$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa File: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (raw, json) Hash identifier: sT9bto4XjwUv8aNCOQbwa9KiSHa7qrPUe0G1XXIG/Ig= Subject key identifier: 6F:F2:1D:3C:F8:E0:D1:1F:8B:B2:31:3F:60:E5:BB:B8:D2:02:7A:5D Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Certificate serial: 01AD Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:01:25 +0000 ROA not before: Sat 21 Jun 2025 04:33:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55020 IP address blocks: 83.229.40.0/21 maxlen: 21 83.229.40.0/23 maxlen: 23 83.229.42.0/23 maxlen: 23 83.229.44.0/23 maxlen: 23 83.229.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Validity Not Before: Jun 21 04:33:25 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a59835-ad9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:c0:08:b8:6a:42:f3:5a:44:93:e1:ab:42: c8:c8:21:32:68:50:59:97:1e:ef:0e:63:3b:d8:22: 94:de:05:c8:3b:1f:fd:c1:63:60:16:39:d7:a3:24: e1:af:4f:f1:ab:a1:1c:c4:30:df:f4:05:e2:49:56: fc:41:ea:1e:d8:28:de:f1:c4:43:50:03:a9:d5:f2: 71:b5:fb:12:48:72:31:88:f5:eb:e6:8e:5c:00:b6: fc:30:da:2d:6e:d2:ba:72:b1:7e:49:9c:49:f9:ce: 4c:e1:b2:be:fb:6f:6d:27:f9:b2:ce:a5:b8:ec:d2: 58:f2:75:0c:9f:83:53:e2:08:5d:1f:75:72:ee:b2: 90:ff:7c:d0:1d:32:a0:9b:ba:da:ab:40:40:37:c4: 5b:48:eb:5a:33:8a:33:e2:7b:14:8c:b9:3f:c1:6b: 53:2d:3b:4f:fb:46:11:80:8b:43:21:14:2b:52:4c: f6:91:07:ea:6c:8d:e6:f6:54:20:51:e5:1b:03:75: 8c:98:82:0a:4d:6d:09:66:3f:f0:23:af:2e:19:1f: e3:7b:9a:14:13:de:e7:85:fc:33:cf:f3:a5:40:46: 56:07:aa:ca:8e:9d:7c:bc:0d:3e:98:a2:c7:00:e1: 40:38:c2:48:35:c3:18:0c:50:49:91:dc:85:ae:29: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F2:1D:3C:F8:E0:D1:1F:8B:B2:31:3F:60:E5:BB:B8:D2:02:7A:5D X509v3 Authority Key Identifier: keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 83.229.40.0/21 Signature Algorithm: sha256WithRSAEncryption 25:60:61:f7:fe:ae:19:00:38:cf:78:aa:e9:a2:4b:a7:20:a1: b1:f9:91:e6:47:70:09:5b:3c:26:5f:3d:f0:97:7e:11:c9:0c: 30:79:12:18:7f:b3:d2:61:e8:80:e9:ad:0a:c6:0d:f9:58:c1: 6a:93:4c:8b:4d:6f:51:97:e7:86:f6:55:8f:36:e2:cd:3d:6f: 39:da:4c:e8:70:64:92:fd:81:d2:bc:20:0b:d4:31:e8:6d:de: e9:82:e5:d4:63:01:e4:b6:f5:2b:f5:72:94:a4:3e:8d:40:04: 80:72:55:ed:2e:a4:e6:f3:ac:f9:ee:9f:3a:d4:b7:d7:70:4f: b7:ce:06:f6:49:8b:af:3e:ed:a9:e7:57:0b:55:a8:a2:67:11: 85:44:1e:17:81:89:0d:98:48:1b:c3:8e:c5:c6:17:e9:3b:7e: 0d:ef:28:08:e1:70:6b:89:86:0c:a9:a6:34:a7:87:9b:20:99: a3:c3:bd:68:25:d9:ac:a0:70:6f:28:a4:87:f0:02:a1:09:3f: 63:fd:52:46:5f:78:41:8e:d6:07:4e:49:04:aa:64:a4:3b:a3: df:b0:8e:89:54:2a:36:33:6b:bf:4d:62:54:bb:5a:45:22:b7: 50:60:2a:da:28:09:c4:75:6d:67:fd:ec:e5:f3:14:61:c1:91: bf:80:c5:02 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEVBRDY0NjM1NUQ3NTkzNkNCOTNFRDZCQURCNzkwQTg3 RkUxNTM3NEEwHhcNMjUwNjIxMDQzMzI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTgzNS1hZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QvACLhqQvNaRJPhq0LIyCEyaFBZlx7vDmM72CKU3gXIOx/9wWNgFjnXoyTh r0/xq6EcxDDf9AXiSVb8Qeoe2Cje8cRDUAOp1fJxtfsSSHIxiPXr5o5cALb8MNot btK6crF+SZxJ+c5M4bK++29tJ/myzqW47NJY8nUMn4NT4ghdH3Vy7rKQ/3zQHTKg m7raq0BAN8RbSOtaM4oz4nsUjLk/wWtTLTtP+0YRgItDIRQrUkz2kQfqbI3m9lQg UeUbA3WMmIIKTW0JZj/wI68uGR/je5oUE97nhfwzz/OlQEZWB6rKjp18vA0+mKLH AOFAOMJINcMYDFBJkdyFriltXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG/yHTz4 4NEfi7IxP2Dlu7jSAnpdMB8GA1UdIwQYMBaAFOrWRjVddZNsuT7Wutt5Cof+FTdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82MTk4MEE1NEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi82dFpHTlYxMWsyeTVQdGE2MjNrS2hfNFZO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjE5ODBBNTRCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvREQ1NTVBOUNF QzNBMTFFRThDQzNCODIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDU+UoMA0GCSqGSIb3DQEBCwUAA4IBAQAlYGH3/q4ZADjPeKrpokun IKGx+ZHmR3AJWzwmXz3wl34RyQwweRIYf7PSYeiA6a0Kxg35WMFqk0yLTW9Rl+eG 9lWPNuLNPW852kzocGSS/YHSvCAL1DHobd7pguXUYwHktvUr9XKUpD6NQASAclXt LqTm86z57p861LfXcE+3zgb2SYuvPu2p51cLVaiiZxGFRB4XgYkNmEgbw47Fxhfp O34N7ygI4XBriYYMqaY0p4ebIJmjw71oJdmsoHBvKKSH8AKhCT9j/VJGX3hBjtYH TkkEqmSkO6PfsI6JVCo2M2u/TWJUu1pFIrdQYCraKAnEdW1n/ezl8xRhwZG/gMUC -----END CERTIFICATE-----Generated at Sat Mar 21 20:14:46 2026 by rpki-client