$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa File: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (raw, json) Hash identifier: IYbwvT3qmzwsASPi9gEwkFkjfys+ZxVpssJBjkvN+uw= Subject key identifier: 0D:04:8D:85:77:A0:DF:EE:32:03:6A:F6:61:45:43:D1:60:54:E4:7B Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Certificate serial: 011C Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa Signing time: Sat 21 Jun 2025 04:33:25 +0000 ROA not before: Sat 21 Jun 2025 04:33:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55020 IP address blocks: 83.229.40.0/21 maxlen: 21 83.229.40.0/23 maxlen: 23 83.229.42.0/23 maxlen: 23 83.229.44.0/23 maxlen: 23 83.229.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Validity Not Before: Jun 21 04:33:25 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68563614-b736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:93:b8:7b:86:df:93:13:58:bb:bb:a5:bf: b2:e2:05:e5:32:31:89:54:ef:ae:73:83:b1:3c:71: d6:6e:a3:7d:65:d1:9a:f8:4a:11:57:83:77:f3:06: 0e:ee:fd:1f:ac:17:05:a9:aa:f5:8b:cf:f0:16:9d: 90:4a:32:a6:0a:ae:f2:a1:17:19:dd:18:75:1a:51: e2:56:55:6c:5a:a4:cd:ff:c5:ab:19:97:75:0f:06: 98:e5:42:e9:9c:e7:d2:e1:46:d2:c4:c2:7d:15:ca: 52:67:97:f7:dc:73:c4:9f:ba:6b:63:15:f3:35:16: b4:e7:5f:dc:d5:2c:82:3c:5d:7c:3c:0f:14:8b:67: 11:de:a4:0a:00:e0:7a:a0:6b:a5:69:1e:df:ad:3b: 3f:85:65:10:84:82:90:83:0d:03:c7:f6:8b:58:b7: 94:14:03:02:78:11:ba:18:00:f3:9d:25:8f:74:39: 09:d1:d5:6d:54:4f:ff:5f:11:05:f5:3d:b2:98:02: 49:24:12:7e:9c:83:63:c8:12:21:cb:e2:f9:cc:89: 7c:3f:7d:b5:6a:d3:35:50:39:81:63:35:41:bb:ba: 04:64:80:fe:45:2f:50:8e:f3:49:94:91:0a:90:4b: d3:8a:4a:8d:5b:c7:7c:16:01:f9:e9:71:06:54:8c: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:04:8D:85:77:A0:DF:EE:32:03:6A:F6:61:45:43:D1:60:54:E4:7B X509v3 Authority Key Identifier: keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 83.229.40.0/21 Signature Algorithm: sha256WithRSAEncryption 55:07:9a:a2:14:cf:83:17:d1:de:ed:84:bf:40:89:60:9b:49: 6c:75:8e:ec:8e:f1:74:b5:5f:15:02:26:be:eb:09:dc:ae:dc: f2:e8:7b:25:7d:15:c9:81:78:67:89:e9:d0:cd:6c:13:13:c7: 5a:c6:66:00:f2:35:45:bc:0b:61:b4:9b:ea:ec:2f:b8:ac:b6: 55:d6:08:9c:79:0e:ce:a9:2c:b3:41:3e:8f:cb:a3:66:a6:d5: c4:63:ac:d8:ab:ae:3e:2f:49:23:4f:da:81:4d:0b:df:c9:87: 06:79:f5:9f:5d:dc:6b:6f:fb:99:2b:73:df:04:0a:ff:ed:3c: c3:9c:5c:96:5f:64:ed:dc:bb:1d:0b:4f:2d:d1:5b:d3:ab:2b: 9b:3c:8b:7d:00:e2:7c:2e:63:90:6a:bd:6c:16:98:c6:6a:b6: df:97:62:8b:08:c4:46:cf:15:dd:ef:74:7c:f2:c6:3a:f7:d4: f9:f1:54:a0:1d:ff:95:e3:e0:98:90:85:74:ae:26:92:4f:f0: a3:57:84:9c:3e:2e:7e:58:90:19:f5:69:2e:b8:be:81:74:d5: 4f:e2:6c:7d:3d:a7:eb:30:bd:ba:0a:a2:be:65:3b:7e:38:dc: 23:67:55:49:0e:e1:51:a1:bd:64:f4:e5:58:f8:b7:43:5b:92: a0:3e:ff:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEVBRDY0NjM1NUQ3NTkzNkNCOTNFRDZCQURCNzkwQTg3 RkUxNTM3NEEwHhcNMjUwNjIxMDQzMzI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2MzYxNC1iNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPCTuHuG35MTWLu7pb+y4gXlMjGJVO+uc4OxPHHWbqN9ZdGa+EoRV4N38wYO 7v0frBcFqar1i8/wFp2QSjKmCq7yoRcZ3Rh1GlHiVlVsWqTN/8WrGZd1DwaY5ULp nOfS4UbSxMJ9FcpSZ5f33HPEn7prYxXzNRa051/c1SyCPF18PA8Ui2cR3qQKAOB6 oGulaR7frTs/hWUQhIKQgw0Dx/aLWLeUFAMCeBG6GADznSWPdDkJ0dVtVE//XxEF 9T2ymAJJJBJ+nINjyBIhy+L5zIl8P321atM1UDmBYzVBu7oEZID+RS9QjvNJlJEK kEvTikqNW8d8FgH56XEGVIzTywIDAQABo4IClTCCApEwHQYDVR0OBBYEFA0EjYV3 oN/uMgNq9mFFQ9FgVOR7MB8GA1UdIwQYMBaAFOrWRjVddZNsuT7Wutt5Cof+FTdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82MTk4MEE1NEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi82dFpHTlYxMWsyeTVQdGE2MjNrS2hfNFZO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjE5ODBBNTRCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvREQ1NTVBOUNF QzNBMTFFRThDQzNCODIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANT5SgwDQYJKoZIhvcNAQELBQADggEBAFUHmqIUz4MX0d7t hL9AiWCbSWx1juyO8XS1XxUCJr7rCdyu3PLoeyV9FcmBeGeJ6dDNbBMTx1rGZgDy NUW8C2G0m+rsL7istlXWCJx5Ds6pLLNBPo/Lo2am1cRjrNirrj4vSSNP2oFNC9/J hwZ59Z9d3Gtv+5krc98ECv/tPMOcXJZfZO3cux0LTy3RW9OrK5s8i30A4nwuY5Bq vWwWmMZqtt+XYosIxEbPFd3vdHzyxjr31PnxVKAd/5Xj4JiQhXSuJpJP8KNXhJw+ Ln5YkBn1aS64voF01U/ibH09p+swvboKor5lO3443CNnVUkO4VGhvWT05Vj4t0Nb kqA+/xA= -----END CERTIFICATE-----Generated at Thu Jul 3 23:24:38 2025 by rpki-client