$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa File: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (raw, json) Hash identifier: cLX/NcpRBUgL7nqhk0rMjH0omx3nN9XKcz3vUbvy2EE= Subject key identifier: C3:9D:08:76:E7:CF:CB:8A:39:31:8D:84:3A:91:B3:16:8E:E3:AD:B3 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 95 Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa Signing time: Sun 13 Apr 2025 22:54:25 +0000 ROA not before: Sun 13 Apr 2025 22:54:25 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 136557 IP address blocks: 103.26.236.0/24 maxlen: 24 103.26.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Apr 13 22:54:25 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67fc40a1-628c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:15:85:c1:e0:6f:de:b3:4e:49:e6:17:aa:96: 07:35:f5:8d:02:e4:34:60:ed:5f:da:5a:c6:8f:49: e3:10:95:e1:4e:5f:46:49:e8:4a:e4:f2:c7:2c:30: db:d4:15:c7:39:df:8c:09:45:7b:5f:e0:8f:34:bb: 22:17:8b:ec:5a:00:ae:dc:83:1c:6b:00:1e:d8:e6: d9:63:64:1f:e5:65:5a:2c:6a:82:d7:39:ed:71:22: b3:14:92:ef:a4:ed:c7:49:64:ab:b8:6c:1d:7f:29: 5d:ed:55:8c:f8:b7:f5:0c:9a:40:4b:bd:04:0b:b1: ae:2e:0f:20:b8:33:f8:74:bd:74:e0:da:31:71:e9: 7a:9a:e4:ad:ce:a7:80:36:5a:f9:21:8d:bc:63:d1: ce:d7:db:fa:b4:ac:5e:c6:53:56:8b:e2:e0:6c:c4: ee:20:4a:2f:8e:f5:4b:13:57:68:9d:ee:44:19:ea: d2:2c:e4:e1:e7:01:9d:d4:78:f1:7a:42:68:ac:f4: 61:de:ca:29:11:e0:9d:e5:af:77:12:7e:5e:9c:06: 71:4c:c9:cc:e8:85:1f:7c:7d:7f:01:c2:01:b4:7e: 6f:bf:b2:63:b1:fc:4a:9a:7c:0a:5c:8a:ef:d1:9d: 6f:0f:c8:69:c6:db:b4:6c:b3:4b:8e:44:4b:96:0b: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:08:76:E7:CF:CB:8A:39:31:8D:84:3A:91:B3:16:8E:E3:AD:B3 X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/621428CE3CFB11EFB0BF040BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.236.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:8c:8a:2b:d9:a7:91:5a:3d:a4:8a:73:3f:6c:ae:72:33:a6: 73:7e:81:88:a1:55:37:bc:f9:f8:d0:93:53:51:4a:be:9b:a8: 38:68:4b:9e:41:b2:3b:22:77:e5:14:f0:b9:26:f9:9c:5a:8b: 0e:e3:a8:9c:fa:71:e7:71:0e:99:25:34:39:19:89:dc:e6:b3: bf:e6:3b:d3:bc:31:aa:41:d3:c4:6c:64:26:e9:18:7a:10:b9: 14:3b:67:44:ec:ff:b0:50:76:56:15:a9:82:c9:20:f7:12:38: a6:bf:18:4f:7d:1d:b2:37:88:f1:63:d5:91:4a:24:39:76:c3: d6:22:52:26:46:b9:20:ff:0b:18:c5:5e:df:06:a8:a6:a5:7f: 2f:98:33:34:2a:8b:06:78:18:3c:44:93:70:1c:a5:2d:bb:fc: 6a:06:57:e8:98:2c:08:d7:3a:8e:99:7e:54:32:29:76:4a:f3: a9:f8:0c:48:85:c1:92:a4:99:cf:3b:54:eb:fc:98:bd:39:2a: 84:a9:19:67:a2:3d:50:b9:ce:a2:70:9d:eb:77:ea:0d:c1:05: 24:f5:d5:8d:0e:a4:40:a2:28:9b:84:7f:5f:a4:9b:68:4a:88: 36:7f:31:d2:39:19:aa:d1:04:23:94:0c:3c:74:b1:85:f1:a9: 23:f3:92:90 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjUwNDEzMjI1NDI1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZjNDBhMS02MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hWFweBv3rNOSeYXqpYHNfWNAuQ0YO1f2lrGj0njEJXhTl9GSehK5PLHLDDb 1BXHOd+MCUV7X+CPNLsiF4vsWgCu3IMcawAe2ObZY2Qf5WVaLGqC1zntcSKzFJLv pO3HSWSruGwdfyld7VWM+Lf1DJpAS70EC7GuLg8guDP4dL104Noxcel6muStzqeA Nlr5IY28Y9HO19v6tKxexlNWi+LgbMTuIEovjvVLE1done5EGerSLOTh5wGd1Hjx ekJorPRh3sopEeCd5a93En5enAZxTMnM6IUffH1/AcIBtH5vv7JjsfxKmnwKXIrv 0Z1vD8hpxtu0bLNLjkRLlgvMaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMOdCHbn z8uKOTGNhDqRsxaO462zMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM3OUYvNkY5OUQ0RjAzQ0Y5MTFFRkEwQTA2Rjg2QzRGOUFFMDIvNjIxNDI4Q0Uz Q0ZCMTFFRkIwQkYwNDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnGuwwDQYJKoZIhvcNAQELBQADggEBAJ2MiivZp5FaPaSK cz9srnIzpnN+gYihVTe8+fjQk1NRSr6bqDhoS55Bsjsid+UU8Lkm+Zxaiw7jqJz6 cedxDpklNDkZidzms7/mO9O8MapB08RsZCbpGHoQuRQ7Z0Ts/7BQdlYVqYLJIPcS OKa/GE99HbI3iPFj1ZFKJDl2w9YiUiZGuSD/CxjFXt8GqKalfy+YMzQqiwZ4GDxE k3AcpS27/GoGV+iYLAjXOo6ZflQyKXZK86n4DEiFwZKkmc87VOv8mL05KoSpGWei PVC5zqJwnet36g3BBST11Y0OpECiKJuEf1+km2hKiDZ/MdI5GarRBCOUDDx0sYXx qSPzkpA= -----END CERTIFICATE-----Generated at Sat Apr 26 08:00:23 2025 by rpki-client