$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa File: 3130332e3137352e32372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: Lk+SsdtbrANWV2nijvQOlAUdOOBaDgz1FwOw4ZRQW0w= Subject key identifier: C9:8D:BF:AD:51:9B:1F:02:64:F0:74:F4:76:31:37:7B:20:FB:3F:CA Certificate issuer: /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB Certificate serial: 3B64C8E7DE9BD39DC6FDCF1F72475C671359B2F2 Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa Signing time: Thu 16 Jan 2025 00:28:41 +0000 ROA not before: Thu 16 Jan 2025 00:23:41 +0000 ROA not after: Thu 15 Jan 2026 00:28:41 +0000 asID: 834 IP address blocks: 103.175.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 20:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:64:c8:e7:de:9b:d3:9d:c6:fd:cf:1f:72:47:5c:67:13:59:b2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D70000, serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB Validity Not Before: Jan 16 00:23:41 2025 GMT Not After : Jan 15 00:28:41 2026 GMT Subject: CN=C98DBFAD519B1F0264F074F47631377B20FB3FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:42:fe:49:e0:98:8f:68:aa:b3:ef:77:d9: 37:d3:b5:ca:91:c0:0e:16:01:4c:f6:54:d4:d7:77: 08:99:03:ab:d8:0b:aa:22:9d:a1:5d:7e:e3:33:c4: bb:3e:40:b1:52:98:99:e4:ba:6f:99:f5:ab:89:c5: 1a:b3:06:b2:c8:bb:10:a2:8d:dd:15:ac:4e:f3:59: c8:d3:c0:33:ad:dc:e4:25:4a:3c:a6:45:67:fe:18: 3f:90:f6:11:3e:10:9a:56:62:bb:98:2f:4d:fa:f2: a6:61:fb:57:cc:5b:40:a5:36:69:01:41:69:f8:bf: 3c:53:9b:86:2b:48:7e:12:a4:ee:21:cd:9f:c3:a6: 66:48:34:d0:a1:92:88:80:3f:38:ab:c5:26:cf:ab: 93:bf:b8:4b:88:c7:9d:3a:62:52:da:cb:1a:8d:e5: ea:a0:f2:aa:51:e4:e2:98:1e:d9:da:3e:d9:74:f6: 90:a2:d9:d7:d8:9c:e8:29:f9:2b:fe:40:89:02:7c: b3:2a:13:a7:df:39:8d:31:89:dd:09:58:7a:57:47: 0e:a3:98:e7:ee:dd:d4:c3:00:41:39:03:28:60:e5: 03:06:83:fe:f2:ff:49:e9:23:2d:65:8a:92:98:32: 62:6c:78:81:5c:20:62:46:05:4d:57:fa:ba:a2:8c: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8D:BF:AD:51:9B:1F:02:64:F0:74:F4:76:31:37:7B:20:FB:3F:CA X509v3 Authority Key Identifier: keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.27.0/24 Signature Algorithm: sha256WithRSAEncryption 32:d7:70:f8:2e:55:27:46:e9:d7:ea:2a:67:1a:9b:09:e5:6a: 08:ca:9d:b6:28:17:33:58:a4:92:2b:f6:9d:2a:1c:ac:38:85: 29:a8:d8:5f:65:eb:06:2c:f6:d8:36:69:53:9f:5e:ff:ca:30: b1:19:6c:c9:f9:a1:2e:27:68:b2:d6:22:07:01:7b:b2:65:5c: a4:17:e1:17:75:18:27:d4:0f:40:55:16:dd:9a:d6:8d:68:39: 7e:c9:ab:f1:fc:14:df:96:08:56:9f:39:64:2e:70:8a:d3:3c: 50:a8:99:db:de:9b:8d:23:f2:55:2d:de:e4:31:83:3a:06:5d: 92:95:f6:f9:07:60:ec:0a:97:1f:15:0a:ad:ee:43:fb:ef:59: 0e:b3:cf:9c:f6:af:7b:d9:46:f3:65:91:a3:b2:9c:40:af:e5: 79:b9:09:18:b8:e6:0d:28:4f:c2:ff:72:93:33:04:a3:ba:35: 4b:16:d6:ee:6d:e4:63:ad:93:db:b3:85:26:fe:c4:f7:a2:8a: a2:40:09:0a:85:d7:37:39:92:57:49:9b:d9:c3:db:5f:a9:e2: 27:ce:27:79:79:b2:8c:5a:2d:cb:4d:03:cd:7b:99:76:2a:ad: 57:83:0f:07:18:de:e1:5a:24:91:36:a0:f5:ac:21:99:4c:07: 16:32:62:26 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUO2TI596b053G/c8fckdcZxNZsvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkU2RDcwMDAwMTEwLwYDVQQFEyhCRURFREQwQUJD MUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCMB4XDTI1MDExNjAwMjM0MVoX DTI2MDExNTAwMjg0MVowMzExMC8GA1UEAxMoQzk4REJGQUQ1MTlCMUYwMjY0RjA3 NEY0NzYzMTM3N0IyMEZCM0ZDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRWQv5J4JiPaKqz73fZN9O1ypHADhYBTPZU1Nd3CJkDq9gLqiKdoV1+4zPE uz5AsVKYmeS6b5n1q4nFGrMGssi7EKKN3RWsTvNZyNPAM63c5CVKPKZFZ/4YP5D2 ET4QmlZiu5gvTfrypmH7V8xbQKU2aQFBafi/PFObhitIfhKk7iHNn8OmZkg00KGS iIA/OKvFJs+rk7+4S4jHnTpiUtrLGo3l6qDyqlHk4pge2do+2XT2kKLZ19ic6Cn5 K/5AiQJ8syoTp985jTGJ3QlYeldHDqOY5+7d1MMAQTkDKGDlAwaD/vL/SekjLWWK kpgyYmx4gVwgYkYFTVf6uqKMP1UCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBTJjb+t UZsfAmTwdPR2MTd7IPs/yjAfBgNVHSMEGDAWgBS+3t0KvBryk37THTYDO3yrBIuJ uzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFCRTZENzAwMDAvMC9CRURFREQw QUJDMUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92dDdkQ3J3YThw Ti0weDAyQXp0OHF3U0xpYnMuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQkU2 RDcwMDAwLzAvMzEzMDMzMmUzMTM3MzUyZTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrxswDQYJKoZIhvcNAQELBQADggEBADLX cPguVSdG6dfqKmcamwnlagjKnbYoFzNYpJIr9p0qHKw4hSmo2F9l6wYs9tg2aVOf Xv/KMLEZbMn5oS4naLLWIgcBe7JlXKQX4Rd1GCfUD0BVFt2a1o1oOX7Jq/H8FN+W CFafOWQucIrTPFComdvem40j8lUt3uQxgzoGXZKV9vkHYOwKlx8VCq3uQ/vvWQ6z z5z2r3vZRvNlkaOynECv5Xm5CRi45g0oT8L/cpMzBKO6NUsW1u5t5GOtk9uzhSb+ xPeiiqJACQqF1zc5kldJm9nD21+p4ifOJ3l5soxaLctNA817mXYqrVeDDwcY3uFa JJE2oPWsIZlMBxYyYiY= -----END CERTIFICATE-----Generated at Thu Apr 24 18:10:30 2025 by rpki-client on console.sobornost.net