$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77a9f8d1-509c-4f4d-a248-d84efce8e569.roa File: 77a9f8d1-509c-4f4d-a248-d84efce8e569.roa (raw, json) Hash identifier: CR85qo2FxsmBeBNDENQRsjrHwm4ZQROqYDjyda9n8+Q= Subject key identifier: 0B:2B:6D:41:6B:BE:9E:DB:3B:0D:3A:0D:68:B8:3B:49:FD:41:AB:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 152ECFC85440D52678B057EA7152466A349F5043 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77a9f8d1-509c-4f4d-a248-d84efce8e569.roa Signing time: Fri 31 May 2024 00:00:00 +0000 ROA not before: Fri 31 May 2024 00:00:00 +0000 ROA not after: Fri 05 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2e:cf:c8:54:40:d5:26:78:b0:57:ea:71:52:46:6a:34:9f:50:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:00 2024 GMT Not After : Jul 5 23:59:59 2024 GMT Subject: serialNumber=8b9b01ae6728f14663529913d63c16bbcafc6953b566b5781018ac66c4b934dd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:87:5b:d5:00:51:18:ca:ed:07:9c:92:d5: 19:5a:3c:72:d1:f0:d0:cc:8c:49:e3:2b:1e:9b:ff: 71:f0:b0:81:4b:be:be:d3:dc:ee:52:6e:5f:ad:a0: 6f:50:b7:2c:47:f9:76:89:0a:cc:d8:20:e4:19:97: 76:eb:3a:70:5a:99:a5:f6:89:19:8a:14:2e:6f:11: 84:b5:ac:41:fa:4d:98:6b:21:72:f0:79:be:47:91: db:14:bb:3e:ba:40:d3:5e:ea:c9:97:c7:d5:44:93: 19:1d:f8:9b:b8:43:25:d3:97:a2:b1:48:9e:f7:4f: 8c:ee:8c:c9:27:c2:04:6f:93:d1:70:84:9c:a1:c3: 15:a5:d3:6c:cc:e2:ae:f8:6a:fc:14:74:fd:47:43: 84:7f:69:b4:4c:87:c6:51:00:ad:db:e0:4a:0d:67: da:58:2b:55:c3:cc:19:2a:a4:eb:28:fe:c9:9c:0b: 80:f0:2d:bc:08:12:72:85:f2:9a:df:8c:a9:58:7f: 87:b9:96:44:f2:49:be:5e:f9:dc:c3:43:c8:e2:65: b3:b2:53:df:7c:b3:2b:47:ae:0c:79:18:7a:b6:d9: 58:af:a0:57:d4:6a:1e:0a:1b:ac:bb:90:1b:7c:b5: ad:6a:44:b0:6c:80:48:4e:3b:d4:fc:0e:8f:2d:37: b5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2B:6D:41:6B:BE:9E:DB:3B:0D:3A:0D:68:B8:3B:49:FD:41:AB:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77a9f8d1-509c-4f4d-a248-d84efce8e569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:e000::/40 Signature Algorithm: sha256WithRSAEncryption 2f:02:3d:43:90:22:41:ed:b2:08:80:ea:a8:cf:08:c2:b1:3f: 09:2b:17:0e:dd:69:01:b9:83:ac:82:4d:8b:ec:30:5c:0b:41: 4a:76:03:b7:3a:19:38:c7:e5:8d:51:67:3f:62:85:ed:b2:a5: a8:90:9b:ec:9b:8d:d5:e0:ae:ac:58:a4:65:67:0c:4e:f0:20: 9e:53:de:33:5b:ab:fa:1c:c6:93:ad:af:bf:d7:04:dc:c6:30: 04:ae:99:b0:9d:f7:77:c6:17:ed:7d:79:fb:bf:bd:8e:46:ee: 71:7b:4c:be:05:03:f7:0d:ab:29:7d:44:32:3e:c8:a2:de:d1: dd:2b:60:90:67:9b:15:d4:9a:4f:d5:1e:16:9e:fc:81:a0:e1: a1:74:4d:21:7a:1a:97:9c:73:0b:30:a3:ba:69:39:18:f6:9c: aa:f8:74:1e:da:c3:0b:a9:1d:f9:e1:de:4d:56:35:a7:a1:65: 9d:cc:2a:92:04:b1:df:35:f2:20:58:b2:f2:0d:9f:f7:93:27: 15:40:33:28:4b:f5:51:3e:c3:f7:17:5f:e9:5b:a9:98:9b:84: 9e:00:20:ba:fd:94:61:a8:47:28:8e:be:6b:36:45:8d:7d:00: c1:cd:3c:f2:59:fc:10:9f:a9:ac:d5:ae:a5:e7:2a:0a:ee:23: d0:3b:57:0c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFS7PyFRA1SZ4sFfqcVJGajSfUEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUzMTAwMDAwMFoX DTI0MDcwNTIzNTk1OVowejFJMEcGA1UEBRNAOGI5YjAxYWU2NzI4ZjE0NjYzNTI5 OTEzZDYzYzE2YmJjYWZjNjk1M2I1NjZiNTc4MTAxOGFjNjZjNGI5MzRkZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztKHW9UAURjK7QecktUZWjxy0fDQ zIxJ4ysem/9x8LCBS76+09zuUm5fraBvULcsR/l2iQrM2CDkGZd26zpwWpml9okZ ihQubxGEtaxB+k2YayFy8Hm+R5HbFLs+ukDTXurJl8fVRJMZHfibuEMl05eisUie 90+M7ozJJ8IEb5PRcIScocMVpdNszOKu+Gr8FHT9R0OEf2m0TIfGUQCt2+BKDWfa WCtVw8wZKqTrKP7JnAuA8C28CBJyhfKa34ypWH+HuZZE8km+Xvncw0PI4mWzslPf fLMrR64MeRh6ttlYr6BX1GoeChusu5AbfLWtakSwbIBITjvU/A6PLTe1CwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAsrbUFrvp7bOw06DWi4O0n9QasAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3YTlmOGQxLTUwOWMtNGY0ZC1hMjQ4LWQ4NGVmY2U4ZTU2OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYeAwDQYJKoZIhvcNAQELBQADggEBAC8CPUOQIkHtsgiA6qjP CMKxPwkrFw7daQG5g6yCTYvsMFwLQUp2A7c6GTjH5Y1RZz9ihe2ypaiQm+ybjdXg rqxYpGVnDE7wIJ5T3jNbq/ocxpOtr7/XBNzGMASumbCd93fGF+19efu/vY5G7nF7 TL4FA/cNqyl9RDI+yKLe0d0rYJBnmxXUmk/VHhae/IGg4aF0TSF6Gpeccwswo7pp ORj2nKr4dB7awwupHfnh3k1WNaehZZ3MKpIEsd818iBYsvINn/eTJxVAMyhL9VE+ w/cXX+lbqZibhJ4AILr9lGGoRyiOvms2RY19AMHNPPJZ/BCfqazVrqXnKgruI9A7 Vww= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:42 2024 by rpki-client on console-fra.rpki-client.org