$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6C71053CAE2311EFAEB8B36AC4F9AE02.roa File: 6C71053CAE2311EFAEB8B36AC4F9AE02.roa (raw, json) Hash identifier: UB5jeT2vrtRpFNW5uH0buWOahHBRPdxwoEQZBy8ZiUA= Subject key identifier: F3:29:25:6C:FE:6E:94:08:C5:B5:D6:3D:2D:42:66:3F:D6:8C:CF:30 Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 3495 Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6C71053CAE2311EFAEB8B36AC4F9AE02.roa Signing time: Thu 20 Mar 2025 15:21:15 +0000 ROA not before: Thu 20 Mar 2025 15:21:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55361 IP address blocks: 122.8.15.0/24 maxlen: 24 122.8.16.0/24 maxlen: 24 122.8.17.0/24 maxlen: 24 122.8.18.0/24 maxlen: 24 122.8.19.0/24 maxlen: 24 122.8.20.0/24 maxlen: 24 122.8.21.0/24 maxlen: 24 122.8.56.0/24 maxlen: 24 122.8.57.0/24 maxlen: 24 122.8.58.0/24 maxlen: 24 122.8.59.0/24 maxlen: 24 122.8.60.0/24 maxlen: 24 122.8.61.0/24 maxlen: 24 122.8.62.0/24 maxlen: 24 122.8.82.0/24 maxlen: 24 122.8.83.0/24 maxlen: 24 122.8.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Mar 20 15:21:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc326b-9cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:9f:4e:0b:17:15:36:8b:47:50:f6:fa:7a: ac:3b:2b:2d:35:cd:56:6b:33:b6:b6:66:2c:d8:eb: 91:07:d9:41:89:68:43:8a:cd:77:1a:b4:8b:d1:2f: de:c3:f3:0e:21:73:87:cf:d7:eb:7d:1b:4d:7e:97: c0:2d:b6:36:78:a5:c0:2d:e2:07:d2:2e:b9:ee:f4: ec:fd:2e:67:47:d4:2b:ee:26:07:3d:4d:9a:e2:a8: f6:80:d3:52:57:e9:b4:e4:3a:3f:9d:72:3f:d9:b3: f9:c2:03:c3:74:9b:58:39:a6:ff:86:5e:b0:a5:96: 27:ae:98:36:a6:71:d7:4a:48:cd:d9:a4:80:02:1b: dd:fd:85:38:e2:9c:f8:eb:e3:ba:02:fd:dc:52:46: 13:aa:b0:c3:50:08:2d:a1:69:54:cf:ba:a7:d4:31: 4c:08:40:aa:1f:d6:17:88:eb:79:a7:6d:26:cc:41: a6:54:02:75:7d:d0:21:c6:6d:4a:96:4b:29:1d:1d: 03:15:7a:c4:8a:8b:85:15:9b:38:b8:b4:35:2c:4b: a5:f7:3a:fa:37:82:17:46:f7:79:b4:b7:f9:1d:27: a2:5f:e2:b9:34:69:90:2c:20:96:53:96:8c:f4:24: 21:7d:94:a0:a3:85:e4:cf:dd:0a:c4:d1:8d:54:31: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:29:25:6C:FE:6E:94:08:C5:B5:D6:3D:2D:42:66:3F:D6:8C:CF:30 X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6C71053CAE2311EFAEB8B36AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.15.0-122.8.21.255 122.8.56.0-122.8.62.255 122.8.82.0/23 122.8.92.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:06:cd:98:6b:6e:7d:79:88:4d:dd:6a:46:0b:ff:e2:87:8b: e2:75:ed:81:65:e8:1d:14:1b:c4:b7:c7:ed:ee:5b:c7:f1:77: c7:41:38:19:9d:2d:33:91:e8:b5:a7:78:b5:f8:2d:b3:ce:89: 01:4b:22:b4:2a:70:6d:36:d6:ad:57:96:9c:a8:1d:64:86:54: 73:54:a6:d1:cc:60:45:98:b0:e6:cc:25:83:3b:3e:92:18:52: cd:b5:66:10:e0:32:4c:f8:7c:40:73:2e:9d:fd:c8:db:c9:b7: 9f:2e:dc:b3:71:1d:96:96:dc:df:44:c3:2a:1e:da:de:5c:f8: 88:8c:7a:31:83:56:18:70:15:3c:3b:5f:43:c7:48:17:4f:ed: 0a:85:6f:1e:ce:98:b6:8a:ee:c8:9e:54:d1:38:d2:2b:0b:ce: 91:3d:66:8a:41:09:82:f9:e1:5f:a4:d9:b3:4b:a4:0b:a7:11: 62:73:19:a1:7a:39:73:44:d8:6d:dd:7d:6b:33:5d:8d:67:52: f6:11:39:82:52:f2:11:98:09:76:a7:64:cd:4f:19:f8:ba:d2: 2e:5a:9e:a4:9f:d4:5a:a2:33:33:a3:28:c0:7f:3a:be:41:c0: d0:8c:63:66:2f:50:df:7f:70:99:b5:79:48:4f:4c:d7:5a:e7: e3:d9:6e:7b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwMzIwMTUyMTE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjMzI2Yi05Y2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cyfTgsXFTaLR1D2+nqsOystNc1WazO2tmYs2OuRB9lBiWhDis13GrSL0S/e w/MOIXOHz9frfRtNfpfALbY2eKXALeIH0i657vTs/S5nR9Qr7iYHPU2a4qj2gNNS V+m05Do/nXI/2bP5wgPDdJtYOab/hl6wpZYnrpg2pnHXSkjN2aSAAhvd/YU44pz4 6+O6Av3cUkYTqrDDUAgtoWlUz7qn1DFMCECqH9YXiOt5p20mzEGmVAJ1fdAhxm1K lkspHR0DFXrEiouFFZs4uLQ1LEul9zr6N4IXRvd5tLf5HSeiX+K5NGmQLCCWU5aM 9CQhfZSgo4Xkz90KxNGNVDE/JQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFPMpJWz+ bpQIxbXWPS1CZj/WjM8wMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvNkM3MTA1M0NB RTIzMTFFRkFFQjhCMzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEAHoIDwMEAXoIFDAMAwQDegg4AwQAegg+AwQBeghSAwQC eghcMA0GCSqGSIb3DQEBCwUAA4IBAQBPBs2Ya259eYhN3WpGC//ih4vide2BZegd FBvEt8ft7lvH8XfHQTgZnS0zkei1p3i1+C2zzokBSyK0KnBtNtatV5acqB1khlRz VKbRzGBFmLDmzCWDOz6SGFLNtWYQ4DJM+HxAcy6d/cjbybefLtyzcR2WltzfRMMq HtreXPiIjHoxg1YYcBU8O19Dx0gXT+0KhW8ezpi2iu7InlTRONIrC86RPWaKQQmC +eFfpNmzS6QLpxFicxmhejlzRNht3X1rM12NZ1L2ETmCUvIRmAl2p2TNTxn4utIu Wp6kn9RaojMzoyjAfzq+QcDQjGNmL1Dff3CZtXlIT0zXWufj2W57 -----END CERTIFICATE-----Generated at Sat Apr 26 15:09:46 2025 by rpki-client