$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98cc120c-2d83-4ed5-b6c2-d3c92a4f78ed.roa File: 98cc120c-2d83-4ed5-b6c2-d3c92a4f78ed.roa (raw, json) Hash identifier: izZJwOBUrYPD31aJmgmCc4s3tjnA3yDkqNPG8vxonXE= Subject key identifier: A5:43:46:FC:6D:0E:5F:C7:6C:CF:F1:05:24:0F:90:73:8D:13:61:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 573C1AB6E51653BFB3BC2359EFF8699B23DB9F7B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98cc120c-2d83-4ed5-b6c2-d3c92a4f78ed.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3c:1a:b6:e5:16:53:bf:b3:bc:23:59:ef:f8:69:9b:23:db:9f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=2beb902fb40349b83ec230a3310be061cc3e32a5e6246c88f087af95ae8d63fd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:9b:82:e8:86:64:2c:67:80:51:ad:c4:f8: 90:8f:67:88:b5:a3:86:0a:73:7c:75:df:70:0f:50: 6f:82:ab:6c:f1:69:56:fa:79:4c:2a:c8:4e:ae:ee: ea:58:76:70:df:10:35:a2:4b:e7:d9:dd:4e:3a:47: 0e:2f:da:7c:fc:79:00:4d:0e:b8:52:3c:08:66:18: a8:ae:27:0f:0f:40:43:6f:c4:62:1d:59:21:8d:7c: 9d:a2:3e:c2:15:70:07:d5:22:06:e3:4a:dd:49:ff: 3a:b4:63:d9:e6:d4:94:97:4e:45:33:2a:37:a3:aa: f8:ce:cd:89:37:86:f1:43:91:3e:a5:32:a0:3b:18: b4:6a:ae:be:17:fe:bf:ff:1a:c6:ce:45:31:f5:89: 2e:0b:b1:e9:e6:e1:8a:50:79:bd:d1:89:bc:cc:b7: ff:dd:3a:06:16:e7:0b:c6:dd:84:6e:e3:c8:c9:f0: 63:f1:02:db:51:08:f4:19:d3:1e:7d:f5:4f:27:7e: 30:dd:c4:57:32:d0:3c:6d:0b:92:21:e3:09:4f:3f: 1c:28:fe:d2:36:03:63:5e:57:60:ab:d5:a3:13:e5: ac:e4:0d:2e:2f:41:1d:c1:c5:b2:4a:6d:04:34:19: 94:e8:33:f6:15:98:9a:eb:5f:ae:cf:bb:45:4f:f6: 17:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:43:46:FC:6D:0E:5F:C7:6C:CF:F1:05:24:0F:90:73:8D:13:61:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98cc120c-2d83-4ed5-b6c2-d3c92a4f78ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:4800::/40 Signature Algorithm: sha256WithRSAEncryption c0:8c:2d:f1:59:32:5d:31:47:41:40:fe:f0:dd:8d:12:ef:42: 30:13:fc:2c:cf:49:34:49:31:57:d6:64:9c:10:0d:f2:fc:52: 60:63:7e:27:cb:db:36:6e:df:18:d1:c6:63:ed:42:f4:d8:d4: 17:31:fc:0a:8c:7a:ba:eb:39:c3:da:49:18:0b:5f:f5:4f:dd: 7e:f1:0f:85:f8:f9:12:60:3e:97:f4:c6:5d:99:d1:95:26:9f: 08:6b:a3:be:de:60:8b:67:56:31:a6:e3:44:61:0a:cf:c6:e0: d5:0b:b2:d1:ba:32:c3:43:de:45:ec:5c:cb:e7:36:73:77:a4: 04:9f:eb:0f:f4:8b:5c:9e:fe:eb:7e:5f:a3:92:44:31:89:64: be:0a:11:b3:13:d4:43:35:e4:f0:ce:16:53:bc:5a:31:6d:82: 7e:47:3f:ed:4b:b7:6f:2f:9d:f7:1b:01:48:91:28:15:91:f3: 7d:85:22:7a:f6:58:e9:07:a7:ea:44:13:17:09:89:83:d8:53: f0:be:97:45:a7:16:7b:31:8d:0a:42:f1:0b:98:18:bc:55:1a: 3c:c1:91:7d:74:f1:4a:d6:10:fb:93:46:a8:75:3f:f1:fa:db: f2:04:7e:89:f7:08:99:dd:d4:22:76:86:b6:a8:ce:64:e3:b1: d8:c1:9f:db -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVzwatuUWU7+zvCNZ7/hpmyPbn3swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAMmJlYjkwMmZiNDAzNDliODNlYzIz MGEzMzEwYmUwNjFjYzNlMzJhNWU2MjQ2Yzg4ZjA4N2FmOTVhZThkNjNmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tSbguiGZCxngFGtxPiQj2eItaOG CnN8dd9wD1Bvgqts8WlW+nlMKshOru7qWHZw3xA1okvn2d1OOkcOL9p8/HkATQ64 UjwIZhioricPD0BDb8RiHVkhjXydoj7CFXAH1SIG40rdSf86tGPZ5tSUl05FMyo3 o6r4zs2JN4bxQ5E+pTKgOxi0aq6+F/6//xrGzkUx9YkuC7Hp5uGKUHm90Ym8zLf/ 3ToGFucLxt2EbuPIyfBj8QLbUQj0GdMeffVPJ34w3cRXMtA8bQuSIeMJTz8cKP7S NgNjXldgq9WjE+Ws5A0uL0EdwcWySm0ENBmU6DP2FZia61+uz7tFT/YX5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKVDRvxtDl/HbM/xBSQPkHONE2G4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4Y2MxMjBjLTJkODMtNGVkNS1iNmMyLWQzYzkyYTRmNzhlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYEgwDQYJKoZIhvcNAQELBQADggEBAMCMLfFZMl0xR0FA/vDd jRLvQjAT/CzPSTRJMVfWZJwQDfL8UmBjfifL2zZu3xjRxmPtQvTY1Bcx/AqMerrr OcPaSRgLX/VP3X7xD4X4+RJgPpf0xl2Z0ZUmnwhro77eYItnVjGm40RhCs/G4NUL stG6MsND3kXsXMvnNnN3pASf6w/0i1ye/ut+X6OSRDGJZL4KEbMT1EM15PDOFlO8 WjFtgn5HP+1Lt28vnfcbAUiRKBWR832FInr2WOkHp+pEExcJiYPYU/C+l0WnFnsx jQpC8QuYGLxVGjzBkX108UrWEPuTRqh1P/H62/IEfon3CJnd1CJ2hraozmTjsdjB n9s= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:01 2024 by rpki-client on console-ams.rpki-client.org