$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa File: 836FCA52168411EFB6BDB96BC4F9AE02.roa (raw, json) Hash identifier: TAOed49FFqoRHgKFy+Jz2KuJalrMPjm52i7KeouMhd0= Subject key identifier: 2F:99:72:E1:0F:81:39:DA:30:DA:0D:76:9B:EE:A5:C7:CC:DE:B1:E4 Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Certificate serial: 011B Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa Signing time: Sat 21 Jun 2025 04:33:24 +0000 ROA not before: Sat 21 Jun 2025 04:33:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 400619 IP address blocks: 83.229.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Validity Not Before: Jun 21 04:33:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68563614-0c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:ee:32:fa:3e:18:3b:ce:de:53:fe:aa:dc: 67:e9:9d:6f:13:63:b7:6f:ea:4c:13:30:4f:4e:53: c6:0c:17:02:17:47:5a:14:19:26:c4:79:10:87:9a: b8:07:28:22:36:9f:be:57:a4:d1:a4:dd:d4:d6:93: 6e:05:c1:4a:f8:48:35:ca:08:92:b2:db:ae:5c:f5: de:b6:49:15:2e:86:f8:9b:de:f9:be:13:f5:1d:0f: 24:f6:b1:f9:fa:ff:d1:36:b5:48:29:4e:e8:da:3e: 42:59:d9:e7:32:72:9c:49:83:12:65:b9:2a:06:35: ed:ec:47:c6:41:34:55:b8:e6:29:10:06:5c:39:a7: 7f:e3:d1:9a:4b:90:2e:a3:71:ca:1b:51:78:0c:c9: 0d:17:b6:cf:68:b0:65:9d:21:29:42:33:fe:c6:22: 4d:a9:a0:96:7d:c0:4b:fe:6c:39:46:ab:25:42:89: a3:63:bc:54:b7:da:8b:81:b5:e6:8c:f3:e1:bf:ff: bd:d7:5f:89:16:0b:f2:e4:12:7f:1b:f4:2c:29:dd: 39:93:fa:3c:6f:1b:3e:aa:7d:3a:7e:21:cc:39:da: 2e:93:6e:20:0e:b2:91:99:04:75:fc:51:b7:75:0b: 99:b5:56:32:5a:58:5a:3b:1d:35:c1:dd:e0:00:42: b7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:99:72:E1:0F:81:39:DA:30:DA:0D:76:9B:EE:A5:C7:CC:DE:B1:E4 X509v3 Authority Key Identifier: keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 83.229.40.0/21 Signature Algorithm: sha256WithRSAEncryption 84:2d:ca:09:67:5b:3f:90:00:c1:31:53:2d:cd:e2:e4:97:d1: a2:87:25:c5:9a:73:9e:ff:43:85:de:c2:cd:64:02:c3:fe:d8: d8:d2:2f:f1:2e:ae:2e:66:15:d4:08:8e:33:c2:5f:7a:3b:07: bd:13:c2:8e:be:e2:e6:e7:01:13:17:d3:a1:e7:8e:bc:53:ba: f9:49:16:30:76:6e:1d:1f:ff:13:fc:f3:91:32:c7:43:03:49: de:32:7d:e0:64:86:fc:aa:71:40:24:b4:57:f5:a4:4e:8d:3e: 55:1d:15:a9:12:ae:07:ad:92:f1:dd:25:76:97:cc:c7:2c:ae: 15:37:d3:2c:f2:9a:6e:98:f2:19:a8:2e:34:78:4e:4f:50:2a: 3b:14:b9:8e:96:52:a6:01:33:c1:4a:b2:67:99:79:db:6c:0c: 69:50:ad:94:96:48:31:61:43:9a:84:aa:02:cc:b4:b1:38:73: 47:8d:16:2a:7b:4d:a6:5a:09:e4:32:34:ec:77:08:fe:3d:f7: 0d:56:95:ef:1d:88:94:50:b2:7d:e2:a0:7c:58:9d:30:23:25: f3:98:03:ef:d1:cd:0f:a3:78:59:8c:39:cd:14:6f:94:35:15: 8f:96:7b:a1:29:01:66:3d:4e:b5:bf:df:f1:33:13:9d:cf:90: 50:aa:78:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEVBRDY0NjM1NUQ3NTkzNkNCOTNFRDZCQURCNzkwQTg3 RkUxNTM3NEEwHhcNMjUwNjIxMDQzMzI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2MzYxNC0wYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1fuMvo+GDvO3lP+qtxn6Z1vE2O3b+pMEzBPTlPGDBcCF0daFBkmxHkQh5q4 BygiNp++V6TRpN3U1pNuBcFK+Eg1ygiSstuuXPXetkkVLob4m975vhP1HQ8k9rH5 +v/RNrVIKU7o2j5CWdnnMnKcSYMSZbkqBjXt7EfGQTRVuOYpEAZcOad/49GaS5Au o3HKG1F4DMkNF7bPaLBlnSEpQjP+xiJNqaCWfcBL/mw5RqslQomjY7xUt9qLgbXm jPPhv/+911+JFgvy5BJ/G/QsKd05k/o8bxs+qn06fiHMOdouk24gDrKRmQR1/FG3 dQuZtVYyWlhaOx01wd3gAEK38wIDAQABo4IClTCCApEwHQYDVR0OBBYEFC+ZcuEP gTnaMNoNdpvupcfM3rHkMB8GA1UdIwQYMBaAFOrWRjVddZNsuT7Wutt5Cof+FTdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82MTk4MEE1NEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi82dFpHTlYxMWsyeTVQdGE2MjNrS2hfNFZO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjE5ODBBNTRCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvODM2RkNBNTIx Njg0MTFFRkI2QkRCOTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANT5SgwDQYJKoZIhvcNAQELBQADggEBAIQtyglnWz+QAMEx Uy3N4uSX0aKHJcWac57/Q4Xews1kAsP+2NjSL/Euri5mFdQIjjPCX3o7B70Two6+ 4ubnARMX06HnjrxTuvlJFjB2bh0f/xP885Eyx0MDSd4yfeBkhvyqcUAktFf1pE6N PlUdFakSrgetkvHdJXaXzMcsrhU30yzymm6Y8hmoLjR4Tk9QKjsUuY6WUqYBM8FK smeZedtsDGlQrZSWSDFhQ5qEqgLMtLE4c0eNFip7TaZaCeQyNOx3CP499w1Wle8d iJRQsn3ioHxYnTAjJfOYA+/RzQ+jeFmMOc0Ub5Q1FY+We6EpAWY9TrW/3/EzE53P kFCqeBs= -----END CERTIFICATE-----Generated at Sat Aug 9 10:50:18 2025 by rpki-client