$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/2578CBCCFD4611EDA9A46F52C4F9AE02.roa File: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (raw, json) Hash identifier: ZY9UVEPOCB1tx7LWMX0JPtFEK9gl6SqjcejUUwF9APo= Subject key identifier: 59:21:C5:C1:9E:FE:8C:CF:E8:47:67:6D:4B:A6:67:17:CB:39:AC:D2 Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Certificate serial: 1A82 Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/2578CBCCFD4611EDA9A46F52C4F9AE02.roa Signing time: Fri 04 Apr 2025 16:45:07 +0000 ROA not before: Fri 04 Apr 2025 16:45:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18254 IP address blocks: 103.19.8.0/23 maxlen: 24 103.93.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6786 (0x1a82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Validity Not Before: Apr 4 16:45:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f00c93-844e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:e4:dd:dd:de:b0:b6:89:4b:38:17:a2:12: e6:aa:03:51:8f:4b:eb:c8:0c:43:84:29:7f:f9:99: 71:9b:32:f3:1d:d0:c7:06:3a:55:a5:3f:ed:66:c5: 45:66:98:d0:fc:62:71:01:ba:ef:3c:7b:81:45:65: 85:4a:b0:21:e1:00:7f:d2:32:de:ac:8a:30:49:75: 58:92:1f:d1:95:93:77:59:38:d5:85:74:af:29:0a: 0f:15:d4:51:2a:35:91:0b:5d:86:cf:23:54:cb:61: 3b:af:50:e1:25:d8:c3:d2:b2:55:07:38:fe:e9:8c: 2b:a5:ed:99:59:57:4f:c0:20:14:8c:82:32:ad:cc: b8:83:a7:cd:46:15:09:26:f6:7d:f2:25:f3:9a:4d: 8e:c1:ca:2e:b0:27:14:52:14:91:a4:25:05:f7:b4: ad:1d:a7:07:52:f8:9d:37:ab:d3:0c:96:c8:35:81: 5d:55:b0:75:f1:94:36:85:08:83:c0:06:48:49:35: 92:77:c1:df:e9:6e:59:d2:f7:5d:ae:47:81:32:9e: 0a:3c:80:7c:86:ae:2a:92:97:84:90:65:b0:3d:82: 2f:b9:06:bc:60:c6:6a:e5:93:00:60:d0:43:37:e0: b3:ef:4f:45:be:8c:dd:4b:58:60:f0:4a:cf:c3:d5: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:21:C5:C1:9E:FE:8C:CF:E8:47:67:6D:4B:A6:67:17:CB:39:AC:D2 X509v3 Authority Key Identifier: keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/2578CBCCFD4611EDA9A46F52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.19.8.0/23 103.93.252.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:be:61:35:ef:66:22:2b:6a:7f:26:b5:05:d3:87:61:af:8f: ee:fd:f5:5a:68:6f:d7:18:cd:5e:0e:e9:97:d6:0a:58:b1:03: 4f:95:54:7d:71:cb:bc:3c:9b:7b:ae:12:41:e3:dd:70:ab:99: a9:14:16:0d:03:d5:d2:54:0b:1d:95:75:bb:49:b3:53:c2:eb: 88:19:fe:56:cb:c9:44:7e:a3:90:8c:b7:4c:74:55:50:cc:75: d7:9c:f7:6e:a2:df:b0:e8:61:85:8f:4c:01:e7:20:d3:3e:f7: 53:23:7a:48:c7:8f:ac:44:b3:08:a1:c7:67:99:ca:f9:50:03: 14:fd:15:2f:c7:9f:41:96:3c:73:c9:e4:6b:bd:fd:d1:c7:8f: 4b:31:d4:95:77:51:2b:90:0c:ba:ac:7a:35:35:46:e4:04:51: d8:a3:6e:70:92:c5:ad:f7:49:ad:fc:bd:71:2d:5a:d6:72:96: d1:b1:f5:72:ed:30:23:5f:96:ee:0a:b4:93:88:54:f7:40:a9: e7:c2:0d:fe:cd:c7:e4:7a:c3:19:b7:95:57:9f:1a:e3:91:3f: 27:27:d1:4e:fa:f3:e6:c0:2b:94:00:d4:bb:67:13:6e:95:8f: e1:d8:54:8a:ab:8d:48:f7:c2:88:fa:9f:49:84:26:7a:25:93: ef:2b:9f:75 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG ODhFMzlFRUYwHhcNMjUwNDA0MTY0NTA3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwMGM5My04NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtljk3d3esLaJSzgXohLmqgNRj0vryAxDhCl/+ZlxmzLzHdDHBjpVpT/tZsVF ZpjQ/GJxAbrvPHuBRWWFSrAh4QB/0jLerIowSXVYkh/RlZN3WTjVhXSvKQoPFdRR KjWRC12GzyNUy2E7r1DhJdjD0rJVBzj+6Ywrpe2ZWVdPwCAUjIIyrcy4g6fNRhUJ JvZ98iXzmk2OwcousCcUUhSRpCUF97StHacHUvidN6vTDJbINYFdVbB18ZQ2hQiD wAZISTWSd8Hf6W5Z0vddrkeBMp4KPIB8hq4qkpeEkGWwPYIvuQa8YMZq5ZMAYNBD N+Cz709FvozdS1hg8ErPw9VCcwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFkhxcGe /ozP6EdnbUumZxfLOazSMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5 Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUY2QTgvRjNCRDRDMzY0OUNCMTFFN0E0QTg3QzdCQzRGOUFFMDIvMjU3OENCQ0NG RDQ2MTFFREE5QTQ2RjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnEwgDBAFnXfwwDQYJKoZIhvcNAQELBQADggEBAJu+YTXv ZiIran8mtQXTh2Gvj+799Vpob9cYzV4O6ZfWClixA0+VVH1xy7w8m3uuEkHj3XCr makUFg0D1dJUCx2VdbtJs1PC64gZ/lbLyUR+o5CMt0x0VVDMddec926i37DoYYWP TAHnINM+91MjekjHj6xEswihx2eZyvlQAxT9FS/Hn0GWPHPJ5Gu9/dHHj0sx1JV3 USuQDLqsejU1RuQEUdijbnCSxa33Sa38vXEtWtZyltGx9XLtMCNflu4KtJOIVPdA qefCDf7Nx+R6wxm3lVefGuORPycn0U768+bAK5QA1LtnE26Vj+HYVIqrjUj3woj6 n0mEJnolk+8rn3U= -----END CERTIFICATE-----Generated at Tue Nov 4 19:11:12 2025 by rpki-client