$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa File: 0A5276E04BB611EE8F105367C4F9AE02.roa (raw, json) Hash identifier: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ= Subject key identifier: 3C:14:C2:55:7D:A5:52:2C:E2:A0:24:C2:79:96:38:8C:07:E8:4F:9D Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 3492 Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa Signing time: Thu 20 Mar 2025 15:21:13 +0000 ROA not before: Thu 20 Mar 2025 15:21:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 5065 IP address blocks: 122.8.80.0/22 maxlen: 22 122.8.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Mar 20 15:21:13 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc3269-16da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:40:21:8c:b8:66:c2:ce:91:12:03:ee:66: f6:3b:31:e3:73:04:c6:69:73:34:98:f4:2d:49:76: c1:45:35:d7:37:21:5b:b6:ff:0a:cd:16:26:79:ad: e8:e9:56:08:e2:0c:78:65:a4:32:d2:b2:5e:28:12: 53:e6:8e:43:fd:bd:ed:68:22:c2:b6:31:f3:e2:09: c7:4e:0b:b0:52:bc:4c:0c:42:3e:99:d2:b1:50:50: 5e:fd:d2:5f:ef:6e:46:58:22:6d:89:49:d2:4a:0c: ae:62:4c:f2:9a:40:85:75:4f:53:e9:a4:96:b3:f7: 12:37:84:9f:99:76:3f:b0:23:1e:76:46:c2:7c:19: 9c:01:8a:b5:00:5f:6d:f8:41:49:59:cf:33:81:66: 02:5c:b6:3a:79:58:2b:5b:2b:db:c3:af:b8:91:14: ff:07:31:82:68:17:6e:a9:65:e6:e0:0e:55:31:78: 05:95:62:02:2c:2b:d3:08:3c:79:70:6f:ea:e0:cc: 56:d4:b9:4c:4b:9d:ed:06:83:f2:69:65:f9:73:50: b9:01:9d:bf:a9:a7:76:07:dc:a3:8f:13:ff:a7:28: 26:33:47:be:7f:e3:bd:cf:00:5f:42:b5:89:0f:5b: fb:9d:34:86:a7:f2:86:aa:fc:8c:04:af:bb:8a:da: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:C2:55:7D:A5:52:2C:E2:A0:24:C2:79:96:38:8C:07:E8:4F:9D X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.80.0/22 Signature Algorithm: sha256WithRSAEncryption 56:9e:1c:49:fb:61:af:61:fb:b9:87:b9:5f:f0:f0:50:ff:0f: bb:e8:1f:e7:c3:51:e5:67:3c:c7:69:d0:d9:58:22:ee:28:c5: af:07:ba:92:62:b0:53:8d:ca:0f:54:67:49:76:f8:a6:c8:7b: 05:ea:ed:42:88:83:e3:a0:fa:75:03:a4:f7:76:ab:27:3e:ee: 41:7a:67:04:6f:e1:59:20:a3:6a:3b:0e:82:d3:24:95:9f:e6: 70:13:38:e3:eb:74:3f:6d:35:71:c7:fd:8b:fe:c3:42:4b:21: 85:0a:f2:12:04:e9:bf:c1:fc:5a:b0:bd:c6:04:20:2e:0e:8a: 00:8a:33:cd:15:30:0b:96:ab:bc:7a:02:75:f5:57:fb:18:51: 54:3a:8a:0d:0f:f9:24:1c:0e:fd:73:b6:9d:fe:53:f1:b8:d9: 60:7d:53:ee:85:c1:11:1c:48:b8:69:e3:a3:ef:51:73:7c:2c: 88:f6:52:3b:ec:07:9f:70:8c:f6:e4:2b:6f:c3:33:6d:ac:1c: f9:45:17:d8:87:14:14:39:b2:3d:9f:eb:68:4d:22:c6:75:0b: e0:c8:9a:f8:60:d4:b4:b5:10:11:3c:7c:86:1a:1e:d4:9e:31: 4e:86:da:08:2c:a2:9f:14:ed:07:d7:7f:b7:b2:e3:94:69:6c: 9b:dc:bd:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwMzIwMTUyMTEzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjMzI2OS0xNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcBAIYy4ZsLOkRID7mb2OzHjcwTGaXM0mPQtSXbBRTXXNyFbtv8KzRYmea3o 6VYI4gx4ZaQy0rJeKBJT5o5D/b3taCLCtjHz4gnHTguwUrxMDEI+mdKxUFBe/dJf 725GWCJtiUnSSgyuYkzymkCFdU9T6aSWs/cSN4SfmXY/sCMedkbCfBmcAYq1AF9t +EFJWc8zgWYCXLY6eVgrWyvbw6+4kRT/BzGCaBduqWXm4A5VMXgFlWICLCvTCDx5 cG/q4MxW1LlMS53tBoPyaWX5c1C5AZ2/qad2B9yjjxP/pygmM0e+f+O9zwBfQrWJ D1v7nTSGp/KGqvyMBK+7itq1lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDwUwlV9 pVIs4qAkwnmWOIwH6E+dMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvMEE1Mjc2RTA0 QkI2MTFFRThGMTA1MzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ6CFAwDQYJKoZIhvcNAQELBQADggEBAFaeHEn7Ya9h+7mH uV/w8FD/D7voH+fDUeVnPMdp0NlYIu4oxa8HupJisFONyg9UZ0l2+KbIewXq7UKI g+Og+nUDpPd2qyc+7kF6ZwRv4Vkgo2o7DoLTJJWf5nATOOPrdD9tNXHH/Yv+w0JL IYUK8hIE6b/B/FqwvcYEIC4OigCKM80VMAuWq7x6AnX1V/sYUVQ6ig0P+SQcDv1z tp3+U/G42WB9U+6FwREcSLhp46PvUXN8LIj2UjvsB59wjPbkK2/DM22sHPlFF9iH FBQ5sj2f62hNIsZ1C+DImvhg1LS1EBE8fIYaHtSeMU6G2ggsop8U7QfXf7ey45Rp bJvcvUc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:44 2025 by rpki-client