$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e203136353039.roa File: 3130332e32352e3132342e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: 0ULEQRz2ldMvt+RFzaD6gYHgW85Kkj7F+ioCi2gyZr8= Subject key identifier: 16:CE:04:9C:75:A4:DC:16:BB:28:DE:AA:28:A0:96:60:7F:85:4C:68 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 458EB4280F9CA242F631A5358A719CAA73E371F5 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e203136353039.roa Signing time: Tue 31 Dec 2024 07:04:46 +0000 ROA not before: Tue 31 Dec 2024 06:59:46 +0000 ROA not after: Tue 30 Dec 2025 07:04:46 +0000 asID: 16509 IP address blocks: 103.25.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 13:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8e:b4:28:0f:9c:a2:42:f6:31:a5:35:8a:71:9c:aa:73:e3:71:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Dec 31 06:59:46 2024 GMT Not After : Dec 30 07:04:46 2025 GMT Subject: CN=16CE049C75A4DC16BB28DEAA28A096607F854C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:71:b5:63:12:e5:9a:48:c9:31:b7:a1:c1: 6f:f8:5f:80:e2:a0:42:e9:32:28:33:58:89:a4:ad: 83:02:ec:bb:b5:fc:05:4f:d2:f5:a4:00:b0:20:c3: e3:60:40:1a:eb:03:d3:15:19:99:31:a5:35:d9:fd: 59:76:e9:7f:f1:f9:4c:ff:78:9b:53:39:2e:8f:bf: 29:23:a4:f3:fe:f5:c8:57:79:75:2c:4e:dd:a2:2b: bf:47:4e:e2:b3:40:31:da:2b:df:04:61:9e:5d:36: 4a:c7:64:0d:fe:1e:e5:e2:a4:ef:81:0d:65:ea:3f: 0f:49:36:38:22:13:e2:ce:58:1b:c3:e0:3b:56:49: db:4d:63:58:d4:37:24:b7:96:51:04:3d:3f:43:5b: 09:b8:b9:89:02:e5:69:87:4e:ba:10:4a:3b:b8:b4: 60:b8:a2:d0:8a:0a:9d:2c:91:07:78:a6:06:12:51: 96:b4:0d:7c:cc:03:e0:b5:8f:f1:18:4c:a3:e5:36: 65:48:b0:67:58:d4:8d:8a:fd:58:18:6b:0a:66:24: f9:09:04:7e:45:27:3a:71:59:67:ea:9d:cc:e7:e4: c2:49:ee:a0:de:0c:aa:a7:62:eb:44:c3:2c:19:0a: 58:b7:7a:37:0f:8e:07:45:73:f3:e1:12:dd:bc:49: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CE:04:9C:75:A4:DC:16:BB:28:DE:AA:28:A0:96:60:7F:85:4C:68 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.124.0/24 Signature Algorithm: sha256WithRSAEncryption 31:90:06:b5:27:6b:32:8e:9b:89:66:31:fe:57:df:c2:71:96: 64:3c:f1:b6:e8:ef:4a:42:95:1b:85:2d:15:c2:77:43:e0:47: 19:35:ed:00:ba:aa:ee:3d:6c:0e:9d:13:18:21:bc:56:ba:62: 2a:6d:cb:15:5d:88:55:86:58:c5:aa:79:03:3d:41:9b:3d:8b: d3:63:ae:d7:e1:03:38:79:e8:f9:29:18:68:93:b3:97:8f:e6: fd:29:d8:79:0b:31:6b:fc:8e:8a:ab:e6:df:dc:44:b4:ed:54: 76:fe:bc:78:a2:e1:b9:60:53:a4:6b:2e:59:41:71:a2:b3:54: 88:f0:51:a3:b8:ba:73:a2:26:f7:ae:32:82:3d:da:5c:71:87: 98:f6:20:13:96:b2:20:14:63:8d:06:bc:23:b8:a6:79:c1:f0: fd:9f:2e:36:15:3b:96:4c:c3:6e:f6:9c:d0:1b:f7:cb:65:b9: db:fb:51:cb:fb:2e:bc:8c:9f:b6:1b:da:00:4a:e4:cd:70:a3: 4b:b4:65:f4:09:32:37:9f:bb:a6:58:80:16:58:0d:7c:bb:cc: 6f:eb:99:fd:18:c6:16:6b:d1:05:eb:cd:23:c8:e8:62:25:e8: 19:d4:53:a1:ba:a0:f7:8b:22:07:57:20:93:03:b6:e0:44:6e: 32:65:d7:7a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIURY60KA+cokL2MaU1inGcqnPjcfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI0MTIzMTA2NTk0NloX DTI1MTIzMDA3MDQ0NlowMzExMC8GA1UEAxMoMTZDRTA0OUM3NUE0REMxNkJCMjhE RUFBMjhBMDk2NjA3Rjg1NEM2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKo0cbVjEuWaSMkxt6HBb/hfgOKgQukyKDNYiaStgwLsu7X8BU/S9aQAsCDD 42BAGusD0xUZmTGlNdn9WXbpf/H5TP94m1M5Lo+/KSOk8/71yFd5dSxO3aIrv0dO 4rNAMdor3wRhnl02SsdkDf4e5eKk74ENZeo/D0k2OCIT4s5YG8PgO1ZJ201jWNQ3 JLeWUQQ9P0NbCbi5iQLlaYdOuhBKO7i0YLii0IoKnSyRB3imBhJRlrQNfMwD4LWP 8RhMo+U2ZUiwZ1jUjYr9WBhrCmYk+QkEfkUnOnFZZ+qdzOfkwknuoN4Mqqdi60TD LBkKWLd6Nw+OB0Vz8+ES3bxJCykCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQWzgSc daTcFrso3qoooJZgf4VMaDAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMjZE QTgwMDAwLzEvMzEzMDMzMmUzMjM1MmUzMTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxl8MA0GCSqGSIb3DQEBCwUAA4IB AQAxkAa1J2syjpuJZjH+V9/CcZZkPPG26O9KQpUbhS0VwndD4EcZNe0AuqruPWwO nRMYIbxWumIqbcsVXYhVhljFqnkDPUGbPYvTY67X4QM4eej5KRhok7OXj+b9Kdh5 CzFr/I6Kq+bf3ES07VR2/rx4ouG5YFOkay5ZQXGis1SI8FGjuLpzoib3rjKCPdpc cYeY9iATlrIgFGONBrwjuKZ5wfD9ny42FTuWTMNu9pzQG/fLZbnb+1HL+y68jJ+2 G9oASuTNcKNLtGX0CTI3n7umWIAWWA18u8xv65n9GMYWa9EF680jyOhiJegZ1FOh uqD3iyIHVyCTA7bgRG4yZdd6 -----END CERTIFICATE-----Generated at Thu Apr 24 15:53:45 2025 by rpki-client on console.sobornost.net