$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/26D0F9B82A6611ECB12FB439C4F9AE02.roa File: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (raw, json) Hash identifier: Us9s+8uAx54lSxxT1nylNk+h4ZNXtM/yR2j35EIok8g= Subject key identifier: 78:65:9F:D0:33:73:9F:B5:3E:75:39:B6:E7:08:27:AF:C2:B8:FC:2F Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 0727 Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/26D0F9B82A6611ECB12FB439C4F9AE02.roa Signing time: Thu 08 Feb 2024 21:59:37 +0000 ROA not before: Thu 08 Feb 2024 21:59:37 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 133929 IP address blocks: 43.229.116.0/22 maxlen: 24 103.48.140.0/22 maxlen: 24 2001:df2:2c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: Feb 8 21:59:37 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c54ec8-d3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:c0:be:46:43:4b:70:cb:b4:61:a2:e0:85: e9:21:88:ef:b6:44:77:1c:24:e5:6c:46:37:87:56: 10:25:4e:07:4f:66:75:9c:e2:63:f3:52:01:cc:4f: c3:67:00:de:36:1e:db:aa:86:f8:9b:72:d9:0b:92: f0:87:c9:78:95:3b:1b:9f:08:9c:2c:09:78:a1:99: 3f:b4:a2:03:52:bb:74:ad:1c:8c:33:98:2e:bd:59: 09:49:04:7a:db:32:4e:57:37:16:05:33:fc:4b:8a: 53:27:02:76:cb:4e:47:9d:96:99:34:c5:e5:a7:00: eb:e1:bc:ae:a7:6e:c5:ed:04:ff:c9:b4:e3:8e:3d: 72:8b:4b:3a:12:3e:8b:84:52:03:9d:73:58:40:d1: 7e:c7:fd:8a:21:28:55:a6:db:8e:1c:4a:22:a1:9c: 93:31:a5:a1:94:a8:52:52:40:fc:d4:ce:78:12:da: 36:9e:5e:10:91:ef:1f:a5:2a:d3:7e:09:6e:2a:28: d0:2e:8c:c1:c5:8e:02:d4:43:26:cb:88:37:5a:09: f1:47:82:6e:37:aa:42:16:5a:ed:e5:94:42:22:dd: 5f:66:15:44:07:3d:9b:6f:2a:b3:81:80:a7:ec:e1: 4d:d1:3f:e9:84:80:0a:59:8d:f2:ed:38:e9:06:a7: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:65:9F:D0:33:73:9F:B5:3E:75:39:B6:E7:08:27:AF:C2:B8:FC:2F X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/26D0F9B82A6611ECB12FB439C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.116.0/22 103.48.140.0/22 IPv6: 2001:df2:2c00::/48 Signature Algorithm: sha256WithRSAEncryption 7e:aa:ff:c6:79:f1:bc:52:17:b7:68:0c:49:28:c9:a5:1b:84: 2c:ca:03:8e:c2:65:ba:2b:56:38:48:ea:4c:8e:5a:8a:1a:c7: a2:51:8b:79:f4:4f:b3:6f:d5:c0:d3:7d:21:bb:48:a3:d2:d6: 40:bc:91:8e:83:72:90:b5:dd:d0:ee:9b:1d:f2:9c:51:b2:d1: 8d:44:e8:c7:89:74:12:28:d6:42:2f:01:6d:db:29:de:08:b0: ff:ad:c4:b4:7e:a0:cb:f5:6b:e6:15:7b:0d:d3:7f:43:df:99: 5a:2d:38:ff:f7:cd:5c:5e:bb:69:fc:3b:08:8c:a1:6f:35:8e: 86:a1:6b:59:45:20:6c:6d:82:c9:e1:e3:d1:c5:d8:12:b5:a2: 39:3c:d8:74:44:49:3a:8e:b0:29:97:b5:56:6f:51:1d:7b:90: 88:c1:fb:f4:d3:40:a5:4d:e4:29:d5:69:6c:c0:7f:ab:23:54: ed:bf:d6:67:3c:a0:87:42:58:b6:db:97:3a:6b:ee:64:ff:c0: 93:e1:da:5d:5f:ec:fa:e6:78:48:9c:db:f6:78:ef:51:25:05: be:ed:f9:99:0b:74:a5:7d:d2:8b:27:cb:f5:ac:16:76:e9:9d: 35:75:51:18:e3:5c:a1:1d:5e:19:e0:19:f3:1f:fa:12:8c:7e: 83:c9:e9:93 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjQwMjA4MjE1OTM3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM1NGVjOC1kM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRfAvkZDS3DLtGGi4IXpIYjvtkR3HCTlbEY3h1YQJU4HT2Z1nOJj81IBzE/D ZwDeNh7bqob4m3LZC5Lwh8l4lTsbnwicLAl4oZk/tKIDUrt0rRyMM5guvVkJSQR6 2zJOVzcWBTP8S4pTJwJ2y05HnZaZNMXlpwDr4byup27F7QT/ybTjjj1yi0s6Ej6L hFIDnXNYQNF+x/2KIShVptuOHEoioZyTMaWhlKhSUkD81M54Eto2nl4Qke8fpSrT fgluKijQLozBxY4C1EMmy4g3WgnxR4JuN6pCFlrt5ZRCIt1fZhVEBz2bbyqzgYCn 7OFN0T/phIAKWY3y7TjpBqcilwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHhln9Az c5+1PnU5tucIJ6/CuPwvMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzc5RTEvNjU1NkY4REFENzg0MTFFQTlDNUQ5NjQwQzRGOUFFMDIvMjZEMEY5Qjgy QTY2MTFFQ0IxMkZCNDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIr5XQDBAJnMIwwDwQCAAIwCQMHACABDfIsADANBgkqhkiG 9w0BAQsFAAOCAQEAfqr/xnnxvFIXt2gMSSjJpRuELMoDjsJluitWOEjqTI5aihrH olGLefRPs2/VwNN9IbtIo9LWQLyRjoNykLXd0O6bHfKcUbLRjUTox4l0EijWQi8B bdsp3giw/63EtH6gy/Vr5hV7DdN/Q9+ZWi04//fNXF67afw7CIyhbzWOhqFrWUUg bG2CyeHj0cXYErWiOTzYdERJOo6wKZe1Vm9RHXuQiMH79NNApU3kKdVpbMB/qyNU 7b/WZzygh0JYttuXOmvuZP/Ak+HaXV/s+uZ4SJzb9njvUSUFvu35mQt0pX3SiyfL 9awWdumdNXVRGONcoR1eGeAZ8x/6Eox+g8npkw== -----END CERTIFICATE-----Generated at Sun May 19 00:30:21 2024 by rpki-client on console-ams.rpki-client.org