$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AA5075824F1811EFB6ECD54CC4F9AE02.roa File: AA5075824F1811EFB6ECD54CC4F9AE02.roa (raw, json) Hash identifier: zl75vWdRPXnP/XOghAc53jzYLr8BLgxiVkpvltTQaAc= Subject key identifier: 59:EB:14:1C:A6:2E:49:0C:A3:B3:0D:B4:BB:F0:2C:CA:F7:D6:80:42 Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 349C Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AA5075824F1811EFB6ECD54CC4F9AE02.roa Signing time: Thu 20 Mar 2025 15:21:21 +0000 ROA not before: Thu 20 Mar 2025 15:21:21 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 7018 IP address blocks: 122.8.24.0/22 maxlen: 22 122.8.28.0/22 maxlen: 22 122.8.104.0/22 maxlen: 22 122.8.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Mar 20 15:21:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc3271-8df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:f0:8b:91:b6:58:59:26:84:71:31:c7:11: 05:21:d0:51:46:f3:3f:15:07:71:45:e5:61:42:3a: f8:7c:c9:26:ed:15:d6:0a:73:5e:f4:5e:50:14:7c: 58:5a:9d:cd:00:f1:fc:23:2e:ae:d3:45:c9:46:6b: e7:3a:f5:c2:2c:93:58:02:00:39:2d:5c:4a:5e:c4: c3:6f:12:c3:1e:95:99:39:fa:6b:69:cc:cf:20:2b: 25:a9:ea:ff:72:3a:96:9c:8b:32:e7:9a:9a:a2:97: 2c:90:93:bc:bb:93:f6:4e:ea:b2:68:f8:3e:3f:52: e9:9a:1c:d3:f2:5c:79:a6:54:f5:fe:b8:5c:7f:a9: cd:f4:24:0e:54:81:c2:8f:e3:a7:7c:51:b8:3f:cb: 57:77:7e:63:7a:cc:94:cf:b1:91:2e:6b:cc:67:cc: b2:0c:ab:78:a3:9f:c1:99:6c:9f:ef:1a:03:29:10: 4c:08:cc:98:8d:16:73:95:c5:54:3b:4a:ef:34:7f: bb:3f:d2:1e:44:d3:41:8e:4a:75:fb:88:d9:dd:c8: f4:1a:05:89:e6:9c:de:85:0c:ac:69:7a:fb:4c:f7: 82:51:b4:c9:9e:7f:02:02:96:cd:d3:f3:ce:b2:29: 63:62:e4:9f:de:3c:2e:70:38:6c:4b:eb:2b:cc:77: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EB:14:1C:A6:2E:49:0C:A3:B3:0D:B4:BB:F0:2C:CA:F7:D6:80:42 X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AA5075824F1811EFB6ECD54CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.24.0/21 122.8.104.0/22 122.8.120.0/22 Signature Algorithm: sha256WithRSAEncryption 65:e9:2f:d6:5c:15:5b:25:57:31:1d:84:e3:f0:2f:50:99:7b: 21:69:20:3d:a7:fd:c0:fc:37:e6:e5:80:1b:e9:99:75:ba:66: d4:32:f4:3c:d5:b3:1f:7b:73:b7:7a:24:8e:63:89:df:6c:75: 02:6a:81:89:14:90:02:e7:4d:1d:01:6a:75:62:61:70:8a:c5: fc:40:dd:ce:2b:c9:d5:79:e6:23:9b:b3:82:19:d4:15:bb:93: 5a:80:02:1e:d9:dc:a7:bf:93:81:59:10:c5:4f:82:b5:03:41: 7d:d6:08:53:82:0f:1d:ea:77:01:c6:59:a1:c4:f9:cb:92:d3: 42:7d:6e:48:5e:32:f0:55:16:bb:72:1b:b5:e0:98:7a:88:d5: 6d:4d:8a:03:27:c3:8a:a4:aa:7d:73:6c:64:b4:15:e6:cb:d3: 7d:6d:b1:8f:c8:16:23:fc:07:0f:b7:9d:a8:5a:f3:bf:60:ba: 12:aa:0e:ad:ef:a5:ab:f2:9c:e6:85:36:c5:9d:2d:2f:bc:67: dd:98:de:25:6e:e9:21:df:df:ff:e0:cb:9d:fc:d2:ce:13:0f: 32:a9:ef:42:58:4b:9d:4c:a1:48:4d:61:9d:97:05:99:40:68: 7f:49:d8:3c:e3:87:da:a6:8f:7a:b9:c5:cf:bf:62:7d:f6:13: 5f:f2:85:cd -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwMzIwMTUyMTIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjMzI3MS04ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwHwi5G2WFkmhHExxxEFIdBRRvM/FQdxReVhQjr4fMkm7RXWCnNe9F5QFHxY Wp3NAPH8Iy6u00XJRmvnOvXCLJNYAgA5LVxKXsTDbxLDHpWZOfpraczPICslqer/ cjqWnIsy55qaopcskJO8u5P2TuqyaPg+P1LpmhzT8lx5plT1/rhcf6nN9CQOVIHC j+OnfFG4P8tXd35jesyUz7GRLmvMZ8yyDKt4o5/BmWyf7xoDKRBMCMyYjRZzlcVU O0rvNH+7P9IeRNNBjkp1+4jZ3cj0GgWJ5pzehQysaXr7TPeCUbTJnn8CApbN0/PO siljYuSf3jwucDhsS+srzHdl0QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFnrFBym LkkMo7MNtLvwLMr31oBCMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvQUE1MDc1ODI0 RjE4MTFFRkI2RUNENTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAN6CBgDBAJ6CGgDBAJ6CHgwDQYJKoZIhvcNAQELBQADggEB AGXpL9ZcFVslVzEdhOPwL1CZeyFpID2n/cD8N+blgBvpmXW6ZtQy9DzVsx97c7d6 JI5jid9sdQJqgYkUkALnTR0BanViYXCKxfxA3c4rydV55iObs4IZ1BW7k1qAAh7Z 3Ke/k4FZEMVPgrUDQX3WCFOCDx3qdwHGWaHE+cuS00J9bkheMvBVFrtyG7XgmHqI 1W1NigMnw4qkqn1zbGS0FebL031tsY/IFiP8Bw+3naha879guhKqDq3vpavynOaF NsWdLS+8Z92Y3iVu6SHf3//gy5380s4TDzKp70JYS51MoUhNYZ2XBZlAaH9J2Dzj h9qmj3q5xc+/Yn32E1/yhc0= -----END CERTIFICATE-----Generated at Thu Apr 24 18:08:08 2025 by rpki-client on console.sobornost.net