$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/BA5D9D9472A611F090D1E918C4F9AE02.roa File: BA5D9D9472A611F090D1E918C4F9AE02.roa (raw, json) Hash identifier: A+xiqIJrmMSIdlnZ3N8NdD4L1FaAis2pLriye6agjJ4= Subject key identifier: 9D:14:CF:06:59:30:59:F6:1C:E0:26:55:87:75:C9:B8:F2:89:DC:EC Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 3507 Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/BA5D9D9472A611F090D1E918C4F9AE02.roa Signing time: Wed 06 Aug 2025 09:21:26 +0000 ROA not before: Wed 06 Aug 2025 09:21:26 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 52053 IP address blocks: 122.8.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13575 (0x3507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Aug 6 09:21:26 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68931e96-98bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:9c:be:65:88:8e:3b:6a:ef:25:63:3d:15: 16:00:31:21:a1:1b:00:8f:13:79:e0:db:54:c0:1b: be:82:22:d2:de:77:c7:3f:a0:d0:5a:07:b2:ed:70: ec:1f:19:1a:bc:e5:a4:f7:2e:38:56:b4:65:dc:7d: 13:3c:2a:16:7d:06:ce:7d:54:eb:9e:25:6e:87:00: e9:31:1a:b8:04:8b:8b:23:2f:74:6f:c5:64:84:10: c7:49:d4:8d:b9:5a:9e:9b:28:ca:bd:8e:b6:20:9d: 3f:d2:ef:3b:bd:7e:58:5c:e1:d5:95:6e:84:77:78: 56:d1:78:4c:7d:0d:7f:82:1d:29:19:26:c5:e8:c0: 1b:45:2e:c0:40:8c:5e:a7:48:e8:db:df:0c:c4:8b: f7:d3:b2:c8:9c:8a:6e:72:fa:53:2e:10:10:a6:9e: 41:3c:d3:ee:b7:63:80:31:f3:19:96:6b:8f:11:06: 75:58:c8:7d:93:eb:5f:7f:de:ad:e0:c4:2c:5c:29: 95:ff:19:4a:94:b0:5f:7f:92:c3:f3:17:9f:f8:c0: 32:f6:b2:51:4b:4a:dc:23:b6:96:cd:9c:6d:7f:09: 48:64:fb:85:2b:5d:c1:c1:56:13:50:65:40:3e:7c: ea:c2:a0:2a:5c:89:f0:74:8f:56:98:09:45:ba:99: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:14:CF:06:59:30:59:F6:1C:E0:26:55:87:75:C9:B8:F2:89:DC:EC X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/BA5D9D9472A611F090D1E918C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.72.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:20:3c:ac:15:6e:65:c7:5d:f5:c1:a6:09:27:97:fa:09:4e: 9d:50:82:3e:f7:23:c1:11:4a:f8:50:9d:47:9c:f7:5c:4f:06: ae:1b:69:34:95:dc:87:f6:3f:8c:1d:6f:6c:01:4a:4a:63:2b: 1d:8d:ae:0a:a9:a0:a1:66:07:9c:e5:30:c9:8b:3d:5d:78:c8: 6e:af:51:97:8d:a6:d1:6e:82:ae:1d:a1:66:f6:7b:09:23:f1: f3:90:ca:f9:a9:6d:2c:12:5d:bd:dd:11:26:c3:c9:4e:32:bc: 28:f7:9c:4d:33:d1:1c:2a:32:d1:29:dc:6e:2c:7d:7b:60:f7: 45:7e:a8:18:c1:1f:ee:02:07:5d:fd:cd:d1:9e:67:83:06:9d: d8:82:67:f1:69:2a:d5:c1:b4:49:99:b3:63:f6:7d:83:7e:6e: 6c:2d:68:a7:1f:f6:13:6f:8a:d9:65:ea:81:b4:a0:53:7a:96: b6:80:cf:61:32:53:c3:ed:91:75:09:4c:ca:fa:06:84:96:f6: d6:e9:44:a3:84:da:f0:30:95:a9:b3:f6:3f:ea:44:7f:cb:4a: d3:39:85:c8:45:76:93:97:12:79:2d:0b:9b:d0:cd:a6:8e:5a: 74:88:8c:91:62:3c:ed:4b:98:bf:72:58:ed:8b:4c:a6:93:24: 13:45:85:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwODA2MDkyMTI2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzMWU5Ni05OGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveacvmWIjjtq7yVjPRUWADEhoRsAjxN54NtUwBu+giLS3nfHP6DQWgey7XDs HxkavOWk9y44VrRl3H0TPCoWfQbOfVTrniVuhwDpMRq4BIuLIy90b8VkhBDHSdSN uVqemyjKvY62IJ0/0u87vX5YXOHVlW6Ed3hW0XhMfQ1/gh0pGSbF6MAbRS7AQIxe p0jo298MxIv307LInIpucvpTLhAQpp5BPNPut2OAMfMZlmuPEQZ1WMh9k+tff96t 4MQsXCmV/xlKlLBff5LD8xef+MAy9rJRS0rcI7aWzZxtfwlIZPuFK13BwVYTUGVA PnzqwqAqXInwdI9WmAlFuplXdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ0UzwZZ MFn2HOAmVYd1ybjyidzsMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvQkE1RDlEOTQ3 MkE2MTFGMDkwRDFFOTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ6CEgwDQYJKoZIhvcNAQELBQADggEBADogPKwVbmXHXfXB pgknl/oJTp1Qgj73I8ERSvhQnUec91xPBq4baTSV3If2P4wdb2wBSkpjKx2Nrgqp oKFmB5zlMMmLPV14yG6vUZeNptFugq4doWb2ewkj8fOQyvmpbSwSXb3dESbDyU4y vCj3nE0z0RwqMtEp3G4sfXtg90V+qBjBH+4CB139zdGeZ4MGndiCZ/FpKtXBtEmZ s2P2fYN+bmwtaKcf9hNvitll6oG0oFN6lraAz2EyU8PtkXUJTMr6BoSW9tbpRKOE 2vAwlamz9j/qRH/LStM5hchFdpOXEnktC5vQzaaOWnSIjJFiPO1LmL9yWO2LTKaT JBNFhfg= -----END CERTIFICATE-----Generated at Wed Aug 13 07:38:08 2025 by rpki-client