$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa File: 7C5F5278589611F084D9AA7BC4F9AE02.roa (raw, json) Hash identifier: FOolRrR20/q0F6XvV7yCzqolfjRuktnsRoMJ0vyCQC8= Subject key identifier: 8F:CC:F3:69:C6:E0:6D:44:29:62:9F:4B:9D:D9:0D:32:BD:58:22:AD Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 383A Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa Signing time: Mon 18 Aug 2025 14:50:24 +0000 ROA not before: Mon 18 Aug 2025 14:50:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 19551 IP address blocks: 180.255.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14394 (0x383a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: Aug 18 14:50:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a33db0-980d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d5:e0:b0:c9:8e:c3:bd:d8:3c:97:42:27:b4: 92:ac:46:34:00:0d:e9:b4:e0:71:ae:4f:7e:9a:55: 6f:af:bb:a9:63:0b:d5:80:7d:f7:06:2a:3f:c5:9f: 24:1f:c4:96:12:dd:f6:e4:7b:8a:21:9c:e9:54:f7: 6e:da:a0:86:5f:28:f3:d9:55:92:c0:68:f8:2c:5b: 6a:54:44:35:12:e3:52:43:3b:47:60:3c:b4:8a:e3: 2c:5b:a9:c3:42:b5:87:d7:e0:c6:77:5c:49:0a:5a: 21:3e:67:0e:c8:68:63:26:62:1e:da:3f:0d:8b:e6: 92:c2:3b:bd:7d:bb:26:b8:ba:6b:23:38:46:b4:ac: 60:eb:17:dc:18:23:d6:d4:0e:c6:b4:32:42:12:1b: 62:37:b8:f8:b0:ad:77:30:8e:d4:96:c6:c4:99:94: fe:28:e3:7a:4e:61:26:52:bd:c6:17:46:37:6b:15: c6:d6:e7:cd:13:f7:ec:2f:4f:cb:7c:92:06:51:36: 1f:df:1d:82:28:42:7e:31:2e:c3:f0:59:61:13:c9: d9:2a:39:70:ff:c2:b1:53:5e:e3:94:f0:f9:e5:bd: 4b:16:79:a3:35:4b:8d:e9:aa:24:fc:8f:a1:95:32: 36:42:1c:c9:13:10:c3:d4:b9:ff:a2:6d:39:03:d6: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CC:F3:69:C6:E0:6D:44:29:62:9F:4B:9D:D9:0D:32:BD:58:22:AD X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.255.25.0/24 Signature Algorithm: sha256WithRSAEncryption 71:93:85:db:68:ea:54:b7:94:b2:f6:89:ab:cd:d8:e3:77:42: b9:13:e0:af:d4:f5:7e:20:aa:4d:2e:ed:ed:32:ea:ff:cc:fa: ae:cd:22:88:f1:e3:cc:ed:a4:6b:be:2e:ac:1e:93:56:a5:a9: bb:0d:55:69:a7:85:ff:62:e9:e9:de:78:cc:00:f9:33:bc:ef: e2:c1:ac:e9:51:9b:e7:74:c2:ba:e6:33:9d:e6:45:c7:59:58: 0b:8f:bd:05:c4:10:1c:73:f3:60:dc:d7:60:79:b5:a4:ed:73: a4:44:63:4e:87:0f:4d:7c:92:f6:c0:11:7d:de:1a:af:d2:35: 04:dd:c8:5e:a8:74:e1:66:b3:54:7a:9b:e1:ed:1c:e4:63:0d: f5:81:cb:64:44:12:6b:08:ad:8d:25:1a:02:ef:cf:65:d2:66: 45:3c:f4:8a:7a:e7:c1:30:4b:95:f2:b7:32:13:28:96:36:f4: 87:df:73:d4:e7:35:ff:11:90:bb:65:84:89:18:8e:97:89:27: 2f:db:4c:3d:cc:34:bf:59:36:4e:53:0a:2d:61:61:b4:83:d5: 88:0f:31:dc:16:4b:81:65:df:45:b1:60:f2:83:5b:52:b0:11: 33:88:c9:d9:24:ba:fe:d6:24:9c:ac:93:b8:3c:a5:b8:18:6c: 1c:b3:e3:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICODowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjUwODE4MTQ1MDI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzM2RiMC05ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39XgsMmOw73YPJdCJ7SSrEY0AA3ptOBxrk9+mlVvr7upYwvVgH33Bio/xZ8k H8SWEt325HuKIZzpVPdu2qCGXyjz2VWSwGj4LFtqVEQ1EuNSQztHYDy0iuMsW6nD QrWH1+DGd1xJClohPmcOyGhjJmIe2j8Ni+aSwju9fbsmuLprIzhGtKxg6xfcGCPW 1A7GtDJCEhtiN7j4sK13MI7UlsbEmZT+KON6TmEmUr3GF0Y3axXG1ufNE/fsL0/L fJIGUTYf3x2CKEJ+MS7D8FlhE8nZKjlw/8KxU17jlPD55b1LFnmjNUuN6aok/I+h lTI2QhzJExDD1Ln/om05A9bWNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI/M82nG 4G1EKWKfS53ZDTK9WCKtMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvN0M1RjUyNzg1 ODk2MTFGMDg0RDlBQTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC0/xkwDQYJKoZIhvcNAQELBQADggEBAHGThdto6lS3lLL2 iavN2ON3QrkT4K/U9X4gqk0u7e0y6v/M+q7NIojx48ztpGu+Lqwek1alqbsNVWmn hf9i6eneeMwA+TO87+LBrOlRm+d0wrrmM53mRcdZWAuPvQXEEBxz82Dc12B5taTt c6REY06HD018kvbAEX3eGq/SNQTdyF6odOFms1R6m+HtHORjDfWBy2REEmsIrY0l GgLvz2XSZkU89Ip658EwS5XytzITKJY29Iffc9TnNf8RkLtlhIkYjpeJJy/bTD3M NL9ZNk5TCi1hYbSD1YgPMdwWS4Fl30WxYPKDW1KwETOIydkkuv7WJJysk7g8pbgY bByz44c= -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:46 2025 by rpki-client