$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa File: 1489D376FB2611EFBA3F0167C4F9AE02.roa (raw, json) Hash identifier: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ= Subject key identifier: 83:3B:C0:2C:0F:1D:48:30:8B:47:DB:43:61:92:1C:42:A6:DC:98:9C Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 16 Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa Signing time: Thu 03 Apr 2025 07:35:20 +0000 ROA not before: Thu 03 Apr 2025 07:35:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135357 IP address blocks: 103.212.228.0/22 maxlen: 22 103.212.228.0/24 maxlen: 24 103.212.229.0/24 maxlen: 24 103.212.230.0/24 maxlen: 24 103.212.231.0/24 maxlen: 24 160.202.168.0/22 maxlen: 22 160.202.168.0/24 maxlen: 24 160.202.169.0/24 maxlen: 24 160.202.170.0/24 maxlen: 24 160.202.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Apr 3 07:35:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ee3a38-c013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:d0:31:60:0d:6b:e9:34:1f:ff:23:80:20: 64:81:29:07:2a:0e:c8:1d:49:0c:61:5c:ee:97:74: 23:ca:eb:8c:f7:a0:25:d4:86:4f:24:f9:dd:6c:2f: 93:1b:dd:3f:64:63:d0:69:e0:83:e9:05:fa:9f:c6: ee:d2:ff:8c:0b:58:c6:68:bb:41:3e:d3:2b:65:02: c8:26:43:65:f5:b1:88:f3:26:1a:af:bb:59:52:1d: df:a7:e7:7d:d3:f0:90:a2:d6:b8:9b:cc:54:45:b2: 5c:82:61:50:ec:ca:ec:d9:bd:d3:57:a7:5b:79:01: ed:9a:16:32:0d:95:3b:d7:39:87:d8:04:64:dd:bc: 78:df:fc:0f:89:15:82:88:c8:7d:55:dc:58:e3:88: 39:6b:da:0a:6e:c0:d2:18:be:6e:d3:18:9a:d4:7f: 7b:9d:69:71:51:28:fe:f0:31:7e:cc:3d:09:a6:02: 07:a3:b2:88:7c:4d:82:2d:3c:b3:be:61:7b:80:94: da:d2:a4:7f:f2:64:bb:f4:20:d2:b7:b1:65:c5:c9: 67:21:b4:cb:62:b2:a3:a1:58:0a:d9:62:d4:c2:13: 21:85:61:17:ae:c7:93:30:9b:12:99:8b:55:8c:f0: 1b:63:7b:35:e0:11:ef:71:13:0d:60:c1:07:9c:c9: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3B:C0:2C:0F:1D:48:30:8B:47:DB:43:61:92:1C:42:A6:DC:98:9C X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.228.0/22 160.202.168.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:d9:b5:1d:10:4f:13:00:b9:5d:14:c5:7b:31:19:c5:51:a7: b8:47:16:f2:67:84:37:23:0a:72:dd:77:47:15:f7:98:a7:a1: 8f:0b:3d:af:9d:b6:6b:0f:e8:21:96:2d:2d:e8:c9:91:92:c8: 1e:43:27:3c:a0:ba:7d:3c:a5:bf:e9:48:ae:17:1d:03:72:65: cf:1c:18:3f:18:8d:e5:55:e5:07:3e:c0:34:d6:99:b4:53:cd: bc:cb:74:86:2c:ec:64:d2:27:63:99:a2:13:0c:32:a6:0c:2d: 83:85:db:1f:bc:73:19:0e:74:5d:9c:02:d3:f8:60:01:ec:d9: ec:03:73:6f:66:b7:e8:42:c8:3c:7f:9c:6b:60:77:06:06:40: c0:ec:c8:06:79:d6:ca:2e:d9:3a:6b:e8:9f:72:3d:50:21:9e: 1d:31:8b:76:e2:fb:1d:1f:dd:9d:0f:1c:14:8b:77:43:19:2c: 19:b8:52:c7:cd:03:0d:f8:3f:cf:55:7b:b2:8e:01:a2:a8:45: d7:31:96:89:f1:7d:d2:04:c4:c1:c6:c3:f7:61:66:72:26:e1: 2d:24:d9:c8:6d:c4:dc:01:cd:ce:b3:e7:5a:79:eb:ff:5a:81: 31:b6:c0:61:88:5d:f6:a6:24:0d:46:91:8f:77:46:37:95:26: 16:76:bf:3d -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA0MDMwNzM1MjBaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZWUzYTM4LWMwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUXdAxYA1r6TQf/yOAIGSBKQcqDsgdSQxhXO6XdCPK64z3oCXUhk8k+d1sL5Mb 3T9kY9Bp4IPpBfqfxu7S/4wLWMZou0E+0ytlAsgmQ2X1sYjzJhqvu1lSHd+n533T 8JCi1ribzFRFslyCYVDsyuzZvdNXp1t5Ae2aFjINlTvXOYfYBGTdvHjf/A+JFYKI yH1V3FjjiDlr2gpuwNIYvm7TGJrUf3udaXFRKP7wMX7MPQmmAgejsoh8TYItPLO+ YXuAlNrSpH/yZLv0INK3sWXFyWchtMtisqOhWArZYtTCEyGFYReux5MwmxKZi1WM 8BtjezXgEe9xEw1gwQecyfNdAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUgzvALA8d SDCLR9tDYZIcQqbcmJwwHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDc2OS81NDU2ODhDQUZCMjQxMUVGQjc2QjlGNEJDNEY5QUUwMi8xNDg5RDM3NkZC MjYxMUVGQkEzRjAxNjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfU5AMEAqDKqDANBgkqhkiG9w0BAQsFAAOCAQEAOtm1HRBP EwC5XRTFezEZxVGnuEcW8meENyMKct13RxX3mKehjws9r522aw/oIZYtLejJkZLI HkMnPKC6fTylv+lIrhcdA3JlzxwYPxiN5VXlBz7ANNaZtFPNvMt0hizsZNInY5mi Ewwypgwtg4XbH7xzGQ50XZwC0/hgAezZ7ANzb2a36ELIPH+ca2B3BgZAwOzIBnnW yi7ZOmvon3I9UCGeHTGLduL7HR/dnQ8cFIt3QxksGbhSx80DDfg/z1V7so4BoqhF 1zGWifF90gTEwcbD92FmcibhLSTZyG3E3AHNzrPnWnnr/1qBMbbAYYhd9qYkDUaR j3dGN5UmFna/PQ== -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net