$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/091c0459-af0a-4d2b-9bc8-b464dbe559fd.roa File: 091c0459-af0a-4d2b-9bc8-b464dbe559fd.roa (raw, json) Hash identifier: /9V5FQWRceCp12udn7YbQ5vaeVCvZPNumGIA9jIZs5M= Subject key identifier: 65:4E:AF:45:42:38:94:B9:F9:FB:E7:F9:67:17:D7:43:0F:AB:A5:06 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 06CAA31769E85E592111DFE2314E08A727327E70 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/091c0459-af0a-4d2b-9bc8-b464dbe559fd.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Apr 2024 12:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ca:a3:17:69:e8:5e:59:21:11:df:e2:31:4e:08:a7:27:32:7e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=55cf3ce98a222c2b2721f8d894acef70fd4fb6e29136113bfbaf43ba170c98f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:90:cc:c7:41:20:c7:01:22:e1:64:e4:5b: 81:2d:36:af:43:ab:25:b1:2a:92:9f:f2:cf:52:56: 7f:c0:f2:28:d5:9d:8c:db:80:a6:37:42:18:ec:be: ff:fe:aa:59:9e:0b:90:bc:18:ed:54:11:2d:3a:90: a4:96:d1:c3:c8:84:93:2c:64:74:65:4d:16:0a:80: 22:e2:bd:2d:5c:05:1b:bf:f8:3b:2c:b6:83:74:07: a6:8f:fc:39:a7:ac:d7:e2:66:ad:ea:7c:85:f8:40: e0:ec:6d:94:35:aa:99:3d:cd:a8:82:2b:ae:bf:9e: 8e:24:5f:53:aa:c6:24:24:b1:08:1d:bd:09:53:9b: 91:ed:a1:b6:9f:ac:36:04:7b:dd:34:ab:ca:c4:4b: 87:da:ec:2b:e2:62:c8:02:51:00:4c:54:69:3f:56: a5:92:a3:5c:a6:e5:06:27:de:56:0f:09:8b:0a:b8: 3b:97:f5:e8:3d:a2:f0:0d:da:43:51:ad:ba:a4:01: 05:89:7f:ef:2a:6a:20:49:37:0a:e7:88:04:cc:2c: b4:a3:17:3f:ed:d4:0c:5e:a6:c5:31:3f:fd:6c:bf: 24:41:78:77:3f:fd:81:0e:13:82:c8:f6:88:19:4e: 62:c5:e8:ca:39:f1:22:df:d4:88:5f:de:ee:da:39: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4E:AF:45:42:38:94:B9:F9:FB:E7:F9:67:17:D7:43:0F:AB:A5:06 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/091c0459-af0a-4d2b-9bc8-b464dbe559fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:e000::/40 Signature Algorithm: sha256WithRSAEncryption 33:5a:47:54:42:9b:b3:2b:a1:4f:14:77:a9:e4:63:0c:ff:81: 46:9f:23:c1:21:6c:76:8f:95:22:cd:26:c7:a8:e8:bc:0e:b6: 7d:93:d8:9b:d2:da:94:bc:5a:20:48:4f:2e:20:af:f3:2a:73: 19:1c:32:3a:e7:94:6b:74:88:e8:cf:01:0a:7a:4e:c3:d0:37: 51:b1:cb:86:9f:ed:68:15:92:31:7c:fb:c4:dd:9e:f1:dd:26: 13:9a:a2:92:58:19:81:e4:f3:ba:e2:e3:b0:02:ad:ad:5e:c7: 9c:58:0f:0e:68:42:77:b2:54:1a:7c:f0:3f:ea:e4:8d:90:bc: de:52:40:b1:55:a4:a9:32:2e:b2:86:55:bd:10:8b:12:ea:6b: a1:2d:df:26:09:67:4e:76:d6:fd:07:a0:a4:dd:82:9c:65:40: d3:43:6e:cf:e7:9a:d4:64:fd:31:62:f7:70:a6:c3:14:34:25: 45:72:34:46:17:3a:ad:41:73:7c:49:05:b5:d9:f2:be:6d:51: ee:60:58:c1:23:1b:80:10:f8:3f:ea:c9:dd:db:be:c7:f4:ea: 4c:9a:55:ee:a2:41:35:e4:b0:68:47:89:67:99:99:a8:14:87: 58:6a:ea:a1:1c:a6:bd:aa:b9:02:93:13:75:22:32:68:24:7b: c2:6c:2e:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBsqjF2noXlkhEd/iMU4IpycyfnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxMDAwMDAwMFoX DTI0MDUxNTIzNTk1OVowejFJMEcGA1UEBRNANTVjZjNjZTk4YTIyMmMyYjI3MjFm OGQ4OTRhY2VmNzBmZDRmYjZlMjkxMzYxMTNiZmJhZjQzYmExNzBjOThmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3yQzMdBIMcBIuFk5FuBLTavQ6sl sSqSn/LPUlZ/wPIo1Z2M24CmN0IY7L7//qpZnguQvBjtVBEtOpCkltHDyISTLGR0 ZU0WCoAi4r0tXAUbv/g7LLaDdAemj/w5p6zX4mat6nyF+EDg7G2UNaqZPc2ogiuu v56OJF9TqsYkJLEIHb0JU5uR7aG2n6w2BHvdNKvKxEuH2uwr4mLIAlEATFRpP1al kqNcpuUGJ95WDwmLCrg7l/XoPaLwDdpDUa26pAEFiX/vKmogSTcK54gEzCy0oxc/ 7dQMXqbFMT/9bL8kQXh3P/2BDhOCyPaIGU5ixejKOfEi39SIX97u2jkysQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGVOr0VCOJS5+fvn+WcX10MPq6UGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA5MWMwNDU5LWFmMGEtNGQyYi05YmM4LWI0NjRkYmU1NTlmZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba++AwDQYJKoZIhvcNAQELBQADggEBADNaR1RCm7MroU8Ud6nk Ywz/gUafI8EhbHaPlSLNJseo6LwOtn2T2JvS2pS8WiBITy4gr/MqcxkcMjrnlGt0 iOjPAQp6TsPQN1Gxy4af7WgVkjF8+8TdnvHdJhOaopJYGYHk87ri47ACra1ex5xY Dw5oQneyVBp88D/q5I2QvN5SQLFVpKkyLrKGVb0QixLqa6Et3yYJZ0521v0HoKTd gpxlQNNDbs/nmtRk/TFi93CmwxQ0JUVyNEYXOq1Bc3xJBbXZ8r5tUe5gWMEjG4AQ +D/qyd3bvsf06kyaVe6iQTXksGhHiWeZmagUh1hq6qEcpr2quQKTE3UiMmgke8Js Lis= -----END CERTIFICATE-----Generated at Tue Apr 16 01:09:01 2024 by rpki-client on console-fra.rpki-client.org