$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d7c5f5-36de-4340-a315-95bb96771dbe.roa File: a9d7c5f5-36de-4340-a315-95bb96771dbe.roa (raw, json) Hash identifier: nngwHsZU+1yO6xt75+PldaMmOswwVoAqBEx5qlYyJ9I= Subject key identifier: 2F:35:ED:4B:79:59:0B:96:1D:00:BD:08:F4:14:C9:FA:3A:83:EB:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0B9A21FD5A07EE06B34FC92CE16F60BB2B04AAFD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d7c5f5-36de-4340-a315-95bb96771dbe.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 27.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 00:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9a:21:fd:5a:07:ee:06:b3:4f:c9:2c:e1:6f:60:bb:2b:04:aa:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=1e3d38b4f6c07773edab3eca0401c86001197d7e51328952df1a2790ca512913, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:31:c2:dc:82:e8:28:c7:4d:91:58:ba:8b:b2: 2b:d2:1c:22:5d:e3:0c:72:ed:3c:de:f4:e6:8e:d6: b0:b4:c2:35:14:6e:0f:9e:6b:b9:0d:32:d4:bb:87: 53:51:67:f9:3b:78:c8:26:7d:01:da:34:62:b7:e2: 0f:5b:44:f6:c9:30:96:84:12:c8:11:5b:79:9e:e2: ef:bf:57:ec:dd:d2:cb:c6:39:e5:03:01:91:7a:ee: 14:fe:22:c9:fd:79:7b:db:2e:92:78:e0:80:5f:3e: 79:f2:7c:5a:02:92:d3:5a:8f:0e:68:99:71:02:87: 76:19:31:f2:ff:fa:bb:c1:13:b4:53:a1:67:7e:13: 24:14:2e:a3:d1:cc:45:c2:bb:37:fa:ec:6d:0c:3f: 34:67:d5:cc:dd:4a:ec:43:dd:68:93:c1:22:33:ca: 17:19:a7:61:dc:4f:de:48:9c:4c:b3:70:37:ff:31: a6:6f:3a:c0:83:18:2c:dc:ba:37:8f:e9:db:11:fe: cd:c3:3b:d3:57:86:49:c4:65:82:f4:d8:54:ba:7c: 45:84:39:8e:b1:51:27:73:d3:3b:ab:5e:bb:14:e7: 28:15:72:74:cb:04:a2:4b:13:95:e7:9d:88:0d:6c: f9:ed:a2:a4:75:7f:04:d2:63:fd:01:5a:6f:f0:eb: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:35:ED:4B:79:59:0B:96:1D:00:BD:08:F4:14:C9:FA:3A:83:EB:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d7c5f5-36de-4340-a315-95bb96771dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.0.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:69:14:75:a1:5b:d1:85:ec:0a:1c:e8:68:93:53:e2:bb:af: 14:ea:53:a5:36:0f:49:31:57:32:14:38:0f:c2:2d:d7:45:4f: 2c:e5:0f:3e:b2:80:75:0d:85:59:15:b3:c9:f6:04:1d:f4:4d: 6e:6e:67:b1:25:72:b1:b7:45:16:f1:92:2c:99:72:0a:14:90: 06:6c:d0:28:49:72:a6:32:4a:9b:93:ff:d9:ea:59:24:0c:46: f1:c2:18:74:e7:9a:3f:83:88:ed:9c:bb:82:8c:10:46:d9:c3: 17:68:8a:a8:4e:dd:e8:68:34:fc:9d:62:e2:a4:e0:0e:dd:f4: 3e:fa:4c:b1:55:f4:d5:56:9b:19:14:78:fb:68:f2:eb:c5:d6: 08:f3:49:2e:44:11:a9:11:1d:8e:8f:8d:49:a2:cb:84:08:39: 16:70:4e:ec:b4:7f:a5:37:ec:04:69:2c:93:1b:d3:01:d5:55: 4a:60:09:ab:8f:36:2b:92:83:71:64:97:24:7a:cd:9a:30:1a: 39:2f:e3:c1:e6:a5:ac:d5:5b:b7:0c:31:c4:9f:82:b5:2d:29: 3b:3c:8f:c2:6d:30:37:76:3a:d6:a6:fe:d4:1d:8b:a8:14:98: b0:43:ed:28:ce:2b:83:1c:e6:ad:27:e4:e1:35:91:59:b2:45: 5a:63:a6:e5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUC5oh/VoH7gazT8ks4W9guysEqv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMzAwMDAwMFoX DTI0MDYwNzIzNTk1OVowejFJMEcGA1UEBRNAMWUzZDM4YjRmNmMwNzc3M2VkYWIz ZWNhMDQwMWM4NjAwMTE5N2Q3ZTUxMzI4OTUyZGYxYTI3OTBjYTUxMjkxMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jHC3ILoKMdNkVi6i7Ir0hwiXeMM cu083vTmjtawtMI1FG4Pnmu5DTLUu4dTUWf5O3jIJn0B2jRit+IPW0T2yTCWhBLI EVt5nuLvv1fs3dLLxjnlAwGReu4U/iLJ/Xl72y6SeOCAXz558nxaApLTWo8OaJlx Aod2GTHy//q7wRO0U6FnfhMkFC6j0cxFwrs3+uxtDD80Z9XM3UrsQ91ok8EiM8oX Gadh3E/eSJxMs3A3/zGmbzrAgxgs3Lo3j+nbEf7NwzvTV4ZJxGWC9NhUunxFhDmO sVEnc9M7q167FOcoFXJ0ywSiSxOV552IDWz57aKkdX8E0mP9AVpv8OtG6QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFC817Ut5WQuWHQC9CPQUyfo6g+vrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ZDdjNWY1LTM2ZGUtNDM0MC1hMzE1LTk1YmI5Njc3MWRiZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCGwAAMA0GCSqGSIb3DQEBCwUAA4IBAQBqaRR1oVvRhewKHOhok1Pi u68U6lOlNg9JMVcyFDgPwi3XRU8s5Q8+soB1DYVZFbPJ9gQd9E1ubmexJXKxt0UW 8ZIsmXIKFJAGbNAoSXKmMkqbk//Z6lkkDEbxwhh055o/g4jtnLuCjBBG2cMXaIqo Tt3oaDT8nWLipOAO3fQ++kyxVfTVVpsZFHj7aPLrxdYI80kuRBGpER2Oj41JosuE CDkWcE7stH+lN+wEaSyTG9MB1VVKYAmrjzYrkoNxZJckes2aMBo5L+PB5qWs1Vu3 DDHEn4K1LSk7PI/CbTA3djrWpv7UHYuoFJiwQ+0oziuDHOatJ+ThNZFZskVaY6bl -----END CERTIFICATE-----Generated at Sun May 5 01:20:22 2024 by rpki-client on console-fra.rpki-client.org