$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/024f073e-19b3-4116-b860-0ade493b90ce.roa File: 024f073e-19b3-4116-b860-0ade493b90ce.roa (raw, json) Hash identifier: ourIMPkq1MhR397Fve2zxzGxvEnymurpTrdgPiq3roY= Subject key identifier: 25:48:1D:87:29:72:51:B6:DE:CB:AF:DE:00:5D:1D:F1:77:AA:F0:D9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35440074601D9B05E36FDC15DD3FF3DCD529264C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/024f073e-19b3-4116-b860-0ade493b90ce.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:44:00:74:60:1d:9b:05:e3:6f:dc:15:dd:3f:f3:dc:d5:29:26:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=4bbc50323235ba3813d43922c7b04c6aa1b4f065df65f1039bf4b8c92eb8442c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:5a:c6:c3:34:44:d3:4d:e8:94:0d:ec:39: a9:86:a2:a2:69:97:61:88:44:25:a3:5c:cc:06:c8: 76:0b:90:59:e5:53:78:f0:b4:9f:43:48:9a:5d:13: 8f:9d:f4:23:b0:bc:b0:2b:81:7b:e0:6f:33:c5:d6: af:23:f8:8b:08:a4:40:0d:67:9a:6f:9d:99:ae:0e: 7a:5f:2c:ee:f7:db:27:a1:55:de:e6:07:5f:b7:0b: 75:73:6f:d2:e8:67:7a:3c:a9:8d:e2:76:58:ca:67: ec:ed:eb:82:8e:8f:81:39:36:0b:50:64:77:30:e3: bf:9b:f5:e2:59:14:20:33:c3:e2:0e:d6:c3:50:4e: 63:3e:ea:a2:1b:54:a2:3e:79:1f:f3:20:17:9f:f2: 40:77:4f:d1:31:eb:98:10:19:c2:19:14:9c:4b:dc: f1:9b:de:bb:9b:83:a8:68:bc:01:b9:ff:d1:b2:3f: 2f:61:b1:b4:2f:49:60:3d:e1:62:90:d3:2d:8b:65: 15:c2:20:84:da:57:a7:9b:e8:dd:34:5e:d0:1a:10: 4f:49:27:34:1b:b7:40:10:51:7a:1f:89:bd:ee:35: cc:19:2b:2d:96:30:a6:2c:72:f7:35:85:e2:44:fd: 5c:ef:18:e2:d4:63:12:a6:cf:87:57:90:d5:90:e0: 41:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:1D:87:29:72:51:B6:DE:CB:AF:DE:00:5D:1D:F1:77:AA:F0:D9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/024f073e-19b3-4116-b860-0ade493b90ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:c000::/40 Signature Algorithm: sha256WithRSAEncryption 87:6f:2e:6a:a9:74:06:9f:40:2a:e0:06:ed:b6:d9:dd:eb:38: 83:59:56:3e:18:e5:27:02:ea:bb:71:ff:d4:c4:16:05:e1:6c: cf:e0:6a:b1:8c:26:fa:ae:e8:65:00:e7:e6:42:ca:c8:9d:b8: a2:c4:8b:69:e6:8d:44:26:2c:bc:d9:dd:33:62:31:1b:76:f1: c2:5b:8b:07:2e:bb:a6:0f:2e:fb:7d:d6:f6:81:76:01:61:d9: 1b:b1:e0:87:2c:0a:37:47:c9:5c:1a:db:70:2e:fc:bd:63:0c: d8:56:2e:0e:03:c2:be:fc:04:e8:22:69:6c:1b:4d:09:6b:55: ae:70:02:53:88:41:6c:f9:1f:4c:df:3d:f7:fa:5f:b3:39:35: e9:23:3d:a5:62:2f:c3:f6:f9:74:d1:25:7a:bf:ed:58:8f:bb: 67:cd:d9:6d:3a:03:57:ef:4d:9d:ec:78:01:36:23:16:6c:04: ed:b1:35:8d:c7:03:01:40:fb:fa:43:4a:16:ec:f3:e5:61:ce: 2b:95:01:c0:49:9f:ab:36:3a:87:bf:97:37:d0:59:86:b8:ba: ca:bc:8e:2c:e5:06:8d:a4:08:4e:3d:bb:64:19:07:70:1b:4b: 4f:b0:27:85:05:71:c4:c3:fb:6b:77:b0:77:db:5b:44:4c:38: f5:3f:ed:b9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNUQAdGAdmwXjb9wV3T/z3NUpJkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNANGJiYzUwMzIzMjM1YmEzODEzZDQz OTIyYzdiMDRjNmFhMWI0ZjA2NWRmNjVmMTAzOWJmNGI4YzkyZWI4NDQyYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnlaxsM0RNNN6JQN7DmphqKiaZdh iEQlo1zMBsh2C5BZ5VN48LSfQ0iaXROPnfQjsLywK4F74G8zxdavI/iLCKRADWea b52Zrg56Xyzu99snoVXe5gdftwt1c2/S6Gd6PKmN4nZYymfs7euCjo+BOTYLUGR3 MOO/m/XiWRQgM8PiDtbDUE5jPuqiG1SiPnkf8yAXn/JAd0/RMeuYEBnCGRScS9zx m967m4OoaLwBuf/Rsj8vYbG0L0lgPeFikNMti2UVwiCE2lenm+jdNF7QGhBPSSc0 G7dAEFF6H4m97jXMGSstljCmLHL3NYXiRP1c7xji1GMSps+HV5DVkOBBEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCVIHYcpclG23suv3gBdHfF3qvDZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyNGYwNzNlLTE5YjMtNDExNi1iODYwLTBhZGU0OTNiOTBjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYMAwDQYJKoZIhvcNAQELBQADggEBAIdvLmqpdAafQCrgBu22 2d3rOINZVj4Y5ScC6rtx/9TEFgXhbM/garGMJvqu6GUA5+ZCysiduKLEi2nmjUQm LLzZ3TNiMRt28cJbiwcuu6YPLvt91vaBdgFh2Rux4IcsCjdHyVwa23Au/L1jDNhW Lg4Dwr78BOgiaWwbTQlrVa5wAlOIQWz5H0zfPff6X7M5NekjPaViL8P2+XTRJXq/ 7ViPu2fN2W06A1fvTZ3seAE2IxZsBO2xNY3HAwFA+/pDShbs8+VhziuVAcBJn6s2 Ooe/lzfQWYa4usq8jizlBo2kCE49u2QZB3AbS0+wJ4UFccTD+2t3sHfbW0RMOPU/ 7bk= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:34 2024 by rpki-client on console-fra.rpki-client.org