$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/01D0FEFA79EB11F0B5CB2A62C4F9AE02.roa File: 01D0FEFA79EB11F0B5CB2A62C4F9AE02.roa (raw, json) Hash identifier: Fxcp82mxa1VxCmwlewXIUBftqvLZyxmZKvRkMB0Yh98= Subject key identifier: E1:F7:69:2D:06:8F:57:33:7A:02:D9:00:BE:23:53:CF:84:D6:86:43 Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Certificate serial: D2 Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/01D0FEFA79EB11F0B5CB2A62C4F9AE02.roa Signing time: Fri 15 Aug 2025 15:17:51 +0000 ROA not before: Fri 15 Aug 2025 15:17:51 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151151 IP address blocks: 160.25.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Validity Not Before: Aug 15 15:17:51 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=689f4f9e-e614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:a0:43:d2:24:15:3b:8b:c2:5c:44:2a:32: 28:c0:2d:3c:57:62:79:5a:d8:31:6c:ee:4b:92:28: f7:1e:3b:d9:57:ac:69:ba:bf:ab:e4:ff:90:29:be: 69:80:73:09:5b:d0:22:91:f7:10:8f:57:0b:66:2b: 23:4b:e1:64:be:d5:4e:ba:d8:45:1e:c3:e2:d8:de: cc:1c:62:86:29:22:69:5f:b7:03:33:fc:67:04:b8: df:7f:4c:d3:c1:7c:77:bf:4a:75:96:08:25:7a:38: 32:20:a9:51:20:d8:7f:81:69:71:43:64:e9:9b:d8: 67:00:27:24:3e:82:70:d4:81:d9:c5:a5:ba:a2:c3: 95:46:ab:f6:12:1c:38:65:a6:77:80:ce:f5:61:d4: ec:a1:5d:25:83:d3:06:49:89:58:d6:ff:2a:bd:a3: e0:29:0b:91:9f:d9:f6:8b:6b:3d:da:ca:fa:ce:b7: cb:84:bc:0f:ae:eb:22:e0:f9:ed:94:4b:f7:2d:d4: 5e:ee:ef:16:ce:4a:92:92:de:e4:08:e6:45:c3:b4: ac:68:d1:12:21:d2:ee:8b:18:3e:fb:ef:78:b9:81: 0f:52:5b:f4:03:4f:ac:16:d5:29:ef:9a:5d:23:f3: ae:76:a0:b9:3c:38:8e:9e:f4:8f:3d:53:21:62:2a: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F7:69:2D:06:8F:57:33:7A:02:D9:00:BE:23:53:CF:84:D6:86:43 X509v3 Authority Key Identifier: keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/01D0FEFA79EB11F0B5CB2A62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.224.0/23 Signature Algorithm: sha256WithRSAEncryption 97:e9:bc:0b:38:70:a4:0a:cb:66:d4:3e:c6:b1:42:19:2b:72: b8:9d:47:3d:85:5b:ad:91:b7:03:22:06:98:4a:87:a3:fc:f2: 43:d7:a9:e6:8b:5b:03:c6:24:33:32:5b:39:5d:4f:14:0e:67: f4:3d:97:5a:23:75:b1:0b:63:bb:4f:cf:22:0d:77:19:09:da: b5:01:f9:e1:54:6b:33:05:12:65:7f:3a:bf:4b:e3:d7:33:4b: 35:c9:20:7c:86:ef:be:2b:b6:dc:da:9e:06:12:93:76:70:02: 9d:f2:b2:7e:6c:26:86:01:13:fd:a9:c7:57:7c:ab:2e:94:09: a0:a1:6c:55:eb:ba:81:5b:32:b6:ec:23:5b:a6:ea:86:b9:73: e1:72:b1:6b:a8:ca:8d:2a:2e:9b:b3:dd:c5:14:0a:ad:9d:5d: 2d:51:c2:af:c7:80:e0:03:52:67:2f:37:16:3d:bc:b1:b5:3e: e0:c0:62:22:bd:f5:f3:50:43:c4:78:3d:da:67:05:fb:83:37: 06:eb:1c:45:20:43:f3:4f:b9:39:bb:4c:89:d3:87:e7:4d:ea: 26:f1:8e:8a:f9:95:53:aa:24:ae:fe:4d:a0:3b:b1:ec:77:4b: 36:52:88:48:30:63:5b:3e:29:f8:4f:90:dd:75:5b:a7:d0:82: 08:7b:fb:7c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKEQzMkE1QURDMDU0MkMyRTgxN0MyMDJCRTZCNzI4MUU4 NjlEMTc4OTcwHhcNMjUwODE1MTUxNzUxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODlmNGY5ZS1lNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2OgQ9IkFTuLwlxEKjIowC08V2J5WtgxbO5Lkij3HjvZV6xpur+r5P+QKb5p gHMJW9AikfcQj1cLZisjS+FkvtVOuthFHsPi2N7MHGKGKSJpX7cDM/xnBLjff0zT wXx3v0p1lgglejgyIKlRINh/gWlxQ2Tpm9hnACckPoJw1IHZxaW6osOVRqv2Ehw4 ZaZ3gM71YdTsoV0lg9MGSYlY1v8qvaPgKQuRn9n2i2s92sr6zrfLhLwPrusi4Pnt lEv3LdRe7u8WzkqSkt7kCOZFw7SsaNESIdLuixg+++94uYEPUlv0A0+sFtUp75pd I/OudqC5PDiOnvSPPVMhYirQgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOH3aS0G j1czegLZAL4jU8+E1oZDMB8GA1UdIwQYMBaAFNMqWtwFQsLoF8ICvmtygehp0XiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS81MDRDRkZFMjQ0 OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1Z1h3Z0stYTNLQjZHblJl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzB5cGEzQVZDd3VnWHdnSy1hM0tCNkduUmVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA4NTUvNTA0Q0ZGRTI0NDk2MTFFRjhFODRFNjNEQzRGOUFFMDIvMDFEMEZFRkE3 OUVCMTFGMEI1Q0IyQTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGeAwDQYJKoZIhvcNAQELBQADggEBAJfpvAs4cKQKy2bU PsaxQhkrcridRz2FW62RtwMiBphKh6P88kPXqeaLWwPGJDMyWzldTxQOZ/Q9l1oj dbELY7tPzyINdxkJ2rUB+eFUazMFEmV/Or9L49czSzXJIHyG774rttzangYSk3Zw Ap3ysn5sJoYBE/2px1d8qy6UCaChbFXruoFbMrbsI1um6oa5c+FysWuoyo0qLpuz 3cUUCq2dXS1Rwq/HgOADUmcvNxY9vLG1PuDAYiK99fNQQ8R4PdpnBfuDNwbrHEUg Q/NPuTm7TInTh+dN6ibxjor5lVOqJK7+TaA7sex3SzZSiEgwY1s+KfhPkN11W6fQ ggh7+3w= -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:08 2025 by rpki-client