$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/A717F73658B911F085B39880C4F9AE02.roa File: A717F73658B911F085B39880C4F9AE02.roa (raw, json) Hash identifier: GRaZt0pedz3CCCklqX2hkq6cs1hiTnf3botIHYa4ZiY= Subject key identifier: A0:C5:C6:06:7C:49:B3:3F:58:0D:20:4B:EA:D8:D8:35:9E:65:0A:6F Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Certificate serial: B8 Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/A717F73658B911F085B39880C4F9AE02.roa Signing time: Fri 04 Jul 2025 09:31:24 +0000 ROA not before: Fri 04 Jul 2025 09:31:24 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 154024 IP address blocks: 160.25.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897 Validity Not Before: Jul 4 09:31:24 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68679f6c-9c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:b2:86:37:f8:e7:50:69:4f:48:6c:8b:c3: 86:db:d4:8a:be:a7:40:3f:22:20:0d:2c:30:1b:b9: 83:41:1a:93:54:f6:80:49:a6:59:fe:6e:8a:67:64: 88:68:8f:a1:ac:a3:53:49:d1:38:27:26:51:77:eb: af:fd:4f:a6:ae:bd:86:b9:83:1a:ed:20:e2:3b:b7: 71:e8:d9:bd:e1:16:c2:13:71:f8:03:9c:65:58:2d: e7:da:5f:69:d2:4c:45:0d:5a:95:26:72:8c:3f:15: 41:d7:7d:59:ff:7e:44:34:d3:60:90:ce:a0:33:15: 8f:57:df:0b:08:1d:ee:33:4a:46:9b:21:48:54:86: 08:18:b3:48:b7:91:4d:3b:bb:42:1c:bf:58:37:3c: 5e:96:36:cf:fb:ca:b1:52:c0:52:9a:93:1d:b4:7d: 46:57:b5:d8:5e:2f:9a:86:0e:c3:f9:00:82:7d:12: 58:5c:ee:5d:5f:97:58:00:cc:2c:6b:95:32:18:4d: 6d:07:d6:b4:c6:d4:54:65:28:9f:87:ef:49:39:39: bc:c3:7f:60:55:20:be:9d:89:cc:cc:c9:b8:4c:30: bb:e5:14:29:6c:02:2c:c9:58:d7:12:ed:98:45:19: 62:e3:1a:a1:f5:70:6d:56:38:6c:24:72:60:81:82: 03:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:C6:06:7C:49:B3:3F:58:0D:20:4B:EA:D8:D8:35:9E:65:0A:6F X509v3 Authority Key Identifier: keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/A717F73658B911F085B39880C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.224.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:e8:eb:fb:f9:f0:17:cf:01:79:6b:2a:06:22:b7:d6:df:b3: 07:81:e4:11:c1:64:28:b6:c5:65:80:64:48:c4:3d:3c:39:1d: 13:77:e3:12:20:0a:d4:78:b7:18:47:ff:63:11:87:3b:16:ce: 72:00:d7:a3:75:26:b6:a2:d2:d2:13:f7:75:74:b2:36:d5:0a: 38:11:8b:58:9d:4f:4c:0d:a6:1c:56:70:c0:bf:ca:ec:86:ec: 46:a3:e8:ab:a3:37:82:da:82:9c:ad:77:e0:72:01:ab:57:b3: 9a:ad:1c:cb:6d:41:29:8a:32:20:aa:b0:74:56:ed:40:f0:bd: 6d:eb:39:9b:a6:13:0e:bc:10:da:d8:08:24:0f:a4:6f:61:db: 0c:ba:08:d6:d4:00:a1:c1:64:56:9f:1e:b5:4c:a0:82:54:b9: 11:ae:ba:93:9c:7e:3b:82:80:de:c9:40:6c:a6:6b:cb:e5:0e: c1:83:9e:98:b1:2e:fd:4d:9a:86:eb:b8:15:e8:96:f5:03:cc: 1a:c1:02:4d:20:54:a2:a0:5d:e1:f5:cb:a8:a2:39:a5:fb:41: 62:b1:af:6a:1c:36:91:2b:40:1a:bd:00:54:01:ff:26:ae:12: a6:16:5e:83:a8:52:1c:ad:fe:3f:aa:c9:64:4c:19:d5:1f:9c: 0f:b5:ae:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKEQzMkE1QURDMDU0MkMyRTgxN0MyMDJCRTZCNzI4MUU4 NjlEMTc4OTcwHhcNMjUwNzA0MDkzMTI0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3OWY2Yy05YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFWyhjf451BpT0hsi8OG29SKvqdAPyIgDSwwG7mDQRqTVPaASaZZ/m6KZ2SI aI+hrKNTSdE4JyZRd+uv/U+mrr2GuYMa7SDiO7dx6Nm94RbCE3H4A5xlWC3n2l9p 0kxFDVqVJnKMPxVB131Z/35ENNNgkM6gMxWPV98LCB3uM0pGmyFIVIYIGLNIt5FN O7tCHL9YNzxeljbP+8qxUsBSmpMdtH1GV7XYXi+ahg7D+QCCfRJYXO5dX5dYAMws a5UyGE1tB9a0xtRUZSifh+9JOTm8w39gVSC+nYnMzMm4TDC75RQpbAIsyVjXEu2Y RRli4xqh9XBtVjhsJHJggYIDqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKDFxgZ8 SbM/WA0gS+rY2DWeZQpvMB8GA1UdIwQYMBaAFNMqWtwFQsLoF8ICvmtygehp0XiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS81MDRDRkZFMjQ0 OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1Z1h3Z0stYTNLQjZHblJl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzB5cGEzQVZDd3VnWHdnSy1hM0tCNkduUmVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA4NTUvNTA0Q0ZGRTI0NDk2MTFFRjhFODRFNjNEQzRGOUFFMDIvQTcxN0Y3MzY1 OEI5MTFGMDg1QjM5ODgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGeAwDQYJKoZIhvcNAQELBQADggEBAB/o6/v58BfPAXlr KgYit9bfsweB5BHBZCi2xWWAZEjEPTw5HRN34xIgCtR4txhH/2MRhzsWznIA16N1 Jrai0tIT93V0sjbVCjgRi1idT0wNphxWcMC/yuyG7Eaj6KujN4Lagpytd+ByAatX s5qtHMttQSmKMiCqsHRW7UDwvW3rOZumEw68ENrYCCQPpG9h2wy6CNbUAKHBZFaf HrVMoIJUuRGuupOcfjuCgN7JQGyma8vlDsGDnpixLv1NmobruBXolvUDzBrBAk0g VKKgXeH1y6iiOaX7QWKxr2ocNpErQBq9AFQB/yauEqYWXoOoUhyt/j+qyWRMGdUf nA+1rjk= -----END CERTIFICATE-----Generated at Fri Jul 4 15:38:07 2025 by rpki-client