$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa File: 24AC829C476311F0970DF567C4F9AE02.roa (raw, json) Hash identifier: 75se0ej2yScjzZdjrczazL2Olzuj0hWAzv6IZqIX440= Subject key identifier: C0:05:62:55:95:EC:7A:66:D1:3A:81:83:80:92:A1:01:77:52:5A:8A Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 37F6 Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa Signing time: Thu 12 Jun 2025 07:59:19 +0000 ROA not before: Thu 12 Jun 2025 07:59:19 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 13335 IP address blocks: 180.255.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14326 (0x37f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: Jun 12 07:59:19 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=684a88d7-bcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:1d:ac:da:66:e0:a8:60:62:d3:45:51:b2: ab:fc:22:2a:c9:cf:90:d4:ac:04:36:be:50:86:ba: e0:34:fd:c9:b7:42:a1:ef:b1:5a:34:ee:fb:4d:0a: f7:3d:10:f5:e2:7f:94:37:d1:69:74:0a:38:20:f4: 17:79:68:ab:25:19:9c:e8:0c:8a:1f:56:1d:2a:15: ff:05:06:48:bd:3d:73:69:a2:43:c0:48:49:44:0f: 1f:98:f8:6e:64:af:e7:b5:9e:f9:31:06:ef:38:cc: 60:1f:3f:39:8a:1a:aa:cd:7b:fc:fe:f0:50:8c:00: 23:6d:c0:76:73:d2:24:83:7a:74:5f:b5:fa:a6:24: ba:30:cf:f5:30:4a:63:fa:78:98:74:39:27:48:cc: 8f:71:fc:09:88:a8:76:27:bb:15:f9:b0:3a:f1:19: 12:b3:85:e4:26:75:78:ba:4b:2b:82:19:a8:54:35: 87:d8:5a:15:1f:d0:f8:e4:21:58:1a:13:27:dc:5a: 35:1b:ee:81:c8:b7:5e:81:bb:15:ef:bb:d5:2e:08: da:5f:55:80:95:51:8f:20:ac:c4:f0:7c:3d:86:e3: 62:00:1a:b1:16:bf:8e:bb:1a:bd:6e:1b:8b:52:e0: 01:b1:61:22:50:13:18:1f:53:7c:36:22:2e:9d:9e: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:05:62:55:95:EC:7A:66:D1:3A:81:83:80:92:A1:01:77:52:5A:8A X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/24AC829C476311F0970DF567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.255.25.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:a9:a6:5a:91:84:6b:6b:2b:1e:98:3b:64:dc:b8:5d:9d:75: ba:dd:27:04:aa:8c:2a:2e:33:91:6f:a3:8d:ac:0d:3e:22:f1: 48:5e:f4:f3:d1:cd:e2:81:ff:13:20:f9:80:d1:06:85:0a:52: b8:e9:7c:33:67:c2:c9:cd:fc:7a:06:36:22:0b:fd:9b:e9:62: 13:09:89:62:77:05:38:7b:81:51:99:07:29:30:88:cb:8f:c4: 44:64:8b:e4:50:97:bb:85:36:19:a5:65:ca:4d:bd:e3:2f:23: 67:40:82:3d:39:a1:c1:a6:3f:d4:0a:0c:09:d5:88:ec:ee:6b: 34:2f:e1:39:5d:2e:48:c9:e9:65:f4:6a:ea:be:49:d4:60:84: cb:bc:b3:66:65:7a:53:ea:b4:ac:4b:b8:3d:5b:7a:73:44:a2: 7f:a1:62:01:03:4d:05:b9:bc:11:17:ca:3f:69:cd:25:10:64: 9f:65:67:0f:30:74:ec:81:79:c2:ed:e9:1a:1e:3e:f6:75:e6: 15:28:c1:a1:eb:73:a8:94:bb:5b:91:14:05:e3:66:6f:9d:b5: 54:4c:21:5d:58:ce:82:8e:04:5f:ac:6e:c2:73:7d:62:e4:6b: f8:73:1d:36:47:64:03:3c:42:83:9f:16:7d:e8:40:23:1a:b5: ba:3e:c8:5a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICN/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjUwNjEyMDc1OTE5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRhODhkNy1iY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6gdrNpm4KhgYtNFUbKr/CIqyc+Q1KwENr5QhrrgNP3Jt0Kh77FaNO77TQr3 PRD14n+UN9FpdAo4IPQXeWirJRmc6AyKH1YdKhX/BQZIvT1zaaJDwEhJRA8fmPhu ZK/ntZ75MQbvOMxgHz85ihqqzXv8/vBQjAAjbcB2c9Ikg3p0X7X6piS6MM/1MEpj +niYdDknSMyPcfwJiKh2J7sV+bA68RkSs4XkJnV4uksrghmoVDWH2FoVH9D45CFY GhMn3Fo1G+6ByLdegbsV77vVLgjaX1WAlVGPIKzE8Hw9huNiABqxFr+Ouxq9bhuL UuABsWEiUBMYH1N8NiIunZ6LowIDAQABo4IClTCCApEwHQYDVR0OBBYEFMAFYlWV 7Hpm0TqBg4CSoQF3UlqKMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvMjRBQzgyOUM0 NzYzMTFGMDk3MERGNTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC0/xkwDQYJKoZIhvcNAQELBQADggEBAJ2pplqRhGtrKx6Y O2TcuF2ddbrdJwSqjCouM5Fvo42sDT4i8Uhe9PPRzeKB/xMg+YDRBoUKUrjpfDNn wsnN/HoGNiIL/ZvpYhMJiWJ3BTh7gVGZBykwiMuPxERki+RQl7uFNhmlZcpNveMv I2dAgj05ocGmP9QKDAnViOzuazQv4TldLkjJ6WX0auq+SdRghMu8s2ZlelPqtKxL uD1benNEon+hYgEDTQW5vBEXyj9pzSUQZJ9lZw8wdOyBecLt6RoePvZ15hUowaHr c6iUu1uRFAXjZm+dtVRMIV1YzoKOBF+sbsJzfWLka/hzHTZHZAM8QoOfFn3oQCMa tbo+yFo= -----END CERTIFICATE-----Generated at Tue Jul 1 22:48:12 2025 by rpki-client