$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa File: 26FB999C92FC11EE9104E34AC4F9AE02.roa (raw, json) Hash identifier: hp/Q2Ubn0WOwumD38CPR/NMr2vMsYhdV964rdwLuPU8= Subject key identifier: E9:C5:F4:C7:14:34:45:C4:EE:13:0F:D7:D6:A3:42:65:8E:CC:78:03 Certificate issuer: /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C Certificate serial: 06C6 Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa Signing time: Wed 02 Apr 2025 22:23:55 +0000 ROA not before: Wed 02 Apr 2025 22:23:55 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 132836 IP address blocks: 103.98.86.0/23 maxlen: 23 103.98.86.0/24 maxlen: 24 103.98.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C911D Validity Not Before: Apr 2 22:23:55 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67edb8fb-ae58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:f7:88:60:1c:1c:fa:ca:72:8d:e7:7d:35: ad:b5:01:aa:19:73:db:92:32:6a:ca:33:d3:ef:02: 35:be:bf:e4:76:56:9a:f7:5b:a5:5b:5d:90:01:1d: 92:36:96:81:1c:58:ad:9b:ca:3a:ee:27:26:f0:64: a9:8a:96:7c:04:f6:12:db:d2:f1:15:10:7f:71:05: 93:01:90:50:d3:41:2e:52:19:3a:bb:d6:e2:a4:93: 17:ef:7b:20:b9:96:fc:a7:4e:fc:64:05:56:78:75: b1:e6:66:54:58:97:31:05:42:d3:90:30:f3:62:81: 89:28:00:72:b1:d2:22:5d:af:98:27:63:36:ce:d7: a2:28:29:74:be:5a:bf:de:07:51:00:5d:19:7f:bc: e5:d7:bb:89:4e:82:bd:6d:b8:c6:c3:ff:d8:70:2d: 86:7a:95:65:06:be:e7:6b:c3:ad:29:78:74:95:00: 51:fa:ed:c7:d4:81:2b:ed:c2:7c:66:a9:f0:69:2b: a2:fb:ab:7e:1e:47:d6:f0:b7:9b:a8:1a:ff:a7:b3: 5d:fe:c2:04:20:ed:04:a4:ed:7b:99:24:c3:eb:40: 34:93:b8:52:0e:98:99:1b:24:bd:16:ce:0e:1b:06: 18:65:ac:76:97:e6:2f:56:48:07:ed:5c:e8:75:96: a6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C5:F4:C7:14:34:45:C4:EE:13:0F:D7:D6:A3:42:65:8E:CC:78:03 X509v3 Authority Key Identifier: keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.86.0/23 Signature Algorithm: sha256WithRSAEncryption 84:f7:5a:be:a8:dc:9b:4b:48:b7:50:31:21:81:68:73:00:25: 15:67:58:a7:e1:3c:f0:f4:59:4f:4d:ad:f7:32:28:c0:28:69: 1a:ca:84:32:00:a2:01:41:6b:56:bf:30:7f:c3:e3:5e:9d:6b: c4:0d:c9:24:9b:64:20:8e:54:8e:62:37:04:d9:e8:64:0b:eb: 9e:82:dc:a1:b6:31:18:9c:25:a1:07:8f:31:61:54:62:cc:bf: 7e:5d:b9:b3:6d:a0:60:77:b2:57:6b:f1:cc:b0:73:e5:61:76: 6a:e4:40:07:49:4f:cd:40:67:a8:08:80:2a:8e:f1:85:4b:6b: b2:c0:d5:69:60:ee:d4:4c:85:6d:d4:f8:84:02:8e:aa:4f:97: 5a:42:b8:6e:0c:d7:26:82:ab:8b:84:a9:a7:61:e6:a8:50:c3: e1:54:35:4e:57:f3:41:08:70:fc:ff:2b:14:df:91:40:01:b5: 54:e9:74:f9:43:0e:c1:a8:c8:d3:d2:5f:56:d7:eb:8c:07:8a: d4:5f:78:d3:73:09:26:4a:3d:14:b0:43:6c:1d:60:b1:1f:1a: da:c5:3d:aa:32:9b:ee:ae:28:06:15:e1:d2:a0:38:f3:a8:fd: eb:81:54:d4:73:01:0e:8f:9c:aa:7d:26:45:7f:a3:a0:c0:38: 98:15:9f:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxMUQxMTAvBgNVBAUTKDQ3NUI2MkE1RjIzM0VEMDVBQzcyRDg3ODEyMzRFMTA5 QkYzQTkwOEMwHhcNMjUwNDAyMjIyMzU1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkYjhmYi1hZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfD3iGAcHPrKco3nfTWttQGqGXPbkjJqyjPT7wI1vr/kdlaa91ulW12QAR2S NpaBHFitm8o67icm8GSpipZ8BPYS29LxFRB/cQWTAZBQ00EuUhk6u9bipJMX73sg uZb8p078ZAVWeHWx5mZUWJcxBULTkDDzYoGJKABysdIiXa+YJ2M2zteiKCl0vlq/ 3gdRAF0Zf7zl17uJToK9bbjGw//YcC2GepVlBr7na8OtKXh0lQBR+u3H1IEr7cJ8 ZqnwaSui+6t+HkfW8LebqBr/p7Nd/sIEIO0EpO17mSTD60A0k7hSDpiZGyS9Fs4O GwYYZax2l+YvVkgH7VzodZam8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOnF9McU NEXE7hMP19ajQmWOzHgDMB8GA1UdIwQYMBaAFEdbYqXyM+0FrHLYeBI04Qm/OpCM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTExRC83QjEzQjM4NDZD MDMxMUVCODg0NDc4NEJDNEY5QUUwMi9SMXRpcGZJejdRV3NjdGg0RWpUaENiODZr SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxdGlwZkl6N1FXc2N0aDRFalRoQ2I4NmtJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkxMUQvN0IxM0IzODQ2QzAzMTFFQjg4NDQ3ODRCQzRGOUFFMDIvMjZGQjk5OUM5 MkZDMTFFRTkxMDRFMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnYlYwDQYJKoZIhvcNAQELBQADggEBAIT3Wr6o3JtLSLdQ MSGBaHMAJRVnWKfhPPD0WU9NrfcyKMAoaRrKhDIAogFBa1a/MH/D416da8QNySSb ZCCOVI5iNwTZ6GQL656C3KG2MRicJaEHjzFhVGLMv35dubNtoGB3sldr8cywc+Vh dmrkQAdJT81AZ6gIgCqO8YVLa7LA1Wlg7tRMhW3U+IQCjqpPl1pCuG4M1yaCq4uE qadh5qhQw+FUNU5X80EIcPz/KxTfkUABtVTpdPlDDsGoyNPSX1bX64wHitRfeNNz CSZKPRSwQ2wdYLEfGtrFPaoym+6uKAYV4dKgOPOo/euBVNRzAQ6PnKp9JkV/o6DA OJgVnzk= -----END CERTIFICATE-----Generated at Sun Apr 6 06:12:06 2025 by rpki-client