$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d88553-71b1-429b-bbb6-74f8be3422fb.roa File: 01d88553-71b1-429b-bbb6-74f8be3422fb.roa (raw, json) Hash identifier: 0/lO2gMYyg5PjdV+ddoGTgWDkPr3xS23qnCGGHtj1QQ= Subject key identifier: 18:7B:84:93:67:25:7A:04:C5:04:D6:C0:5F:A6:55:69:C2:96:4F:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B0DA96E1076943844668B153A8366D927AFFDB5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d88553-71b1-429b-bbb6-74f8be3422fb.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0d:a9:6e:10:76:94:38:44:66:8b:15:3a:83:66:d9:27:af:fd:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=0a2ccf733eb5521303d020dda4a6acb3bdd79bbe30e93b0743acf8315e24e374, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:a2:3a:39:f5:64:60:da:53:b6:62:da:b1: 84:00:3d:ce:77:db:37:a8:e3:9b:cf:8c:0c:4b:a7: 65:d8:44:f9:68:d0:e4:0c:d2:7b:9c:38:be:59:d6: 39:89:f9:68:89:52:0c:59:6c:79:44:c2:47:91:89: 15:09:d7:12:13:e3:74:4e:8e:1c:79:f8:51:77:13: a2:aa:24:fd:e7:c5:56:76:b7:d1:43:53:e0:1a:44: 77:89:57:84:3a:7f:a8:6d:b6:3c:0f:83:64:71:d4: 2b:e6:15:ea:c4:67:c7:24:05:54:29:6a:0b:dc:f6: 76:0e:b6:a0:48:1f:2d:c8:9f:95:6f:43:39:fe:ee: 67:7a:be:48:f0:36:3f:00:92:24:a0:42:97:0a:73: 69:6d:82:16:9a:f3:2d:29:2b:00:f9:9e:f5:de:3d: b3:a0:5d:0f:64:47:64:36:b0:e7:df:c0:67:5a:e3: 1d:c3:96:b6:d0:fd:ac:a5:fd:59:41:e5:47:1a:d6: 8b:7d:09:85:48:84:23:eb:d2:4b:66:5b:cc:ca:14: 87:6d:ee:4a:ab:de:68:a5:cd:b3:b5:0b:94:ff:84: c2:45:aa:37:d1:36:d6:35:2a:38:d8:c1:8d:eb:9f: 15:c1:dd:3d:84:5c:f4:db:e5:57:e7:05:92:5b:11: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7B:84:93:67:25:7A:04:C5:04:D6:C0:5F:A6:55:69:C2:96:4F:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01d88553-71b1-429b-bbb6-74f8be3422fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:6000::/40 Signature Algorithm: sha256WithRSAEncryption 1a:bd:8a:a9:da:4b:57:37:9d:62:a3:1f:b5:27:37:2e:69:eb: d4:aa:97:3f:35:88:c7:71:53:fb:86:b6:69:88:59:55:48:5b: 28:93:fe:90:5a:b6:70:fc:36:ea:73:ab:c5:85:af:dd:7a:9b: f4:00:4b:02:e7:1a:6b:08:9b:16:04:19:09:4a:87:e8:d4:5b: 4a:fc:a8:94:98:87:04:9b:7d:35:08:7b:e8:c6:32:ad:9e:74: 6b:d0:50:ec:07:12:e1:02:f9:2e:dc:ba:98:79:48:6e:83:63: 11:ef:ad:82:eb:df:e1:d9:be:21:86:20:17:09:33:9c:65:70: 2b:b3:9f:97:48:24:c7:d3:cc:51:45:17:2d:29:30:ba:53:30: 08:63:44:da:a0:de:b9:ca:4c:c5:b5:2b:36:ff:8f:24:15:19: 27:6d:ac:4d:a5:75:34:f1:61:5a:12:65:91:fb:de:1a:25:5b: 37:14:88:f9:46:fd:17:18:d1:6a:71:62:8c:50:40:9f:27:73: 50:90:46:e6:37:5b:b7:28:55:96:8e:08:36:25:3c:0b:c9:e3: df:08:88:8e:2a:78:47:f8:57:f0:60:cd:26:5f:2b:a1:1b:c8: 14:92:c4:93:25:d2:73:7f:ff:fa:f5:cf:7d:db:6f:8d:d4:b8: f0:45:3d:e5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSw2pbhB2lDhEZosVOoNm2Sev/bUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMGEyY2NmNzMzZWI1NTIxMzAzZDAy MGRkYTRhNmFjYjNiZGQ3OWJiZTMwZTkzYjA3NDNhY2Y4MzE1ZTI0ZTM3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2juiOjn1ZGDaU7Zi2rGEAD3Od9s3 qOObz4wMS6dl2ET5aNDkDNJ7nDi+WdY5ifloiVIMWWx5RMJHkYkVCdcSE+N0To4c efhRdxOiqiT958VWdrfRQ1PgGkR3iVeEOn+obbY8D4NkcdQr5hXqxGfHJAVUKWoL 3PZ2DragSB8tyJ+Vb0M5/u5ner5I8DY/AJIkoEKXCnNpbYIWmvMtKSsA+Z713j2z oF0PZEdkNrDn38BnWuMdw5a20P2spf1ZQeVHGtaLfQmFSIQj69JLZlvMyhSHbe5K q95opc2ztQuU/4TCRao30TbWNSo42MGN658Vwd09hFz02+VX5wWSWxFOBwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBh7hJNnJXoExQTWwF+mVWnClk+7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAxZDg4NTUzLTcxYjEtNDI5Yi1iYmI2LTc0ZjhiZTM0MjJmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYGAwDQYJKoZIhvcNAQELBQADggEBABq9iqnaS1c3nWKjH7Un Ny5p69Sqlz81iMdxU/uGtmmIWVVIWyiT/pBatnD8Nupzq8WFr916m/QASwLnGmsI mxYEGQlKh+jUW0r8qJSYhwSbfTUIe+jGMq2edGvQUOwHEuEC+S7cuph5SG6DYxHv rYLr3+HZviGGIBcJM5xlcCuzn5dIJMfTzFFFFy0pMLpTMAhjRNqg3rnKTMW1Kzb/ jyQVGSdtrE2ldTTxYVoSZZH73holWzcUiPlG/RcY0WpxYoxQQJ8nc1CQRuY3W7co VZaOCDYlPAvJ498IiI4qeEf4V/BgzSZfK6EbyBSSxJMl0nN///r1z33bb43UuPBF PeU= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org