$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa File: 00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa (raw, json) Hash identifier: EZjY4fm4rdm3NszRbQcEnVuYMxLk4rTFBvQ75F+9Cz4= Subject key identifier: 0C:9F:4E:03:E4:DD:CA:BE:58:95:83:24:B9:97:5C:88:0A:25:B7:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2AFAE0813AFCEBAF9CE566D7C55E9F8AB84B4AB2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 43.200.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fa:e0:81:3a:fc:eb:af:9c:e5:66:d7:c5:5e:9f:8a:b8:4b:4a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=a767187a15b1c6b9bbe4ced8531a00192bbce326f268e1f5ca79cf1e3a6d11c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:37:81:25:3e:63:76:b5:a5:f0:7f:05:d1: a7:3e:71:a1:9f:6f:5c:ff:ae:7e:7b:bb:38:4d:48: 70:2c:0c:3d:e5:3b:d5:97:6c:64:93:2e:40:05:1a: 22:7b:9f:2b:19:79:b0:d5:f0:cb:b8:5d:ff:a7:9e: 8f:13:12:14:35:1f:63:2d:ad:d0:0c:6d:6a:54:ee: 0d:0a:65:c3:15:4e:f0:e2:48:1b:b9:b3:36:9f:13: ff:5c:9d:3a:1d:c6:37:fd:aa:ea:88:d9:ee:ad:27: 4d:dd:06:64:a6:b2:10:59:19:76:ce:70:ec:4a:60: b1:56:26:cc:57:7e:58:76:67:14:f9:07:99:fe:0d: 4d:9f:e6:e8:d9:94:04:ed:4e:21:d3:36:f2:4d:6b: da:8b:c6:00:b7:9c:4d:d1:e5:ab:27:dc:b6:6e:71: 5f:c1:24:39:45:be:9d:d8:ff:9d:2a:d8:77:3d:a0: 6d:21:25:da:9e:74:74:cc:33:d8:fe:fb:a1:9c:51: c3:f7:c7:a0:af:13:2a:9a:50:52:34:d1:31:d6:39: 89:f0:77:a1:98:74:71:b6:96:3b:a4:04:9f:06:1a: 10:3c:70:71:c8:36:22:2f:98:2b:b0:f6:c0:dc:86: 9a:e7:67:fc:0c:46:50:cd:ec:ce:19:5a:a9:8c:b9: fa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9F:4E:03:E4:DD:CA:BE:58:95:83:24:B9:97:5C:88:0A:25:B7:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 3b:89:f6:5d:50:37:29:31:e3:2d:39:95:39:85:1e:2b:a8:ce: 05:49:b1:d0:e8:90:01:c3:f6:3e:c3:96:ed:5a:08:89:29:89: 36:3e:c2:66:51:72:e5:d4:ae:66:47:bc:58:12:06:40:a6:6b: 7d:6c:01:cf:46:73:3d:8b:18:d5:e7:a9:b9:93:70:26:bf:c6: 9e:0d:ad:dd:a8:44:22:b4:1f:2d:9d:63:d0:e1:15:70:95:a4: 5b:47:79:b7:85:e9:d7:43:22:8c:22:fe:e5:4f:1d:a2:71:bb: a3:b3:28:52:2a:bf:5e:6a:f5:22:7c:3d:23:4e:27:8f:56:e7: 67:e7:94:46:26:b4:c8:a3:ed:2d:13:d4:d8:7f:48:9e:45:10: a9:b2:0e:c5:32:3c:f3:c2:e4:60:4c:ce:91:f5:1b:72:d9:32: b6:84:97:30:38:a0:ec:dd:23:d7:b1:95:79:fc:fd:99:c4:35: d0:30:38:4f:04:1b:c4:99:fd:ee:9b:9b:85:10:38:2b:50:30: e4:ad:64:3d:06:d1:44:df:46:e0:67:c7:28:fd:82:e6:ef:8c: 5c:c3:b3:31:ba:48:a6:e5:d2:5e:81:1b:59:3a:0f:27:59:e6: 01:c4:98:cd:a9:f8:6c:5e:bd:a1:6c:58:ce:fa:d1:e7:54:2f: cf:35:18:07 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUKvrggTr866+c5WbXxV6firhLSrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMzAwMDAwMFoX DTI0MDYwNzIzNTk1OVowejFJMEcGA1UEBRNAYTc2NzE4N2ExNWIxYzZiOWJiZTRj ZWQ4NTMxYTAwMTkyYmJjZTMyNmYyNjhlMWY1Y2E3OWNmMWUzYTZkMTFjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr43gSU+Y3a1pfB/BdGnPnGhn29c /65+e7s4TUhwLAw95TvVl2xkky5ABRoie58rGXmw1fDLuF3/p56PExIUNR9jLa3Q DG1qVO4NCmXDFU7w4kgbubM2nxP/XJ06HcY3/arqiNnurSdN3QZkprIQWRl2znDs SmCxVibMV35YdmcU+QeZ/g1Nn+bo2ZQE7U4h0zbyTWvai8YAt5xN0eWrJ9y2bnFf wSQ5Rb6d2P+dKth3PaBtISXannR0zDPY/vuhnFHD98egrxMqmlBSNNEx1jmJ8Heh mHRxtpY7pASfBhoQPHBxyDYiL5grsPbA3Iaa52f8DEZQzezOGVqpjLn6GwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFAyfTgPk3cq+WJWDJLmXXIgKJbdIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwOTcxY2RhLWY4YTUtNDlhMC1hMWRjLTIyODVjNjhhOGU5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMDK8gwDQYJKoZIhvcNAQELBQADggEBADuJ9l1QNykx4y05lTmFHiuo zgVJsdDokAHD9j7Dlu1aCIkpiTY+wmZRcuXUrmZHvFgSBkCma31sAc9Gcz2LGNXn qbmTcCa/xp4Nrd2oRCK0Hy2dY9DhFXCVpFtHebeF6ddDIowi/uVPHaJxu6OzKFIq v15q9SJ8PSNOJ49W52fnlEYmtMij7S0T1Nh/SJ5FEKmyDsUyPPPC5GBMzpH1G3LZ MraElzA4oOzdI9exlXn8/ZnENdAwOE8EG8SZ/e6bm4UQOCtQMOStZD0G0UTfRuBn xyj9gubvjFzDszG6SKbl0l6BG1k6DydZ5gHEmM2p+GxevaFsWM760edUL881GAc= -----END CERTIFICATE-----Generated at Mon May 6 00:48:33 2024 by rpki-client on console-fra.rpki-client.org