$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8467f581-8659-46c7-bcb8-dcbdbbfed642.roa File: 8467f581-8659-46c7-bcb8-dcbdbbfed642.roa (raw, json) Hash identifier: 8oBh8W/992KTd/BxNyoXIthWqrEHVM5USxA0DA5kdrc= Subject key identifier: 38:7A:33:A6:26:3A:13:BC:52:21:2C:C4:75:CF:C1:C1:26:7E:A2:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B63920B0A04B7EE4588CCD27C2D315CDC06873A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8467f581-8659-46c7-bcb8-dcbdbbfed642.roa Signing time: Sat 25 May 2024 00:00:00 +0000 ROA not before: Sat 25 May 2024 00:00:00 +0000 ROA not after: Sat 29 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:63:92:0b:0a:04:b7:ee:45:88:cc:d2:7c:2d:31:5c:dc:06:87:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 25 00:00:00 2024 GMT Not After : Jun 29 23:59:59 2024 GMT Subject: serialNumber=980a6f6de7734a34ee08655e5b7e4ea2c6d6cee211fb915a2feac068e4f00377, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:0d:f3:4a:5f:29:3b:fe:f8:34:54:67:3c: 88:40:41:ea:8b:6f:b8:1b:94:5f:02:32:fa:bb:0e: a3:6e:3d:64:97:3a:72:94:46:d3:8e:d7:81:41:a8: 97:ef:bb:36:79:a2:87:4d:65:16:94:52:a8:79:13: 62:85:81:e6:1a:a7:f4:95:2b:34:e9:39:71:f6:16: a0:3c:1b:dd:61:3f:b6:44:43:4a:0d:a6:23:df:49: 94:81:4f:78:b6:54:1f:dd:bf:a4:6b:98:82:d5:83: 01:6c:16:45:cc:86:3f:b1:58:05:4f:a8:8d:0b:4b: 0e:02:65:d8:f4:1c:bd:53:37:be:62:8d:10:7f:0c: d4:fd:f2:d8:40:0f:a7:37:64:62:6a:3c:11:1e:12: 09:7f:c0:8a:89:0e:04:82:e8:f2:a9:02:f2:ac:48: c0:40:0c:d0:c1:3b:a2:78:87:7e:76:12:62:e2:73: 9f:1b:18:62:b5:cf:a1:9d:c4:f2:b2:f5:de:64:82: 7e:7a:92:79:fe:38:db:a1:72:63:68:3d:73:7e:76: 1c:c6:ec:98:7f:19:aa:a1:c7:e0:b8:9c:c8:49:28: 09:a3:86:a3:c4:79:83:45:bc:69:04:6a:59:13:a4: b1:27:56:70:ab:b7:e9:92:f6:df:cf:f4:02:69:13: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7A:33:A6:26:3A:13:BC:52:21:2C:C4:75:CF:C1:C1:26:7E:A2:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8467f581-8659-46c7-bcb8-dcbdbbfed642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4800::/40 Signature Algorithm: sha256WithRSAEncryption 05:9b:21:f4:99:65:0d:eb:73:2e:b1:e8:5e:04:9e:6c:20:db: 6c:16:32:54:86:25:fa:1b:f2:c0:eb:ed:d5:5f:99:1e:93:14: 7b:31:1e:c9:b8:ae:42:56:98:f7:5e:74:8a:27:f5:aa:4b:06: 80:67:39:01:d0:a3:62:d6:87:89:67:ed:c5:22:ac:53:51:47: 67:63:d4:fc:33:23:25:c8:bc:5a:2d:f8:7f:e3:cd:bf:68:bf: ce:65:05:74:e5:63:5c:d3:3f:d5:c7:de:46:b2:93:1e:ad:b4: c3:cf:95:f0:ff:24:b9:92:0a:d3:7d:7c:ee:6a:36:78:19:a8: 5a:ef:dc:18:2c:16:52:f7:f8:85:7c:39:b2:b1:87:12:b7:5e: f7:c1:1d:92:4c:ef:3d:2a:67:ed:2e:1c:bb:8d:f5:95:2b:64: 98:91:1d:04:fe:74:50:b7:1b:61:6d:da:96:14:d3:cd:e8:25: 2b:7c:18:47:5c:3f:11:db:a2:3a:9d:c3:b0:fd:82:8e:5b:68: df:75:3e:f3:e5:ca:28:5c:b3:81:73:fc:f8:6a:65:6f:36:74: 5d:09:a0:02:08:6f:86:8c:5f:6f:9a:e0:db:4c:0c:fc:01:83: 40:45:3a:96:4f:fe:00:5a:9d:51:c3:e7:3f:ef:b0:aa:83:bf: b0:40:18:fb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO2OSCwoEt+5FiMzSfC0xXNwGhzowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNTAwMDAwMFoX DTI0MDYyOTIzNTk1OVowejFJMEcGA1UEBRNAOTgwYTZmNmRlNzczNGEzNGVlMDg2 NTVlNWI3ZTRlYTJjNmQ2Y2VlMjExZmI5MTVhMmZlYWMwNjhlNGYwMDM3NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosgN80pfKTv++DRUZzyIQEHqi2+4 G5RfAjL6uw6jbj1klzpylEbTjteBQaiX77s2eaKHTWUWlFKoeRNihYHmGqf0lSs0 6Tlx9hagPBvdYT+2RENKDaYj30mUgU94tlQf3b+ka5iC1YMBbBZFzIY/sVgFT6iN C0sOAmXY9By9Uze+Yo0QfwzU/fLYQA+nN2RiajwRHhIJf8CKiQ4EgujyqQLyrEjA QAzQwTuieId+dhJi4nOfGxhitc+hncTysvXeZIJ+epJ5/jjboXJjaD1zfnYcxuyY fxmqocfguJzISSgJo4ajxHmDRbxpBGpZE6SxJ1Zwq7fpkvbfz/QCaRODKQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDh6M6YmOhO8UiEsxHXPwcEmfqLeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0NjdmNTgxLTg2NTktNDZjNy1iY2I4LWRjYmRiYmZlZDY0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaUgwDQYJKoZIhvcNAQELBQADggEBAAWbIfSZZQ3rcy6x6F4E nmwg22wWMlSGJfob8sDr7dVfmR6TFHsxHsm4rkJWmPdedIon9apLBoBnOQHQo2LW h4ln7cUirFNRR2dj1PwzIyXIvFot+H/jzb9ov85lBXTlY1zTP9XH3kaykx6ttMPP lfD/JLmSCtN9fO5qNngZqFrv3BgsFlL3+IV8ObKxhxK3XvfBHZJM7z0qZ+0uHLuN 9ZUrZJiRHQT+dFC3G2Ft2pYU083oJSt8GEdcPxHbojqdw7D9go5baN91PvPlyihc s4Fz/PhqZW82dF0JoAIIb4aMX2+a4NtMDPwBg0BFOpZP/gBanVHD5z/vsKqDv7BA GPs= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:42 2024 by rpki-client on console-fra.rpki-client.org