d9:8c:f6:b8:a3:df:f3:4d:36:da:96:b8:2a: 4d:7a:cc:de:3f:15:8e:e1:97:05:bb:c5:35:94:e1: 1c:91:f7:46:25:07:14:f8:e8:93:8a:f6:f4:c7:60: 4d:e3:a8:18:ca:78:61:89:23:d4:2c:44:98:99:34: 88:dc:f9:1a:66:00:19:35:af:12:f6:ac:26:47:49: fa:6c:fa:8e:1c:90:55:dc:b1:b4:bf:a0:1b:a7:86: 72:02:ed:c6:37:c4:aa:ec:0d:7f:a9:ea:dc:44:11: 13:6f:3f:0c:26:f5:ad:79:f0:57:8b:5b:2f:ce:ad: b8:d4:92:e9:ee:63:74:8f:bf:44:3c:a5:4e:7e:ce: 7a:9b:cc:cb:da:12:ae:b0:1c:45:b4:a8:49:11:b5: 39:01:39:b3:81:c4:fd:4a:22:bc:a4:7c:b7:54:fb: 37:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:95:88:E7:95:7F:C6:5A:DF:7D:FF:E4:BB:93:86:E2:17:18:68:2A X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.42.0/23 IPv6: 2001:df7:1f80::/48 Signature Algorithm: sha256WithRSAEncryption ae:ec:94:be:59:93:9a:ab:21:d3:66:b0:c7:46:1a:01:a8:3e: 5c:dc:b7:82:51:bc:83:86:87:0f:4d:26:8e:80:99:dd:d7:f0: bf:3b:aa:28:f8:f2:6b:89:13:e5:e2:e0:75:a2:99:b8:9d:6c: 06:b8:13:33:10:60:69:3f:18:14:07:21:c6:ef:d7:ad:72:3d: a3:4d:be:2a:e7:8d:a9:1f:c1:6a:49:e5:07:5c:c2:38:ac:3b: 92:e7:ef:83:3f:3a:2b:a2:d0:44:c2:a2:65:35:9a:07:b3:0a: 31:00:fc:63:a2:bb:41:33:8a:72:bc:c9:56:38:b4:2b:ec:51: ee:34:51:7d:8f:37:2b:bd:3f:62:74:82:d6:9a:2e:f4:3a:29: c4:14:d6:d4:1b:81:7a:52:ca:82:fb:fc:07:fa:32:05:f4:d1: f8:92:bb:34:d4:0e:8e:d1:46:ba:93:b1:6b:eb:92:38:8a:89: e5:a6:f2:af:74:7a:84:37:78:ab:85:f1:e4:fc:ed:08:41:d2: 2c:f3:4e:85:3d:9a:49:04:ea:13:ed:5c:88:fd:99:d0:90:1b: f1:ad:70:ee:3c:5c:e5:84:98:a2:7a:0f:5e:5a:7d:58:24:e1: 69:4b:57:3c:93:89:1f:e4:35:04:30:ef:3a:85:e3:b9:6d:42: 5f:b4:af:98 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwNDI1MDIyOTExWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhZjM3Ny0yNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy00WhxHf8Z/Lg3MTflVUQcykWJJE3LyYxOd0NpjpYkqjllQlYhhPER3/3kCb chJd2ZlBpfXByQI51KUtxtoz9VuA1XciGbzwG4Aa+aNxwvbcAzKTwUWpnNm0wNmM 9rij3/NNNtqWuCpNeszePxWO4ZcFu8U1lOEckfdGJQcU+OiTivb0x2BN46gYynhh iSPULESYmTSI3PkaZgAZNa8S9qwmR0n6bPqOHJBV3LG0v6Abp4ZyAu3GN8Sq7A1/ qercRBETbz8MJvWtefBXi1svzq241JLp7mN0j79EPKVOfs56m8zL2hKusBxFtKhJ EbU5ATmzgcT9SiK8pHy3VPs38wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIGViOeV f8Za333/5LuThuIXGGgqMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUyQUUvQzcwRkVBMkE4QzIwMTFFREFERDVDODA5QzRGOUFFMDIvMzhFNDVDRTA4 QzI1MTFFREI2NERCNDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmCowDwQCAAIwCQMHACABDfcfgDANBgkqhkiG9w0BAQsF AAOCAQEAruyUvlmTmqsh02awx0YaAag+XNy3glG8g4aHD00mjoCZ3dfwvzuqKPjy a4kT5eLgdaKZuJ1sBrgTMxBgaT8YFAchxu/XrXI9o02+KueNqR/BaknlB1zCOKw7 kufvgz86K6LQRMKiZTWaB7MKMQD8Y6K7QTOKcrzJVji0K+xR7jRRfY83K70/YnSC 1pou9DopxBTW1BuBelLKgvv8B/oyBfTR+JK7NNQOjtFGupOxa+uSOIqJ5abyr3R6 hDd4q4Xx5PztCEHSLPNOhT2aSQTqE+1ciP2Z0JAb8a1w7jxc5YSYonoPXlp9WCTh aUtXPJOJH+Q1BDDvOoXjuW1CX7SvmA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net