$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AA5075824F1811EFB6ECD54CC4F9AE02.roa File: AA5075824F1811EFB6ECD54CC4F9AE02.roa (raw, json) Hash identifier: Zt1pvdwOft/kNVYIji31PZ+Vytsn8ifr5w5B3qkwhUo= Subject key identifier: 9A:F6:76:7D:48:9B:21:2A:BB:68:13:B2:87:A1:C4:FB:7C:27:1B:E4 Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 33AD Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AA5075824F1811EFB6ECD54CC4F9AE02.roa Signing time: Wed 31 Jul 2024 08:41:23 +0000 ROA not before: Wed 31 Jul 2024 08:41:23 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 7018 IP address blocks: 122.8.24.0/22 maxlen: 22 122.8.28.0/22 maxlen: 22 122.8.104.0/22 maxlen: 22 122.8.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13229 (0x33ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F Validity Not Before: Jul 31 08:41:23 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66a9f8b2-5c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:d1:f5:26:99:e7:6c:6f:6b:48:d8:21:79: 02:23:4f:35:0b:85:b8:b3:1d:be:82:99:ca:51:2d: 26:fe:07:f1:ac:c0:16:60:ac:bf:19:a2:64:e2:57: 81:48:ea:e9:70:ba:f1:f0:f7:0c:32:7a:bf:92:e8: dd:b0:ce:6a:64:9b:b5:ab:90:ff:e1:07:08:13:1f: 6d:e5:db:2a:53:99:a6:79:8a:42:fb:11:0c:62:d6: c3:64:1a:98:b6:67:1f:26:4f:8e:93:4c:86:59:1e: e0:52:7c:38:a1:77:20:10:a6:57:1d:9b:5c:1b:c3: c9:f7:f0:62:7f:3a:ef:bd:71:34:8d:e7:68:35:16: e2:f1:2c:65:e9:e7:4b:9d:14:b6:2e:dc:35:71:f6: b4:c4:b5:fc:84:ed:63:11:7c:67:01:02:43:6a:ac: 67:8b:8e:37:2b:0e:c4:16:e5:3a:76:9a:ad:f0:e5: 23:3e:b3:03:b4:1d:71:bd:24:95:a8:30:f7:82:33: 99:f4:4e:c6:24:00:f4:99:b4:ce:98:f4:11:f9:d9: 1d:68:9b:7f:d5:cc:ee:ff:83:85:5d:7a:81:68:38: 60:14:44:9d:4a:f1:bf:e0:b8:91:8d:24:5b:57:b8: dd:db:3e:13:2f:45:a6:01:13:3e:fc:a3:e2:69:1d: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F6:76:7D:48:9B:21:2A:BB:68:13:B2:87:A1:C4:FB:7C:27:1B:E4 X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AA5075824F1811EFB6ECD54CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.24.0/21 122.8.104.0/22 122.8.120.0/22 Signature Algorithm: sha256WithRSAEncryption 98:a5:e3:15:ff:3d:9b:2a:c1:e7:58:0a:d6:4f:88:fd:7c:4e: 3d:92:49:1c:0f:3d:50:78:66:76:8f:2a:32:5c:7c:4f:23:af: 9b:d2:c6:e1:8e:e8:b6:3f:d6:5a:27:c3:0f:f2:78:bf:36:2c: 93:39:aa:a0:ac:92:08:ae:24:5f:ec:b1:e6:b5:89:5a:01:ca: 25:e1:9f:8b:74:03:ab:96:a3:bf:28:5a:92:6c:f3:e6:71:d8: 96:98:a5:9a:37:b3:17:9f:65:cc:6c:d1:78:e7:46:9e:29:62: 00:f0:86:51:30:20:3c:60:52:c2:e4:49:54:44:c6:7c:f3:51: 24:ca:41:a6:1b:67:c4:47:57:a8:34:04:ae:31:e9:58:b3:fb: 50:9b:da:87:af:d2:fa:0d:44:a1:66:d4:1c:a5:77:bf:67:f2: e9:ff:11:34:e1:0c:16:5e:d0:c4:c1:c9:d2:66:77:95:3f:aa: 92:8e:4a:e2:bd:cd:73:c8:3e:2c:96:39:34:ee:26:ca:29:14: 58:10:e0:6b:26:7c:34:f1:af:d4:d2:b1:f9:a5:92:6d:f9:cc: 5d:d0:02:f2:f0:63:f2:70:d2:d1:92:65:b3:0c:41:0e:69:eb: 14:60:e2:14:85:fb:00:cd:ba:14:b4:30:e4:9f:56:0d:27:6c: f9:7e:cd:12 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICM60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjQwNzMxMDg0MTIzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5ZjhiMi01YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcTR9SaZ52xva0jYIXkCI081C4W4sx2+gpnKUS0m/gfxrMAWYKy/GaJk4leB SOrpcLrx8PcMMnq/kujdsM5qZJu1q5D/4QcIEx9t5dsqU5mmeYpC+xEMYtbDZBqY tmcfJk+Ok0yGWR7gUnw4oXcgEKZXHZtcG8PJ9/BifzrvvXE0jedoNRbi8Sxl6edL nRS2Ltw1cfa0xLX8hO1jEXxnAQJDaqxni443Kw7EFuU6dpqt8OUjPrMDtB1xvSSV qDD3gjOZ9E7GJAD0mbTOmPQR+dkdaJt/1czu/4OFXXqBaDhgFESdSvG/4LiRjSRb V7jd2z4TL0WmARM+/KPiaR2IHQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJr2dn1I myEqu2gTsoehxPt8JxvkMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvQUE1MDc1ODI0 RjE4MTFFRkI2RUNENTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAN6CBgDBAJ6CGgDBAJ6CHgwDQYJKoZIhvcNAQELBQADggEB AJil4xX/PZsqwedYCtZPiP18Tj2SSRwPPVB4ZnaPKjJcfE8jr5vSxuGO6LY/1lon ww/yeL82LJM5qqCskgiuJF/ssea1iVoByiXhn4t0A6uWo78oWpJs8+Zx2JaYpZo3 sxefZcxs0XjnRp4pYgDwhlEwIDxgUsLkSVRExnzzUSTKQaYbZ8RHV6g0BK4x6Viz +1Cb2oev0voNRKFm1Byld79n8un/ETThDBZe0MTBydJmd5U/qpKOSuK9zXPIPiyW OTTuJsopFFgQ4GsmfDTxr9TSsfmlkm35zF3QAvLwY/Jw0tGSZbMMQQ5p6xRg4hSF +wDNuhS0MOSfVg0nbPl+zRI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:58 2025 by rpki-client