$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/752AA0E2693111F0BA89C368C4F9AE02.roa File: 752AA0E2693111F0BA89C368C4F9AE02.roa (raw, json) Hash identifier: GW1ltw/eXf6seCPkHx63gBoyyxiRUdg6XUcPnXicJAI= Subject key identifier: 12:E8:6A:A2:A7:A6:D8:25:1E:70:7D:98:7B:8E:13:6D:7F:78:9E:48 Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 34FA Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/752AA0E2693111F0BA89C368C4F9AE02.roa Signing time: Fri 25 Jul 2025 08:29:19 +0000 ROA not before: Fri 25 Jul 2025 08:29:19 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55361 IP address blocks: 122.8.15.0/24 maxlen: 24 122.8.16.0/24 maxlen: 24 122.8.17.0/24 maxlen: 24 122.8.56.0/24 maxlen: 24 122.8.62.0/24 maxlen: 24 122.8.82.0/24 maxlen: 24 122.8.83.0/24 maxlen: 24 122.8.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Jul 25 08:29:19 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6883405f-3861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:64:e1:96:d9:35:16:cd:fc:3a:e4:d0:e6:10: e4:9d:27:4a:b0:cb:f5:c6:9c:2f:6b:a9:92:a1:7c: 58:34:90:39:37:54:ea:25:ab:72:8b:63:06:81:ff: cd:9d:5a:e5:b8:e1:d4:0c:01:c2:c9:f2:fc:d6:a5: 3c:15:1f:c5:db:dc:75:46:63:78:09:43:ef:25:a9: b3:ab:2d:fc:a5:43:e0:c7:eb:a2:8c:49:99:72:f1: a0:07:4f:20:d4:80:be:e5:9d:fb:d4:7d:42:e1:6a: 2b:66:d1:12:c1:4a:fc:d7:0d:ba:b9:7f:e0:b6:43: 59:3a:cd:6e:6e:1e:be:92:9c:12:48:f8:82:1b:46: 01:52:50:77:3a:fc:85:5b:49:78:d4:f7:8f:44:ea: 3a:02:03:d0:e3:7a:a4:76:b7:29:01:d8:8d:76:5d: e9:d8:fa:02:6c:20:45:da:dc:e1:81:5c:ae:95:dc: 97:62:29:30:07:91:41:ef:db:c9:ad:bc:42:c4:58: a6:ad:1b:80:d0:32:ab:2a:21:8d:26:e5:63:a6:6a: a3:c2:58:a2:26:95:9b:fd:c0:48:d8:93:aa:ef:16: d0:21:1a:f7:57:ab:41:04:d9:0a:8a:7a:a4:5a:be: 0e:3c:c8:22:45:d5:d3:98:52:b6:df:e2:c2:ea:1d: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E8:6A:A2:A7:A6:D8:25:1E:70:7D:98:7B:8E:13:6D:7F:78:9E:48 X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/752AA0E2693111F0BA89C368C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.15.0-122.8.17.255 122.8.56.0/24 122.8.62.0/24 122.8.82.0/23 122.8.92.0/22 Signature Algorithm: sha256WithRSAEncryption 33:e3:c7:00:b1:47:32:ac:08:9c:1d:66:3b:83:a9:34:f3:44: 8a:ef:b3:53:7c:bc:68:4b:4a:5e:f5:1f:97:2e:59:9c:30:83: 30:2a:3c:7d:64:78:74:06:b6:51:c4:28:14:c3:20:2b:6d:cf: 97:42:f7:b8:02:7f:71:cc:66:7a:c1:23:51:8a:ab:de:48:e3: f1:fe:e2:02:00:08:cc:16:64:30:a1:12:e3:d8:f1:81:17:f2: 92:95:05:66:88:89:b9:7c:94:f5:2e:b5:6a:2b:ea:d4:a0:0b: b3:32:22:aa:b6:c0:92:cf:61:2e:f1:bc:50:4b:fa:19:ce:0f: ac:60:ea:45:7c:9a:72:09:f5:0a:0d:46:af:ff:96:16:27:a0: 53:f3:28:16:05:d3:88:d3:c2:16:77:77:57:76:ec:34:9f:37: 57:32:b1:fa:32:70:26:bd:9d:7b:8c:c1:9a:93:32:fe:88:92: 7e:2d:44:3a:72:fe:c4:e8:fb:9e:63:2e:25:a1:16:3d:56:c0: a7:0e:6c:50:8a:f6:58:1f:44:32:f8:fb:33:e8:1f:7e:e3:27: 25:9b:33:cf:db:87:4d:69:db:74:1a:92:ef:10:ce:45:3e:3b: f6:37:25:55:ea:4b:f1:0f:72:c4:a8:43:46:5d:11:f2:3c:8e: dc:e4:63:1c -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwNzI1MDgyOTE5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODgzNDA1Zi0zODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82Thltk1Fs38OuTQ5hDknSdKsMv1xpwva6mSoXxYNJA5N1TqJatyi2MGgf/N nVrluOHUDAHCyfL81qU8FR/F29x1RmN4CUPvJamzqy38pUPgx+uijEmZcvGgB08g 1IC+5Z371H1C4WorZtESwUr81w26uX/gtkNZOs1ubh6+kpwSSPiCG0YBUlB3OvyF W0l41PePROo6AgPQ43qkdrcpAdiNdl3p2PoCbCBF2tzhgVyuldyXYikwB5FB79vJ rbxCxFimrRuA0DKrKiGNJuVjpmqjwliiJpWb/cBI2JOq7xbQIRr3V6tBBNkKinqk Wr4OPMgiRdXTmFK23+LC6h308wIDAQABo4ICtTCCArEwHQYDVR0OBBYEFBLoaqKn ptglHnB9mHuOE21/eJ5IMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvNzUyQUEwRTI2 OTMxMTFGMEJBODlDMzY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYwDAMEAHoIDwMEAXoIEAMEAHoIOAMEAHoIPgMEAXoIUgMEAnoI XDANBgkqhkiG9w0BAQsFAAOCAQEAM+PHALFHMqwInB1mO4OpNPNEiu+zU3y8aEtK XvUfly5ZnDCDMCo8fWR4dAa2UcQoFMMgK23Pl0L3uAJ/ccxmesEjUYqr3kjj8f7i AgAIzBZkMKES49jxgRfykpUFZoiJuXyU9S61aivq1KALszIiqrbAks9hLvG8UEv6 Gc4PrGDqRXyacgn1Cg1Gr/+WFiegU/MoFgXTiNPCFnd3V3bsNJ83VzKx+jJwJr2d e4zBmpMy/oiSfi1EOnL+xOj7nmMuJaEWPVbApw5sUIr2WB9EMvj7M+gffuMnJZsz z9uHTWnbdBqS7xDORT479jclVepL8Q9yxKhDRl0R8jyO3ORjHA== -----END CERTIFICATE-----Generated at Wed Aug 13 05:30:10 2025 by rpki-client