$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0edb47a4-e59a-40a8-8e61-744230716a79.roa File: 0edb47a4-e59a-40a8-8e61-744230716a79.roa (raw, json) Hash identifier: UGF4igtvUJoyMVsEPSfaODR7HujDi1zY2lcFjVa26gk= Subject key identifier: 74:2A:9D:AD:10:97:BB:58:BD:1B:AF:63:C5:7E:AA:5D:0A:8D:0D:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CCDE6E95C85769FEBE84FA5FE27A767867F7A3C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0edb47a4-e59a-40a8-8e61-744230716a79.roa Signing time: Wed 29 May 2024 00:00:00 +0000 ROA not before: Wed 29 May 2024 00:00:00 +0000 ROA not after: Wed 03 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cd:e6:e9:5c:85:76:9f:eb:e8:4f:a5:fe:27:a7:67:86:7f:7a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 29 00:00:00 2024 GMT Not After : Jul 3 23:59:59 2024 GMT Subject: serialNumber=4e0c3627c9113d1e00d0041e80faade4cccc675cc5b4d0fef3ec3ca162704695, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:98:c5:d0:42:e1:07:07:f6:1a:31:36:03: 6f:63:b7:6f:11:69:b7:d4:ce:c8:67:10:b6:54:59: 3c:78:a3:df:0f:65:0f:36:8e:81:f3:ac:92:36:c7: 0c:6d:be:a4:9f:c9:be:86:11:ed:ee:ab:b8:69:17: dc:6a:1b:75:21:57:f4:36:86:cf:bd:b4:10:72:28: 45:0f:df:d6:e0:f4:47:f2:b5:22:4a:57:28:82:b0: a7:28:b5:84:31:11:a1:db:8a:b2:b5:ba:4e:1e:ae: 3f:55:39:6e:3a:ae:4c:63:2a:92:c3:18:89:21:64: d6:88:eb:4d:7d:58:f2:ce:a5:e9:4b:76:d2:77:8f: a9:df:6f:27:cd:fb:89:cc:07:6a:c6:24:5f:33:e9: 7f:55:1d:88:f8:27:da:4e:a0:df:07:c8:c8:be:b9: 91:f1:c0:5a:aa:ba:21:5e:53:a5:fc:a6:1e:d8:c7: 75:8b:23:de:4d:57:41:e8:77:b1:ed:7f:cb:9e:4f: 13:00:38:a2:63:5a:e8:7a:98:6d:b4:32:85:19:20: 24:b9:05:53:08:3e:8b:ac:91:7f:74:95:9f:a5:f3: be:14:9e:22:48:11:50:44:6e:bd:08:1e:47:63:b4: ce:60:70:96:32:7e:e2:b4:e3:51:fe:12:3a:87:4d: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2A:9D:AD:10:97:BB:58:BD:1B:AF:63:C5:7E:AA:5D:0A:8D:0D:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0edb47a4-e59a-40a8-8e61-744230716a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:800::/40 Signature Algorithm: sha256WithRSAEncryption 7c:67:39:41:5b:87:89:c1:19:bf:d7:80:18:20:58:94:b6:be: 7b:4e:18:03:a1:3e:04:8d:e1:a9:ed:7a:b3:d2:4d:6c:12:ba: b5:39:7c:6b:c1:a3:59:a1:b9:57:d2:8f:cf:56:2c:b4:97:42: b7:f4:d6:b9:e3:2d:9b:13:9e:67:4a:ab:2f:d9:4b:a4:b5:d1: 51:c2:30:98:87:15:dc:a2:68:ba:a0:77:74:cb:be:b4:f6:2a: fd:25:e8:77:be:34:74:4f:28:ad:02:ae:0d:07:b4:31:1d:fb: cd:96:39:21:8c:e5:75:62:93:87:31:a5:74:44:e5:16:72:47: 23:ff:b1:9a:26:2a:8a:dc:60:e2:34:26:d7:60:72:bf:33:46: 51:a2:fb:e5:12:c7:f6:0e:24:a9:66:4f:31:f2:97:75:37:ee: 5b:02:03:87:93:d9:43:bc:ea:3f:10:c7:d2:b4:12:7d:70:e3: 7d:f5:a5:2c:57:e1:ce:63:fa:a1:09:02:6b:20:9f:6c:bf:d8: 0a:fb:d9:73:89:de:47:c9:2b:16:12:1b:b3:d6:49:85:29:07: 1c:5b:4c:be:10:ee:c0:45:19:50:a5:17:ac:71:93:7c:6b:35: 5a:ff:70:eb:ac:94:57:49:c4:d2:6c:22:4e:fd:9e:dd:d3:06: 08:a4:57:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDM3m6VyFdp/r6E+l/ienZ4Z/ejwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyOTAwMDAwMFoX DTI0MDcwMzIzNTk1OVowejFJMEcGA1UEBRNANGUwYzM2MjdjOTExM2QxZTAwZDAw NDFlODBmYWFkZTRjY2NjNjc1Y2M1YjRkMGZlZjNlYzNjYTE2MjcwNDY5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDaYxdBC4QcH9hoxNgNvY7dvEWm3 1M7IZxC2VFk8eKPfD2UPNo6B86ySNscMbb6kn8m+hhHt7qu4aRfcaht1IVf0NobP vbQQcihFD9/W4PRH8rUiSlcogrCnKLWEMRGh24qytbpOHq4/VTluOq5MYyqSwxiJ IWTWiOtNfVjyzqXpS3bSd4+p328nzfuJzAdqxiRfM+l/VR2I+CfaTqDfB8jIvrmR 8cBaqrohXlOl/KYe2Md1iyPeTVdB6Hex7X/Lnk8TADiiY1roephttDKFGSAkuQVT CD6LrJF/dJWfpfO+FJ4iSBFQRG69CB5HY7TOYHCWMn7itONR/hI6h02EOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHQqna0Ql7tYvRuvY8V+ql0KjQ3LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlZGI0N2E0LWU1OWEtNDBhOC04ZTYxLTc0NDIzMDcxNmE3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAAgwDQYJKoZIhvcNAQELBQADggEBAHxnOUFbh4nBGb/XgBgg WJS2vntOGAOhPgSN4anterPSTWwSurU5fGvBo1mhuVfSj89WLLSXQrf01rnjLZsT nmdKqy/ZS6S10VHCMJiHFdyiaLqgd3TLvrT2Kv0l6He+NHRPKK0Crg0HtDEd+82W OSGM5XVik4cxpXRE5RZyRyP/sZomKorcYOI0Jtdgcr8zRlGi++USx/YOJKlmTzHy l3U37lsCA4eT2UO86j8Qx9K0En1w4331pSxX4c5j+qEJAmsgn2y/2Ar72XOJ3kfJ KxYSG7PWSYUpBxxbTL4Q7sBFGVClF6xxk3xrNVr/cOuslFdJxNJsIk79nt3TBgik VyM= -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:59 2024 by rpki-client on console-ams.rpki-client.org