$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1914f3-f02e-43ce-aa27-24773867bc5d.roa File: af1914f3-f02e-43ce-aa27-24773867bc5d.roa (raw, json) Hash identifier: PIzdfAMwrVgOhKxJQw5mP0fr/cr0A3VLJidINYitBWc= Subject key identifier: 0B:EA:29:D7:07:03:27:97:CB:92:D7:2A:35:3A:0E:92:20:35:83:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A8D5ADEF5196E71ACD5B73D43D4D7C02120CD5A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1914f3-f02e-43ce-aa27-24773867bc5d.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafc:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8d:5a:de:f5:19:6e:71:ac:d5:b7:3d:43:d4:d7:c0:21:20:cd:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=fcb5ce6dc08e454345c2e382d140879bcae31744426347113d63265ed266b6dc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:82:aa:c2:41:43:24:2b:92:0c:47:21:f5: da:a2:06:5f:90:71:04:e8:b8:8b:ff:f5:e5:91:0d: 83:ec:cf:49:49:54:70:d7:5c:3e:3f:1d:29:c6:2a: 5e:1f:84:91:ee:d7:7f:14:fa:53:6a:f6:5c:17:1e: 75:1e:f5:63:9a:23:f0:95:79:70:5d:61:fc:ed:5a: b5:b1:c4:41:b5:d8:e1:ec:62:0e:b6:f3:97:fc:69: 9b:60:69:a2:bc:9f:c8:cd:21:a0:97:f6:a9:18:a3: 91:8c:47:d2:e5:e2:98:29:9e:00:a3:6b:70:0c:c9: c5:70:7b:f8:f4:db:85:56:9a:c9:95:ce:45:74:ec: f6:18:34:19:79:5c:2c:0c:40:ce:b7:96:9a:0b:f8: c8:ed:53:ac:07:99:80:4a:f4:1e:08:f5:85:e5:03: d1:6b:3c:7b:de:f3:3d:b4:a6:f5:cd:3c:aa:99:56: fe:39:59:39:80:3e:22:3d:09:af:29:eb:ee:fc:da: de:17:5a:ec:6c:59:e1:31:65:96:44:34:6e:2a:9f: c5:1d:23:29:c3:22:4e:80:26:50:30:b8:b8:db:fd: 60:5a:64:b1:fa:54:79:60:52:fc:02:c5:f7:40:84: 02:a9:88:53:ee:4f:eb:d0:32:63:ed:e5:b8:a0:96: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EA:29:D7:07:03:27:97:CB:92:D7:2A:35:3A:0E:92:20:35:83:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1914f3-f02e-43ce-aa27-24773867bc5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafc:1000::/40 Signature Algorithm: sha256WithRSAEncryption 26:10:f0:2d:e4:22:c4:bb:0e:06:fa:3f:a1:4e:d6:2a:8c:bc: f0:38:31:19:27:0f:fa:dc:a8:4e:c2:ce:94:1f:c6:4d:91:8e: 95:cc:be:d0:ac:b8:46:9d:92:22:1c:3f:e5:77:70:4f:70:2c: e3:9b:72:66:fa:d8:4e:9a:22:2a:ca:be:ef:cc:ea:2e:63:6e: 42:7c:d7:12:23:18:59:ef:3b:4e:bd:3b:f5:38:54:76:3e:4d: aa:07:59:dc:db:1a:49:7f:0d:1e:bd:bc:b7:74:00:c6:5a:ac: a7:5b:86:96:4b:7a:eb:52:da:7e:07:40:4e:1d:5e:37:d3:73: ed:3b:71:f6:93:8e:8f:72:05:96:38:e5:bc:f6:66:09:f4:cd: 34:52:75:12:75:77:c9:60:41:05:e4:93:e3:1e:0e:07:fe:5f: 1a:45:2a:49:77:1e:90:55:6c:26:15:fc:90:9d:2e:f2:51:6e: 86:8b:f3:eb:87:87:8c:a7:a6:e7:bf:82:81:45:16:ac:7b:b2: e5:84:c9:03:1b:bd:1f:94:d9:31:92:2b:53:a2:22:8c:4d:d2: 8b:ca:84:4a:c9:9b:b7:4c:fb:2a:5f:2e:76:11:6e:0e:b0:f2: 5c:3a:53:b1:62:01:e5:d3:2d:57:bb:23:1d:61:0b:a6:ac:19: 6f:e2:e7:37 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUao1a3vUZbnGs1bc9Q9TXwCEgzVowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAZmNiNWNlNmRjMDhlNDU0MzQ1YzJl MzgyZDE0MDg3OWJjYWUzMTc0NDQyNjM0NzExM2Q2MzI2NWVkMjY2YjZkYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvOCqsJBQyQrkgxHIfXaogZfkHEE 6LiL//XlkQ2D7M9JSVRw11w+Px0pxipeH4SR7td/FPpTavZcFx51HvVjmiPwlXlw XWH87Vq1scRBtdjh7GIOtvOX/GmbYGmivJ/IzSGgl/apGKORjEfS5eKYKZ4Ao2tw DMnFcHv49NuFVprJlc5FdOz2GDQZeVwsDEDOt5aaC/jI7VOsB5mASvQeCPWF5QPR azx73vM9tKb1zTyqmVb+OVk5gD4iPQmvKevu/NreF1rsbFnhMWWWRDRuKp/FHSMp wyJOgCZQMLi42/1gWmSx+lR5YFL8AsX3QIQCqYhT7k/r0DJj7eW4oJa9nQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAvqKdcHAyeXy5LXKjU6DpIgNYNpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmMTkxNGYzLWYwMmUtNDNjZS1hYTI3LTI0NzczODY3YmM1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/BAwDQYJKoZIhvcNAQELBQADggEBACYQ8C3kIsS7Dgb6P6FO 1iqMvPA4MRknD/rcqE7CzpQfxk2RjpXMvtCsuEadkiIcP+V3cE9wLOObcmb62E6a IirKvu/M6i5jbkJ81xIjGFnvO069O/U4VHY+TaoHWdzbGkl/DR69vLd0AMZarKdb hpZLeutS2n4HQE4dXjfTc+07cfaTjo9yBZY45bz2Zgn0zTRSdRJ1d8lgQQXkk+Me Dgf+XxpFKkl3HpBVbCYV/JCdLvJRboaL8+uHh4ynpue/goFFFqx7suWEyQMbvR+U 2TGSK1OiIoxN0ovKhErJm7dM+ypfLnYRbg6w8lw6U7FiAeXTLVe7Ix1hC6asGW/i 5zc= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:01 2024 by rpki-client on console-ams.rpki-client.org