$ rpki-client -vvf rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/26F67E0A842011EB8A4C635AC4F9AE02.roa File: 26F67E0A842011EB8A4C635AC4F9AE02.roa (raw, json) Hash identifier: /0E6jZ4+7bqUYrWrcsn+EsmkQL/Ndn9BT+YgQs7TIDw= Subject key identifier: 4E:ED:11:0F:1A:A8:3D:CA:F3:F8:87:B4:85:F9:4D:CE:4E:A2:16:1F Certificate issuer: /CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE Certificate serial: 0636 Authority key identifier: 0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/26F67E0A842011EB8A4C635AC4F9AE02.roa Signing time: Wed 05 Mar 2025 00:11:28 +0000 ROA not before: Wed 05 Mar 2025 00:11:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141991 IP address blocks: 103.164.38.0/23 maxlen: 23 103.164.38.0/24 maxlen: 24 103.164.39.0/24 maxlen: 24 2001:df6:3780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E754F, serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE Validity Not Before: Mar 5 00:11:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c796b0-c841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:df:80:59:3a:51:e8:4e:8b:11:ec:ff:89: a9:9a:14:b7:e8:58:49:a0:a4:d6:18:92:ab:ea:3c: 0e:c1:b2:55:8b:57:3c:b5:e9:bb:6d:38:eb:66:85: cc:31:25:b6:dd:9c:80:55:2d:12:64:0d:99:21:51: 9e:96:1b:5d:17:a8:fc:c5:9d:90:a9:12:41:75:c3: 9f:b7:d1:5d:d1:a6:bc:fa:93:d4:76:2e:36:01:db: 25:15:cd:d0:12:ec:cf:6a:27:e3:04:87:c4:d0:7a: fc:d6:2b:4b:73:fe:69:2b:e0:37:38:50:34:85:12: 48:a4:1f:1c:fa:cd:4d:a9:ff:1c:e0:a8:73:47:5a: e5:8f:8c:25:31:66:63:ac:36:43:80:88:ad:e8:48: b2:9f:8a:1f:7d:f6:41:83:be:b3:57:5a:03:7a:3d: ee:77:5f:e4:66:12:97:00:9a:ab:36:94:6a:0c:2a: cb:ce:1b:70:74:18:cd:4f:93:65:13:9c:9b:33:c5: e6:b0:84:8a:54:71:7c:19:f2:a7:86:fb:96:e7:75: 51:5d:57:65:71:39:77:c9:ee:46:13:87:a4:13:39: 61:1c:60:9f:dc:2a:4d:1c:0f:be:26:17:00:d6:67: 2b:a8:45:8e:0c:40:b4:86:b3:94:90:c1:c0:4e:dd: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:ED:11:0F:1A:A8:3D:CA:F3:F8:87:B4:85:F9:4D:CE:4E:A2:16:1F X509v3 Authority Key Identifier: keyid:0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/26F67E0A842011EB8A4C635AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.38.0/23 IPv6: 2001:df6:3780::/48 Signature Algorithm: sha256WithRSAEncryption 93:8b:93:80:ff:85:c9:77:00:30:d6:8c:21:ed:d9:45:db:0d: 7f:df:5f:b7:22:7a:6b:0b:99:98:96:05:75:c3:9c:ee:81:9f: e8:63:b4:5c:c5:cb:9a:46:8c:d0:4d:36:c2:bd:fa:a0:50:b7: b2:ce:50:5c:2d:31:35:06:49:db:84:df:9a:06:50:6a:c9:70: 65:a0:98:e1:4c:a0:9c:b4:3c:d3:e4:63:79:84:f1:1b:9b:40: c9:fd:a7:89:6f:26:a3:96:8a:b4:91:7c:c6:61:e3:d8:c6:5b: 97:df:39:f0:88:6d:f3:2d:dd:f0:00:bb:5d:d2:b0:81:ee:37: 8d:ac:e2:d3:23:77:d9:66:1e:f8:cf:58:36:77:ef:b4:cd:9c: 77:68:2a:8e:29:e0:f9:70:4c:4e:54:09:6f:16:bb:1e:f4:f4: c2:6c:89:0a:35:cc:05:11:82:34:7d:97:35:4b:6a:e5:0a:b7: 41:46:28:83:aa:ed:e9:68:8d:03:32:7f:ae:a4:57:fc:a9:db: 61:71:23:aa:85:d1:4e:dd:71:84:94:1f:b4:c7:48:a3:e2:e8: a2:3e:ec:ed:e7:69:af:06:61:8a:a7:98:a7:47:b1:5c:a7:b3: 2f:93:d6:39:01:86:36:3f:d9:5e:4c:3c:1a:5c:23:91:0b:c3: 56:8a:e8:29 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NEYxMTAvBgNVBAUTKDBDMUYyNEU5RTYwMjg1NzY5RUY2MTRDRkE4MTNFRTUx QUM5RTk4RkUwHhcNMjUwMzA1MDAxMTI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3OTZiMC1jODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6PfgFk6UehOixHs/4mpmhS36FhJoKTWGJKr6jwOwbJVi1c8tem7bTjrZoXM MSW23ZyAVS0SZA2ZIVGelhtdF6j8xZ2QqRJBdcOft9Fd0aa8+pPUdi42AdslFc3Q EuzPaifjBIfE0Hr81itLc/5pK+A3OFA0hRJIpB8c+s1Nqf8c4KhzR1rlj4wlMWZj rDZDgIit6Eiyn4offfZBg76zV1oDej3ud1/kZhKXAJqrNpRqDCrLzhtwdBjNT5Nl E5ybM8XmsISKVHF8GfKnhvuW53VRXVdlcTl3ye5GE4ekEzlhHGCf3CpNHA++JhcA 1mcrqEWODEC0hrOUkMHATt2DyQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFE7tEQ8a qD3K8/iHtIX5Tc5OohYfMB8GA1UdIwQYMBaAFAwfJOnmAoV2nvYUz6gT7lGsnpj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU0Ri9CNDUyQkY4Qzg0 MUQxMUVCQTA4N0JGMzFDNEY5QUUwMi9EQjhrNmVZQ2hYYWU5aFRQcUJQdVVheWVt UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RCOGs2ZVlDaFhhZTloVFBxQlB1VWF5ZW1QNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NEYvQjQ1MkJGOEM4NDFEMTFFQkEwODdCRjMxQzRGOUFFMDIvMjZGNjdFMEE4 NDIwMTFFQjhBNEM2MzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpCYwDwQCAAIwCQMHACABDfY3gDANBgkqhkiG9w0BAQsF AAOCAQEAk4uTgP+FyXcAMNaMIe3ZRdsNf99ftyJ6awuZmJYFdcOc7oGf6GO0XMXL mkaM0E02wr36oFC3ss5QXC0xNQZJ24TfmgZQaslwZaCY4UygnLQ80+RjeYTxG5tA yf2niW8mo5aKtJF8xmHj2MZbl9858Iht8y3d8AC7XdKwge43jazi0yN32WYe+M9Y NnfvtM2cd2gqjing+XBMTlQJbxa7HvT0wmyJCjXMBRGCNH2XNUtq5Qq3QUYog6rt 6WiNAzJ/rqRX/KnbYXEjqoXRTt1xhJQftMdIo+Looj7s7edprwZhiqeYp0exXKez L5PWOQGGNj/ZXkw8GlwjkQvDVoroKQ== -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:31 2025 by rpki-client