$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa File: 19CBA44C173F11F08E4D594DC4F9AE02.roa (raw, json) Hash identifier: fGTHrD4EoaVLUBeDI8+wRQTcKC/emxbBQTiRlGHrOYk= Subject key identifier: 53:81:2E:F7:E6:1E:57:55:FD:11:B4:4E:5D:BB:7D:84:FC:BB:7A:3A Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 01B6 Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa Signing time: Sat 12 Apr 2025 01:55:28 +0000 ROA not before: Sat 12 Apr 2025 01:55:28 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 197537 IP address blocks: 43.224.149.0/24 maxlen: 24 103.43.172.0/24 maxlen: 24 103.43.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Apr 12 01:55:28 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67f9c810-d667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:31:e2:c7:5b:0b:ab:86:11:16:31:03:f5: 81:8f:0a:0f:ee:9e:e5:2e:39:82:9e:3a:3e:94:06: 4e:e6:65:42:bc:c1:8a:2e:ee:95:3b:e7:ab:ea:e1: b4:04:b1:55:14:9b:fe:ce:42:c5:a0:3b:e6:4b:1b: 45:cb:d4:bf:fd:82:14:df:52:5c:17:c3:62:d6:cd: fd:20:22:bf:20:86:9b:00:56:ea:ba:b5:c2:e5:de: 94:99:04:84:12:5e:f0:21:27:8b:96:62:d3:41:06: 70:d4:b6:26:07:50:22:4a:e0:fe:df:4a:5f:e0:8a: e1:db:11:1d:7f:dd:d8:ac:20:4a:48:53:d8:9c:14: 4d:fc:1c:50:d1:84:01:0e:55:8f:97:a0:bb:ca:45: cd:50:e6:08:e3:d7:da:ae:67:e0:1e:d5:c3:7d:03: cc:34:99:0f:e2:fd:3c:81:b1:24:86:38:7e:9c:4d: d5:08:fe:69:a2:25:e2:b5:7c:91:c9:48:f0:0b:48: 09:57:ff:6c:ef:47:7c:a7:3d:11:2e:61:b5:ec:96: 1e:00:53:01:e1:67:f0:ce:d5:ab:47:2d:a8:33:b8: 68:bd:4b:6b:41:85:f7:d1:80:4d:c1:23:93:6d:7f: 69:a3:99:91:79:f8:2a:f1:72:f3:0e:e3:b9:56:4a: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:81:2E:F7:E6:1E:57:55:FD:11:B4:4E:5D:BB:7D:84:FC:BB:7A:3A X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.149.0/24 103.43.172.0/23 Signature Algorithm: sha256WithRSAEncryption a9:d0:4a:b6:fc:58:d9:54:dc:0f:f4:d8:94:f8:ae:7f:10:f1: f6:42:ba:f7:6d:15:ba:45:d6:25:91:91:46:41:a6:55:60:6f: 89:c9:3e:3d:c8:86:1f:f2:8f:5b:ed:3b:f1:0f:7e:53:09:e7: 01:80:7f:8c:52:b4:9e:a7:36:cb:85:40:6f:90:ac:c2:b2:ba: 8c:e2:19:ae:0d:91:77:f8:f5:e0:79:b0:9a:5a:e5:ff:18:01: 62:aa:91:8d:0d:62:24:67:f4:ee:00:06:de:aa:17:9d:a8:98: e1:28:40:92:15:f5:e2:ad:f6:62:39:8b:23:c2:04:c9:8f:65: 6c:10:50:42:f0:12:0f:78:1d:eb:82:d4:13:e1:64:b8:ea:6f: 71:7c:f7:16:ac:64:83:09:9a:2d:35:5f:e4:97:b6:47:65:0b: 84:5a:06:0a:78:b0:ed:2f:81:b7:83:76:14:ce:2b:fa:f5:85: 63:80:5d:f1:33:5d:2d:ed:80:b5:9b:7e:1f:18:f6:52:43:a5: 15:71:86:a3:e2:21:0c:11:c1:4e:0c:09:5b:a8:a5:33:8e:c9: 8d:37:e6:24:e5:73:73:ec:e7:19:83:11:d1:be:cb:dc:3d:9b: 45:30:ca:4d:18:df:88:c0:ab:a0:52:8a:ed:9c:b3:d3:ff:27: 43:f4:4b:ae -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUwNDEyMDE1NTI4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y5YzgxMC1kNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wMx4sdbC6uGERYxA/WBjwoP7p7lLjmCnjo+lAZO5mVCvMGKLu6VO+er6uG0 BLFVFJv+zkLFoDvmSxtFy9S//YIU31JcF8Ni1s39ICK/IIabAFbqurXC5d6UmQSE El7wISeLlmLTQQZw1LYmB1AiSuD+30pf4Irh2xEdf93YrCBKSFPYnBRN/BxQ0YQB DlWPl6C7ykXNUOYI49farmfgHtXDfQPMNJkP4v08gbEkhjh+nE3VCP5poiXitXyR yUjwC0gJV/9s70d8pz0RLmG17JYeAFMB4WfwztWrRy2oM7hovUtrQYX30YBNwSOT bX9po5mRefgq8XLzDuO5VkqPLQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFOBLvfm HldV/RG0Tl27fYT8u3o6MB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvMTlDQkE0NEMx NzNGMTFGMDhFNEQ1OTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr4JUDBAFnK6wwDQYJKoZIhvcNAQELBQADggEBAKnQSrb8 WNlU3A/02JT4rn8Q8fZCuvdtFbpF1iWRkUZBplVgb4nJPj3Ihh/yj1vtO/EPflMJ 5wGAf4xStJ6nNsuFQG+QrMKyuoziGa4NkXf49eB5sJpa5f8YAWKqkY0NYiRn9O4A Bt6qF52omOEoQJIV9eKt9mI5iyPCBMmPZWwQUELwEg94HeuC1BPhZLjqb3F89xas ZIMJmi01X+SXtkdlC4RaBgp4sO0vgbeDdhTOK/r1hWOAXfEzXS3tgLWbfh8Y9lJD pRVxhqPiIQwRwU4MCVuopTOOyY035iTlc3Ps5xmDEdG+y9w9m0Uwyk0Y34jAq6BS iu2cs9P/J0P0S64= -----END CERTIFICATE-----Generated at Wed Apr 23 06:36:04 2025 by rpki-client on console.sobornost.net