$ rpki-client -vvf rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa File: 26A7AD3CBCEA11EF8B15B963C4F9AE02.roa (raw, json) Hash identifier: NIkIlK6PYVblk/b10VV99eCfawXco9+WWJ0yiTeebmk= Subject key identifier: F6:9E:08:37:A8:05:F3:99:7E:F6:9F:F6:F3:05:62:BC:66:95:CF:C0 Certificate issuer: /CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045 Certificate serial: 06A6 Authority key identifier: BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa Signing time: Thu 19 Dec 2024 11:36:12 +0000 ROA not before: Thu 19 Dec 2024 11:36:12 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 15830 IP address blocks: 103.20.246.0/23 maxlen: 23 103.20.246.0/24 maxlen: 24 103.101.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E157, serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045 Validity Not Before: Dec 19 11:36:12 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6764052b-d3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:1c:06:3f:00:d3:e0:a9:92:da:92:65:22: 52:0e:c5:ef:57:7a:17:83:7d:45:bd:bc:55:bd:53: 55:c6:90:0c:8a:ca:64:87:28:23:c9:65:ef:73:07: 92:f8:72:71:33:c4:fb:0d:df:e0:22:05:64:bf:5b: a3:cc:bb:e3:25:6c:72:cf:f1:68:9c:e1:e8:c2:25: c0:76:fc:25:e1:39:9a:72:7b:1d:a9:f2:95:76:23: 25:69:77:03:40:1d:eb:ec:b6:cb:a0:ea:51:d8:dd: fc:ed:b7:21:60:74:23:80:27:57:20:92:2a:2c:59: 49:43:c2:ce:01:a1:92:85:82:a7:9c:1f:c7:95:1f: d5:87:a3:a3:36:ca:c0:50:4d:06:82:bd:b2:91:4c: 14:38:89:49:5e:df:63:ac:d3:4f:1d:3c:e6:58:28: b3:20:02:8f:85:4e:3b:53:00:c9:e5:11:3b:7a:b4: 7e:b8:d8:21:de:9b:d7:c8:36:e8:f5:4a:b3:cf:6a: 98:96:67:d1:5c:6f:ed:b3:10:cd:72:eb:f2:bd:0c: 8a:f6:86:22:0a:81:4a:5e:0f:d0:36:fe:6b:2d:c2: 63:c1:ad:c3:47:6f:da:20:47:aa:d1:ea:7a:c3:78: 13:50:4d:07:cd:87:56:39:ae:b2:83:6b:ce:19:8a: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:08:37:A8:05:F3:99:7E:F6:9F:F6:F3:05:62:BC:66:95:CF:C0 X509v3 Authority Key Identifier: keyid:BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.246.0/23 103.101.166.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:ad:63:9d:75:c0:18:0a:e9:48:5f:c8:be:20:58:fb:82:f9: e5:33:9f:7a:aa:06:ee:be:a7:2a:50:d8:06:f3:88:02:db:17: 23:e0:88:cd:8e:5e:1f:45:71:ea:7a:d2:13:b4:fc:ab:a3:07: 5a:ee:c4:fb:95:11:42:e0:95:43:ac:e2:f9:f7:94:27:12:98: 47:ab:01:00:b1:65:17:5a:37:d5:a9:5c:ac:18:2e:4c:86:16: b6:50:8a:68:69:53:c2:05:3d:13:10:7b:e5:29:d5:6a:c8:9d: 22:7c:96:3b:f8:64:76:db:1c:69:6d:c3:9a:f7:17:ea:22:3e: 67:d5:47:a5:45:4f:37:69:e4:fc:3f:e0:56:24:73:5f:ab:68: 66:24:81:f4:bf:f7:cd:da:a3:12:e3:b6:1a:c2:dc:b9:6f:46: 56:d4:54:52:9b:a4:83:20:41:16:62:9d:3f:4d:b5:f8:53:2b: 13:ce:1d:39:93:59:0a:6b:96:5a:b7:c2:38:6f:e9:b7:16:61: 55:f8:c6:ea:a9:e7:e2:ee:81:b7:11:21:70:80:05:b9:de:c8: 09:9b:84:79:c2:a7:a8:9e:ea:02:a7:68:ec:be:4b:0f:61:47: c6:1f:ee:b4:b9:4b:a6:aa:b9:b9:7c:ec:c7:6f:da:7e:bb:85: 52:82:27:b0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxNTcxMTAvBgNVBAUTKEJBRTU2MzBEMkE2MTMzMEZBQ0JBMzdGOENDRkRDRjg5 MjgwN0YwNDUwHhcNMjQxMjE5MTEzNjEyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY0MDUyYi1kM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwykcBj8A0+CpktqSZSJSDsXvV3oXg31FvbxVvVNVxpAMispkhygjyWXvcweS +HJxM8T7Dd/gIgVkv1ujzLvjJWxyz/FonOHowiXAdvwl4TmacnsdqfKVdiMlaXcD QB3r7LbLoOpR2N387bchYHQjgCdXIJIqLFlJQ8LOAaGShYKnnB/HlR/Vh6OjNsrA UE0Ggr2ykUwUOIlJXt9jrNNPHTzmWCizIAKPhU47UwDJ5RE7erR+uNgh3pvXyDbo 9Uqzz2qYlmfRXG/tsxDNcuvyvQyK9oYiCoFKXg/QNv5rLcJjwa3DR2/aIEeq0ep6 w3gTUE0HzYdWOa6yg2vOGYpFFwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPaeCDeo BfOZfvaf9vMFYrxmlc/AMB8GA1UdIwQYMBaAFLrlYw0qYTMPrLo3+Mz9z4koB/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTE1Ny9FM0FGOTQ5QzU5 RTAxMUVCQTkxNjEzNTJDNEY5QUUwMi91dVZqRFNwaE13LXN1amY0elAzUGlTZ0g4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V1VmpEU3BoTXctc3VqZjR6UDNQaVNnSDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUxNTcvRTNBRjk0OUM1OUUwMTFFQkE5MTYxMzUyQzRGOUFFMDIvMjZBN0FEM0NC Q0VBMTFFRjhCMTVCOTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnFPYDBAFnZaYwDQYJKoZIhvcNAQELBQADggEBAGytY511 wBgK6UhfyL4gWPuC+eUzn3qqBu6+pypQ2AbziALbFyPgiM2OXh9Fcep60hO0/Kuj B1ruxPuVEULglUOs4vn3lCcSmEerAQCxZRdaN9WpXKwYLkyGFrZQimhpU8IFPRMQ e+Up1WrInSJ8ljv4ZHbbHGltw5r3F+oiPmfVR6VFTzdp5Pw/4FYkc1+raGYkgfS/ 983aoxLjthrC3LlvRlbUVFKbpIMgQRZinT9NtfhTKxPOHTmTWQprllq3wjhv6bcW YVX4xuqp5+LugbcRIXCABbneyAmbhHnCp6ie6gKnaOy+Sw9hR8Yf7rS5S6aqubl8 7Mdv2n67hVKCJ7A= -----END CERTIFICATE-----Generated at Sat Apr 26 17:14:12 2025 by rpki-client