$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/2719F6E88BA311F0A0D19E2CC4F9AE02.roa File: 2719F6E88BA311F0A0D19E2CC4F9AE02.roa (raw, json) Hash identifier: D1S7iqXGUUZHfp/09w60bmU/i0252Rh24H8Dl+FipBU= Subject key identifier: 79:97:24:A3:39:89:D8:28:93:3E:0E:C0:96:A0:F6:79:A4:F3:19:89 Certificate issuer: /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B Certificate serial: 78 Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/2719F6E88BA311F0A0D19E2CC4F9AE02.roa Signing time: Sun 07 Sep 2025 04:28:50 +0000 ROA not before: Sun 07 Sep 2025 04:28:50 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38136 IP address blocks: 2401:f1e0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B Validity Not Before: Sep 7 04:28:50 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68bd0a02-efd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:87:82:83:dd:b5:c1:d7:59:aa:f7:3b:10: 45:9e:26:11:41:64:ce:06:d2:13:16:ee:71:1a:dc: 70:cb:58:b0:13:00:b2:6c:cf:c2:e2:65:4c:72:24: a1:23:9a:55:4a:22:9f:45:f5:1f:12:55:93:de:63: 4c:7d:9d:4d:bb:fe:4c:de:1e:ae:71:01:ee:bc:78: 8b:ed:2e:7b:1b:23:b8:ee:cd:f9:ac:1e:88:a4:a9: c7:94:8d:09:53:29:bb:ef:e0:97:e1:07:90:88:20: d3:3c:6c:74:69:b9:7f:7b:17:08:ec:2c:f3:c7:7f: b9:91:b8:67:27:61:4f:be:b7:a2:33:c6:27:51:18: d0:8c:93:52:d3:86:1a:ce:cd:23:8d:d0:75:13:04: 9e:5d:44:f6:ea:87:30:57:fd:39:d9:ef:2c:4f:ac: 16:d8:68:24:bc:d1:9a:37:30:bc:9f:23:41:d1:9d: ba:8c:83:a3:56:16:78:bc:10:0f:a3:1e:88:22:f1: 7c:8f:12:6f:8f:51:a3:4b:f9:63:73:66:8c:26:b9: 15:2f:5d:d8:4e:f2:6f:12:7b:d4:e2:f4:b9:9e:6b: ef:17:b4:94:de:0f:aa:35:be:82:aa:5b:93:9e:65: 25:eb:53:ad:58:f8:62:ab:25:57:a1:f7:6b:13:ae: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:97:24:A3:39:89:D8:28:93:3E:0E:C0:96:A0:F6:79:A4:F3:19:89 X509v3 Authority Key Identifier: keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/2719F6E88BA311F0A0D19E2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:f1e0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 67:a1:f9:f3:44:6a:8f:04:f4:b4:04:a6:97:27:26:87:dd:bf: 2e:23:8d:81:0d:b0:a2:ee:24:18:13:19:7a:85:e0:0f:55:51: cc:ba:84:b7:56:9d:8d:6e:63:ae:76:17:11:63:7a:4a:fb:ec: e1:1c:4c:b8:9f:50:ee:49:2e:be:b8:a4:94:dc:17:59:82:25: 08:ad:4a:97:ba:86:76:57:e8:10:50:0d:5d:92:c8:e0:e5:2e: 76:de:f1:8c:9b:08:26:fe:d4:f2:9e:09:92:51:92:30:18:10: 51:ee:d3:73:a9:3c:44:29:ed:d0:90:cb:a1:92:5d:f0:06:23: 7f:c0:96:89:47:04:69:e9:8d:13:51:85:53:30:53:19:e7:22: 5e:53:c5:85:4b:62:f5:79:ec:ea:47:22:87:fa:9e:a3:cc:b5: c4:c8:0f:ec:7c:f1:5a:47:54:75:a9:e1:ac:8a:36:47:95:57: af:11:80:a7:28:d3:9b:6e:10:7f:f7:77:cd:a0:49:3c:14:ca: 1d:78:65:16:13:5e:3a:87:f9:47:7e:ed:12:b6:85:2d:85:cd: 7a:41:3c:50:bf:64:03:8e:f5:28:8c:96:77:f5:6d:05:14:e9: 56:bb:b9:9f:ee:45:62:73:b0:46:d3:e3:a3:b9:5a:5d:e0:bb: 13:ac:0d:c8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0EyRDExMC8GA1UEBRMoMkQ1QjlCOTU0Q0QxNzNCNzNGRjA4N0RFQTYxODc5RTQ4 MDUxRDIzQjAeFw0yNTA5MDcwNDI4NTBaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YmQwYTAyLWVmZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMdoeCg921wddZqvc7EEWeJhFBZM4G0hMW7nEa3HDLWLATALJsz8LiZUxyJKEj mlVKIp9F9R8SVZPeY0x9nU27/kzeHq5xAe68eIvtLnsbI7juzfmsHoikqceUjQlT Kbvv4JfhB5CIINM8bHRpuX97FwjsLPPHf7mRuGcnYU++t6IzxidRGNCMk1LThhrO zSON0HUTBJ5dRPbqhzBX/TnZ7yxPrBbYaCS80Zo3MLyfI0HRnbqMg6NWFni8EA+j Hogi8XyPEm+PUaNL+WNzZowmuRUvXdhO8m8Se9Ti9Lmea+8XtJTeD6o1voKqW5Oe ZSXrU61Y+GKrJVeh92sTrnj1AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUeZckozmJ 2CiTPg7AlqD2eaTzGYkwHwYDVR0jBBgwFoAULVublUzRc7c/8Ifephh55IBR0jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDQTJELzI1NjE4N0YyRUY4 NzExRUZBN0IxQzIzMEM0RjlBRTAyL0xWdWJsVXpSYzdjXzhJZmVwaGg1NUlCUjBq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFZ1YmxVelJjN2NfOElmZXBoaDU1SUJSMGpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0EyRC8yNTYxODdGMkVGODcxMUVGQTdCMUMyMzBDNEY5QUUwMi8yNzE5RjZFODhC QTMxMUYwQTBEMTlFMkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQB8eD//zANBgkqhkiG9w0BAQsFAAOCAQEAZ6H580RqjwT0 tASmlycmh92/LiONgQ2wou4kGBMZeoXgD1VRzLqEt1adjW5jrnYXEWN6Svvs4RxM uJ9Q7kkuvriklNwXWYIlCK1Kl7qGdlfoEFANXZLI4OUudt7xjJsIJv7U8p4JklGS MBgQUe7Tc6k8RCnt0JDLoZJd8AYjf8CWiUcEaemNE1GFUzBTGeciXlPFhUti9Xns 6kcih/qeo8y1xMgP7HzxWkdUdanhrIo2R5VXrxGApyjTm24Qf/d3zaBJPBTKHXhl FhNeOof5R37tEraFLYXNekE8UL9kA471KIyWd/VtBRTpVru5n+5FYnOwRtPjo7la XeC7E6wNyA== -----END CERTIFICATE-----Generated at Tue Sep 9 00:41:03 2025 by rpki-client