$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa File: D24D5B8A3DD011EF883E3225C4F9AE02.roa (raw, json) Hash identifier: IznCxmZee2247nmruTPpgu+MR4IvAcnWuvbF+F9q7ts= Subject key identifier: 17:88:90:97:1B:88:4F:13:7D:98:F1:F1:2D:67:C9:DE:85:80:68:71 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 068F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:18 +0000 ROA not before: Thu 28 Aug 2025 14:51:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152940 IP address blocks: 160.25.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06ce6-7ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:3a:fc:78:9c:c3:d2:8d:bf:71:96:e7:c2: 28:06:63:2b:84:65:1f:bd:2a:9a:9a:01:59:2a:a7: c9:1a:04:c1:0b:c1:13:5f:80:e7:3a:af:36:89:3e: d0:dd:72:a0:0e:4c:89:91:0d:40:6f:3b:fb:4a:53: 06:9b:22:0d:40:6e:9e:2c:80:b7:3c:fa:08:b5:98: e7:b3:e0:74:82:ca:46:9b:a4:74:df:8f:de:66:f1: 13:1e:ae:d8:2a:4c:e4:3c:26:1c:54:7d:65:1d:57: 1a:96:4d:55:d1:67:e4:e1:0f:36:a9:50:34:5c:36: ab:c0:e3:2f:17:13:37:f8:83:ab:ea:ab:8d:18:39: b6:66:87:9c:fe:66:fd:fc:3c:7a:66:b5:c5:c9:84: f2:b9:dc:d9:a3:73:9f:d7:17:ec:8e:c1:ea:65:75: d9:a1:c2:b8:31:2b:92:26:7f:cb:6a:8c:1b:72:5c: fa:79:d2:b4:fd:63:d7:69:c6:d4:63:da:b4:b0:60: 03:9f:e9:7f:5e:11:98:b0:59:8a:ee:50:85:22:5a: 72:e1:c2:43:94:76:cb:ac:b3:58:47:ee:e7:8a:fe: 57:51:e6:9f:90:c7:88:16:96:75:53:7b:5d:22:21: e7:67:c6:6a:47:14:61:17:39:84:0e:17:34:d6:0e: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:88:90:97:1B:88:4F:13:7D:98:F1:F1:2D:67:C9:DE:85:80:68:71 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.78.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:bf:1a:06:38:84:b7:f6:48:02:2f:1f:22:61:01:13:48:65: 02:c6:2b:d9:a3:9e:de:71:89:eb:4b:0c:0f:00:5f:85:b9:b0: 0f:9b:bd:c1:f8:f3:42:b4:51:3d:03:f8:49:0c:7e:7d:00:5b: b1:53:a3:e0:e1:e9:75:69:6a:e0:39:1e:21:4c:6b:2c:08:18: ed:ec:cd:6a:0b:ad:44:5b:88:4b:28:e9:0d:95:84:fa:e3:03: 2f:22:9f:c8:80:d4:c1:81:4c:87:d0:2c:99:75:e3:06:25:b0: a1:ce:bb:83:42:32:a6:66:62:21:1f:36:16:87:3b:04:60:3a: 9a:1b:0b:0b:bf:8b:9b:c6:28:b0:72:e7:38:0d:5b:f8:4f:12: 0b:a2:4d:ef:cd:6f:39:5d:10:a9:b2:20:a3:16:ff:72:2f:d2: 03:50:4d:e2:12:35:27:0f:05:2b:76:de:a3:52:66:dc:a1:37: 9f:32:6b:19:75:f9:9e:5a:4f:31:8c:85:8d:bc:67:6e:5d:27: ad:20:8e:90:79:af:c8:d1:b3:8c:35:cb:22:02:c3:d7:6d:78: 3e:64:59:09:20:dc:09:8b:97:d2:b5:08:b5:99:5e:98:b9:93: 25:97:71:3c:6a:f8:fe:20:98:f6:a9:dd:9c:30:39:9c:45:b4: 65:2d:3d:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNlNi03ZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6Y6/Hicw9KNv3GW58IoBmMrhGUfvSqamgFZKqfJGgTBC8ETX4DnOq82iT7Q 3XKgDkyJkQ1Abzv7SlMGmyINQG6eLIC3PPoItZjns+B0gspGm6R034/eZvETHq7Y KkzkPCYcVH1lHVcalk1V0Wfk4Q82qVA0XDarwOMvFxM3+IOr6quNGDm2Zoec/mb9 /Dx6ZrXFyYTyudzZo3Of1xfsjsHqZXXZocK4MSuSJn/Laowbclz6edK0/WPXacbU Y9q0sGADn+l/XhGYsFmK7lCFIlpy4cJDlHbLrLNYR+7niv5XUeafkMeIFpZ1U3td IiHnZ8ZqRxRhFzmEDhc01g4OVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBeIkJcb iE8TfZjx8S1nyd6FgGhxMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRDI0RDVCOEEz REQwMTFFRjg4M0UzMjI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGU4wDQYJKoZIhvcNAQELBQADggEBAD2/GgY4hLf2SAIv HyJhARNIZQLGK9mjnt5xietLDA8AX4W5sA+bvcH480K0UT0D+EkMfn0AW7FTo+Dh 6XVpauA5HiFMaywIGO3szWoLrURbiEso6Q2VhPrjAy8in8iA1MGBTIfQLJl14wYl sKHOu4NCMqZmYiEfNhaHOwRgOpobCwu/i5vGKLBy5zgNW/hPEguiTe/NbzldEKmy IKMW/3Iv0gNQTeISNScPBSt23qNSZtyhN58yaxl1+Z5aTzGMhY28Z25dJ60gjpB5 r8jRs4w1yyICw9dteD5kWQkg3AmLl9K1CLWZXpi5kyWXcTxq+P4gmPap3ZwwOZxF tGUtPTc= -----END CERTIFICATE-----Generated at Sun Sep 7 00:36:49 2025 by rpki-client