$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49a679dd-b6ba-4b54-beeb-b3e83302b998.roa File: 49a679dd-b6ba-4b54-beeb-b3e83302b998.roa (raw, json) Hash identifier: alblgoMqieFKR9nyXDvBI5OXOElfDd+AXmxsGYKNHAI= Subject key identifier: 14:99:5B:22:B3:84:9F:71:28:DC:8D:C0:16:FB:E3:D6:5A:BE:EC:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40680F4CF09F63C7B3AF1A16FE17410DAB753894 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49a679dd-b6ba-4b54-beeb-b3e83302b998.roa Signing time: Fri 31 May 2024 00:00:00 +0000 ROA not before: Fri 31 May 2024 00:00:00 +0000 ROA not after: Fri 05 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:68:0f:4c:f0:9f:63:c7:b3:af:1a:16:fe:17:41:0d:ab:75:38:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:00 2024 GMT Not After : Jul 5 23:59:59 2024 GMT Subject: serialNumber=e6ec6797d075441d808126b85adca8d30f084d32780992f7a20d70190792bc3c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:2b:a5:74:b4:3d:2a:9a:98:a2:1a:b3:85: 1e:8a:c2:a1:5b:cf:34:38:1e:68:b9:db:68:3a:1c: 7b:fd:ce:1f:9d:fe:21:07:57:15:7e:f2:c4:7c:ca: 14:63:7b:60:2e:27:f0:aa:5a:aa:59:bf:13:1e:c9: 2e:09:25:94:7e:be:8f:b8:98:ec:47:69:83:32:05: 5f:ca:fc:bf:2d:50:da:a4:28:99:5d:02:f5:61:dd: a3:69:29:c9:d3:83:71:82:7e:5e:c7:f1:24:37:db: 7e:97:89:80:b1:58:a4:d0:92:d6:a6:0f:00:41:5e: ae:1a:02:05:38:3d:ea:46:d0:2f:39:e8:ba:e9:cc: 88:c8:ec:c5:17:fe:d6:4a:20:74:c5:c5:66:88:a4: 76:72:6d:0d:df:a7:e2:db:0a:6b:93:18:93:1e:0e: 3d:ef:92:d8:fb:19:89:d1:3e:71:1a:4f:29:d3:62: 2a:bd:89:66:2e:6e:26:34:16:3c:2d:ee:de:34:94: 78:f6:e4:d5:83:73:0d:cb:a7:ed:ae:7f:e7:88:3c: 48:df:53:f4:62:8d:ce:1e:53:81:a0:a5:d9:7e:06: e6:89:3f:71:c0:68:58:67:4e:00:85:c4:40:cc:25: 05:cf:bd:ed:2c:de:17:b5:8c:5e:ca:04:56:8a:0b: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:99:5B:22:B3:84:9F:71:28:DC:8D:C0:16:FB:E3:D6:5A:BE:EC:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49a679dd-b6ba-4b54-beeb-b3e83302b998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:800::/40 Signature Algorithm: sha256WithRSAEncryption 7d:30:82:26:72:5a:d3:fc:8f:db:b0:95:1d:f1:ff:74:fe:26: 0e:03:e3:ab:24:38:ee:ee:c9:0f:a1:89:ce:c4:cf:9d:44:fb: df:84:ff:5a:12:1a:02:1b:b4:c5:b1:b2:69:5a:df:4e:7d:a6: 55:a0:e5:46:e7:2d:ef:ba:38:9d:c6:12:9d:78:a6:35:13:ba: 12:2b:67:75:38:45:35:2e:5c:25:96:cd:ae:57:04:1a:a8:76: 47:43:dd:d4:57:46:a5:a1:74:05:23:3f:d6:3b:26:4d:17:1f: 01:2a:35:df:0e:fe:91:42:e5:99:94:be:cd:ab:d3:55:cb:73: e8:84:e9:c6:53:e1:ea:6b:9d:ef:b7:5b:24:bd:55:88:32:80: 3c:49:03:cc:ef:bf:06:f1:9e:74:7f:ca:05:68:f9:b3:02:9e: fb:32:46:ff:d1:ca:dc:d8:17:9f:da:50:9e:b9:a6:2f:37:b6: b7:f9:0a:17:61:02:db:02:24:ac:44:b4:eb:49:d0:d2:3e:00: 9f:69:d8:fc:4f:94:76:81:0d:66:52:ee:33:6b:a0:a3:76:85: 8b:b2:54:c9:76:89:48:31:81:b0:f2:71:bd:a4:16:0d:a6:7e: fd:ab:5c:53:87:75:1c:3f:fa:d4:b7:cc:e2:ca:3b:64:15:91: 7e:50:c0:1d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQGgPTPCfY8ezrxoW/hdBDat1OJQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUzMTAwMDAwMFoX DTI0MDcwNTIzNTk1OVowejFJMEcGA1UEBRNAZTZlYzY3OTdkMDc1NDQxZDgwODEy NmI4NWFkY2E4ZDMwZjA4NGQzMjc4MDk5MmY3YTIwZDcwMTkwNzkyYmMzYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02YrpXS0PSqamKIas4UeisKhW880 OB5oudtoOhx7/c4fnf4hB1cVfvLEfMoUY3tgLifwqlqqWb8THskuCSWUfr6PuJjs R2mDMgVfyvy/LVDapCiZXQL1Yd2jaSnJ04Nxgn5ex/EkN9t+l4mAsVik0JLWpg8A QV6uGgIFOD3qRtAvOei66cyIyOzFF/7WSiB0xcVmiKR2cm0N36fi2wprkxiTHg49 75LY+xmJ0T5xGk8p02IqvYlmLm4mNBY8Le7eNJR49uTVg3MNy6ftrn/niDxI31P0 Yo3OHlOBoKXZfgbmiT9xwGhYZ04AhcRAzCUFz73tLN4XtYxeygRWigvv7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBSZWyKzhJ9xKNyNwBb749ZavuyiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5YTY3OWRkLWI2YmEtNGI1NC1iZWViLWIzZTgzMzAyYjk5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8QgwDQYJKoZIhvcNAQELBQADggEBAH0wgiZyWtP8j9uwlR3x /3T+Jg4D46skOO7uyQ+hic7Ez51E+9+E/1oSGgIbtMWxsmla3059plWg5UbnLe+6 OJ3GEp14pjUTuhIrZ3U4RTUuXCWWza5XBBqodkdD3dRXRqWhdAUjP9Y7Jk0XHwEq Nd8O/pFC5ZmUvs2r01XLc+iE6cZT4eprne+3WyS9VYgygDxJA8zvvwbxnnR/ygVo +bMCnvsyRv/RytzYF5/aUJ65pi83trf5ChdhAtsCJKxEtOtJ0NI+AJ9p2PxPlHaB DWZS7jNroKN2hYuyVMl2iUgxgbDycb2kFg2mfv2rXFOHdRw/+tS3zOLKO2QVkX5Q wB0= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:41 2024 by rpki-client on console-fra.rpki-client.org