$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa File: 02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa (raw, json) Hash identifier: 9UpcEqoPIRbuWDdFFmUrqrZwE42JpsR4IN/4u+utwAQ= Subject key identifier: EC:CC:95:1E:F5:02:8A:A1:A9:F7:E6:EC:60:7B:32:7B:97:A4:F2:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 031F45E11E4262E7A54F57D784B4D148BF831933 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1f:45:e1:1e:42:62:e7:a5:4f:57:d7:84:b4:d1:48:bf:83:19:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=473302728e33dff0198486ffde4382912899fe544b719a39a0389f0e99ab0654, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:78:9c:33:b4:89:e7:20:fd:9f:5f:0b:4a: c2:95:3a:1f:37:f1:25:70:9d:ca:4d:9a:b1:fa:e5: 15:a8:f5:45:92:f4:91:e3:5d:ff:03:15:14:35:64: 97:c9:ec:cf:97:12:14:2d:04:f3:93:d9:98:a7:bf: 5a:8f:1c:a5:2a:02:67:e6:b4:01:aa:b9:b1:76:b9: 23:93:8e:b8:fd:1b:52:da:7c:57:7b:fa:37:13:27: c7:01:55:64:8c:81:f8:e2:1c:7f:20:65:2b:c1:18: c1:b1:88:7e:ee:b3:a1:d9:6e:40:de:ac:e9:88:dd: 1a:4c:45:05:f7:9f:e6:8e:e4:8a:c1:b0:9f:be:f2: a0:d6:83:5d:d8:d7:d1:56:ae:be:3f:5e:89:48:6f: bc:e9:76:23:9c:66:18:01:05:41:0c:62:d2:dc:6b: d1:3f:b2:50:45:e4:fb:ad:87:c7:f0:b0:fd:9d:89: b3:69:ee:0d:90:24:5a:63:74:c8:af:75:f6:5a:5b: 92:59:7f:81:83:ea:ff:f1:d1:bc:3a:42:c6:4c:99: 63:e6:d1:81:ff:7a:42:86:60:e0:ed:b4:7c:66:42: 59:9b:33:3f:e6:a1:44:af:e7:2d:0c:8b:9d:bd:33: b0:8f:0b:99:18:8e:1a:41:fd:77:f1:ae:1a:c0:3e: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CC:95:1E:F5:02:8A:A1:A9:F7:E6:EC:60:7B:32:7B:97:A4:F2:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:2000::/40 Signature Algorithm: sha256WithRSAEncryption 76:e7:45:1c:de:0d:69:f8:7d:c9:b9:f6:39:fb:54:22:53:9f: 70:e1:98:31:24:d2:1c:a5:33:02:69:f8:fc:76:2f:a6:c6:8d: 48:dd:fa:79:c3:ed:39:37:3b:d7:8d:d6:88:6c:35:0f:5a:8f: 46:c0:1d:1f:83:56:5c:5e:ee:b2:3f:98:02:70:40:ea:df:a9: 4d:3d:b5:40:a3:a1:96:35:27:1b:77:3b:82:ef:34:16:3f:c4: 77:2f:6d:ab:38:72:3c:ad:c3:93:ac:ff:af:58:61:46:9a:28: 05:6b:29:a3:5e:88:58:8f:a1:23:f0:cd:32:6f:3a:28:89:03: fd:23:b0:cf:3a:0e:02:f7:03:ff:ee:5e:6b:89:1e:55:0b:31: 2c:99:63:16:4d:c5:5f:a8:c6:9e:e5:a7:4a:cf:2c:91:ed:a7: 57:21:7a:2c:51:57:15:a7:34:5d:69:24:a3:65:c6:49:71:c0: bf:41:9a:75:e4:0b:de:0f:7b:3d:4e:0c:b8:4b:4d:08:e4:40: 17:b3:de:23:e6:ca:18:6b:55:33:6c:dd:3f:e6:1f:70:23:94: b1:94:a1:d6:77:0a:1c:be:60:98:f9:8c:4e:15:2e:91:0b:05: 30:7d:b1:bf:83:6f:b1:3d:35:a1:24:21:0f:7f:0d:27:c1:25: 03:1e:1e:dc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAx9F4R5CYuelT1fXhLTRSL+DGTMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNANDczMzAyNzI4ZTMzZGZmMDE5ODQ4 NmZmZGU0MzgyOTEyODk5ZmU1NDRiNzE5YTM5YTAzODlmMGU5OWFiMDY1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p94nDO0iecg/Z9fC0rClTofN/El cJ3KTZqx+uUVqPVFkvSR413/AxUUNWSXyezPlxIULQTzk9mYp79ajxylKgJn5rQB qrmxdrkjk464/RtS2nxXe/o3EyfHAVVkjIH44hx/IGUrwRjBsYh+7rOh2W5A3qzp iN0aTEUF95/mjuSKwbCfvvKg1oNd2NfRVq6+P16JSG+86XYjnGYYAQVBDGLS3GvR P7JQReT7rYfH8LD9nYmzae4NkCRaY3TIr3X2WluSWX+Bg+r/8dG8OkLGTJlj5tGB /3pChmDg7bR8ZkJZmzM/5qFEr+ctDIudvTOwjwuZGI4aQf138a4awD7n7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOzMlR71Aoqhqffm7GB7MnuXpPIkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyYTUxZTU0LTZiYjUtNDNlNy05NGQwLWE4ZTk1NzcxZjJhMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8SAwDQYJKoZIhvcNAQELBQADggEBAHbnRRzeDWn4fcm59jn7 VCJTn3DhmDEk0hylMwJp+Px2L6bGjUjd+nnD7Tk3O9eN1ohsNQ9aj0bAHR+DVlxe 7rI/mAJwQOrfqU09tUCjoZY1Jxt3O4LvNBY/xHcvbas4cjytw5Os/69YYUaaKAVr KaNeiFiPoSPwzTJvOiiJA/0jsM86DgL3A//uXmuJHlULMSyZYxZNxV+oxp7lp0rP LJHtp1cheixRVxWnNF1pJKNlxklxwL9BmnXkC94Pez1ODLhLTQjkQBez3iPmyhhr VTNs3T/mH3AjlLGUodZ3Chy+YJj5jE4VLpELBTB9sb+Db7E9NaEkIQ9/DSfBJQMe Htw= -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:55 2024 by rpki-client on console-ams.rpki-client.org