$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9256e41-0cd7-4b4a-b9ee-822b11036f3e.roa File: c9256e41-0cd7-4b4a-b9ee-822b11036f3e.roa (raw, json) Hash identifier: JfCIyhF1AC1nvy4rZR5xARrjsV70u6SWTpYGgsvsaKk= Subject key identifier: DE:84:F1:27:16:DD:70:59:19:F6:7E:FE:00:D9:26:24:A9:C5:B6:81 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1952C4834554AED05F82496EEBFD08F3563ABD4F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9256e41-0cd7-4b4a-b9ee-822b11036f3e.roa Signing time: Fri 31 May 2024 00:00:00 +0000 ROA not before: Fri 31 May 2024 00:00:00 +0000 ROA not after: Fri 05 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:52:c4:83:45:54:ae:d0:5f:82:49:6e:eb:fd:08:f3:56:3a:bd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:00 2024 GMT Not After : Jul 5 23:59:59 2024 GMT Subject: serialNumber=5c0f4f0671d5777734b1159798c998fade0f96dae66e370bf93c59596f6da8c9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:ba:da:8a:db:d3:13:81:18:21:cc:e1:4b: f9:eb:93:59:98:20:32:fd:c7:65:5a:91:46:67:ee: 1e:15:d6:8e:ea:7a:60:8b:ee:f1:7c:8c:77:cb:3e: 4f:19:a5:64:3c:28:32:81:2c:41:3f:4d:2d:58:78: a9:c8:bc:71:96:2b:f3:74:d0:4d:11:45:a6:a8:2b: 2b:c6:1c:06:28:8b:bb:01:bc:f9:4a:44:e0:5e:ae: 28:1d:4a:af:ba:f7:44:f5:74:f8:57:55:54:99:62: a2:b5:9a:76:f0:bf:50:d4:fb:c3:9d:e0:ab:b3:9a: b3:50:1b:a0:af:5c:b0:4f:d0:18:95:78:ea:d0:3b: 96:70:50:9b:0f:79:17:a9:46:2a:70:b1:2d:f7:f4: e0:79:c2:7a:c9:55:4b:47:2d:0c:e4:d3:cb:56:c7: 82:7a:ca:d8:16:92:80:5d:91:16:61:c8:0e:fc:ae: 8b:bd:47:2f:6c:92:e4:e4:38:d2:fb:df:9b:81:39: 25:94:11:53:88:3f:f4:5f:d3:87:bf:92:91:ea:36: f8:7e:30:51:25:71:4f:ba:6f:e8:74:b7:69:b5:6c: 1f:f4:76:e3:29:93:bb:02:65:44:e3:15:7c:d7:9a: af:8f:e1:c4:32:69:7e:44:ec:8a:8c:d4:06:e0:51: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:84:F1:27:16:DD:70:59:19:F6:7E:FE:00:D9:26:24:A9:C5:B6:81 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9256e41-0cd7-4b4a-b9ee-822b11036f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:f000::/40 Signature Algorithm: sha256WithRSAEncryption 85:f0:08:00:3f:3d:94:8f:23:3b:53:e5:59:bd:58:f0:f6:23: fe:ec:7b:df:b2:ea:45:01:e6:2f:b7:fd:d4:a0:98:33:51:fe: 6e:4e:09:e6:f5:c1:a4:b2:58:95:c4:27:bf:27:ea:6f:e3:58: aa:76:c0:88:18:7f:ca:39:da:81:c7:b7:33:d9:67:5c:6c:84: 41:47:54:80:14:d3:a5:61:7e:61:40:d9:c8:29:cb:ee:9b:28: a2:b3:23:32:34:02:0b:f4:28:14:20:65:23:86:b7:70:14:29: 42:8d:b1:0b:2b:ad:ad:e1:b8:0a:30:90:2c:87:b6:ce:28:e5: 28:0c:55:51:e4:ec:7f:55:b9:81:48:d3:a0:b8:bc:0d:19:7c: 88:8e:93:9c:c6:e1:10:6c:fd:01:0f:a6:f8:40:bc:78:27:02: 1d:88:46:d9:9a:e2:fc:7d:ac:e4:da:2e:d4:12:55:75:41:d4: 2d:28:9a:01:6e:3f:46:fa:5a:85:30:08:7c:cb:6f:ef:ac:5d: 4b:7c:6c:bf:24:eb:64:4d:cf:9e:57:93:29:48:99:a2:20:03: d7:ae:56:ab:e0:3c:f3:f9:71:6f:f3:c1:a0:66:82:f8:fc:08: fb:e5:00:94:77:8f:17:f7:61:55:47:82:c8:f8:be:1e:70:30: 2d:aa:ca:ed -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGVLEg0VUrtBfgklu6/0I81Y6vU8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUzMTAwMDAwMFoX DTI0MDcwNTIzNTk1OVowejFJMEcGA1UEBRNANWMwZjRmMDY3MWQ1Nzc3NzM0YjEx NTk3OThjOTk4ZmFkZTBmOTZkYWU2NmUzNzBiZjkzYzU5NTk2ZjZkYThjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAS62orb0xOBGCHM4Uv565NZmCAy /cdlWpFGZ+4eFdaO6npgi+7xfIx3yz5PGaVkPCgygSxBP00tWHipyLxxlivzdNBN EUWmqCsrxhwGKIu7Abz5SkTgXq4oHUqvuvdE9XT4V1VUmWKitZp28L9Q1PvDneCr s5qzUBugr1ywT9AYlXjq0DuWcFCbD3kXqUYqcLEt9/TgecJ6yVVLRy0M5NPLVseC esrYFpKAXZEWYcgO/K6LvUcvbJLk5DjS+9+bgTkllBFTiD/0X9OHv5KR6jb4fjBR JXFPum/odLdptWwf9HbjKZO7AmVE4xV815qvj+HEMml+ROyKjNQG4FH8TQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN6E8ScW3XBZGfZ+/gDZJiSpxbaBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5MjU2ZTQxLTBjZDctNGI0YS1iOWVlLTgyMmIxMTAzNmYzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba//AwDQYJKoZIhvcNAQELBQADggEBAIXwCAA/PZSPIztT5Vm9 WPD2I/7se9+y6kUB5i+3/dSgmDNR/m5OCeb1waSyWJXEJ78n6m/jWKp2wIgYf8o5 2oHHtzPZZ1xshEFHVIAU06VhfmFA2cgpy+6bKKKzIzI0Agv0KBQgZSOGt3AUKUKN sQsrra3huAowkCyHts4o5SgMVVHk7H9VuYFI06C4vA0ZfIiOk5zG4RBs/QEPpvhA vHgnAh2IRtma4vx9rOTaLtQSVXVB1C0omgFuP0b6WoUwCHzLb++sXUt8bL8k62RN z55XkylImaIgA9euVqvgPPP5cW/zwaBmgvj8CPvlAJR3jxf3YVVHgsj4vh5wMC2q yu0= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:02 2024 by rpki-client on console-ams.rpki-client.org