$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffd89ff2-4de6-4517-88fc-12345cabb969.roa File: ffd89ff2-4de6-4517-88fc-12345cabb969.roa (raw, json) Hash identifier: 7WBKjiVpWkAupTSiXqpCUVKv93X0bHhVFJludPJ2NeM= Subject key identifier: D5:E4:8E:AD:88:0A:A9:A8:D0:D5:94:26:66:2B:ED:26:A3:23:F7:CC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20758F8F4F2B02AD9D17D8DB11636425239425AB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffd89ff2-4de6-4517-88fc-12345cabb969.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da15::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:75:8f:8f:4f:2b:02:ad:9d:17:d8:db:11:63:64:25:23:94:25:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=b160fdefe7e355fc1c0a2132a5e3a5bcf9189df7523407e70e02f8d752c31845, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:a4:c3:6b:46:e6:15:4e:08:c0:0a:33:72: 3c:4e:55:a0:fb:00:85:9f:a0:1b:ba:02:c8:ad:4b: 60:2d:ac:a5:9e:b9:47:ce:8f:5f:ed:c4:9e:6e:c9: c5:0a:fe:81:d9:fc:43:74:74:b0:5a:27:62:83:fe: 64:73:2b:ec:98:92:45:f4:66:87:c3:d8:98:cd:e8: ad:c2:ba:e0:a7:f9:8b:6f:d3:2b:be:86:74:c6:f6: 52:54:48:72:38:15:dd:7a:f0:ac:0a:2c:9e:f7:4f: dd:63:87:b7:1a:89:77:9e:19:21:a3:94:f6:ee:74: 42:ee:d9:9f:c9:0a:58:18:7c:87:af:9a:0b:34:55: 3b:69:b3:99:2d:bb:7d:96:53:4a:83:5e:45:d2:f8: 36:83:10:a3:e1:9e:1f:be:29:57:78:5f:42:2d:e8: 7f:56:27:b8:f9:9c:c7:67:94:61:75:cb:19:39:45: 4f:c0:1f:1f:a8:e6:e6:8b:4d:dd:e2:cb:59:2f:58: ba:8a:09:6d:12:48:56:cf:1b:7b:f7:79:b9:ba:f3: e1:4b:03:df:eb:c9:fd:3e:18:34:51:af:ec:60:39: 7d:ec:2e:5b:e1:30:d4:ca:dc:e6:3b:7b:1a:bc:b2: 09:f1:43:08:19:4b:a5:26:15:bb:2e:ed:ed:af:e0: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:8E:AD:88:0A:A9:A8:D0:D5:94:26:66:2B:ED:26:A3:23:F7:CC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffd89ff2-4de6-4517-88fc-12345cabb969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da15::/36 Signature Algorithm: sha256WithRSAEncryption 5f:37:f4:10:fd:ef:bf:7a:eb:8b:51:16:60:98:8e:9c:04:47: 05:a1:cf:75:f0:0e:ff:16:78:06:fd:8b:18:7b:a1:06:ec:77: 89:4f:22:44:90:39:f9:85:53:cb:d9:15:e1:cf:28:84:e0:1d: 08:fe:75:3b:88:b2:25:b8:8f:d6:45:2d:cf:2c:b2:dc:43:9e: a0:ba:2d:f1:4d:b2:ae:62:08:ee:dd:53:e3:cd:42:64:6b:75: 8c:26:41:9c:76:62:84:7e:85:33:89:9b:dd:23:7b:97:64:15: b4:d9:f2:3e:f2:cb:7a:d7:e2:49:dc:7f:ac:ba:78:ed:88:ed: 0d:41:46:ac:9f:3a:9b:ba:a3:9c:0f:18:ca:ec:7c:b5:a2:c1: a4:e9:69:4d:b3:8b:32:5e:fe:5a:54:17:c2:23:76:cc:82:eb: 35:a5:3b:80:e3:6d:e9:7d:fd:9b:0b:97:59:d0:b6:63:d1:26: 94:89:7b:5c:ab:64:b5:08:73:79:6c:03:b9:32:c2:50:6a:17: bf:ed:d9:b3:86:29:83:5f:75:99:93:09:3e:4b:0a:3b:a6:0a: 04:e3:c6:88:1d:d7:ba:09:65:99:1c:67:7c:0d:ce:91:35:11: 44:c6:ad:8c:e6:81:52:df:a2:cf:2f:59:e1:a6:ec:58:63:1e: fe:99:5d:1a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIHWPj08rAq2dF9jbEWNkJSOUJaswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAYjE2MGZkZWZlN2UzNTVmYzFjMGEy MTMyYTVlM2E1YmNmOTE4OWRmNzUyMzQwN2U3MGUwMmY4ZDc1MmMzMTg0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Eikw2tG5hVOCMAKM3I8TlWg+wCF n6AbugLIrUtgLaylnrlHzo9f7cSebsnFCv6B2fxDdHSwWidig/5kcyvsmJJF9GaH w9iYzeitwrrgp/mLb9MrvoZ0xvZSVEhyOBXdevCsCiye90/dY4e3Gol3nhkho5T2 7nRC7tmfyQpYGHyHr5oLNFU7abOZLbt9llNKg15F0vg2gxCj4Z4fvilXeF9CLeh/ Vie4+ZzHZ5RhdcsZOUVPwB8fqObmi03d4stZL1i6igltEkhWzxt793m5uvPhSwPf 68n9Phg0Ua/sYDl97C5b4TDUytzmO3savLIJ8UMIGUulJhW7Lu3tr+Dw1wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNXkjq2ICqmo0NWUJmYr7SajI/fMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmZDg5ZmYyLTRkZTYtNDUxNy04OGZjLTEyMzQ1Y2FiYjk2OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaFQAwDQYJKoZIhvcNAQELBQADggEBAF839BD9779664tRFmCY jpwERwWhz3XwDv8WeAb9ixh7oQbsd4lPIkSQOfmFU8vZFeHPKITgHQj+dTuIsiW4 j9ZFLc8sstxDnqC6LfFNsq5iCO7dU+PNQmRrdYwmQZx2YoR+hTOJm90je5dkFbTZ 8j7yy3rX4kncf6y6eO2I7Q1BRqyfOpu6o5wPGMrsfLWiwaTpaU2zizJe/lpUF8Ij dsyC6zWlO4Djbel9/ZsLl1nQtmPRJpSJe1yrZLUIc3lsA7kywlBqF7/t2bOGKYNf dZmTCT5LCjumCgTjxogd17oJZZkcZ3wNzpE1EUTGrYzmgVLfos8vWeGm7FhjHv6Z XRo= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:43 2024 by rpki-client on console-fra.rpki-client.org