$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa File: 485da602-98f5-4e2b-890f-c254a3071aeb.roa (raw, json) Hash identifier: YRZd/Ygwl3sBwJzfUlJCuHCbcfiFYrMCjqp6jW4bIAk= Subject key identifier: AB:82:7E:94:AB:37:FA:12:48:AE:BA:F4:6A:32:41:80:B4:4C:FF:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 178F9F41F8FE8C3CEF53DB2DC661FA5824599859 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa Signing time: Mon 20 May 2024 00:00:00 +0000 ROA not before: Mon 20 May 2024 00:00:00 +0000 ROA not after: Mon 24 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8f:9f:41:f8:fe:8c:3c:ef:53:db:2d:c6:61:fa:58:24:59:98:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 20 00:00:00 2024 GMT Not After : Jun 24 23:59:59 2024 GMT Subject: serialNumber=f5e2ddacd4e56499f9fe43f97116d2bde2ac1c2a9aaaf2f8ef847e44c3e5e799, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:9d:2c:b5:ca:82:c3:49:e1:c3:e0:43:08: aa:72:a9:ef:8f:16:5d:cc:b7:fa:9d:af:02:e7:4a: 68:13:f3:46:7a:b8:59:4d:61:55:c1:fc:c2:4b:6c: 60:fd:5d:ea:1e:7f:7c:07:4b:7d:56:e1:e0:0a:b4: 87:82:53:aa:dc:76:87:e1:8f:94:f0:a4:f6:fa:a3: 24:6c:13:fc:93:5f:58:ad:00:3c:b2:5e:c2:9b:3c: 0d:08:08:bb:44:01:30:de:59:3d:79:55:84:9f:c2: 27:30:65:93:b0:52:34:62:2b:b2:66:01:2a:8d:0b: 4a:db:99:4e:f2:6e:fe:52:59:eb:93:97:9a:53:bb: 9f:ad:56:bd:13:f8:11:30:8a:71:c6:1c:13:7a:b7: e9:09:d7:50:f9:ee:52:ae:a0:ef:28:7e:ec:86:48: 72:62:38:d9:cc:a7:34:9f:90:4b:7c:56:76:80:b2: 8c:ed:cb:5f:3a:b2:2d:a7:ed:bf:ff:83:b8:df:01: 94:2b:50:9e:39:9a:13:b7:d8:7b:b1:53:18:ea:b4: 5e:eb:da:89:9d:c2:62:00:f5:92:a1:80:6a:4a:8b: 49:57:68:7d:39:3f:b9:7f:f9:4e:7e:9c:34:01:10: 46:3c:15:f5:42:4b:4a:8f:fa:7f:f9:41:f0:a6:12: f6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:7E:94:AB:37:FA:12:48:AE:BA:F4:6A:32:41:80:B4:4C:FF:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/485da602-98f5-4e2b-890f-c254a3071aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a::/36 Signature Algorithm: sha256WithRSAEncryption 15:fa:79:02:a7:39:0b:c1:20:67:b7:f5:e0:e4:4d:b7:8c:d1: fe:45:08:f5:e6:7f:3a:b2:6c:7e:32:45:b3:ee:bc:92:6a:b7: ee:7c:64:c0:ab:65:0a:b1:0f:04:97:e8:6c:d6:77:7f:27:84: 5a:19:0a:95:55:6e:53:1a:6e:5c:34:5f:c4:23:0e:e5:ae:d1: 3d:ca:d5:26:5c:dc:73:d5:0e:95:28:bd:97:96:7d:e5:22:d2: a5:a2:6c:ad:de:99:a1:bf:e2:fe:ae:37:c9:b1:d5:f2:8f:a5: 6b:ac:02:cd:53:b3:8d:7b:16:ad:49:ea:1d:30:16:f6:83:9c: 62:06:32:36:82:6c:7c:13:10:65:96:af:68:27:24:f5:3d:cb: 62:d4:75:84:da:93:92:57:6a:53:62:f9:a2:c8:1d:52:9b:a2: e5:bd:69:b1:ab:31:07:e1:29:89:68:86:ec:5b:f3:9e:29:e3: ed:de:fc:e0:cf:ab:97:22:a9:86:05:89:a4:b4:3c:a1:7c:18: 37:0f:51:2c:9f:ad:94:1f:ec:f7:40:b0:e9:ae:0e:47:29:b4: 34:07:c0:32:12:9b:bf:19:ee:aa:d2:6e:fb:45:3c:0d:0e:85: 7c:34:29:d0:14:e8:01:be:78:16:c7:55:1b:b3:40:b7:4d:e0: 90:39:15:8a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF4+fQfj+jDzvU9stxmH6WCRZmFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyMDAwMDAwMFoX DTI0MDYyNDIzNTk1OVowejFJMEcGA1UEBRNAZjVlMmRkYWNkNGU1NjQ5OWY5ZmU0 M2Y5NzExNmQyYmRlMmFjMWMyYTlhYWFmMmY4ZWY4NDdlNDRjM2U1ZTc5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIidLLXKgsNJ4cPgQwiqcqnvjxZd zLf6na8C50poE/NGerhZTWFVwfzCS2xg/V3qHn98B0t9VuHgCrSHglOq3HaH4Y+U 8KT2+qMkbBP8k19YrQA8sl7CmzwNCAi7RAEw3lk9eVWEn8InMGWTsFI0YiuyZgEq jQtK25lO8m7+Ulnrk5eaU7ufrVa9E/gRMIpxxhwTerfpCddQ+e5SrqDvKH7shkhy YjjZzKc0n5BLfFZ2gLKM7ctfOrItp+2//4O43wGUK1CeOZoTt9h7sVMY6rRe69qJ ncJiAPWSoYBqSotJV2h9OT+5f/lOfpw0ARBGPBX1QktKj/p/+UHwphL2WQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKuCfpSrN/oSSK669GoyQYC0TP9zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ4NWRhNjAyLTk4ZjUtNGUyYi04OTBmLWMyNTRhMzA3MWFlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKgAwDQYJKoZIhvcNAQELBQADggEBABX6eQKnOQvBIGe39eDk TbeM0f5FCPXmfzqybH4yRbPuvJJqt+58ZMCrZQqxDwSX6GzWd38nhFoZCpVVblMa blw0X8QjDuWu0T3K1SZc3HPVDpUovZeWfeUi0qWibK3emaG/4v6uN8mx1fKPpWus As1Ts417Fq1J6h0wFvaDnGIGMjaCbHwTEGWWr2gnJPU9y2LUdYTak5JXalNi+aLI HVKbouW9abGrMQfhKYlohuxb854p4+3e/ODPq5ciqYYFiaS0PKF8GDcPUSyfrZQf 7PdAsOmuDkcptDQHwDISm78Z7qrSbvtFPA0OhXw0KdAU6AG+eBbHVRuzQLdN4JA5 FYo= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:00 2024 by rpki-client on console-ams.rpki-client.org