$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa File: 26F1B59437A511ECB73C9852C4F9AE02.roa (raw, json) Hash identifier: qsrO8yS/1EvYraDqXGU2ot/FTw/eeb+gKYOfP/J5WaU= Subject key identifier: FA:91:1A:CA:57:29:F8:AB:CA:A9:BB:2A:34:2E:A1:82:B2:EC:62:60 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 04CE Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa Signing time: Wed 31 Jul 2024 00:43:01 +0000 ROA not before: Wed 31 Jul 2024 00:43:01 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 142424 IP address blocks: 103.168.38.0/23 maxlen: 23 103.168.38.0/24 maxlen: 24 103.168.39.0/24 maxlen: 24 2001:df6:ca80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 23:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042 Validity Not Before: Jul 31 00:43:01 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a98894-84fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:4b:18:1e:d0:9c:42:51:2e:b9:f6:2e:94: 3e:53:bd:24:c4:59:73:9c:9f:cf:98:69:55:51:a2: ee:a6:e6:55:c4:36:0e:ee:7e:39:59:62:9f:9f:48: b5:9a:3b:7d:b9:0a:5b:2a:12:58:65:b0:f0:fa:df: 64:a9:76:8b:60:81:b1:87:05:16:52:a5:1c:a4:32: 02:5c:6b:4b:bb:95:fe:b7:24:d9:b1:68:75:2a:28: 98:8a:07:44:6f:dc:17:75:70:53:c5:18:47:c1:50: 8f:ce:b5:31:5d:47:b3:eb:75:af:80:04:4e:a5:eb: ae:97:7a:58:fe:f2:cb:f2:ed:35:dc:e6:e9:c6:8c: 24:be:60:d0:89:ee:73:f1:4e:e8:59:13:2b:21:63: e7:be:0a:d6:07:d9:d7:ba:d3:f6:c4:22:c7:1c:6e: 83:80:ff:dc:cb:50:fd:eb:88:96:fc:89:87:80:57: 6f:a1:c3:05:ec:4a:ff:ad:a0:e7:3b:04:f8:80:07: fc:c0:e6:02:4d:1b:68:af:fd:6d:86:5b:c9:04:e3: 82:52:8a:a1:03:a9:57:34:2a:18:2d:c9:30:2f:b2: 03:2f:c1:cc:cd:05:e4:94:f0:75:5d:c8:20:63:e2: bb:f8:2f:75:f9:b3:0c:14:f4:33:9e:49:08:6c:93: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:91:1A:CA:57:29:F8:AB:CA:A9:BB:2A:34:2E:A1:82:B2:EC:62:60 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.38.0/23 IPv6: 2001:df6:ca80::/48 Signature Algorithm: sha256WithRSAEncryption 6e:f2:21:86:78:cb:3c:0b:5e:a9:ad:22:0a:a0:be:b8:0f:16: 6d:3f:13:9b:a7:70:90:53:9f:b6:29:26:3f:5d:c7:35:ff:75: d4:20:4e:4b:78:af:5c:7c:d7:bd:6d:66:2e:f9:10:17:06:21: 73:d5:d6:be:41:96:9d:72:73:a7:79:09:38:3b:8b:4e:c4:3e: 99:3d:47:68:c7:00:c6:21:7b:70:23:e4:b0:7b:0e:47:3a:a1: 87:84:67:5b:76:0d:5c:05:f9:b3:6c:45:2d:97:eb:3f:b2:e8: 4c:0d:f3:93:8a:18:9a:0d:35:87:bd:0d:f2:33:d7:42:80:49: 8f:34:cc:3a:09:a7:7a:50:ed:30:04:c6:e8:3f:21:70:07:6e: 3f:6b:e5:bf:a8:15:95:ee:2f:ec:f2:f0:be:5e:ca:6e:38:f6: 8e:d1:2b:4b:9c:b8:0c:e2:0a:ed:16:6d:49:48:df:f7:20:ed: ac:bb:65:e6:3f:29:2d:e0:bd:f7:39:31:48:22:5c:d0:79:c8: 8a:d7:0a:61:09:8a:fe:5c:a5:3e:4f:20:b7:da:0c:ea:06:4d: fe:29:4c:b3:25:f9:98:98:e9:ad:03:4c:bf:2e:36:70:5c:c0: bd:73:c6:d4:a6:f1:d3:67:30:66:91:c5:05:1e:93:f1:e1:be: 0c:35:ca:bc -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjQwNzMxMDA0MzAxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5ODg5NC04NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt79LGB7QnEJRLrn2LpQ+U70kxFlznJ/PmGlVUaLupuZVxDYO7n45WWKfn0i1 mjt9uQpbKhJYZbDw+t9kqXaLYIGxhwUWUqUcpDICXGtLu5X+tyTZsWh1KiiYigdE b9wXdXBTxRhHwVCPzrUxXUez63WvgAROpeuul3pY/vLL8u013ObpxowkvmDQie5z 8U7oWRMrIWPnvgrWB9nXutP2xCLHHG6DgP/cy1D964iW/ImHgFdvocMF7Er/raDn OwT4gAf8wOYCTRtor/1thlvJBOOCUoqhA6lXNCoYLckwL7IDL8HMzQXklPB1Xcgg Y+K7+C91+bMMFPQznkkIbJPvgwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPqRGspX Kfiryqm7KjQuoYKy7GJgMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQwNDIvRUZDOThERTZFNTM2MTFFQjk5MjY1NTZCQzRGOUFFMDIvMjZGMUI1OTQz N0E1MTFFQ0I3M0M5ODUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqCYwDwQCAAIwCQMHACABDfbKgDANBgkqhkiG9w0BAQsF AAOCAQEAbvIhhnjLPAteqa0iCqC+uA8WbT8Tm6dwkFOftikmP13HNf911CBOS3iv XHzXvW1mLvkQFwYhc9XWvkGWnXJzp3kJODuLTsQ+mT1HaMcAxiF7cCPksHsORzqh h4RnW3YNXAX5s2xFLZfrP7LoTA3zk4oYmg01h70N8jPXQoBJjzTMOgmnelDtMATG 6D8hcAduP2vlv6gVle4v7PLwvl7Kbjj2jtErS5y4DOIK7RZtSUjf9yDtrLtl5j8p LeC99zkxSCJc0HnIitcKYQmK/lylPk8gt9oM6gZN/ilMsyX5mJjprQNMvy42cFzA vXPG1Kbx02cwZpHFBR6T8eG+DDXKvA== -----END CERTIFICATE-----Generated at Thu Mar 13 21:49:20 2025 by rpki-client