$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa File: 52ed4ede-452e-4252-99d4-ab87dca3e810.roa (raw, json) Hash identifier: V6LVLTYcLyYljpoqgQVHZh/0OwnlmdjNWzZiUyj5DTI= Subject key identifier: 9C:F4:55:A8:03:3B:9A:42:B8:7A:AE:C9:B6:21:19:D7:AB:AC:10:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39E9E190AE6F1F75EAFC0E9A62A0D9FD8936E081 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e9:e1:90:ae:6f:1f:75:ea:fc:0e:9a:62:a0:d9:fd:89:36:e0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=62fda838f75a3c4194818589e84018a0d14d99177635e71e710fdcc582d69011, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:9a:76:01:d1:8c:ce:63:84:87:b6:e0:3e: b9:55:39:bc:7f:30:7b:54:4b:36:dc:1b:17:1a:31: 8d:30:a8:75:20:44:8d:9d:bf:1c:65:30:c6:43:87: fb:d6:cd:1b:69:b1:ff:d1:1a:4a:cb:5d:40:f3:0a: a1:57:d7:6a:c7:b8:a8:e5:29:f7:bb:a0:67:f9:e7: e2:1c:e0:6f:0f:d5:5b:f8:80:d7:85:c1:24:2c:92: ea:2b:5c:3d:37:ac:56:62:04:88:29:3e:21:dd:ef: 72:e0:ae:60:84:4f:3a:3b:4c:74:7f:c6:9a:45:a8: 4f:73:3f:e2:4d:5d:e0:65:a5:02:47:da:45:4e:d6: 0b:44:e5:3c:2d:05:55:bd:e5:e3:12:b2:3e:ab:f7: ea:32:71:c7:c5:09:22:5c:f6:86:ae:e6:c2:df:1c: 12:ce:7b:86:a9:8d:ca:20:32:72:d1:ab:c5:d3:28: de:47:39:19:73:48:02:8b:e3:1f:05:af:01:64:25: 7d:11:ad:c7:4a:54:68:d7:b3:5d:d1:11:24:ea:13: 5e:49:00:18:c0:bb:e8:70:d8:14:d3:86:b9:42:e2: 98:fb:66:0f:92:be:b2:cf:2b:c8:1f:09:4f:e5:da: 1f:3c:14:ef:0b:e4:ee:4a:db:5d:7d:1e:b3:fb:35: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F4:55:A8:03:3B:9A:42:B8:7A:AE:C9:B6:21:19:D7:AB:AC:10:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:a000::/40 Signature Algorithm: sha256WithRSAEncryption 21:85:e2:19:38:01:00:93:76:1f:5a:6c:cf:6e:c1:f2:9e:7d: da:05:1f:3a:46:2f:ed:96:74:05:dd:d6:36:40:e1:1d:19:a5: a1:da:20:ca:63:eb:05:3a:d8:34:43:6d:a0:06:9f:82:bc:cf: ec:55:80:d2:7f:6c:86:43:b9:df:af:c5:33:5f:bd:4d:fc:5e: 30:5c:98:35:29:19:ec:b2:dc:18:e0:a6:6b:d1:05:0c:50:e2: 73:08:03:46:02:62:4e:66:bb:c9:d3:51:71:a9:52:79:3c:80: dd:8b:8b:01:a2:9d:dd:1d:c6:75:1d:69:94:19:9e:0e:21:e4: 93:02:41:a7:ec:cb:af:fd:f6:df:83:a7:82:77:b9:b2:de:c7: 79:d2:fa:2f:62:9b:22:dc:ef:7e:44:86:05:31:24:2f:38:e9: 48:87:40:e7:66:5f:bd:bb:3f:11:69:f2:3b:a6:5f:b5:6b:e9: 91:2f:53:e5:4a:0a:d2:4e:7c:6f:af:02:e7:83:d6:f0:12:2b: 13:d0:52:b2:71:b1:0f:33:63:ba:45:ec:8f:e8:4f:73:7c:79: 56:7e:39:cf:15:53:04:6f:38:0e:36:63:66:3f:1a:16:b7:32: ea:e3:41:c5:1e:32:29:4b:63:ea:97:30:6d:e4:a9:82:04:9d: 92:c2:78:4f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOenhkK5vH3Xq/A6aYqDZ/Yk24IEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNANjJmZGE4MzhmNzVhM2M0MTk0ODE4 NTg5ZTg0MDE4YTBkMTRkOTkxNzc2MzVlNzFlNzEwZmRjYzU4MmQ2OTAxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmyadgHRjM5jhIe24D65VTm8fzB7 VEs23BsXGjGNMKh1IESNnb8cZTDGQ4f71s0babH/0RpKy11A8wqhV9dqx7io5Sn3 u6Bn+efiHOBvD9Vb+IDXhcEkLJLqK1w9N6xWYgSIKT4h3e9y4K5ghE86O0x0f8aa RahPcz/iTV3gZaUCR9pFTtYLROU8LQVVveXjErI+q/fqMnHHxQkiXPaGrubC3xwS znuGqY3KIDJy0avF0yjeRzkZc0gCi+MfBa8BZCV9Ea3HSlRo17Nd0REk6hNeSQAY wLvocNgU04a5QuKY+2YPkr6yzyvIHwlP5dofPBTvC+TuSttdfR6z+zVURQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJz0VagDO5pCuHquybYhGderrBDJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyZWQ0ZWRlLTQ1MmUtNDI1Mi05OWQ0LWFiODdkY2EzZTgxMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/qAwDQYJKoZIhvcNAQELBQADggEBACGF4hk4AQCTdh9abM9u wfKefdoFHzpGL+2WdAXd1jZA4R0ZpaHaIMpj6wU62DRDbaAGn4K8z+xVgNJ/bIZD ud+vxTNfvU38XjBcmDUpGeyy3BjgpmvRBQxQ4nMIA0YCYk5mu8nTUXGpUnk8gN2L iwGind0dxnUdaZQZng4h5JMCQafsy6/99t+Dp4J3ubLex3nS+i9imyLc735EhgUx JC846UiHQOdmX727PxFp8jumX7Vr6ZEvU+VKCtJOfG+vAueD1vASKxPQUrJxsQ8z Y7pF7I/oT3N8eVZ+Oc8VUwRvOA42Y2Y/Gha3MurjQcUeMilLY+qXMG3kqYIEnZLC eE8= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:00 2024 by rpki-client on console-ams.rpki-client.org