$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/903c59bc-cabc-47eb-8860-bcf9a87d7a72.roa File: 903c59bc-cabc-47eb-8860-bcf9a87d7a72.roa (raw, json) Hash identifier: itqZj3kN5zqtHneshapUGJB3daPUey3UWkgy0w/bxOA= Subject key identifier: 3D:11:83:32:01:99:F7:BB:42:DB:D7:13:30:D8:7E:6A:58:7D:7D:21 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5001C657DD78F2E7089E35FAB4E6438D3B6F64FC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/903c59bc-cabc-47eb-8860-bcf9a87d7a72.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafc:ffa0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:01:c6:57:dd:78:f2:e7:08:9e:35:fa:b4:e6:43:8d:3b:6f:64:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=9e0cb32ed6af51a4d5fb44ae1b43c759bdf09eeda0548422db75ed9a7d578003, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:0c:9c:2b:7d:93:d4:8f:85:ec:fc:da:95: aa:f1:98:1e:a4:d4:e9:db:51:c3:95:92:ba:32:09: 05:15:fa:68:9c:bf:13:e8:27:72:b6:53:46:19:d3: d7:a5:d1:83:75:c8:ee:d0:e9:f2:07:65:0e:40:0d: b0:bf:40:bb:01:f3:a6:bf:a0:3f:f1:65:2f:c3:93: 61:06:6b:41:36:5e:7b:f0:23:71:49:7a:8a:01:00: 7b:0f:f6:a0:cb:ad:76:0a:bf:1c:e8:78:e7:79:d2: 15:0c:0b:4c:0e:ff:f7:58:23:db:85:0d:01:8a:83: 8c:7c:90:9d:a0:a6:33:98:6c:41:b8:cf:c8:29:11: 04:b9:88:a9:5a:62:6e:0b:d3:05:68:38:50:1f:4e: 79:af:2b:25:52:94:83:9e:ab:76:a0:fb:2f:26:19: 58:fd:23:3b:d0:b6:79:c6:c3:0d:56:ce:9c:24:93: ff:41:f7:97:49:cc:a2:c4:27:91:52:e0:b6:f5:a6: 10:4d:fd:29:5e:cd:4c:27:e2:bd:6f:06:d1:68:9a: 21:4f:bc:ba:35:17:25:78:5c:a1:93:10:48:3b:2c: 85:79:c1:d1:fe:ff:1b:ec:9a:a7:e2:6f:b7:45:2b: ee:d7:93:cb:4b:82:ae:9d:cd:09:41:de:8b:c8:41: 55:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:11:83:32:01:99:F7:BB:42:DB:D7:13:30:D8:7E:6A:58:7D:7D:21 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/903c59bc-cabc-47eb-8860-bcf9a87d7a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafc:ffa0::/46 Signature Algorithm: sha256WithRSAEncryption bc:b3:03:d2:8f:e9:a6:8c:6f:20:fb:f6:d9:7a:60:24:77:78: 92:e1:4a:50:32:2d:e1:e9:74:fd:25:c2:0c:79:a0:70:e9:a9: 35:85:72:82:9a:60:96:bc:f8:ed:be:3f:4b:1e:d8:72:ee:b7: a3:3a:0c:4b:3a:35:a3:28:bd:0f:15:dd:a0:b6:5f:5b:ae:5b: 40:4a:c1:dd:ef:bb:57:a8:ae:98:cf:06:22:c9:97:96:6e:69: 46:2c:24:bb:4c:f8:63:e1:5c:32:dd:70:02:26:88:1b:5a:d3: fc:f9:95:d9:01:89:e1:64:01:f2:11:d9:ac:6d:02:51:3b:db: 52:36:eb:57:9b:03:18:14:07:92:af:80:87:5b:a8:9d:a8:a2: 2a:d6:17:c6:be:14:44:4b:4b:26:d0:01:a9:c4:13:b5:da:3f: 4f:57:85:ba:c3:3b:76:1d:dd:31:76:17:c6:48:6a:b1:5b:38: 70:13:f3:d5:aa:02:3c:b6:ee:8a:05:41:a8:4c:ab:a6:cb:bd: 14:ed:89:39:2e:53:ad:a9:97:7b:a8:e4:ca:43:39:f1:73:25: b0:79:1f:b5:f1:79:27:3c:42:ff:a1:b8:9e:ff:ff:e4:89:3e: d7:27:a5:3b:39:93:f2:e5:79:ba:c3:4b:82:f9:11:a0:a1:72: 9e:26:6c:98 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUAHGV9148ucInjX6tOZDjTtvZPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAOWUwY2IzMmVkNmFmNTFhNGQ1ZmI0 NGFlMWI0M2M3NTliZGYwOWVlZGEwNTQ4NDIyZGI3NWVkOWE3ZDU3ODAwMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLkMnCt9k9SPhez82pWq8ZgepNTp 21HDlZK6MgkFFfponL8T6CdytlNGGdPXpdGDdcju0OnyB2UOQA2wv0C7AfOmv6A/ 8WUvw5NhBmtBNl578CNxSXqKAQB7D/agy612Cr8c6HjnedIVDAtMDv/3WCPbhQ0B ioOMfJCdoKYzmGxBuM/IKREEuYipWmJuC9MFaDhQH055ryslUpSDnqt2oPsvJhlY /SM70LZ5xsMNVs6cJJP/QfeXScyixCeRUuC29aYQTf0pXs1MJ+K9bwbRaJohT7y6 NRcleFyhkxBIOyyFecHR/v8b7Jqn4m+3RSvu15PLS4Kunc0JQd6LyEFVnwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD0RgzIBmfe7QtvXEzDYfmpYfX0hMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwM2M1OWJjLWNhYmMtNDdlYi04ODYwLWJjZjlhODdkN2E3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba/P+gMA0GCSqGSIb3DQEBCwUAA4IBAQC8swPSj+mmjG8g+/bZ emAkd3iS4UpQMi3h6XT9JcIMeaBw6ak1hXKCmmCWvPjtvj9LHthy7rejOgxLOjWj KL0PFd2gtl9brltASsHd77tXqK6YzwYiyZeWbmlGLCS7TPhj4Vwy3XACJogbWtP8 +ZXZAYnhZAHyEdmsbQJRO9tSNutXmwMYFAeSr4CHW6idqKIq1hfGvhRES0sm0AGp xBO12j9PV4W6wzt2Hd0xdhfGSGqxWzhwE/PVqgI8tu6KBUGoTKumy70U7Yk5LlOt qZd7qOTKQznxcyWweR+18XknPEL/obie///kiT7XJ6U7OZPy5Xm6w0uC+RGgoXKe JmyY -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:42 2024 by rpki-client on console-fra.rpki-client.org