$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D38D71F0854811EFA29BE474C4F9AE02.roa File: D38D71F0854811EFA29BE474C4F9AE02.roa (raw, json) Hash identifier: IDgcdtogLK4WY97A8X0xizLzh/LAABb6GSfrSIGEwSQ= Subject key identifier: A7:A1:FB:72:E5:69:21:A8:C1:51:5C:77:8C:25:A9:E2:54:79:AC:A1 Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 3497 Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D38D71F0854811EFA29BE474C4F9AE02.roa Signing time: Thu 20 Mar 2025 15:21:17 +0000 ROA not before: Thu 20 Mar 2025 15:21:17 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 5650 IP address blocks: 122.8.76.0/22 maxlen: 22 122.8.112.0/22 maxlen: 22 122.8.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F Validity Not Before: Mar 20 15:21:17 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc326d-82e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:dc:71:31:8f:ae:32:db:42:ee:e4:1b:36: 0d:e9:93:e3:5a:b0:ee:5c:76:34:7f:fb:6c:3c:31: ed:dd:52:ad:30:77:ea:fe:17:3e:6d:5d:5a:e9:c6: 58:1a:a9:68:85:55:9b:70:ef:65:98:11:c7:d4:06: bc:90:b3:1c:99:4c:8c:0f:d2:3e:c4:9b:84:0e:d0: 03:d8:cb:10:15:75:92:62:47:f5:83:6b:e5:19:78: d0:ce:f2:dc:81:0a:52:60:66:31:84:6b:43:f4:70: b2:dd:00:2f:46:17:fb:43:7e:ba:c0:57:e5:10:cc: e3:1a:90:0e:89:96:6c:96:52:09:54:9b:42:4f:e1: cd:8c:73:cc:90:5c:13:2b:64:f1:c3:73:bb:c2:52: ec:9f:54:67:f8:9e:57:dd:36:24:f1:5e:ce:6e:49: 0b:47:96:bc:a8:b1:29:59:07:9c:08:f6:23:6a:fb: 82:0f:21:b8:0e:d7:09:72:4b:b0:12:c2:9c:0d:a6: 16:d0:e1:bf:73:ca:8a:2e:7e:0d:5d:66:8b:80:90: 26:5f:00:54:30:f6:10:f5:45:06:f0:ed:8e:1d:4d: 0a:12:25:0a:2f:3c:4b:07:31:ec:1e:63:5c:e3:ad: 47:75:73:0e:36:40:e0:2d:2d:41:a9:2c:99:55:3c: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A1:FB:72:E5:69:21:A8:C1:51:5C:77:8C:25:A9:E2:54:79:AC:A1 X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D38D71F0854811EFA29BE474C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.76.0/22 122.8.112.0/22 122.8.124.0/22 Signature Algorithm: sha256WithRSAEncryption e9:14:89:a7:1a:af:8b:cb:66:d5:5f:74:ca:41:c7:46:00:72: 2b:32:84:c1:39:b1:c2:6b:7c:54:67:f6:04:a0:80:7f:e7:cc: af:c6:6f:53:5c:61:4a:25:03:96:f1:2a:a4:2d:41:b0:68:47: ee:a0:3d:5d:e3:69:3c:48:8b:fa:bb:17:3b:0d:a0:5f:3e:b5: 88:4a:d0:47:28:4c:0a:a7:62:f8:95:e5:38:32:2e:05:e4:db: bd:5b:ca:90:45:20:99:3a:8d:aa:4e:df:3b:ef:c9:e9:61:86: a0:cd:98:e2:a3:a0:3c:7e:a9:81:07:09:1b:53:56:2b:c1:76: 6e:53:fb:6a:c4:1d:50:bd:38:8a:2b:1e:c0:4c:24:0b:10:f2: d3:58:ad:dc:ec:92:83:a0:26:b6:27:bf:2e:17:33:78:f3:84: 06:a3:27:75:f4:fb:45:b7:2b:9f:52:95:be:3a:a8:51:64:8a: 94:7a:10:f5:64:f8:70:d5:5d:6a:9d:8e:74:39:85:43:6d:72: 9e:ed:1d:21:8d:42:06:39:f6:42:04:d4:36:64:4b:45:0c:4b: bb:b5:69:a9:69:ad:91:fa:fe:c4:0b:4e:17:79:a0:57:73:31: c3:e1:9f:2d:36:60:89:22:8f:5b:64:17:c7:34:1a:f5:3f:b7: de:7c:eb:e4 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwMzIwMTUyMTE3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjMzI2ZC04MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdnccTGPrjLbQu7kGzYN6ZPjWrDuXHY0f/tsPDHt3VKtMHfq/hc+bV1a6cZY GqlohVWbcO9lmBHH1Aa8kLMcmUyMD9I+xJuEDtAD2MsQFXWSYkf1g2vlGXjQzvLc gQpSYGYxhGtD9HCy3QAvRhf7Q366wFflEMzjGpAOiZZsllIJVJtCT+HNjHPMkFwT K2Txw3O7wlLsn1Rn+J5X3TYk8V7ObkkLR5a8qLEpWQecCPYjavuCDyG4DtcJckuw EsKcDaYW0OG/c8qKLn4NXWaLgJAmXwBUMPYQ9UUG8O2OHU0KEiUKLzxLBzHsHmNc 461HdXMONkDgLS1BqSyZVTwNIwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKeh+3Ll aSGowVFcd4wlqeJUeayhMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvRDM4RDcxRjA4 NTQ4MTFFRkEyOUJFNDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJ6CEwDBAJ6CHADBAJ6CHwwDQYJKoZIhvcNAQELBQADggEB AOkUiacar4vLZtVfdMpBx0YAcisyhME5scJrfFRn9gSggH/nzK/Gb1NcYUolA5bx KqQtQbBoR+6gPV3jaTxIi/q7FzsNoF8+tYhK0EcoTAqnYviV5TgyLgXk271bypBF IJk6japO3zvvyelhhqDNmOKjoDx+qYEHCRtTVivBdm5T+2rEHVC9OIorHsBMJAsQ 8tNYrdzskoOgJrYnvy4XM3jzhAajJ3X0+0W3K59Slb46qFFkipR6EPVk+HDVXWqd jnQ5hUNtcp7tHSGNQgY59kIE1DZkS0UMS7u1aalprZH6/sQLThd5oFdzMcPhny02 YIkij1tkF8c0GvU/t9586+Q= -----END CERTIFICATE-----Generated at Fri Apr 11 17:00:20 2025 by rpki-client