$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D28E7D62854811EFA29BE474C4F9AE02.roa File: D28E7D62854811EFA29BE474C4F9AE02.roa (raw, json) Hash identifier: 7+m/rprtwB3rQB9AuZkZXxKmZXlWFQztBa9eRId8M7Y= Subject key identifier: 0C:3D:A7:FB:AD:21:1D:41:E4:17:0E:A7:A3:5A:73:D3:BD:8B:96:2D Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 3493 Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D28E7D62854811EFA29BE474C4F9AE02.roa Signing time: Thu 20 Mar 2025 15:21:14 +0000 ROA not before: Thu 20 Mar 2025 15:21:14 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 53356 IP address blocks: 122.8.112.0/22 maxlen: 22 122.8.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13459 (0x3493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Mar 20 15:21:14 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc326a-444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a1:12:85:8a:2c:96:d7:c7:c0:da:7a:f0:51: 32:8a:15:c0:26:f8:4f:07:fa:6f:4a:b4:6b:af:c9: df:37:a9:f7:e7:d7:9e:24:10:b4:37:fe:e8:c3:c0: c5:49:2a:e0:47:73:62:26:81:c8:9b:18:a2:6b:76: 7a:f6:9e:58:95:41:ec:e4:0c:eb:17:f8:ac:37:cd: 90:65:75:31:d9:de:ad:66:3b:74:6f:fd:47:de:f0: 83:0a:4b:8f:bc:95:01:4c:a5:e3:80:62:4c:56:8e: 52:68:7f:a6:44:37:4c:df:c1:25:0c:47:17:1f:73: 18:62:fc:16:64:f8:aa:71:ab:1f:f8:b0:36:d3:3c: eb:98:e6:54:03:f5:96:7e:fb:d8:f4:4d:af:df:8f: a4:7c:57:db:be:43:08:ca:be:b2:45:c8:62:90:9a: e1:f0:7d:b4:b4:ed:ea:9c:3b:cd:fb:90:2a:5f:33: de:e9:48:ab:bd:3f:29:6b:12:73:96:27:72:a0:d9: 5f:42:6d:48:b0:dd:05:62:3d:af:37:89:33:1a:a7: 3b:90:e4:73:3b:6a:49:07:2d:eb:bc:80:e2:91:9e: 2d:36:a3:f4:bf:9f:5a:5b:a7:6c:a5:bc:23:0b:35: 2e:ac:d2:d2:50:30:a3:da:5d:b3:d1:d2:61:59:4e: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3D:A7:FB:AD:21:1D:41:E4:17:0E:A7:A3:5A:73:D3:BD:8B:96:2D X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/D28E7D62854811EFA29BE474C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.112.0/22 122.8.124.0/22 Signature Algorithm: sha256WithRSAEncryption cd:1c:b6:71:02:b0:20:58:c8:1e:8d:f7:f7:26:84:f2:72:98: 35:f3:72:63:b2:d9:20:f0:e3:5b:4d:21:22:ae:8e:12:f7:7c: 96:69:b0:f6:27:64:28:df:20:40:f7:98:cf:7c:e6:a5:ba:6f: 7b:34:04:f7:84:57:47:1e:fd:8a:8b:6f:09:be:e8:4f:6d:dc: 84:67:9f:6f:4f:f4:0d:b2:31:66:b1:7d:24:07:a3:fa:0c:65: 08:01:c8:1c:85:fd:a7:4f:fe:78:f6:e5:1f:8b:e1:97:42:b1: a5:5c:fa:0c:9b:11:5d:42:86:4e:38:1a:42:3c:76:f6:f7:97: 7a:b3:e4:18:3a:62:4a:2c:eb:c0:d4:f3:68:be:49:0b:ad:7d: 68:5e:da:3f:45:59:08:77:c2:67:63:8a:9d:75:de:8d:c7:8f: 18:ac:77:d5:fa:33:2a:f2:0b:c4:e0:22:fc:95:4f:35:9d:44: 10:8a:75:a1:fb:47:b8:9a:95:68:e3:5e:db:6b:5a:6a:f9:15: 7e:2e:7b:80:e5:73:df:33:82:e4:6f:ef:ca:e2:5d:05:56:59: 7e:e6:f1:e1:b9:a4:ef:b1:89:d6:6b:75:1e:59:46:34:c9:ca: 92:29:ba:52:b3:09:ef:e6:b2:f6:75:69:bc:e5:2e:59:b4:1d: b4:3b:a5:8d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwMzIwMTUyMTE0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjMzI2YS00NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqEShYosltfHwNp68FEyihXAJvhPB/pvSrRrr8nfN6n359eeJBC0N/7ow8DF SSrgR3NiJoHImxiia3Z69p5YlUHs5AzrF/isN82QZXUx2d6tZjt0b/1H3vCDCkuP vJUBTKXjgGJMVo5SaH+mRDdM38ElDEcXH3MYYvwWZPiqcasf+LA20zzrmOZUA/WW fvvY9E2v34+kfFfbvkMIyr6yRchikJrh8H20tO3qnDvN+5AqXzPe6UirvT8paxJz lidyoNlfQm1IsN0FYj2vN4kzGqc7kORzO2pJBy3rvIDikZ4tNqP0v59aW6dspbwj CzUurNLSUDCj2l2z0dJhWU6EWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAw9p/ut IR1B5BcOp6Nac9O9i5YtMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvRDI4RTdENjI4 NTQ4MTFFRkEyOUJFNDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJ6CHADBAJ6CHwwDQYJKoZIhvcNAQELBQADggEBAM0ctnEC sCBYyB6N9/cmhPJymDXzcmOy2SDw41tNISKujhL3fJZpsPYnZCjfIED3mM985qW6 b3s0BPeEV0ce/YqLbwm+6E9t3IRnn29P9A2yMWaxfSQHo/oMZQgByByF/adP/nj2 5R+L4ZdCsaVc+gybEV1Chk44GkI8dvb3l3qz5Bg6Ykos68DU82i+SQutfWhe2j9F WQh3wmdjip113o3Hjxisd9X6MyryC8TgIvyVTzWdRBCKdaH7R7ialWjjXttrWmr5 FX4ue4Dlc98zguRv78riXQVWWX7m8eG5pO+xidZrdR5ZRjTJypIpulKzCe/msvZ1 abzlLlm0HbQ7pY0= -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:07 2025 by rpki-client