$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa File: 26A143C291EB11EF8A024083C4F9AE02.roa (raw, json) Hash identifier: apyNb0gzlP7QIPlzF+1SGVtUOjpAimi2EUrocnrYZRM= Subject key identifier: 05:7F:63:D7:85:BD:F2:08:00:3C:3F:66:63:35:DA:29:D4:B6:5A:44 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 35CA Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa Signing time: Mon 30 Dec 2024 14:26:44 +0000 ROA not before: Mon 30 Dec 2024 14:26:44 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 198949 IP address blocks: 125.19.17.0/24 maxlen: 24 125.21.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13770 (0x35ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Dec 30 14:26:44 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6772ada3-ed5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:8b:a4:9c:b1:ff:90:a2:f5:53:6d:9a:65: 80:28:67:3f:c2:b7:60:0d:2a:26:28:6b:39:40:32: 56:43:a7:09:42:9a:11:47:72:a5:d7:3a:43:2d:b0: 6d:ef:e8:a0:af:4b:5e:37:60:58:c4:d4:fc:37:23: 13:f1:1f:d5:f5:ad:5c:0b:e2:b6:f2:a8:07:47:f2: 45:64:fd:6c:a2:d5:8b:86:75:8c:35:9b:d6:55:b4: 64:9d:b9:c6:49:9d:94:1f:ed:38:57:d5:0d:29:91: 83:ad:45:24:71:3e:80:57:ea:8b:14:99:91:50:63: 30:d5:eb:d9:b3:fd:95:f5:b6:ba:92:bf:b7:15:0b: ca:28:25:f9:a1:13:26:4e:82:0b:2a:4d:19:4b:f9: a0:e5:5b:68:e8:3b:f5:40:1c:fb:fd:c7:40:fb:47: b2:66:84:64:1e:c6:57:0a:8e:13:0f:6c:c8:9e:b0: 02:64:7c:84:dd:84:ca:d0:78:35:62:f8:18:b6:1e: ca:72:7e:3d:d5:4b:d3:25:53:9c:33:ec:77:6b:4f: 52:c3:15:5c:6e:d5:03:cb:db:52:ff:71:17:1b:fc: 32:df:18:b7:2e:7d:b1:e0:7e:06:4d:ff:0a:c7:86: 8a:b2:1c:b1:16:bf:88:ac:90:b1:5d:20:de:33:06: ed:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7F:63:D7:85:BD:F2:08:00:3C:3F:66:63:35:DA:29:D4:B6:5A:44 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.19.17.0/24 125.21.240.0/24 Signature Algorithm: sha256WithRSAEncryption 28:d3:a1:d2:7c:f0:05:2c:1f:56:19:d0:f6:9e:35:4a:f3:29: d1:50:89:fb:b5:65:30:f0:dc:af:da:e1:c7:fc:56:dd:ff:45: 29:5f:51:54:10:ea:f4:94:01:4d:ed:57:cb:93:a5:ad:2b:fd: 4f:69:ab:95:0e:05:6c:5a:a6:2a:c7:d9:9a:a6:87:5e:af:78: 79:fd:51:6c:83:f4:2f:da:a8:6f:a7:50:0b:74:49:7b:f9:5d: c1:bc:2a:95:9d:e2:07:a6:49:f9:34:78:d0:35:0b:f5:b6:f4: 5f:07:ce:42:c7:36:e9:b7:54:41:fa:25:ff:38:b5:4a:43:9a: fb:df:0a:7d:98:76:ac:c2:9c:73:a9:d4:c1:fd:35:bf:d9:18: 2c:95:44:db:15:7a:30:9e:bf:61:c0:cd:c0:fb:f5:77:e5:2f: d9:ac:b7:b4:b4:bf:72:bb:27:63:96:86:ea:55:e9:f7:78:c5: 5e:f8:a7:4b:f0:22:03:01:0b:4a:7e:35:46:8f:bb:83:57:48: b1:86:03:c2:68:15:fb:28:ab:6c:33:df:7d:20:f0:02:1d:b2: d6:0e:47:8a:1f:5b:b0:8e:c8:e9:f8:ff:c4:f3:cb:f7:42:5e: 6b:53:f8:45:d8:82:94:da:b0:f4:cd:e7:90:38:93:a6:c4:72: 82:2a:6a:da -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjQxMjMwMTQyNjQ0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcyYWRhMy1lZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGeLpJyx/5Ci9VNtmmWAKGc/wrdgDSomKGs5QDJWQ6cJQpoRR3Kl1zpDLbBt 7+igr0teN2BYxNT8NyMT8R/V9a1cC+K28qgHR/JFZP1sotWLhnWMNZvWVbRknbnG SZ2UH+04V9UNKZGDrUUkcT6AV+qLFJmRUGMw1evZs/2V9ba6kr+3FQvKKCX5oRMm ToILKk0ZS/mg5Vto6Dv1QBz7/cdA+0eyZoRkHsZXCo4TD2zInrACZHyE3YTK0Hg1 YvgYth7Kcn491UvTJVOcM+x3a09SwxVcbtUDy9tS/3EXG/wy3xi3Ln2x4H4GTf8K x4aKshyxFr+IrJCxXSDeMwbtXQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAV/Y9eF vfIIADw/ZmM12inUtlpEMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvRTY1ODUxMTIxRDg0MTFFMkExQkEzMERCMDhCMDJDRDIvMjZBMTQzQzI5 MUVCMTFFRjhBMDI0MDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB9ExEDBAB9FfAwDQYJKoZIhvcNAQELBQADggEBACjTodJ8 8AUsH1YZ0PaeNUrzKdFQifu1ZTDw3K/a4cf8Vt3/RSlfUVQQ6vSUAU3tV8uTpa0r /U9pq5UOBWxapirH2Zqmh16veHn9UWyD9C/aqG+nUAt0SXv5XcG8KpWd4gemSfk0 eNA1C/W29F8HzkLHNum3VEH6Jf84tUpDmvvfCn2YdqzCnHOp1MH9Nb/ZGCyVRNsV ejCev2HAzcD79XflL9mst7S0v3K7J2OWhupV6fd4xV74p0vwIgMBC0p+NUaPu4NX SLGGA8JoFfsoq2wz330g8AIdstYOR4ofW7COyOn4/8Tzy/dCXmtT+EXYgpTasPTN 55A4k6bEcoIqato= -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:36 2025 by rpki-client