$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/993E65A2366311EEB376DC3AC4F9AE02.roa File: 993E65A2366311EEB376DC3AC4F9AE02.roa (raw, json) Hash identifier: Fhgc6d9SeAE9SdBHMvXa0fdhxKsTr1vh4YK8pXCjPRg= Subject key identifier: 78:B9:9E:4D:CA:4D:FE:1B:94:07:2D:D9:A8:DC:FA:01:39:73:8B:59 Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934 Certificate serial: 01AF Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/993E65A2366311EEB376DC3AC4F9AE02.roa Signing time: Mon 23 Jun 2025 03:22:00 +0000 ROA not before: Mon 23 Jun 2025 03:22:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149036 IP address blocks: 83.118.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934 Validity Not Before: Jun 23 03:22:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6858c858-e3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:21:24:40:8c:4f:92:12:39:4b:ec:01:24: 68:25:2c:3b:45:aa:23:41:61:4f:ab:c5:e3:81:0f: c9:f1:c6:0b:34:68:86:58:a0:b4:3e:a0:7b:e9:2b: f4:22:cf:90:06:f7:c3:f0:36:3b:d5:5d:4f:1c:07: b9:28:ee:d1:bf:eb:e6:00:4f:70:f6:93:45:0b:92: 94:35:c1:4f:4a:79:13:b1:99:79:e5:d4:cf:4b:f5: a2:9e:64:6a:e5:93:1f:89:87:ca:54:b6:47:57:ca: 8c:b9:34:25:b6:1f:7e:23:0e:68:18:51:be:31:e3: 63:07:56:f5:10:94:fc:ec:a1:f9:a7:cd:1f:c1:77: 97:de:62:a3:03:6b:85:8f:7e:a8:ec:4c:1e:7c:c8: 0b:e3:62:93:64:52:f3:b0:16:88:15:14:c6:74:9f: d5:6b:08:41:d6:f1:d4:f0:b0:24:36:83:12:cf:c8: 37:43:1c:e1:cd:3b:42:b8:ce:5a:e8:68:48:40:80: eb:fe:4f:64:6b:91:b7:1a:2a:d4:ab:65:5c:14:35: ae:a5:0d:79:a4:ee:80:7c:3e:06:4d:d7:3f:94:99: 36:be:7f:b0:4c:18:9f:9d:8f:df:f6:68:fc:71:27: a7:e0:bf:66:47:b0:08:6b:9a:4c:4d:52:63:d4:d2: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B9:9E:4D:CA:4D:FE:1B:94:07:2D:D9:A8:DC:FA:01:39:73:8B:59 X509v3 Authority Key Identifier: keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/993E65A2366311EEB376DC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 83.118.40.0/24 Signature Algorithm: sha256WithRSAEncryption 52:06:22:8c:6e:bb:97:90:96:60:93:2c:6c:db:0e:c4:03:d1: 4b:11:41:bd:95:43:c7:ca:74:ba:a8:e5:5c:6c:ff:9f:ce:84: 33:35:45:62:58:d9:a6:0a:fa:cf:45:69:81:c8:bc:aa:5e:aa: c8:1c:42:57:4a:f7:c0:a9:a2:f4:b9:fc:e3:35:ba:95:2b:69: 6c:88:48:4e:73:c0:d7:46:30:3b:79:dc:d0:7d:d6:8b:08:2e: 7d:20:52:4b:a7:ec:8a:dd:c6:7f:83:3f:06:18:28:f7:81:43: ab:d5:a0:68:af:15:e5:9f:a1:13:d1:f3:e8:1a:82:2a:0f:81: fb:7d:cf:55:8d:3f:6f:56:4a:99:65:ee:1c:f2:5c:5f:ec:e3: eb:78:81:2a:eb:7d:c3:1f:85:e3:e6:cb:7d:2b:d2:9a:69:61: 1d:03:5d:40:83:81:60:43:37:b4:ed:38:79:29:c5:f7:70:72: 54:22:ac:0d:b4:af:4a:83:82:4b:e0:7f:d5:8c:b5:0c:34:01: 17:17:11:1c:0f:45:bb:c5:14:d7:f1:9e:60:06:1a:1b:f6:ee: 97:dd:05:e2:84:0e:10:37:67:0c:d9:7f:b7:65:af:d9:3c:3c: fe:27:da:ce:84:c3:bc:e8:6b:2b:0c:08:44:1f:f1:e6:29:11: b9:6b:a3:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF NEMzMkM5MzQwHhcNMjUwNjIzMDMyMjAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4Yzg1OC1lM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNQhJECMT5ISOUvsASRoJSw7RaojQWFPq8XjgQ/J8cYLNGiGWKC0PqB76Sv0 Is+QBvfD8DY71V1PHAe5KO7Rv+vmAE9w9pNFC5KUNcFPSnkTsZl55dTPS/WinmRq 5ZMfiYfKVLZHV8qMuTQlth9+Iw5oGFG+MeNjB1b1EJT87KH5p80fwXeX3mKjA2uF j36o7EwefMgL42KTZFLzsBaIFRTGdJ/VawhB1vHU8LAkNoMSz8g3QxzhzTtCuM5a 6GhIQIDr/k9ka5G3GirUq2VcFDWupQ15pO6AfD4GTdc/lJk2vn+wTBifnY/f9mj8 cSen4L9mR7AIa5pMTVJj1NL1XwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHi5nk3K Tf4blAct2ajc+gE5c4tZMB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvOTkzRTY1QTIz NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABTdigwDQYJKoZIhvcNAQELBQADggEBAFIGIoxuu5eQlmCT LGzbDsQD0UsRQb2VQ8fKdLqo5Vxs/5/OhDM1RWJY2aYK+s9FaYHIvKpeqsgcQldK 98CpovS5/OM1upUraWyISE5zwNdGMDt53NB91osILn0gUkun7Irdxn+DPwYYKPeB Q6vVoGivFeWfoRPR8+gagioPgft9z1WNP29WSpll7hzyXF/s4+t4gSrrfcMfhePm y30r0pppYR0DXUCDgWBDN7TtOHkpxfdwclQirA20r0qDgkvgf9WMtQw0ARcXERwP RbvFFNfxnmAGGhv27pfdBeKEDhA3ZwzZf7dlr9k8PP4n2s6Ew7zoaysMCEQf8eYp Eblro7c= -----END CERTIFICATE-----Generated at Fri Jul 4 01:18:58 2025 by rpki-client