$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa File: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (raw, json) Hash identifier: 6NgK+nGcOvONOsxU4FAtDZCrjoU00hf/yGyPQJumcEE= Subject key identifier: 6D:EB:EB:31:DE:5C:B1:C3:30:5B:7E:B0:EC:9E:0F:69:62:EF:B2:65 Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Certificate serial: 47 Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa Signing time: Wed 15 May 2024 08:43:06 +0000 ROA not before: Wed 15 May 2024 08:43:06 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 18013 IP address blocks: 83.229.40.0/21 maxlen: 21 83.229.40.0/23 maxlen: 23 83.229.42.0/23 maxlen: 23 83.229.44.0/23 maxlen: 23 83.229.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Validity Not Before: May 15 08:43:06 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6644759a-9f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:11:b0:ae:d8:28:a7:de:09:85:57:ba:97: 7c:2f:e2:68:29:16:d8:dc:3e:b7:a2:dc:0b:6d:c9: a6:94:8d:fa:a4:9d:a3:12:a6:94:dc:e2:ca:d4:0f: f7:41:ca:42:90:84:01:fd:f3:01:24:8f:32:3d:fd: 90:58:e1:dc:a4:9c:65:fa:37:41:26:34:8e:9f:14: e0:4b:cf:db:4b:0c:3f:a2:c4:5b:68:67:08:58:69: 20:00:f0:8d:74:e8:51:b9:8a:a8:79:1a:c2:36:90: 7f:2c:ac:b8:e7:71:c8:e4:d6:78:8f:50:f2:64:11: 27:0a:2e:4f:e8:a8:28:a6:ad:ab:24:df:73:93:3c: e6:60:1c:7b:de:c4:27:6f:06:83:4e:3d:0a:8c:b6: c3:e7:32:a0:9c:31:a4:61:a1:c3:96:c3:e6:d0:8e: fb:2d:b6:52:0d:3a:ce:4f:e9:c3:b7:5a:01:e4:fb: 3e:bb:c2:df:bd:10:10:43:c1:08:ca:49:53:c6:74: 55:ac:4b:27:98:ba:b7:78:9a:1d:53:8c:61:a0:8c: cb:83:db:c4:16:89:54:d8:22:bb:b1:40:0e:0b:c2: 74:16:b2:38:6f:d8:63:a4:aa:3a:4a:5e:a7:b4:79: 80:fd:27:b4:cd:56:3a:a8:c4:5d:94:06:f1:bd:7b: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:EB:31:DE:5C:B1:C3:30:5B:7E:B0:EC:9E:0F:69:62:EF:B2:65 X509v3 Authority Key Identifier: keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 83.229.40.0/21 Signature Algorithm: sha256WithRSAEncryption 36:b0:e9:c1:3f:4a:d4:d5:a7:07:f8:0b:05:92:7b:74:60:aa: f5:b6:8f:c5:5a:e4:41:47:42:3d:8f:30:58:a2:aa:f5:b2:1f: ed:13:67:c2:e3:ac:b9:9b:30:bc:c7:0e:0e:0f:ed:18:a9:1a: e5:bc:ee:43:26:14:e7:de:9f:a0:ce:ab:06:44:fe:8d:fa:48: e9:62:72:62:4d:ff:2d:10:52:5e:90:c9:bf:12:61:8f:15:1a: 3e:69:81:f4:48:95:ef:35:ea:c2:42:33:f5:51:35:6e:7d:6e: 15:85:f7:3e:8c:85:af:aa:a9:8f:9b:f4:83:e1:3d:e7:c6:44: de:b0:53:47:5f:b8:c5:f7:02:cd:4c:50:54:e6:c4:12:b7:a7: 94:a2:a7:60:0f:59:91:5b:45:09:00:29:73:86:db:37:19:89: 70:4b:15:29:48:9a:bc:40:a5:1d:de:f4:78:79:38:ab:2b:4b: a3:18:b1:1f:75:9d:87:69:fa:e7:ef:48:60:64:a2:9f:b5:9d: de:b0:ee:82:65:1f:b3:a8:5c:8c:58:2a:d1:fa:b5:bc:2e:4f: 03:63:d2:b6:5c:cd:45:d1:fe:fd:bb:3e:b0:ad:97:f4:28:ed: 5e:0a:4b:7f:b5:bc:ee:e8:13:d5:5a:9c:cc:e0:3b:05:d7:59: 64:0b:15:22 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjUzNTExMC8GA1UEBRMoRUFENjQ2MzU1RDc1OTM2Q0I5M0VENkJBREI3OTBBODdG RTE1Mzc0QTAeFw0yNDA1MTUwODQzMDZaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NDQ3NTlhLTlmNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCewhGwrtgop94JhVe6l3wv4mgpFtjcPrei3AttyaaUjfqknaMSppTc4srUD/dB ykKQhAH98wEkjzI9/ZBY4dyknGX6N0EmNI6fFOBLz9tLDD+ixFtoZwhYaSAA8I10 6FG5iqh5GsI2kH8srLjnccjk1niPUPJkEScKLk/oqCimrask33OTPOZgHHvexCdv BoNOPQqMtsPnMqCcMaRhocOWw+bQjvsttlINOs5P6cO3WgHk+z67wt+9EBBDwQjK SVPGdFWsSyeYurd4mh1TjGGgjMuD28QWiVTYIruxQA4LwnQWsjhv2GOkqjpKXqe0 eYD9J7TNVjqoxF2UBvG9e1WNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbevrMd5c scMwW36w7J4PaWLvsmUwHwYDVR0jBBgwFoAU6tZGNV11k2y5Pta623kKh/4VN0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNTM1LzYxOTgwQTU0QkE2 NjExRUVCQzM5NjI2RUM0RjlBRTAyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4w by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvNnRaR05WMTFrMnk1UHRhNjIza0toXzRWTjBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82MTk4MEE1NEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi9EQ0UyQTgzMEVD M0ExMUVFOENDM0I4MjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA1PlKDANBgkqhkiG9w0BAQsFAAOCAQEANrDpwT9K1NWnB/gL BZJ7dGCq9baPxVrkQUdCPY8wWKKq9bIf7RNnwuOsuZswvMcODg/tGKka5bzuQyYU 596foM6rBkT+jfpI6WJyYk3/LRBSXpDJvxJhjxUaPmmB9EiV7zXqwkIz9VE1bn1u FYX3PoyFr6qpj5v0g+E958ZE3rBTR1+4xfcCzUxQVObEErenlKKnYA9ZkVtFCQAp c4bbNxmJcEsVKUiavEClHd70eHk4qytLoxixH3Wdh2n65+9IYGSin7Wd3rDugmUf s6hcjFgq0fq1vC5PA2PStlzNRdH+/bs+sK2X9CjtXgpLf7W87ugT1VqczOA7BddZ ZAsVIg== -----END CERTIFICATE-----Generated at Fri May 31 10:42:20 2024 by rpki-client on console-fra.rpki-client.org