$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa File: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (raw, json) Hash identifier: 8bFMS7lUFa5a04616nMhBCIyPXjI0vGFlv2YHmEk/tM= Subject key identifier: A0:3E:04:D4:3A:27:3E:AA:D5:88:3E:80:E4:22:2C:DC:68:95:52:97 Certificate issuer: /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669 Certificate serial: 07FC Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa Signing time: Tue 24 Sep 2024 20:49:41 +0000 ROA not before: Tue 24 Sep 2024 20:49:41 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140898 IP address blocks: 103.153.28.0/23 maxlen: 24 2001:df4:2b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669 Validity Not Before: Sep 24 20:49:41 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66f325e5-2cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ef:f9:11:05:7f:9e:ac:44:15:53:ee:ae:8f: cc:ec:58:1c:3b:f5:b1:ff:95:e7:06:29:11:1f:36: 46:78:12:aa:69:e4:93:57:a3:22:1f:7f:fe:da:83: d8:70:a2:50:38:3c:34:60:93:c5:24:e5:14:d0:c5: ac:cc:4d:c4:d8:b0:d9:3d:03:5c:ef:9f:e9:d1:f2: 53:1e:ed:47:04:6c:e8:d5:7e:bd:0e:13:32:9b:c3: 81:60:f8:6f:60:62:bd:aa:78:5f:e5:a5:65:b1:da: 67:39:97:af:41:12:5b:87:24:da:90:6b:c5:a0:fb: e0:1b:cc:d9:79:2d:79:0d:00:64:94:28:94:f5:20: 30:a9:b7:5b:05:cc:57:58:db:49:4a:c4:13:97:fa: c8:ca:0a:40:c1:71:b7:0a:a4:f2:49:9d:84:b7:f2: c5:91:97:3c:ae:cf:e3:c3:ad:92:64:d1:7b:25:d4: e0:1c:77:3a:29:3e:d3:46:1d:7b:8f:a5:d5:5e:86: 82:a7:79:79:dc:8f:e1:87:d6:1a:e3:51:a0:4c:b1: 48:2f:be:d1:f5:2c:0a:21:17:88:12:45:03:86:73: 91:84:45:17:52:60:84:47:88:b1:8e:eb:37:70:f2: ef:46:5d:b4:f5:6d:da:14:23:93:12:cc:46:55:7d: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3E:04:D4:3A:27:3E:AA:D5:88:3E:80:E4:22:2C:DC:68:95:52:97 X509v3 Authority Key Identifier: keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.28.0/23 IPv6: 2001:df4:2b80::/48 Signature Algorithm: sha256WithRSAEncryption 39:00:f9:df:96:16:aa:c6:1f:34:f7:22:5b:2a:f1:fb:63:0b: 7a:dc:75:c2:ed:4e:88:1b:16:d7:ef:a1:53:ea:9a:73:e5:f4: 76:95:0a:43:80:0f:d2:b1:5f:4b:75:34:4f:2d:85:e7:36:56: 6d:c1:82:ba:32:82:37:d3:e2:b8:ea:d4:c4:a7:7a:1f:a2:01: e2:1c:0d:c1:95:c4:b9:e3:ab:bf:65:2a:c8:2c:14:c4:77:5a: b6:cb:ee:3a:81:be:20:ef:bf:4c:11:f8:b6:38:47:6b:2a:31: cf:6d:a7:43:e7:42:db:70:34:62:b2:b6:74:df:87:f4:f0:8f: f9:4f:3f:98:2a:bb:b1:ea:09:45:00:22:3c:69:4a:11:ea:2e: 0c:ff:ca:1d:81:24:60:da:d4:d5:b0:d1:5f:ab:33:1a:c3:34: 5d:94:bb:6f:dc:59:e1:fd:34:dc:30:a4:1a:9e:de:4f:4f:ba: df:a8:5d:38:5c:11:02:2a:f8:a8:98:03:a2:8b:fe:91:62:7e: d5:b2:b6:04:4d:85:5f:fd:d4:90:0b:3d:0f:e4:5a:de:77:1e: 95:63:98:10:a0:a6:9c:5a:2e:b5:ed:2f:86:1b:0f:89:cc:a1: a1:53:12:c7:82:9c:d7:b5:92:33:7f:fc:f6:a6:3e:4c:c2:15: 90:ba:21:c8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNjUxMTAvBgNVBAUTKERBMDQyMjhEM0VFQjQ1MUZDMEYyMjMzNjY5NzE3MDU3 RjhBQjM2NjkwHhcNMjQwOTI0MjA0OTQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzMjVlNS0yY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1u/5EQV/nqxEFVPuro/M7FgcO/Wx/5XnBikRHzZGeBKqaeSTV6MiH3/+2oPY cKJQODw0YJPFJOUU0MWszE3E2LDZPQNc75/p0fJTHu1HBGzo1X69DhMym8OBYPhv YGK9qnhf5aVlsdpnOZevQRJbhyTakGvFoPvgG8zZeS15DQBklCiU9SAwqbdbBcxX WNtJSsQTl/rIygpAwXG3CqTySZ2Et/LFkZc8rs/jw62SZNF7JdTgHHc6KT7TRh17 j6XVXoaCp3l53I/hh9Ya41GgTLFIL77R9SwKIReIEkUDhnORhEUXUmCER4ixjus3 cPLvRl209W3aFCOTEsxGVX3TfwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKA+BNQ6 Jz6q1Yg+gOQiLNxolVKXMB8GA1UdIwQYMBaAFNoEIo0+60UfwPIjNmlxcFf4qzZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE2NS82QTNFQjhCNkMy QjExMUVBOTIwQkI5NEFDNEY5QUUwMi8yZ1FpalQ3clJSX0E4aU0yYVhGd1ZfaXJO bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnUWlqVDdyUlJfQThpTTJhWEZ3Vl9pck5tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIxNjUvNkEzRUI4QjZDMkIxMTFFQTkyMEJCOTRBQzRGOUFFMDIvMjZBRUNEOTJD MkIyMTFFQUJCRDBFRDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmRwwDwQCAAIwCQMHACABDfQrgDANBgkqhkiG9w0BAQsF AAOCAQEAOQD535YWqsYfNPciWyrx+2MLetx1wu1OiBsW1++hU+qac+X0dpUKQ4AP 0rFfS3U0Ty2F5zZWbcGCujKCN9PiuOrUxKd6H6IB4hwNwZXEueOrv2UqyCwUxHda tsvuOoG+IO+/TBH4tjhHayoxz22nQ+dC23A0YrK2dN+H9PCP+U8/mCq7seoJRQAi PGlKEeouDP/KHYEkYNrU1bDRX6szGsM0XZS7b9xZ4f003DCkGp7eT0+636hdOFwR Air4qJgDoov+kWJ+1bK2BE2FX/3UkAs9D+Ra3ncelWOYEKCmnFoute0vhhsPicyh oVMSx4Kc17WSM3/89qY+TMIVkLohyA== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org