$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3E6A716CE2F11EEAF078018C4F9AE02.roa File: B3E6A716CE2F11EEAF078018C4F9AE02.roa (raw, json) Hash identifier: jbl/yZfjtacFHJLXIZQnqzQmIA4/kNlkUibqczFg0Gg= Subject key identifier: 7D:D0:C6:DA:F5:F5:CC:58:43:BB:9E:1C:2C:73:B3:B1:91:71:F3:03 Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 3329 Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3E6A716CE2F11EEAF078018C4F9AE02.roa Signing time: Thu 14 Mar 2024 16:01:11 +0000 ROA not before: Thu 14 Mar 2024 16:01:11 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 21700 IP address blocks: 122.8.28.0/22 maxlen: 22 122.8.40.0/22 maxlen: 22 122.8.92.0/22 maxlen: 22 122.8.96.0/22 maxlen: 22 122.8.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 15:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13097 (0x3329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Mar 14 16:01:11 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f31f47-9ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:4c:a0:96:5e:f6:8f:57:93:46:d0:e3:02: 9d:4c:7c:9c:42:de:80:5c:8d:60:75:56:4f:97:e1: 6f:b1:3c:a8:86:4c:59:b7:56:bc:af:73:7c:c9:38: a6:f6:00:54:ba:cc:28:b7:af:b5:dd:95:4c:a8:e7: 2f:62:d0:60:3f:2f:aa:6b:4e:a5:66:a0:03:2a:11: 4a:e6:b6:32:01:49:5e:db:ec:01:6f:6e:d5:f9:0e: ef:62:db:3b:e8:f8:2c:52:4c:82:4a:2a:25:cd:0d: c8:ab:e7:87:14:51:51:2b:61:c7:35:99:8e:30:f9: 5e:bf:07:dd:db:91:b3:a6:60:73:09:d9:c2:67:62: 6c:fc:a2:42:ec:2b:3a:34:d2:f7:68:e8:ce:19:96: 10:8e:6b:0e:ef:5a:01:e2:c9:68:92:18:11:fe:16: 75:51:1d:c4:be:ae:e7:c7:90:89:96:ac:1f:68:8c: 9e:55:09:f1:3f:69:c6:e3:a9:2d:97:cb:d9:1b:f3: f3:0b:13:eb:dd:5b:9c:72:c5:89:2e:23:5e:34:34: 54:71:c9:d6:d9:12:5f:d8:9c:07:95:b8:53:7d:7f: 57:ba:5f:1d:bd:1d:88:55:ea:20:89:fe:68:d6:31: 4e:e9:98:18:d9:bd:fb:cb:41:c2:73:48:1a:2a:bc: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D0:C6:DA:F5:F5:CC:58:43:BB:9E:1C:2C:73:B3:B1:91:71:F3:03 X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3E6A716CE2F11EEAF078018C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.28.0/22 122.8.40.0/22 122.8.92.0-122.8.99.255 122.8.108.0/22 Signature Algorithm: sha256WithRSAEncryption 70:6c:5d:5f:a7:97:6d:10:15:d6:1a:a8:b7:47:f1:fc:5e:ca: cc:14:32:15:e7:db:63:8b:f2:f5:09:ce:79:c6:e9:35:64:10: bf:da:04:b2:71:6e:5c:93:c6:b8:61:78:e0:ac:8e:81:2c:ce: d8:e7:eb:c0:55:2f:77:e6:f4:10:dc:a7:33:a4:b1:d4:1c:f9: 0d:b5:16:aa:30:f4:c1:e9:74:67:67:aa:ee:6b:2f:f7:1f:26: c9:a0:b6:51:fa:11:fc:2b:0d:63:ee:27:9d:f5:fb:cd:e2:71: 72:fe:2f:1a:9b:c1:41:fa:24:02:db:7e:cb:1e:ae:09:75:63: 69:63:d2:97:61:1e:f7:e5:8a:d5:53:ec:0e:ac:0b:a5:98:4c: 00:a0:0e:aa:59:c5:b6:a3:92:1b:20:7a:fe:54:42:d4:cb:01: 64:df:4f:a6:ad:41:01:79:5d:7e:3f:db:ef:21:1d:99:03:0f: e9:f6:2d:e7:07:26:af:e3:1f:f0:d7:c7:a4:31:c8:56:fb:0a: d3:bc:9f:84:32:2a:d2:a3:43:b0:0b:fd:28:6a:74:96:ec:85: 44:0b:fb:75:7f:21:08:c7:8f:e6:c4:b3:43:eb:6c:8b:3b:2f: b6:ad:06:60:17:e4:82:9c:82:ae:33:9d:05:f4:0e:15:15:51: b8:d4:e7:72 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICMykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjQwMzE0MTYwMTExWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzMWY0Ny05ZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOdMoJZe9o9Xk0bQ4wKdTHycQt6AXI1gdVZPl+FvsTyohkxZt1a8r3N8yTim 9gBUuswot6+13ZVMqOcvYtBgPy+qa06lZqADKhFK5rYyAUle2+wBb27V+Q7vYts7 6PgsUkyCSiolzQ3Iq+eHFFFRK2HHNZmOMPlevwfd25GzpmBzCdnCZ2Js/KJC7Cs6 NNL3aOjOGZYQjmsO71oB4slokhgR/hZ1UR3Evq7nx5CJlqwfaIyeVQnxP2nG46kt l8vZG/PzCxPr3VuccsWJLiNeNDRUccnW2RJf2JwHlbhTfX9Xul8dvR2IVeogif5o 1jFO6ZgY2b37y0HCc0gaKrxalQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFH3Qxtr1 9cxYQ7ueHCxzs7GRcfMDMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvQjNFNkE3MTZD RTJGMTFFRUFGMDc4MDE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAJ6CBwDBAJ6CCgwDAMEAnoIXAMEAnoIYAMEAnoIbDANBgkq hkiG9w0BAQsFAAOCAQEAcGxdX6eXbRAV1hqot0fx/F7KzBQyFefbY4vy9QnOecbp NWQQv9oEsnFuXJPGuGF44KyOgSzO2OfrwFUvd+b0ENynM6Sx1Bz5DbUWqjD0wel0 Z2eq7msv9x8myaC2UfoR/CsNY+4nnfX7zeJxcv4vGpvBQfokAtt+yx6uCXVjaWPS l2Ee9+WK1VPsDqwLpZhMAKAOqlnFtqOSGyB6/lRC1MsBZN9Ppq1BAXldfj/b7yEd mQMP6fYt5wcmr+Mf8NfHpDHIVvsK07yfhDIq0qNDsAv9KGp0luyFRAv7dX8hCMeP 5sSzQ+tsizsvtq0GYBfkgpyCrjOdBfQOFRVRuNTncg== -----END CERTIFICATE-----Generated at Tue May 28 17:50:53 2024 by rpki-client on console-fra.rpki-client.org