$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa File: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (raw, json) Hash identifier: wVAgrqCE/Wj+Oq7c+aZ97qsJSVe62sCRsRf4hdQIDT4= Subject key identifier: 6B:A1:16:DC:BD:43:38:08:85:BB:D6:88:B2:39:B8:C8:80:F5:7F:52 Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Certificate serial: 011A Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa Signing time: Sat 21 Jun 2025 04:33:23 +0000 ROA not before: Sat 21 Jun 2025 04:33:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 18013 IP address blocks: 83.229.40.0/21 maxlen: 21 83.229.40.0/23 maxlen: 23 83.229.42.0/23 maxlen: 23 83.229.44.0/23 maxlen: 23 83.229.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Validity Not Before: Jun 21 04:33:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68563613-f7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:de:41:b8:e4:a1:84:1a:bb:d7:e0:e9:9a: a6:0a:4a:34:6b:83:6f:3d:f9:07:5a:de:17:0a:31: 2b:d6:b8:53:a3:95:54:0f:41:ce:5e:9c:df:b6:85: 6a:6b:82:a0:cc:b5:d0:45:e1:a9:22:9f:fa:80:e0: 50:3e:95:b1:c6:97:df:63:5a:ea:1a:a6:47:6f:1a: 89:ac:61:87:f5:5d:df:3e:98:11:be:9c:f6:df:fb: 4d:19:c9:fc:87:8c:20:6f:f1:1d:40:dd:46:bf:c8: ce:ff:b2:1f:e3:28:c3:87:94:82:a8:e2:5f:0d:16: 6c:6a:b3:ea:9f:93:10:f2:b2:60:e3:93:97:8d:06: d7:26:a1:13:45:38:c1:c5:45:6c:b9:a8:b2:8e:db: 95:b8:5d:c0:fe:c9:2e:90:84:a3:dc:31:03:c9:68: 5f:db:40:0d:b1:c3:9e:54:be:d1:31:09:6c:24:e7: b0:cd:be:35:42:c1:dc:6a:db:f3:00:c5:2b:0f:43: eb:ea:8a:8e:f5:fa:12:b1:75:74:2a:8b:29:02:26: c8:71:58:d1:df:2f:68:21:9b:88:d5:23:ec:0e:d9: ab:37:2a:cc:80:44:e3:fa:76:64:9c:61:33:24:26: c1:fa:4d:2c:2f:79:53:f9:11:2f:34:9a:ed:1d:95: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A1:16:DC:BD:43:38:08:85:BB:D6:88:B2:39:B8:C8:80:F5:7F:52 X509v3 Authority Key Identifier: keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 83.229.40.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:3e:70:b0:19:2a:83:e5:fb:e3:2a:4d:c7:c4:57:b8:78:84: 3f:62:2a:01:30:51:e3:e2:f5:b5:7f:38:22:37:01:91:41:20: 0f:d5:17:2a:7b:41:56:d4:c1:0b:91:72:26:22:3e:e2:5d:96: 87:d2:96:16:a6:4f:4a:50:07:e2:74:0c:75:56:12:87:ec:52: d8:0b:02:64:08:0c:68:31:fa:f0:15:34:04:17:42:ca:95:da: b1:68:c0:27:c9:9f:dc:bb:73:57:36:28:25:5a:bb:f7:57:94: a3:43:a0:76:9c:cd:5c:8d:d2:22:eb:94:e6:fc:88:0b:2e:b6: 97:d4:1e:ea:01:76:7d:d1:22:d0:c5:2b:f5:e3:e3:cd:b6:90: bc:a9:4d:42:1c:74:2b:b6:8a:a9:83:d2:3b:8d:c9:f4:70:b8: e5:96:b9:e0:1a:95:db:0c:01:1c:d0:23:56:b5:e2:25:90:dc: 81:7a:60:2a:da:e9:9c:5b:c4:e9:54:c8:5e:2c:1a:6b:59:a7: 5c:be:63:5c:24:aa:26:c0:ae:67:c9:ca:13:21:2d:20:27:ec: 95:02:2d:26:f5:10:14:f2:b2:4c:a5:24:49:98:71:b6:47:cd: 23:3f:75:35:8d:e7:68:5f:d8:7a:74:81:8f:34:2b:6c:2a:ac: 6b:dd:74:4d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEVBRDY0NjM1NUQ3NTkzNkNCOTNFRDZCQURCNzkwQTg3 RkUxNTM3NEEwHhcNMjUwNjIxMDQzMzIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2MzYxMy1mN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n/eQbjkoYQau9fg6ZqmCko0a4NvPfkHWt4XCjEr1rhTo5VUD0HOXpzftoVq a4KgzLXQReGpIp/6gOBQPpWxxpffY1rqGqZHbxqJrGGH9V3fPpgRvpz23/tNGcn8 h4wgb/EdQN1Gv8jO/7If4yjDh5SCqOJfDRZsarPqn5MQ8rJg45OXjQbXJqETRTjB xUVsuaiyjtuVuF3A/skukISj3DEDyWhf20ANscOeVL7RMQlsJOewzb41QsHcatvz AMUrD0Pr6oqO9foSsXV0KospAibIcVjR3y9oIZuI1SPsDtmrNyrMgETj+nZknGEz JCbB+k0sL3lT+REvNJrtHZUIJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGuhFty9 QzgIhbvWiLI5uMiA9X9SMB8GA1UdIwQYMBaAFOrWRjVddZNsuT7Wutt5Cof+FTdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82MTk4MEE1NEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi82dFpHTlYxMWsyeTVQdGE2MjNrS2hfNFZO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjE5ODBBNTRCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvRENFMkE4MzBF QzNBMTFFRThDQzNCODIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANT5SgwDQYJKoZIhvcNAQELBQADggEBAB4+cLAZKoPl++Mq TcfEV7h4hD9iKgEwUePi9bV/OCI3AZFBIA/VFyp7QVbUwQuRciYiPuJdlofSlham T0pQB+J0DHVWEofsUtgLAmQIDGgx+vAVNAQXQsqV2rFowCfJn9y7c1c2KCVau/dX lKNDoHaczVyN0iLrlOb8iAsutpfUHuoBdn3RItDFK/Xj4822kLypTUIcdCu2iqmD 0juNyfRwuOWWueAaldsMARzQI1a14iWQ3IF6YCra6ZxbxOlUyF4sGmtZp1y+Y1wk qibArmfJyhMhLSAn7JUCLSb1EBTyskylJEmYcbZHzSM/dTWN52hf2Hp0gY80K2wq rGvddE0= -----END CERTIFICATE-----Generated at Fri Jul 4 21:54:20 2025 by rpki-client