$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa File: 96128b18-ab6a-4022-b474-5230bdada633.roa (raw, json) Hash identifier: EHBCdVU9l0joYahLCnNtd1AQibFnWJgSvQdRJYTaYog= Subject key identifier: 68:D3:3F:3B:D9:E6:81:E7:E7:87:A7:44:45:4B:8F:58:E2:03:EE:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3329B06D596D5EF594730A1458E4EB04A4C16A82 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa Signing time: Wed 29 May 2024 00:00:00 +0000 ROA not before: Wed 29 May 2024 00:00:00 +0000 ROA not after: Wed 03 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:29:b0:6d:59:6d:5e:f5:94:73:0a:14:58:e4:eb:04:a4:c1:6a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 29 00:00:00 2024 GMT Not After : Jul 3 23:59:59 2024 GMT Subject: serialNumber=6fc262e408e87816613bf0d42d4b417ce14ebd3548c27800a860126566f50838, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:94:fa:b2:d8:0e:3e:a9:63:e1:8e:4b:b8:2d: 72:ee:8d:3a:41:12:64:69:98:66:0c:fc:82:8e:76: c7:ef:fe:00:95:8b:bc:90:60:f5:5e:49:19:99:7f: d9:98:f7:89:a0:1e:51:63:06:cd:72:fb:c1:f7:77: 3d:2c:17:58:87:44:c4:63:aa:da:39:ca:62:a9:d9: 3f:d7:b2:6f:f9:54:f8:13:af:ba:54:98:1d:62:fb: e0:12:ba:58:bc:c4:da:b9:b8:65:09:0b:8b:d8:17: 61:62:37:68:d1:c2:5a:6a:ee:2a:11:3a:20:2f:2a: 4f:5b:51:b7:cb:10:0b:c9:62:fe:62:3a:01:3b:5c: 3e:95:4d:46:9d:7a:0c:6a:43:70:fb:03:f1:48:90: a7:59:c7:77:e6:cb:dc:c4:40:39:c4:aa:24:26:03: bb:96:63:49:1a:af:db:bf:80:22:00:3a:e9:a7:32: 9e:fa:10:1b:af:2d:a6:59:79:44:3d:6c:d7:23:92: 9f:2a:40:a2:ca:ba:43:50:27:66:ed:3e:8a:12:b8: 13:dc:db:08:b0:51:90:ca:4f:99:ce:f8:10:fa:de: a0:e4:18:71:35:b9:b9:07:28:6e:fa:cf:4c:d5:4d: ce:40:8e:61:8c:6a:b8:af:b4:a7:be:a1:23:67:25: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D3:3F:3B:D9:E6:81:E7:E7:87:A7:44:45:4B:8F:58:E2:03:EE:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8000::/36 Signature Algorithm: sha256WithRSAEncryption 45:c4:c1:3d:13:97:c1:b3:b5:a9:e9:a4:d0:09:fb:6b:39:5d: 69:fd:17:db:12:76:c5:23:35:2d:e2:af:ec:51:e1:98:ad:74: 62:76:a6:b5:ae:3f:6d:68:03:d5:e6:63:cd:d2:1c:5e:0b:37: 30:3f:fa:13:75:19:1f:c5:a8:f0:52:c5:ff:bb:95:37:2b:76: 38:aa:85:8b:fe:8d:7b:c9:f6:46:93:a4:a5:7e:97:fa:5a:eb: 5c:c3:ba:88:7a:d5:70:28:0a:31:5d:03:17:b5:38:c1:88:bd: 78:a8:2d:de:fb:8d:42:4e:1e:d4:d1:70:5e:fb:bf:6d:b4:25: 4b:e2:e2:ab:93:68:c7:d7:e3:12:13:cd:50:95:d2:9f:69:6a: 06:25:dc:b7:d7:a5:d5:1e:fc:19:65:6b:34:28:a8:8f:a1:50: 82:d2:29:1c:5a:ac:10:13:45:49:ed:41:36:ed:5a:dc:e9:95: 04:dc:39:c4:97:e5:d4:96:fd:4f:91:13:8f:0d:7d:13:40:04: 91:5d:5d:f5:e9:27:38:a6:f2:2d:7f:69:67:46:9c:1e:7e:45: 22:41:18:9d:a2:13:fc:95:a8:fa:d5:cf:50:63:0a:92:36:ad: 31:19:df:34:d1:bc:22:7f:67:68:ce:c9:a1:d7:04:4e:8d:16: fb:ce:b2:f2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMymwbVltXvWUcwoUWOTrBKTBaoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyOTAwMDAwMFoX DTI0MDcwMzIzNTk1OVowejFJMEcGA1UEBRNANmZjMjYyZTQwOGU4NzgxNjYxM2Jm MGQ0MmQ0YjQxN2NlMTRlYmQzNTQ4YzI3ODAwYTg2MDEyNjU2NmY1MDgzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45T6stgOPqlj4Y5LuC1y7o06QRJk aZhmDPyCjnbH7/4AlYu8kGD1XkkZmX/ZmPeJoB5RYwbNcvvB93c9LBdYh0TEY6ra Ocpiqdk/17Jv+VT4E6+6VJgdYvvgErpYvMTaubhlCQuL2BdhYjdo0cJaau4qETog LypPW1G3yxALyWL+YjoBO1w+lU1GnXoMakNw+wPxSJCnWcd35svcxEA5xKokJgO7 lmNJGq/bv4AiADrppzKe+hAbry2mWXlEPWzXI5KfKkCiyrpDUCdm7T6KErgT3NsI sFGQyk+ZzvgQ+t6g5BhxNbm5Byhu+s9M1U3OQI5hjGq4r7SnvqEjZyVzHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGjTPzvZ5oHn54enREVLj1jiA+4xMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk2MTI4YjE4LWFiNmEtNDAyMi1iNDc0LTUyMzBiZGFkYTYzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEIAwDQYJKoZIhvcNAQELBQADggEBAEXEwT0Tl8GztanppNAJ +2s5XWn9F9sSdsUjNS3ir+xR4ZitdGJ2prWuP21oA9XmY83SHF4LNzA/+hN1GR/F qPBSxf+7lTcrdjiqhYv+jXvJ9kaTpKV+l/pa61zDuoh61XAoCjFdAxe1OMGIvXio Ld77jUJOHtTRcF77v220JUvi4quTaMfX4xITzVCV0p9pagYl3LfXpdUe/BllazQo qI+hUILSKRxarBATRUntQTbtWtzplQTcOcSX5dSW/U+RE48NfRNABJFdXfXpJzim 8i1/aWdGnB5+RSJBGJ2iE/yVqPrVz1BjCpI2rTEZ3zTRvCJ/Z2jOyaHXBE6NFvvO svI= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:42 2024 by rpki-client on console-fra.rpki-client.org