$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa File: 245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa (raw, json) Hash identifier: 9Mn7b8ETtPdAfdLzFIJIwp2GXan+48Ra0lDBJQDzCwg= Subject key identifier: 31:72:8C:E0:19:0B:E5:9F:70:46:2F:D9:B5:05:29:A3:47:5F:ED:06 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 71A735660E2F39BD53C766BC85078D8F2DB3C30F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa Signing time: Tue 28 May 2024 00:00:00 +0000 ROA not before: Tue 28 May 2024 00:00:00 +0000 ROA not after: Tue 02 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 43.249.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a7:35:66:0e:2f:39:bd:53:c7:66:bc:85:07:8d:8f:2d:b3:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 28 00:00:00 2024 GMT Not After : Jul 2 23:59:59 2024 GMT Subject: serialNumber=4b8d0fbc5fd4fa4ae6441b3ff04eb338789c5871b436b172adcb3c01f414db38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:f0:d6:0f:30:a2:54:ef:60:36:e5:5d:7f: 7b:6d:dc:24:bb:4f:3a:b6:a8:af:9b:30:07:5c:86: 63:81:8c:a8:83:5f:89:44:fa:6a:2c:53:d0:4a:7d: 53:d9:a0:31:64:7a:59:35:90:ac:d3:6a:40:99:eb: 37:8f:df:b2:dc:41:f8:96:3b:b5:44:8b:49:2b:11: 55:d8:87:73:cc:cc:f4:38:0d:32:77:cd:65:ce:0d: 9f:36:15:28:6d:8d:99:f7:f1:06:d2:58:57:42:aa: cf:f0:ac:33:fa:56:4c:b9:e3:8b:d3:c6:d8:c8:4e: 78:27:ef:51:01:19:c4:d4:93:99:8d:12:9e:2f:19: f1:c8:c0:3f:c4:98:4a:34:97:cf:49:2e:ed:89:8c: bd:b4:4d:0c:89:70:19:47:18:fb:aa:27:54:be:2a: 97:fe:28:39:4f:4d:c7:31:9d:a3:bc:2f:d1:5b:e6: 60:b1:3c:a8:3e:1f:f0:2a:3f:63:9f:df:1d:55:aa: 40:a8:48:8a:de:98:b6:94:d0:5d:65:46:7a:a0:69: 81:0c:a7:99:5b:d7:f1:f0:2b:be:53:21:28:52:0a: 40:b0:91:07:1c:f8:70:da:42:b6:c5:2e:73:21:a5: 78:ed:c6:cb:7f:3e:3a:f2:1b:35:ae:31:b2:4c:bd: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:72:8C:E0:19:0B:E5:9F:70:46:2F:D9:B5:05:29:A3:47:5F:ED:06 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.44.0/22 Signature Algorithm: sha256WithRSAEncryption 21:4e:11:f5:05:90:50:93:f1:65:ab:98:a6:d4:6c:9a:96:77: 06:fb:bc:82:2a:63:00:14:a0:ad:9c:70:ea:6f:d1:31:86:1b: f4:a1:95:e7:60:cd:ca:30:79:7a:1c:e3:48:9e:b8:0b:4f:0e: ff:2d:56:ab:e9:a9:87:2e:82:34:b7:1f:84:31:54:3b:18:77: 26:1e:d1:e6:6f:6c:d0:4c:4f:69:14:20:80:4a:a8:64:85:52: 76:c4:c0:43:cc:37:ca:ed:98:cd:d3:97:5a:e1:c1:b7:a4:4c: 4b:3d:fd:e6:de:d7:7e:5f:45:55:12:d6:81:92:20:e8:5c:ee: 65:16:97:d0:a2:62:2e:d4:a7:be:26:44:22:ca:87:34:95:1a: de:67:f7:ac:07:95:a3:f5:46:00:dd:45:80:08:82:f9:84:d1: 04:e7:b6:ab:56:23:1b:ef:c7:10:80:ea:5a:35:54:bf:f1:2d: a0:7c:65:10:1a:89:b0:93:39:c5:76:32:99:28:fa:66:ea:34: f9:0c:d5:e7:fe:a8:d6:9f:28:9f:5a:8b:c2:c7:e3:e6:bc:45: 7a:75:13:81:7d:61:6c:40:3e:26:66:de:f7:18:68:12:6b:ec: 9d:01:3d:61:91:0f:55:8f:3c:a5:d1:91:dc:db:34:2a:1a:e1: 0e:a4:f2:7b -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcac1Zg4vOb1Tx2a8hQeNjy2zww8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyODAwMDAwMFoX DTI0MDcwMjIzNTk1OVowejFJMEcGA1UEBRNANGI4ZDBmYmM1ZmQ0ZmE0YWU2NDQx YjNmZjA0ZWIzMzg3ODljNTg3MWI0MzZiMTcyYWRjYjNjMDFmNDE0ZGIzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pXw1g8wolTvYDblXX97bdwku086 tqivmzAHXIZjgYyog1+JRPpqLFPQSn1T2aAxZHpZNZCs02pAmes3j9+y3EH4lju1 RItJKxFV2IdzzMz0OA0yd81lzg2fNhUobY2Z9/EG0lhXQqrP8Kwz+lZMueOL08bY yE54J+9RARnE1JOZjRKeLxnxyMA/xJhKNJfPSS7tiYy9tE0MiXAZRxj7qidUviqX /ig5T03HMZ2jvC/RW+ZgsTyoPh/wKj9jn98dVapAqEiK3pi2lNBdZUZ6oGmBDKeZ W9fx8Cu+UyEoUgpAsJEHHPhw2kK2xS5zIaV47cbLfz468hs1rjGyTL3EqwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDFyjOAZC+WfcEYv2bUFKaNHX+0GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NWE2NWJiLTU5MWMtNDdiYy04YThjLTZjODZiMDkzZmQ4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/ksMA0GCSqGSIb3DQEBCwUAA4IBAQAhThH1BZBQk/Flq5im1Gya lncG+7yCKmMAFKCtnHDqb9Exhhv0oZXnYM3KMHl6HONInrgLTw7/LVar6amHLoI0 tx+EMVQ7GHcmHtHmb2zQTE9pFCCASqhkhVJ2xMBDzDfK7ZjN05da4cG3pExLPf3m 3td+X0VVEtaBkiDoXO5lFpfQomIu1Ke+JkQiyoc0lRreZ/esB5Wj9UYA3UWACIL5 hNEE57arViMb78cQgOpaNVS/8S2gfGUQGomwkznFdjKZKPpm6jT5DNXn/qjWnyif WovCx+PmvEV6dROBfWFsQD4mZt73GGgSa+ydAT1hkQ9Vjzyl0ZHc2zQqGuEOpPJ7 -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:00 2024 by rpki-client on console-ams.rpki-client.org