$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/024f073e-19b3-4116-b860-0ade493b90ce.roa File: 024f073e-19b3-4116-b860-0ade493b90ce.roa (raw, json) Hash identifier: CAlBAJa0+ytTUlOF00yICqgfD514qNjX2mJAVUH3qE8= Subject key identifier: EB:A9:8C:3F:DF:77:EF:C6:D0:13:D8:99:3D:E1:E6:65:68:23:28:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4628B83E25F2EA4B6D850FD02209A0F521ADBC7C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/024f073e-19b3-4116-b860-0ade493b90ce.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:28:b8:3e:25:f2:ea:4b:6d:85:0f:d0:22:09:a0:f5:21:ad:bc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=245851e6adec4fd915a4bc98ab95490aaa54f0825d76ea9b3fa0b91786f8e82d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:ee:de:b9:08:e3:49:d8:5d:1a:fb:55:08: 9b:c6:4e:22:86:30:94:bb:44:dd:08:06:6c:a4:88: ee:3b:c2:23:97:ee:2a:a9:26:e0:62:0a:e4:f9:01: 6c:43:9f:03:91:15:f6:46:fe:b6:98:66:74:e0:62: d6:5a:4f:58:79:1e:a1:37:58:48:15:c8:80:0e:e5: 6e:e9:be:a3:cc:28:8c:34:18:e8:1d:fb:35:46:a5: 99:f8:a0:5e:6d:00:a7:37:ba:de:ef:1f:b0:60:06: 51:c4:b9:5a:ee:e3:73:8a:42:27:93:40:4f:1e:d2: 20:9d:ff:bb:e9:82:60:70:38:5d:ce:9f:c8:79:da: b8:89:70:35:8a:35:fd:31:41:d5:d3:a5:0d:f3:dc: 5a:44:8f:f6:bb:ba:b5:c9:87:d7:82:a6:dc:a4:d6: 42:40:3c:f0:5e:29:9d:57:1f:5c:79:7a:64:66:5f: f8:b6:72:02:06:f6:01:2c:6b:5f:83:74:96:06:9c: 63:93:d1:d4:0a:19:fa:17:a2:87:e7:d4:57:8a:9b: a9:e9:3a:28:ca:fa:9b:bb:80:cb:0d:7e:bc:df:44: 73:7d:4b:05:74:46:8b:ba:e0:cf:81:8c:11:dd:5a: 1f:d0:00:bf:ea:18:77:cc:97:8f:13:36:87:8e:a8: b0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A9:8C:3F:DF:77:EF:C6:D0:13:D8:99:3D:E1:E6:65:68:23:28:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/024f073e-19b3-4116-b860-0ade493b90ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:c000::/40 Signature Algorithm: sha256WithRSAEncryption 5e:b3:a0:4f:ea:a3:48:76:bd:64:ce:a6:2e:cb:d4:42:89:90: 34:c6:d7:b8:97:10:68:24:7e:0f:99:93:01:cd:52:db:0d:54: 04:6a:20:0b:fe:fe:8b:64:2f:7c:fa:37:3c:86:c5:56:fc:92: 1e:96:a8:c3:01:b3:d5:47:b4:8c:20:4f:b1:7d:7b:fc:e0:f3: 9b:d6:60:d6:15:1c:c9:cb:fc:2e:6a:4a:a5:0b:df:bf:5e:d1: b4:f7:77:fc:33:ad:52:d2:39:f7:23:77:0c:ab:f8:5c:ac:80: 64:ea:ed:af:24:4b:a4:88:28:10:c5:d4:f7:23:e2:47:67:a9: c9:0e:1a:47:50:b1:c9:5c:f5:2b:7d:1d:db:7b:05:f9:81:77: 0a:85:29:4d:fe:26:86:bf:97:9c:55:14:38:b4:1d:99:36:bc: a9:6b:86:96:51:67:d1:e4:11:4e:7a:76:65:e8:66:0d:eb:67: d7:43:40:e0:ea:7a:6e:7a:7f:94:59:37:ad:0c:98:db:95:e5: e6:ce:53:f5:b5:6a:be:92:6e:40:95:8e:24:a0:fe:62:18:19: 88:e6:71:83:ac:96:55:8d:92:ad:e8:95:2b:eb:83:52:0d:b4: c9:88:ba:9f:b6:04:2f:9a:a3:0c:60:0a:76:a5:33:e7:fb:84: a2:2a:9d:3e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURii4PiXy6ktthQ/QIgmg9SGtvHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMjQ1ODUxZTZhZGVjNGZkOTE1YTRi Yzk4YWI5NTQ5MGFhYTU0ZjA4MjVkNzZlYTliM2ZhMGI5MTc4NmY4ZTgyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw23u3rkI40nYXRr7VQibxk4ihjCU u0TdCAZspIjuO8Ijl+4qqSbgYgrk+QFsQ58DkRX2Rv62mGZ04GLWWk9YeR6hN1hI FciADuVu6b6jzCiMNBjoHfs1RqWZ+KBebQCnN7re7x+wYAZRxLla7uNzikInk0BP HtIgnf+76YJgcDhdzp/Iedq4iXA1ijX9MUHV06UN89xaRI/2u7q1yYfXgqbcpNZC QDzwXimdVx9ceXpkZl/4tnICBvYBLGtfg3SWBpxjk9HUChn6F6KH59RXipup6Too yvqbu4DLDX6830RzfUsFdEaLuuDPgYwR3Vof0AC/6hh3zJePEzaHjqiwPwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOupjD/fd+/G0BPYmT3h5mVoIyjlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAyNGYwNzNlLTE5YjMtNDExNi1iODYwLTBhZGU0OTNiOTBjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYMAwDQYJKoZIhvcNAQELBQADggEBAF6zoE/qo0h2vWTOpi7L 1EKJkDTG17iXEGgkfg+ZkwHNUtsNVARqIAv+/otkL3z6NzyGxVb8kh6WqMMBs9VH tIwgT7F9e/zg85vWYNYVHMnL/C5qSqUL379e0bT3d/wzrVLSOfcjdwyr+FysgGTq 7a8kS6SIKBDF1Pcj4kdnqckOGkdQsclc9St9Hdt7BfmBdwqFKU3+Joa/l5xVFDi0 HZk2vKlrhpZRZ9HkEU56dmXoZg3rZ9dDQODqem56f5RZN60MmNuV5ebOU/W1ar6S bkCVjiSg/mIYGYjmcYOsllWNkq3olSvrg1INtMmIup+2BC+aowxgCnalM+f7hKIq nT4= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org