$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26AE00E6224E11EBAC20776CC4F9AE02.roa File: 26AE00E6224E11EBAC20776CC4F9AE02.roa (raw, json) Hash identifier: 7ELDH0+7BFtpecsfV1esyW1NUi3X3Cr3dY8nE1DbbxU= Subject key identifier: 52:01:5C:03:26:76:2F:8A:B5:E8:CB:71:49:A5:A9:A5:35:AD:84:5E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A47 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26AE00E6224E11EBAC20776CC4F9AE02.roa Signing time: Wed 10 May 2023 16:13:59 +0000 ROA not before: Wed 10 May 2023 16:13:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133000 IP address blocks: 45.126.252.0/24 maxlen: 24 103.238.228.0/22 maxlen: 24 202.61.120.0/23 maxlen: 24 202.191.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27207 (0x6a47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2c7-5da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:8a:6f:8a:37:d8:05:66:1e:aa:0c:85:99: 4a:fa:33:b8:bc:0f:49:2f:13:18:f1:6f:ef:66:37: 0c:3e:00:39:b6:ba:e2:dd:79:bd:87:92:db:04:ef: fa:75:c9:e2:76:a4:65:c4:dc:89:01:32:ee:b9:44: 41:d8:bb:84:59:1f:d9:65:82:42:72:a2:da:d2:e4: b5:5d:38:29:5b:33:fd:5d:39:73:4f:29:2a:5f:3f: 33:8a:c9:b1:19:1c:e3:03:d2:bb:9e:87:92:e9:99: 02:09:89:ec:71:df:28:8d:60:5e:16:fd:22:b9:2b: bd:08:34:c2:2b:fe:34:1c:d7:9b:32:61:75:d7:ff: c4:dc:de:41:a3:7e:14:a2:d8:73:49:12:1d:ea:1d: ce:74:4e:60:c2:ec:83:61:b1:51:aa:f1:e1:4b:67: 57:a1:bc:52:6b:d3:cb:31:b0:f3:62:c2:61:29:97: 8b:00:eb:a6:2e:2c:6a:22:4b:15:b4:9f:90:7a:a5: 90:36:6f:54:3e:e8:86:90:fc:43:94:d2:38:84:13: 7c:d2:91:9a:b3:6e:4f:00:e3:43:40:3e:f0:0e:eb: 0e:79:94:97:4b:f7:31:29:03:5f:bb:2e:ea:55:ae: 3b:a4:18:35:f7:a1:01:4d:7b:99:66:2e:f2:a4:f3: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:01:5C:03:26:76:2F:8A:B5:E8:CB:71:49:A5:A9:A5:35:AD:84:5E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26AE00E6224E11EBAC20776CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.252.0/24 103.238.228.0/22 202.61.120.0/23 202.191.1.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d8:35:0b:c9:f4:f2:37:b2:fa:2d:23:b3:17:95:21:ea:f7: 68:04:e0:20:40:0f:12:ba:22:02:96:fd:1e:3a:5e:41:d8:5a: 06:b8:d0:f2:8e:06:fc:8f:e7:2f:54:44:f9:a5:35:88:df:2e: d8:5d:b8:91:8e:ab:46:47:c7:1f:62:9d:57:7c:19:3a:81:a7: 02:08:2f:4a:66:ce:ba:12:46:59:77:dc:3f:ee:19:37:09:69: f4:a8:c5:72:27:d0:d7:39:03:ac:b7:bc:9d:8d:13:b5:12:f6: 01:47:41:2a:bd:93:36:e0:12:9d:34:92:2f:d2:92:ed:e0:a0: 68:8d:b2:bc:ca:7d:19:01:d7:43:b7:da:fc:21:71:b4:6b:c0: 00:65:40:85:e3:34:ba:85:cc:68:b8:5a:77:92:10:e3:fb:a9: 43:ce:5d:7a:7f:ec:a0:41:f0:c8:e8:f6:ee:4e:1e:c3:54:88: 96:ea:40:6e:9a:b6:29:8f:92:2a:d2:28:e2:97:0b:de:f2:9f: 18:bd:98:ee:e5:70:70:f2:27:3f:7c:50:35:95:85:05:c6:ca: 2b:70:8f:a6:1a:c5:d9:eb:05:f9:4c:c7:2a:0e:ab:1c:3b:70: 43:20:6a:c8:e0:d8:5e:0c:44:ca:24:d5:35:95:3c:53:19:3a: ec:fc:8e:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICakcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJjNy01ZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUaKb4o32AVmHqoMhZlK+jO4vA9JLxMY8W/vZjcMPgA5trri3Xm9h5LbBO/6 dcnidqRlxNyJATLuuURB2LuEWR/ZZYJCcqLa0uS1XTgpWzP9XTlzTykqXz8zismx GRzjA9K7noeS6ZkCCYnscd8ojWBeFv0iuSu9CDTCK/40HNebMmF11//E3N5Bo34U othzSRId6h3OdE5gwuyDYbFRqvHhS2dXobxSa9PLMbDzYsJhKZeLAOumLixqIksV tJ+QeqWQNm9UPuiGkPxDlNI4hBN80pGas25PAONDQD7wDusOeZSXS/cxKQNfuy7q Va47pBg196EBTXuZZi7ypPNPYwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFIBXAMm di+KtejLcUmlqaU1rYReMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjZBRTAwRTYy MjRFMTFFQkFDMjA3NzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAtfvwDBAJn7uQDBAHKPXgDBADKvwEwDQYJKoZIhvcNAQEL BQADggEBAIjYNQvJ9PI3svotI7MXlSHq92gE4CBADxK6IgKW/R46XkHYWga40PKO BvyP5y9URPmlNYjfLthduJGOq0ZHxx9inVd8GTqBpwIIL0pmzroSRll33D/uGTcJ afSoxXIn0Nc5A6y3vJ2NE7US9gFHQSq9kzbgEp00ki/Sku3goGiNsrzKfRkB10O3 2vwhcbRrwABlQIXjNLqFzGi4WneSEOP7qUPOXXp/7KBB8Mjo9u5OHsNUiJbqQG6a timPkirSKOKXC97ynxi9mO7lcHDyJz98UDWVhQXGyitwj6YaxdnrBflMxyoOqxw7 cEMgasjg2F4MRMok1TWVPFMZOuz8jg0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org