$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa File: 24AC829C476311F0970DF567C4F9AE02.roa (raw, json) Hash identifier: q7CS41rn7/JdKF4Im2iOHVnhzgphtbHSDDYb+9p08i8= Subject key identifier: 2E:D5:59:4B:6E:CB:90:E9:73:6A:47:A4:D0:A6:C8:B7:9C:E3:9D:99 Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 3838 Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa Signing time: Mon 18 Aug 2025 14:50:23 +0000 ROA not before: Mon 18 Aug 2025 14:50:23 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 13335 IP address blocks: 180.255.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14392 (0x3838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: Aug 18 14:50:23 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a33dae-e41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:65:a1:63:fa:f2:96:4e:13:26:ac:54:d5: 96:43:0c:c6:1e:4e:aa:f2:57:7e:05:9e:a0:5f:ce: 8b:08:f5:18:e3:a3:be:cd:16:bb:bd:c9:df:70:93: bc:5f:45:8e:7d:15:33:e2:5f:22:6e:a1:25:4f:e7: 50:fc:9a:a3:3f:ea:6f:f2:4a:19:e0:0a:97:6e:d8: fa:57:cb:3e:4f:0f:d2:43:67:14:63:e3:fe:9d:3a: e5:c3:10:c1:f2:20:75:31:7d:c1:07:33:8c:07:60: be:b3:81:7c:55:eb:fd:ff:1d:40:c5:9a:7c:29:68: 9f:70:b8:d2:03:60:de:7d:9a:bc:e1:26:c0:a0:87: 82:94:66:54:65:2e:59:b3:9f:9b:12:1e:d2:68:27: a5:81:72:57:66:30:eb:f0:d3:e1:ab:89:a7:6f:08: 9c:34:ec:b9:6c:aa:ca:02:e6:90:e3:21:ef:46:d0: b7:4b:fd:8b:23:c8:0f:25:d3:a6:e3:5c:dc:9b:d2: e8:4f:6a:a9:c1:c6:39:a5:f4:aa:0c:b8:cf:47:b1: 63:27:5c:c8:e8:47:d8:fa:7f:fe:eb:79:ff:72:a1: 7c:6b:cc:02:41:ea:5b:98:63:3a:91:00:c4:76:cf: 19:80:b6:67:e5:45:c4:87:c3:c2:09:b0:5c:26:50: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D5:59:4B:6E:CB:90:E9:73:6A:47:A4:D0:A6:C8:B7:9C:E3:9D:99 X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.255.25.0/24 Signature Algorithm: sha256WithRSAEncryption ae:e1:bb:b8:1c:ca:fd:55:91:e5:4f:0e:d6:6c:1a:48:8e:b1: 50:48:66:25:fa:73:1e:2d:07:dc:6d:3c:5a:ab:1c:88:00:c7: 68:79:39:1d:87:90:bf:85:c8:32:59:86:a1:d3:79:62:19:11: 7e:08:6a:f3:e0:e3:99:79:e2:9c:99:89:e3:9d:e7:47:a4:f9: a9:92:22:e7:d1:a4:12:1c:fe:05:08:d5:5c:da:f6:67:b2:88: 53:2a:5d:26:69:c9:28:11:19:74:6b:ff:67:d7:44:86:d5:2d: 3b:88:3e:bb:93:29:d3:e0:67:cf:46:26:6b:db:9f:1b:cf:c0: cd:37:ed:99:91:5c:c3:b9:ef:a0:e7:d2:3e:7d:26:d1:ee:0b: 48:02:eb:d5:87:6d:2b:c0:3e:c3:f0:b0:6f:73:41:8d:8c:da: 4a:c0:99:a8:90:6b:3b:65:9e:7c:f6:2f:f9:fb:c8:24:87:93: 49:26:12:e3:0b:25:fd:63:e0:3f:e7:9a:b4:ec:df:30:df:03: ea:57:cf:44:a4:5e:7a:37:99:52:0a:29:8f:a1:1f:d8:f5:f0: ac:38:b0:60:93:6f:fc:16:c2:14:e4:87:7b:16:60:2d:26:25: b5:ec:76:0c:e0:0b:85:81:45:49:5a:4a:05:98:d6:32:77:c8: bb:33:1c:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICODgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjUwODE4MTQ1MDIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzM2RhZS1lNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl05loWP68pZOEyasVNWWQwzGHk6q8ld+BZ6gX86LCPUY46O+zRa7vcnfcJO8 X0WOfRUz4l8ibqElT+dQ/JqjP+pv8koZ4AqXbtj6V8s+Tw/SQ2cUY+P+nTrlwxDB 8iB1MX3BBzOMB2C+s4F8Vev9/x1AxZp8KWifcLjSA2DefZq84SbAoIeClGZUZS5Z s5+bEh7SaCelgXJXZjDr8NPhq4mnbwicNOy5bKrKAuaQ4yHvRtC3S/2LI8gPJdOm 41zcm9LoT2qpwcY5pfSqDLjPR7FjJ1zI6EfY+n/+63n/cqF8a8wCQepbmGM6kQDE ds8ZgLZn5UXEh8PCCbBcJlBSjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC7VWUtu y5Dpc2pHpNCmyLec452ZMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvMjRBQzgyOUM0 NzYzMTFGMDk3MERGNTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC0/xkwDQYJKoZIhvcNAQELBQADggEBAK7hu7gcyv1VkeVP DtZsGkiOsVBIZiX6cx4tB9xtPFqrHIgAx2h5OR2HkL+FyDJZhqHTeWIZEX4IavPg 45l54pyZieOd50ek+amSIufRpBIc/gUI1Vza9meyiFMqXSZpySgRGXRr/2fXRIbV LTuIPruTKdPgZ89GJmvbnxvPwM037ZmRXMO576Dn0j59JtHuC0gC69WHbSvAPsPw sG9zQY2M2krAmaiQaztlnnz2L/n7yCSHk0kmEuMLJf1j4D/nmrTs3zDfA+pXz0Sk Xno3mVIKKY+hH9j18Kw4sGCTb/wWwhTkh3sWYC0mJbXsdgzgC4WBRUlaSgWY1jJ3 yLszHJc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:53 2025 by rpki-client