$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/A26B26A668E911EFB66CA21FC4F9AE02.roa File: A26B26A668E911EFB66CA21FC4F9AE02.roa (raw, json) Hash identifier: /Ca5diWjiS6N68tEVsRxTZBjHSeZnU1QOaHlKrf3mI4= Subject key identifier: 71:20:80:5C:7E:6E:1E:B7:89:27:38:DF:5A:36:18:8D:3D:CC:87:99 Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 0107 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/A26B26A668E911EFB66CA21FC4F9AE02.roa Signing time: Mon 02 Sep 2024 05:10:13 +0000 ROA not before: Mon 02 Sep 2024 05:10:13 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 17828 IP address blocks: 103.20.76.0/22 maxlen: 22 202.58.128.0/22 maxlen: 22 202.58.131.0/24 maxlen: 24 202.165.192.0/20 maxlen: 24 2001:c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Sep 2 05:10:13 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66d548b5-588c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:e9:a8:a6:83:49:f9:c1:a1:61:cc:87:93: c7:24:e5:89:19:4f:8e:55:6c:ca:4a:fb:dd:0e:26: 12:59:cd:95:f7:1e:34:77:c8:34:e5:bc:de:d6:ca: da:52:f4:f7:5e:92:1d:2b:73:bf:50:83:56:93:a2: dd:b0:1b:76:ec:82:80:72:55:ad:57:97:c4:66:ef: 4e:7a:95:66:fa:84:c3:56:4e:40:6b:32:e7:4f:53: 76:59:b9:95:81:75:de:84:6d:47:b2:f6:97:54:26: ef:4e:01:03:1d:73:50:8e:7f:fe:27:1c:35:c4:c3: 8c:a2:d1:a0:02:94:b4:23:e4:84:b8:e5:c1:c3:d3: 60:16:a5:93:59:7b:1a:f4:c5:cb:2e:14:ed:40:8d: 7e:6d:84:d1:85:c3:f8:56:4a:9e:05:37:73:80:c7: 92:c2:96:d1:38:2a:bb:05:bf:50:e6:a4:eb:b0:2e: 9d:ee:25:56:d4:63:44:24:af:0d:b3:15:a2:02:b8: 4d:16:b7:63:bb:99:e7:c8:fa:18:ec:2d:fe:e5:65: c0:25:a7:cc:c2:cf:5d:fa:c1:c0:da:a4:c0:75:90: 3c:de:92:5f:c4:1c:be:1e:fd:69:e7:a6:82:d5:39: 78:cb:59:06:db:df:91:4f:ed:e0:8d:b4:de:69:5f: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:20:80:5C:7E:6E:1E:B7:89:27:38:DF:5A:36:18:8D:3D:CC:87:99 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/A26B26A668E911EFB66CA21FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.76.0/22 202.58.128.0/22 202.165.192.0/20 IPv6: 2001:c60::/32 Signature Algorithm: sha256WithRSAEncryption 94:56:d6:61:37:61:0c:41:5f:6d:d4:5a:26:ea:d6:f7:9d:76: bc:52:87:f8:1b:c8:e9:7b:6f:87:a3:07:eb:ef:dd:89:41:d1: 1f:8d:3d:c1:19:d5:25:49:10:5c:85:6a:fd:69:68:d0:c5:7e: db:64:ed:52:b6:40:cc:be:81:aa:5f:f4:04:47:96:f9:50:0d: 53:a1:82:6e:f7:82:70:81:58:1c:23:9b:fb:b4:d2:aa:0f:a1: 3c:e7:8b:54:2e:e6:5a:2d:cd:32:32:83:c2:fc:72:21:35:8b: 6c:4a:f8:1a:f2:fb:d0:c9:a7:a8:4e:ec:a7:d6:aa:7d:f1:f6: 14:85:9d:94:be:4f:a1:38:01:ea:14:67:39:42:e6:9c:dc:2a: 96:08:24:53:36:b0:e2:00:dd:d6:16:a4:db:e0:80:8b:d8:a6: 11:23:dd:1e:84:cf:a3:9a:ba:68:26:84:ec:16:b9:12:7e:8d: 7b:3d:93:43:cd:fd:8a:5e:27:e3:7e:3f:f4:41:bf:c9:76:98: 7d:4a:67:04:08:86:1b:3d:8e:90:44:e3:ed:44:81:26:02:c0: 6c:14:cb:29:43:d4:01:6d:05:60:cb:e2:4b:9b:a4:06:93:c9: b3:d7:61:0f:fb:01:5c:32:ae:84:23:c3:7d:6a:33:6f:84:8d: 0c:0b:94:18 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjQwOTAyMDUxMDEzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ1NDhiNS01ODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQLpqKaDSfnBoWHMh5PHJOWJGU+OVWzKSvvdDiYSWc2V9x40d8g05bze1sra UvT3XpIdK3O/UINWk6LdsBt27IKAclWtV5fEZu9OepVm+oTDVk5AazLnT1N2WbmV gXXehG1HsvaXVCbvTgEDHXNQjn/+Jxw1xMOMotGgApS0I+SEuOXBw9NgFqWTWXsa 9MXLLhTtQI1+bYTRhcP4VkqeBTdzgMeSwpbROCq7Bb9Q5qTrsC6d7iVW1GNEJK8N sxWiArhNFrdju5nnyPoY7C3+5WXAJafMws9d+sHA2qTAdZA83pJfxBy+Hv1p56aC 1Tl4y1kG29+RT+3gjbTeaV9d6QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHEggFx+ bh63iSc431o2GI09zIeZMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEwQUEvODJCQkI1NTIwMDNEMTFFRTk2MDhGMTQ3QzRGOUFFMDIvQTI2QjI2QTY2 OEU5MTFFRkI2NkNBMjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnFEwDBALKOoADBATKpcAwDQQCAAIwBwMFACABDGAwDQYJ KoZIhvcNAQELBQADggEBAJRW1mE3YQxBX23UWibq1veddrxSh/gbyOl7b4ejB+vv 3YlB0R+NPcEZ1SVJEFyFav1paNDFfttk7VK2QMy+gapf9ARHlvlQDVOhgm73gnCB WBwjm/u00qoPoTzni1Qu5lotzTIyg8L8ciE1i2xK+Bry+9DJp6hO7KfWqn3x9hSF nZS+T6E4AeoUZzlC5pzcKpYIJFM2sOIA3dYWpNvggIvYphEj3R6Ez6OaumgmhOwW uRJ+jXs9k0PN/YpeJ+N+P/RBv8l2mH1KZwQIhhs9jpBE4+1EgSYCwGwUyylD1AFt BWDL4kubpAaTybPXYQ/7AVwyroQjw31qM2+EjQwLlBg= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org