$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa File: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (raw, json) Hash identifier: SDRPwzoZ0Rhe4jtkG3pcG+5QwBQoYK+SqShzeOhWbsI= Subject key identifier: 1B:FF:6A:40:BD:41:94:03:98:77:AD:49:10:47:45:1B:48:B9:7D:6B Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Certificate serial: 48 Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa Signing time: Wed 15 May 2024 08:43:07 +0000 ROA not before: Wed 15 May 2024 08:43:07 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55020 IP address blocks: 83.229.40.0/21 maxlen: 21 83.229.40.0/23 maxlen: 23 83.229.42.0/23 maxlen: 23 83.229.44.0/23 maxlen: 23 83.229.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A Validity Not Before: May 15 08:43:07 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6644759b-2c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:2e:de:dc:1d:8e:3b:4c:37:6b:18:7a:f7: ad:9d:4d:41:d5:64:e0:11:e1:3f:b6:74:07:ae:8c: 53:8d:a1:77:dd:1d:48:8d:74:6b:8f:11:a1:c0:dc: dd:ab:ef:9e:3c:76:8b:84:c0:c3:ee:7b:4f:26:3c: eb:26:43:9d:72:3b:7e:bc:a6:03:c3:db:c6:cc:2d: 8a:68:c7:c7:7b:6e:6e:0f:04:a6:7c:0c:07:6f:6b: d8:73:f6:7c:36:91:5a:a7:af:fe:b6:1e:7a:c7:ae: 41:7a:0f:3a:3e:97:83:e0:b3:d3:37:81:2c:a5:d9: 4d:78:d1:f9:64:ed:2d:2f:60:e2:6f:9e:89:67:f7: 98:b0:c6:70:29:84:cf:b4:b7:da:f9:40:1e:a3:f0: b7:a3:da:aa:d1:bc:56:0e:b6:ee:47:46:1c:23:47: a4:68:4b:7f:0f:a8:c1:94:10:d7:b5:c8:3e:be:11: 37:e4:a1:45:12:f5:dd:f0:08:21:51:84:23:9d:ba: 1a:54:3d:7a:1e:64:b3:8e:78:eb:08:2a:bb:bf:65: 8a:7d:b3:fa:fc:62:fe:3e:b1:89:94:fc:d9:64:55: db:45:2e:45:71:9b:93:45:5f:0f:42:71:79:a3:57: 5c:25:48:77:fa:03:ce:13:40:8f:d9:10:59:40:8f: a7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FF:6A:40:BD:41:94:03:98:77:AD:49:10:47:45:1B:48:B9:7D:6B X509v3 Authority Key Identifier: keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DD555A9CEC3A11EE8CC3B820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 83.229.40.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:76:4e:56:79:1f:90:96:95:50:b7:54:1f:6b:bb:1d:63:63: d4:bb:4d:b8:6c:73:2b:ae:24:c8:10:f2:70:a0:ab:75:b1:a8: 63:29:1a:da:d0:ff:69:e8:d8:a2:cd:e1:02:aa:24:38:21:2c: c1:e4:a1:21:88:a3:87:7a:59:f7:86:ce:97:8e:06:f3:02:55: 66:f8:af:6d:7a:48:b1:8e:ac:29:c7:cb:1a:55:da:e3:7e:5b: e5:ad:74:a2:2f:4a:51:6f:79:35:22:1f:65:35:a3:36:e4:d4: 5a:5c:5e:a5:40:04:3e:41:9a:4f:66:55:2d:89:91:f6:59:70: f4:22:c8:00:ca:39:65:20:e2:e1:96:53:c0:3d:e0:01:a1:b0: cc:e7:14:86:90:c0:cb:2f:8d:e1:a5:0b:51:d2:77:5c:19:42: f7:a4:39:64:39:b4:e9:0e:c0:28:b5:5d:a1:88:99:c2:88:e9: 6e:5b:bf:87:52:e5:ae:b8:77:0c:a0:cb:1a:0c:42:17:1c:b4: bd:68:8d:0f:af:6e:90:ae:9f:ce:79:dd:08:98:c5:7f:0c:d3: 32:8b:e8:57:af:95:2e:6c:a0:01:5f:a7:cd:0b:b7:27:8c:fb: fb:ca:d9:39:bb:22:7b:c5:7b:9b:e2:2a:03:fd:50:a9:54:77: cf:b9:0c:cb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjUzNTExMC8GA1UEBRMoRUFENjQ2MzU1RDc1OTM2Q0I5M0VENkJBREI3OTBBODdG RTE1Mzc0QTAeFw0yNDA1MTUwODQzMDdaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NDQ3NTliLTJjNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7hS7e3B2OO0w3axh6962dTUHVZOAR4T+2dAeujFONoXfdHUiNdGuPEaHA3N2r 7548douEwMPue08mPOsmQ51yO368pgPD28bMLYpox8d7bm4PBKZ8DAdva9hz9nw2 kVqnr/62HnrHrkF6Dzo+l4Pgs9M3gSyl2U140flk7S0vYOJvnoln95iwxnAphM+0 t9r5QB6j8Lej2qrRvFYOtu5HRhwjR6RoS38PqMGUENe1yD6+ETfkoUUS9d3wCCFR hCOduhpUPXoeZLOOeOsIKru/ZYp9s/r8Yv4+sYmU/NlkVdtFLkVxm5NFXw9CcXmj V1wlSHf6A84TQI/ZEFlAj6c1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUG/9qQL1B lAOYd61JEEdFG0i5fWswHwYDVR0jBBgwFoAU6tZGNV11k2y5Pta623kKh/4VN0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNTM1LzYxOTgwQTU0QkE2 NjExRUVCQzM5NjI2RUM0RjlBRTAyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4w by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvNnRaR05WMTFrMnk1UHRhNjIza0toXzRWTjBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82MTk4MEE1NEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi9ERDU1NUE5Q0VD M0ExMUVFOENDM0I4MjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA1PlKDANBgkqhkiG9w0BAQsFAAOCAQEATHZOVnkfkJaVULdU H2u7HWNj1LtNuGxzK64kyBDycKCrdbGoYyka2tD/aejYos3hAqokOCEsweShIYij h3pZ94bOl44G8wJVZvivbXpIsY6sKcfLGlXa435b5a10oi9KUW95NSIfZTWjNuTU WlxepUAEPkGaT2ZVLYmR9llw9CLIAMo5ZSDi4ZZTwD3gAaGwzOcUhpDAyy+N4aUL UdJ3XBlC96Q5ZDm06Q7AKLVdoYiZwojpblu/h1Llrrh3DKDLGgxCFxy0vWiND69u kK6fznndCJjFfwzTMovoV6+VLmygAV+nzQu3J4z7+8rZObsie8V7m+IqA/1QqVR3 z7kMyw== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:10 2024 by rpki-client on console-ams.rpki-client.org