$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/ca0293e8-a412-4e93-bccc-69fffbada891.roa File: ca0293e8-a412-4e93-bccc-69fffbada891.roa (raw, json) Hash identifier: Un2EeTEr+nHvzbJxsRugQYqELdyfUn9pYoVxjew4H3I= Subject key identifier: 3A:D3:76:7A:E3:B5:B9:93:05:B2:5A:A0:D1:3F:4B:65:68:7F:56:CF Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 36265107DEB66B005DE54AC650AB48B49AAC8953 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/ca0293e8-a412-4e93-bccc-69fffbada891.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 103.4.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 00:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:26:51:07:de:b6:6b:00:5d:e5:4a:c6:50:ab:48:b4:9a:ac:89:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=9b9752bc808ddda20c8f2d4683ab95d465277c6b2292543581e0fca75cd061ef, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:73:c3:e7:78:72:2b:d5:5e:c6:8b:7b:e3: 9e:8b:38:78:be:07:0c:74:e2:7e:b4:88:8e:6f:d5: 30:21:fb:f1:1f:f4:86:36:3f:c3:f4:fa:51:a4:af: 33:f8:bd:d8:35:ba:1f:ce:4b:15:fb:41:9c:05:b1: 68:ef:e8:55:2f:03:46:e4:c5:e5:04:66:2d:3a:08: 19:34:eb:a1:3c:0d:42:3c:43:61:71:34:85:87:af: 7c:6b:8e:9e:4b:b8:b5:e9:5b:a7:43:c0:1e:6c:72: a1:e1:3f:7e:d3:d2:77:ce:6d:8d:b9:64:bd:8e:bd: e9:04:01:ad:df:8f:cd:b6:c4:57:d9:08:36:28:2b: 09:7f:b9:af:d2:ff:47:06:27:fa:58:99:a9:0b:80: 75:ba:1d:a6:28:b1:d3:ad:bc:3c:e0:22:67:48:f8: 22:f0:12:d6:68:60:07:61:39:40:55:8d:c1:64:c7: d5:7a:7e:ec:0f:24:02:4d:8a:d9:0a:bf:e8:0c:a1: 2c:af:d3:07:a3:18:ef:fe:66:be:26:a6:5f:33:ff: 8c:3f:ff:d5:fc:74:b5:00:3d:0a:a9:fd:69:fc:62: 49:5d:a5:10:74:8c:2b:76:c8:22:bf:e7:37:26:74: c6:d7:3b:58:c8:c3:7c:2e:35:18:fd:c3:a6:a9:7d: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:76:7A:E3:B5:B9:93:05:B2:5A:A0:D1:3F:4B:65:68:7F:56:CF X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/ca0293e8-a412-4e93-bccc-69fffbada891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.8.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:32:26:90:05:04:43:d2:44:2d:44:d2:ce:e8:29:5e:15:83: 8c:c6:03:45:3f:03:9c:ec:d9:f5:6c:34:3b:e4:55:93:29:36: 7a:11:56:62:a9:b1:be:78:ed:e4:92:be:f9:40:08:df:e2:13: 16:ff:f3:9d:39:79:6f:4f:51:07:5c:ba:32:af:59:81:10:0f: b7:95:91:2a:b0:82:86:3c:ab:13:f1:28:ca:e3:59:db:68:49: a7:db:f9:4f:ad:c4:b3:e4:da:5c:10:02:f4:59:ab:c4:ba:11: a8:99:39:fd:55:53:62:43:e6:03:37:a5:cf:5e:f5:9c:7a:50: e0:20:99:a0:7c:31:2e:c2:46:d3:e7:fc:00:b9:18:86:f3:57: 36:9b:c2:34:08:de:3c:78:89:c8:ac:c2:c7:b4:da:0c:9c:24: c6:6a:93:ce:7d:d5:8c:a3:4b:47:f6:38:4f:60:d1:7c:85:48: 45:7d:57:c4:66:4c:26:bc:6a:32:7b:ac:27:11:5d:b2:38:56: d6:b0:10:ab:5d:16:26:a2:ff:60:5e:ec:30:d6:dd:9e:77:aa: ef:0c:ef:66:f1:38:7e:27:d0:d3:31:5f:ae:ed:8d:60:f6:70: f8:6a:fb:bb:e1:f9:20:84:ef:92:65:5b:5d:fb:9a:01:50:f9: df:50:f4:b7 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUNiZRB962awBd5UrGUKtItJqsiVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAOWI5NzUyYmM4MDhkZGRhMjBjOGYy ZDQ2ODNhYjk1ZDQ2NTI3N2M2YjIyOTI1NDM1ODFlMGZjYTc1Y2QwNjFlZjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0pzw+d4civVXsaLe+Oeizh4vgcM dOJ+tIiOb9UwIfvxH/SGNj/D9PpRpK8z+L3YNbofzksV+0GcBbFo7+hVLwNG5MXl BGYtOggZNOuhPA1CPENhcTSFh698a46eS7i16VunQ8AebHKh4T9+09J3zm2NuWS9 jr3pBAGt34/NtsRX2Qg2KCsJf7mv0v9HBif6WJmpC4B1uh2mKLHTrbw84CJnSPgi 8BLWaGAHYTlAVY3BZMfVen7sDyQCTYrZCr/oDKEsr9MHoxjv/ma+JqZfM/+MP//V /HS1AD0Kqf1p/GJJXaUQdIwrdsgiv+c3JnTG1ztYyMN8LjUY/cOmqX0hSwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDrTdnrjtbmTBbJaoNE/S2Vof1bPMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2NhMDI5M2U4LWE0MTItNGU5My1iY2NjLTY5ZmZmYmFkYTg5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDZwQIMA0GCSqGSIb3DQEBCwUAA4IBAQAeMiaQBQRD0kQtRNLO6Cle FYOMxgNFPwOc7Nn1bDQ75FWTKTZ6EVZiqbG+eO3kkr75QAjf4hMW//OdOXlvT1EH XLoyr1mBEA+3lZEqsIKGPKsT8SjK41nbaEmn2/lPrcSz5NpcEAL0WavEuhGomTn9 VVNiQ+YDN6XPXvWcelDgIJmgfDEuwkbT5/wAuRiG81c2m8I0CN48eInIrMLHtNoM nCTGapPOfdWMo0tH9jhPYNF8hUhFfVfEZkwmvGoye6wnEV2yOFbWsBCrXRYmov9g Xuww1t2ed6rvDO9m8Th+J9DTMV+u7Y1g9nD4avu74fkghO+SZVtd+5oBUPnfUPS3 -----END CERTIFICATE-----Generated at Sun May 5 01:21:31 2024 by rpki-client on console-fra.rpki-client.org