$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9B6837A8AD6911EFA86BAA58C4F9AE02.roa File: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (raw, json) Hash identifier: pWg9J7cYk+HXhg4hXPdqT10Vpf+1vT1PV33YnS6AG6c= Subject key identifier: B6:9A:69:B9:A5:BB:4B:DF:F6:09:21:8A:D1:BE:19:B7:0E:72:5C:FD Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 348A Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9B6837A8AD6911EFA86BAA58C4F9AE02.roa Signing time: Thu 20 Mar 2025 15:21:07 +0000 ROA not before: Thu 20 Mar 2025 15:21:07 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 1299 IP address blocks: 122.8.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F Validity Not Before: Mar 20 15:21:07 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc3262-9b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:d6:0d:9f:a4:93:ba:ff:cc:12:8f:4a:b2: 61:78:af:a9:7f:28:e9:6f:22:73:87:51:54:bf:57: 35:1d:44:0d:5a:45:d3:bf:f1:44:f0:96:06:d9:e8: f7:c9:ac:7f:b3:bd:84:aa:58:6d:7a:e6:ae:1f:f5: 8b:9f:80:32:e8:d0:00:af:af:1b:39:a7:46:66:3b: 8f:24:96:e7:6d:4c:e8:b6:d8:ac:57:f4:8a:66:24: fd:50:a0:26:08:7d:fc:4a:0d:26:cf:73:5c:9d:d9: 1a:95:d7:61:80:1d:27:12:d6:1c:76:a9:5f:7f:e3: 7a:e0:70:53:fb:ef:e6:f3:c4:55:6c:7c:34:36:37: 7a:f6:64:97:1e:0d:e2:f5:44:69:c8:1d:e2:5b:aa: 35:4a:33:8c:cb:77:32:c0:da:71:d7:ff:fe:28:ae: 5e:61:e9:d0:b4:0e:62:4f:ec:4a:39:15:0d:34:75: 20:f2:d0:67:1a:02:2a:12:9d:40:ca:7f:43:6d:09: 95:df:37:2b:04:c4:e3:16:ea:95:a7:ac:34:c3:5a: 1d:d5:7c:6d:73:37:36:d0:be:27:1a:c4:c9:a2:61: 15:94:7c:06:33:c0:29:68:77:38:c3:e9:da:43:2e: ec:c0:28:48:05:b8:4a:1c:7f:4d:63:29:91:b4:f5: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:69:B9:A5:BB:4B:DF:F6:09:21:8A:D1:BE:19:B7:0E:72:5C:FD X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9B6837A8AD6911EFA86BAA58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.48.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:34:47:fd:a7:81:9f:20:c1:2f:8e:3c:d4:10:96:91:9a:fc: ff:a6:cc:a9:7a:cb:2c:91:e0:cc:3e:26:62:f6:f1:4d:3f:cb: 41:69:68:ca:23:79:d5:76:f1:a3:15:95:7e:c9:e9:d7:86:1a: ab:7f:7b:b9:c8:bb:96:4f:5d:78:46:91:5a:c2:76:3a:9c:ed: 07:39:d7:28:c6:65:74:79:9a:f4:0e:ce:7d:e6:cb:60:5c:86: 41:1b:09:d8:a9:88:80:ac:62:d3:47:b2:a2:4d:60:d0:aa:76: 7b:b7:2e:95:82:c1:05:70:65:8c:55:14:84:34:df:48:c8:09: 90:e5:85:0c:11:6f:f0:f7:ab:5a:27:0a:f2:e4:14:9a:43:88: cf:d1:5c:04:ea:69:50:9c:78:82:8d:49:cc:c7:1a:60:5e:fe: ee:a8:3f:ae:7f:51:9d:69:f8:9d:b6:1a:3e:09:18:7f:3d:12: b1:9b:5b:9d:51:ce:52:28:45:a0:71:8d:1e:2f:6e:f1:c2:49: f3:d0:29:0f:14:6d:e3:b4:cc:40:a4:59:70:6c:82:b4:bd:9d: f8:0b:e3:b7:4b:ad:19:88:89:36:96:d4:d5:27:f2:2f:b0:24: 1c:04:b1:68:b9:22:fe:24:38:27:59:b7:72:87:5c:32:70:73: 4f:22:1d:db -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwMzIwMTUyMTA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjMzI2Mi05YjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCfWDZ+kk7r/zBKPSrJheK+pfyjpbyJzh1FUv1c1HUQNWkXTv/FE8JYG2ej3 yax/s72EqlhteuauH/WLn4Ay6NAAr68bOadGZjuPJJbnbUzottisV/SKZiT9UKAm CH38Sg0mz3NcndkalddhgB0nEtYcdqlff+N64HBT++/m88RVbHw0Njd69mSXHg3i 9URpyB3iW6o1SjOMy3cywNpx1//+KK5eYenQtA5iT+xKORUNNHUg8tBnGgIqEp1A yn9DbQmV3zcrBMTjFuqVp6w0w1od1Xxtczc20L4nGsTJomEVlHwGM8ApaHc4w+na Qy7swChIBbhKHH9NYymRtPXLVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLaaabml u0vf9gkhitG+GbcOclz9MB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvOUI2ODM3QThB RDY5MTFFRkE4NkJBQTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ6CDAwDQYJKoZIhvcNAQELBQADggEBAH80R/2ngZ8gwS+O PNQQlpGa/P+mzKl6yyyR4Mw+JmL28U0/y0FpaMojedV28aMVlX7J6deGGqt/e7nI u5ZPXXhGkVrCdjqc7Qc51yjGZXR5mvQOzn3my2BchkEbCdipiICsYtNHsqJNYNCq dnu3LpWCwQVwZYxVFIQ030jICZDlhQwRb/D3q1onCvLkFJpDiM/RXATqaVCceIKN SczHGmBe/u6oP65/UZ1p+J22Gj4JGH89ErGbW51RzlIoRaBxjR4vbvHCSfPQKQ8U beO0zECkWXBsgrS9nfgL47dLrRmIiTaW1NUn8i+wJBwEsWi5Iv4kOCdZt3KHXDJw c08iHds= -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:05 2025 by rpki-client