$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/2455276E39B311EEA6DFE66BC4F9AE02.roa File: 2455276E39B311EEA6DFE66BC4F9AE02.roa (raw, json) Hash identifier: i/snzsv5ugVK5M4wkOzh02txTFh9Vl9HyndyddhSqd8= Subject key identifier: 66:FE:38:A5:E6:D0:73:BB:55:C4:0C:A5:86:0A:E1:F7:56:03:41:47 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 0196 Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/2455276E39B311EEA6DFE66BC4F9AE02.roa Signing time: Sat 07 Dec 2024 02:15:48 +0000 ROA not before: Sat 07 Dec 2024 02:15:48 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 150387 IP address blocks: 103.26.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7 Validity Not Before: Dec 7 02:15:48 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6753afd4-fff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ea:cc:4a:01:74:8b:e8:15:eb:fa:5d:05:f6: c9:e0:13:b1:1f:9e:e6:13:b1:9e:2a:a9:f9:f0:0f: 9d:72:94:49:e3:12:87:56:de:d7:73:82:d1:bc:5b: d1:7b:d1:c5:da:ff:00:a0:e8:9a:8d:85:4f:c8:0e: 50:c2:4a:e7:95:46:34:b8:08:ab:5e:9c:87:8f:f3: e6:61:5b:46:46:da:64:ee:b9:47:20:71:8b:62:91: 33:1e:e1:85:2f:d3:b6:87:f4:52:f6:ff:ac:90:49: 8d:39:da:d1:8f:0f:97:de:a0:ae:16:e3:90:47:38: b8:51:b8:f4:ff:c4:3d:2d:e2:33:8f:3a:59:3d:f0: 2a:07:8e:2f:c5:c2:82:50:d7:dc:ab:31:94:91:f6: 2a:8a:1d:5a:96:a1:d7:5f:1a:77:f3:b5:14:08:73: b1:ac:bd:07:3d:56:4f:b1:34:2c:bf:5e:28:5a:e8: 3f:81:79:77:5e:9a:93:2c:f5:05:e0:0a:0f:91:8b: c4:3d:ae:00:a3:f5:42:d7:01:71:ff:e1:46:84:02: d4:f1:36:6e:cf:26:c7:38:39:ac:c1:cc:1c:22:8f: 20:a8:57:5b:f7:65:08:72:94:78:2d:79:a5:bc:e2: aa:56:a5:79:7b:a4:c3:e0:32:28:51:af:32:ca:4d: 31:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:38:A5:E6:D0:73:BB:55:C4:0C:A5:86:0A:E1:F7:56:03:41:47 X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/2455276E39B311EEA6DFE66BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.238.0/23 Signature Algorithm: sha256WithRSAEncryption 98:8a:2c:4e:45:90:4e:48:97:24:f0:ad:48:16:5a:f5:4d:17: 5e:40:ba:ce:b0:a5:44:fe:f5:40:2b:18:96:af:af:a3:95:28: 2e:92:3d:96:cb:dd:2c:a7:59:84:c3:10:f3:2a:36:af:a4:f1: b3:26:69:89:3a:af:78:01:7c:10:b5:be:ae:2e:ea:7c:d3:da: da:7f:f3:e2:b9:5e:c9:a3:8e:5c:ad:b6:76:9c:87:f7:ff:01: e0:62:e8:84:1c:25:80:29:d2:4d:bb:a9:17:fc:fb:b3:00:7d: bd:ed:7f:cf:43:c9:dc:95:04:39:17:02:e7:2a:d9:00:3f:56: ce:dc:7c:1c:39:10:d7:71:b7:87:3c:1f:fe:b9:bd:55:ae:1d: 7f:aa:bc:1e:f6:f7:b3:cb:23:09:6a:12:3f:14:91:d8:8b:1c: 7b:a9:98:a2:4a:13:68:4d:86:d3:10:84:ca:11:79:9f:d8:6a: 34:cd:35:7b:df:e5:dc:61:1f:73:73:17:da:b0:e8:22:06:96: 8f:1e:82:85:7e:7c:25:c9:b2:f1:b0:80:c6:fe:e3:5c:08:93: 3b:ae:67:8d:31:d1:cd:43:4b:de:d4:b5:b9:51:a2:03:0c:ee: 81:43:5e:b2:3f:09:ec:b9:20:e8:6b:80:0e:b6:ac:aa:93:14: 5d:3d:26:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjQxMjA3MDIxNTQ4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUzYWZkNC1mZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7urMSgF0i+gV6/pdBfbJ4BOxH57mE7GeKqn58A+dcpRJ4xKHVt7Xc4LRvFvR e9HF2v8AoOiajYVPyA5QwkrnlUY0uAirXpyHj/PmYVtGRtpk7rlHIHGLYpEzHuGF L9O2h/RS9v+skEmNOdrRjw+X3qCuFuOQRzi4Ubj0/8Q9LeIzjzpZPfAqB44vxcKC UNfcqzGUkfYqih1alqHXXxp387UUCHOxrL0HPVZPsTQsv14oWug/gXl3XpqTLPUF 4AoPkYvEPa4Ao/VC1wFx/+FGhALU8TZuzybHODmswcwcIo8gqFdb92UIcpR4LXml vOKqVqV5e6TD4DIoUa8yyk0x6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGb+OKXm 0HO7VcQMpYYK4fdWA0FHMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5QjcvQjFFNTRBQjg1NkEyMTFFREI0QTFCMjI1QzRGOUFFMDIvMjQ1NTI3NkUz OUIzMTFFRUE2REZFNjZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnGu4wDQYJKoZIhvcNAQELBQADggEBAJiKLE5FkE5IlyTw rUgWWvVNF15Aus6wpUT+9UArGJavr6OVKC6SPZbL3SynWYTDEPMqNq+k8bMmaYk6 r3gBfBC1vq4u6nzT2tp/8+K5Xsmjjlyttnach/f/AeBi6IQcJYAp0k27qRf8+7MA fb3tf89DydyVBDkXAucq2QA/Vs7cfBw5ENdxt4c8H/65vVWuHX+qvB7297PLIwlq Ej8UkdiLHHupmKJKE2hNhtMQhMoReZ/YajTNNXvf5dxhH3NzF9qw6CIGlo8egoV+ fCXJsvGwgMb+41wIkzuuZ40x0c1DS97UtblRogMM7oFDXrI/Cey5IOhrgA62rKqT FF09JgU= -----END CERTIFICATE-----Generated at Sun Apr 6 16:18:38 2025 by rpki-client