$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa File: 156a801c-a48c-4b4a-9ec7-341721d78915.roa (raw, json) Hash identifier: QtnOoYDRYDOA+VJN7F2UG0z8StzjLrL5Y6sfXbNUugU= Subject key identifier: 69:38:21:D7:4E:DB:A8:94:6C:91:E3:72:AB:49:AA:AF:BB:EF:9F:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2490A8A6E80D50F696555148B939B471FC6BF219 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:90:a8:a6:e8:0d:50:f6:96:55:51:48:b9:39:b4:71:fc:6b:f2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=381050feeb2e78a55a5925fb0215ac7b8c5ca245f6dd116b5ba74299503c77b9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:d8:8d:39:fa:cf:f7:25:7a:c3:13:d9:02: c7:e0:8a:73:d9:60:09:de:09:2d:e4:13:dd:3b:5d: 5c:27:40:27:0a:71:e4:6a:71:1f:55:d2:27:ad:d4: 49:94:79:88:32:98:87:f1:64:34:46:82:fd:36:62: a0:44:dd:06:12:87:81:97:a2:d1:5a:0b:bc:b1:77: b1:ac:ca:94:d1:16:64:90:b7:49:96:f8:f8:ae:61: eb:22:da:5d:67:48:e8:9d:c6:48:33:9c:01:bb:bb: 82:71:dd:4a:29:ae:7c:0a:20:0d:7e:96:9d:af:61: fa:97:59:56:91:03:0f:65:a6:78:30:12:a3:a7:de: 48:da:a7:f6:de:40:58:62:d3:e4:19:7c:3f:c6:4a: 5c:b7:bf:d7:34:49:e5:ff:a3:c6:b0:3b:53:00:1c: a5:d3:87:2f:a3:32:7e:b5:31:ac:d0:41:10:c1:d9: 4d:60:b4:52:01:d9:8b:00:2c:ce:86:19:1f:54:dd: 2d:e3:5f:9b:27:25:7b:74:d8:b3:a8:fd:51:11:2c: 31:4e:31:52:c6:9c:a6:1a:d2:f9:99:17:77:6e:4b: 92:48:00:f3:e6:75:2d:bf:a1:e5:75:80:3f:fe:26: 23:53:6d:c5:38:9b:b4:52:d4:15:3a:23:9a:e1:a4: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:38:21:D7:4E:DB:A8:94:6C:91:E3:72:AB:49:AA:AF:BB:EF:9F:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:6000::/40 Signature Algorithm: sha256WithRSAEncryption 3e:0d:68:ba:20:07:b5:74:ee:59:aa:6b:65:3d:99:8b:65:50: 44:75:04:5e:4e:d5:61:9c:0f:60:30:40:18:da:e7:44:b6:8a: e0:c7:ac:5b:5e:09:89:c6:6d:45:73:1f:80:c3:36:e4:2f:66: 6b:05:01:4b:be:4d:82:1d:2b:9d:2f:41:7c:90:ba:fc:4b:12: 15:d1:7e:8e:35:13:25:27:06:17:eb:7b:7e:85:64:ef:49:c3: 22:65:a0:97:9d:84:e3:e2:55:03:15:a7:3b:3c:2c:08:d1:06: a8:dd:cc:00:14:37:3d:17:5a:cf:20:c8:e7:38:f1:2a:42:9d: ab:c9:fb:72:1e:a6:a0:d2:82:3a:e4:b4:36:b5:2f:e4:af:93: 2b:28:1d:d2:2e:e5:e2:8c:2c:fd:91:8d:56:c5:cf:49:71:6a: f4:96:14:3d:a6:ff:a5:16:62:62:04:bc:b8:59:65:0f:41:04: 84:87:3a:8e:2f:09:33:fe:c8:23:ec:04:94:12:9d:a4:89:a7: 12:4d:88:53:c4:70:6d:25:c3:18:87:84:a7:d2:b6:47:73:0e: f8:1d:bb:5f:fe:f5:bf:de:14:c7:08:c5:14:3d:27:f2:b4:75: 1a:68:1a:65:ab:48:da:a8:b6:1b:84:85:33:39:27:f5:2e:4c: 0b:f2:a9:b5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJJCopugNUPaWVVFIuTm0cfxr8hkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAMzgxMDUwZmVlYjJlNzhhNTVhNTky NWZiMDIxNWFjN2I4YzVjYTI0NWY2ZGQxMTZiNWJhNzQyOTk1MDNjNzdiOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHnYjTn6z/clesMT2QLH4Ipz2WAJ 3gkt5BPdO11cJ0AnCnHkanEfVdInrdRJlHmIMpiH8WQ0RoL9NmKgRN0GEoeBl6LR Wgu8sXexrMqU0RZkkLdJlvj4rmHrItpdZ0joncZIM5wBu7uCcd1KKa58CiANfpad r2H6l1lWkQMPZaZ4MBKjp95I2qf23kBYYtPkGXw/xkpct7/XNEnl/6PGsDtTAByl 04cvozJ+tTGs0EEQwdlNYLRSAdmLACzOhhkfVN0t41+bJyV7dNizqP1RESwxTjFS xpymGtL5mRd3bkuSSADz5nUtv6HldYA//iYjU23FOJu0UtQVOiOa4aRh9QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGk4IddO26iUbJHjcqtJqq+775/TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NmE4MDFjLWE0OGMtNGI0YS05ZWM3LTM0MTcyMWQ3ODkxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaWAwDQYJKoZIhvcNAQELBQADggEBAD4NaLogB7V07lmqa2U9 mYtlUER1BF5O1WGcD2AwQBja50S2iuDHrFteCYnGbUVzH4DDNuQvZmsFAUu+TYId K50vQXyQuvxLEhXRfo41EyUnBhfre36FZO9JwyJloJedhOPiVQMVpzs8LAjRBqjd zAAUNz0XWs8gyOc48SpCnavJ+3IepqDSgjrktDa1L+SvkysoHdIu5eKMLP2RjVbF z0lxavSWFD2m/6UWYmIEvLhZZQ9BBISHOo4vCTP+yCPsBJQSnaSJpxJNiFPEcG0l wxiHhKfStkdzDvgdu1/+9b/eFMcIxRQ9J/K0dRpoGmWrSNqothuEhTM5J/UuTAvy qbU= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:41 2024 by rpki-client on console-fra.rpki-client.org