$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DC3455AAEC3A11EE8CC3B820C4F9AE02.roa File: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (raw, json) Hash identifier: U6WshrI1d73PI7G3Mcgd49AERuU1k7rCvZTi2JvZoik= Subject key identifier: 29:B4:38:66:0F:BD:5B:6D:16:B0:98:BF:A6:2C:A0:D5:44:23:DB:31 Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Certificate serial: 01AA Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DC3455AAEC3A11EE8CC3B820C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:01:22 +0000 ROA not before: Sat 21 Jun 2025 04:33:22 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 140224 IP address blocks: 83.229.40.0/21 maxlen: 21 83.229.40.0/23 maxlen: 23 83.229.42.0/23 maxlen: 23 83.229.44.0/23 maxlen: 23 83.229.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Validity Not Before: Jun 21 04:33:22 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a59832-f37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:13:eb:d3:af:94:8d:5a:f8:c9:7d:1e:7a: c8:19:61:33:34:4d:55:68:52:00:be:85:83:40:9b: b6:f7:7c:b2:22:0c:a3:d1:4d:dc:65:3a:5b:5d:f1: 15:70:1c:0c:69:04:61:dd:d3:89:93:75:06:48:ec: 1e:a4:c0:84:7e:b4:2c:03:fb:ce:c0:c7:9c:fd:fa: e3:b4:f4:12:45:a7:b0:d2:09:04:ad:24:8d:10:be: c9:f0:98:ac:9a:a1:81:8a:f2:a1:5e:9a:9a:7d:99: f4:ad:e2:ad:82:5e:16:ce:c6:47:37:88:4e:aa:5f: 77:68:0b:2d:d5:bd:63:8e:39:45:ea:13:13:4f:3e: 1a:d4:21:81:6c:91:8a:6c:55:cc:fc:4d:db:4b:36: fb:41:64:fb:10:92:45:10:f6:e5:58:88:8c:9c:b5: 58:ba:cc:f6:30:71:88:02:db:9e:11:a9:c7:68:9f: 61:0d:2b:95:a8:84:07:e7:52:8b:b2:e5:62:0c:50: 83:1a:2e:de:3c:1a:c4:cb:4e:a0:d1:de:19:82:43: 7d:b7:a4:76:0e:32:da:c8:30:f2:af:39:85:98:e2: fd:69:1e:65:70:72:2e:c5:00:8c:06:28:f5:43:09: 2a:ac:d0:e0:5f:84:fc:e2:55:fe:02:de:1b:d2:9b: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B4:38:66:0F:BD:5B:6D:16:B0:98:BF:A6:2C:A0:D5:44:23:DB:31 X509v3 Authority Key Identifier: keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DC3455AAEC3A11EE8CC3B820C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 83.229.40.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:e8:e2:74:b1:97:45:66:a7:dd:7c:73:87:6c:61:a8:8d:0f: 82:71:ae:98:2f:5d:40:7f:13:af:6b:13:70:34:3d:e7:c8:f7: f6:64:02:84:36:19:5b:af:f8:36:87:d0:76:0b:1e:6d:5c:c9: 85:2d:6f:13:e9:4d:42:f8:ae:57:21:1f:d5:c4:21:1f:79:bc: 8d:0e:15:b5:15:ba:3a:84:1b:9f:62:16:6c:21:c0:66:47:97: cb:6c:ab:57:b6:03:92:e0:27:63:a8:35:dc:b4:7e:6f:f2:99: 8c:d6:6a:67:62:77:fc:04:a2:88:84:98:46:ba:55:c6:50:f5: 89:77:9a:5b:da:cb:c4:23:ad:19:08:30:35:bc:58:10:16:e1: 3a:37:64:5a:01:20:3c:00:3b:e1:13:ec:e8:19:c6:da:bb:5e: 16:56:cd:12:6e:d7:3b:99:00:5c:b1:e1:8a:2d:49:42:7b:36: 45:69:d3:8a:e8:7d:e5:dd:61:90:2d:76:3a:4e:45:ec:10:c5: ef:07:47:a6:91:c9:39:8a:62:82:05:0c:38:11:51:43:15:02: 03:ac:65:4b:d2:25:6f:ff:fb:7e:a4:f0:4d:7a:e4:d8:e3:fa: 8c:44:06:12:33:60:2b:11:67:7b:00:eb:0c:0d:15:ab:59:58: 8b:9b:b1:88 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEVBRDY0NjM1NUQ3NTkzNkNCOTNFRDZCQURCNzkwQTg3 RkUxNTM3NEEwHhcNMjUwNjIxMDQzMzIyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTgzMi1mMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTsT69OvlI1a+Ml9HnrIGWEzNE1VaFIAvoWDQJu293yyIgyj0U3cZTpbXfEV cBwMaQRh3dOJk3UGSOwepMCEfrQsA/vOwMec/frjtPQSRaew0gkErSSNEL7J8Jis mqGBivKhXpqafZn0reKtgl4WzsZHN4hOql93aAst1b1jjjlF6hMTTz4a1CGBbJGK bFXM/E3bSzb7QWT7EJJFEPblWIiMnLVYusz2MHGIAtueEanHaJ9hDSuVqIQH51KL suViDFCDGi7ePBrEy06g0d4ZgkN9t6R2DjLayDDyrzmFmOL9aR5lcHIuxQCMBij1 QwkqrNDgX4T84lX+At4b0ptbIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCm0OGYP vVttFrCYv6YsoNVEI9sxMB8GA1UdIwQYMBaAFOrWRjVddZNsuT7Wutt5Cof+FTdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82MTk4MEE1NEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi82dFpHTlYxMWsyeTVQdGE2MjNrS2hfNFZO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjE5ODBBNTRCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvREMzNDU1QUFF QzNBMTFFRThDQzNCODIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDU+UoMA0GCSqGSIb3DQEBCwUAA4IBAQBt6OJ0sZdFZqfdfHOHbGGo jQ+Cca6YL11AfxOvaxNwND3nyPf2ZAKENhlbr/g2h9B2Cx5tXMmFLW8T6U1C+K5X IR/VxCEfebyNDhW1Fbo6hBufYhZsIcBmR5fLbKtXtgOS4CdjqDXctH5v8pmM1mpn Ynf8BKKIhJhGulXGUPWJd5pb2svEI60ZCDA1vFgQFuE6N2RaASA8ADvhE+zoGcba u14WVs0Sbtc7mQBcseGKLUlCezZFadOK6H3l3WGQLXY6TkXsEMXvB0emkck5imKC BQw4EVFDFQIDrGVL0iVv//t+pPBNeuTY4/qMRAYSM2ArEWd7AOsMDRWrWViLm7GI -----END CERTIFICATE-----Generated at Sat Mar 21 20:14:35 2026 by rpki-client