$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa File: 0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa (raw, json) Hash identifier: xF0fNK7TDwMl5YNLtA2QjUmmLYZsKA6yLkyU14Y3xMI= Subject key identifier: 20:67:56:5E:9F:D1:70:93:2F:B3:FA:C2:82:71:B4:48:AF:F0:08:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 561625815BC854676AB5390BDC8206A4AF8EDDC0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:16:25:81:5b:c8:54:67:6a:b5:39:0b:dc:82:06:a4:af:8e:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=4a058137f72ab8b9c1a1979feb5dafd3529122b04668b283d3cf2062d1b00e4d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ac:d9:55:2a:85:94:49:e6:7d:37:cf:ed:6c: 0d:34:e1:69:26:4c:d3:59:10:7e:06:c7:94:4d:be: 9f:af:59:d6:27:b0:0d:6e:3c:54:98:a7:8e:ad:0e: ae:04:b5:35:ec:0e:cf:fc:31:0f:63:86:65:d2:37: d3:61:27:51:e4:d1:88:f9:80:75:da:9c:f9:56:fc: 35:c6:4a:20:7e:85:c0:c6:8d:5c:02:71:42:c6:93: ee:9f:be:ec:01:e1:50:54:b7:00:31:00:3b:8b:85: cd:78:19:d5:a9:f3:bf:ac:0b:c0:93:9d:3b:c4:50: e4:a1:4e:52:05:16:5c:a0:f8:39:58:e4:76:d3:f6: 4d:6c:c0:9b:c8:b5:64:e3:d9:3e:45:e5:26:16:e6: 92:6b:a7:b2:b7:84:9a:1a:5e:ed:9f:a1:ec:7a:59: f8:22:4d:54:a7:6f:54:b4:f1:b9:13:a7:ff:4d:5e: c3:7c:ca:b2:69:a1:c3:0a:84:0d:1b:7f:67:90:b4: e0:17:31:43:5e:50:7e:4b:e8:f2:b1:ea:0e:8b:ec: b8:bf:59:e1:0a:17:ad:b3:ee:27:5b:6f:ee:36:65: 95:bc:9f:77:ce:1f:b3:56:9a:4e:83:a8:cb:f1:cc: 45:4f:28:ea:8c:41:98:8c:e1:50:37:c1:d0:04:4e: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:67:56:5E:9F:D1:70:93:2F:B3:FA:C2:82:71:B4:48:AF:F0:08:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b56e20f-0cd2-4f0a-95f3-f9ce6d3670e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:7000::/40 Signature Algorithm: sha256WithRSAEncryption 96:ff:ad:74:8b:17:3f:ca:3b:ef:4a:68:d8:16:e7:e6:fc:a0: 6f:49:e9:d0:b8:5a:50:98:33:36:e2:ba:13:70:01:61:e0:4c: ab:52:9c:2e:a6:d9:a8:a1:01:26:d6:ec:9e:c4:fd:58:8f:70: b5:3f:1c:08:2e:29:d8:bf:c6:68:7d:f3:88:00:e8:f3:f0:40: c1:c1:3b:50:3e:ca:f6:e2:13:44:40:56:0a:63:73:eb:52:fa: 4f:e8:1c:86:8d:0b:b4:66:85:e2:61:9d:fe:b3:41:ce:6c:e6: ee:6d:f9:5f:00:eb:f7:d8:e0:b1:e5:c1:b1:82:0b:c5:86:72: 99:aa:44:5d:83:2e:f5:dc:37:64:e6:b8:39:7b:0d:d2:40:d5: 07:28:df:4c:cf:c0:fe:51:92:de:99:a7:c8:da:d7:f2:7a:bb: f6:65:cc:cb:67:5f:4c:24:77:0a:76:4d:1b:31:f7:64:99:7d: 8d:d7:58:a8:49:8e:fb:c9:b2:d1:3e:3e:30:ff:8a:a8:c8:b5: 24:57:31:79:7d:19:2b:ef:5c:b5:9a:bf:3b:97:75:79:24:ab: 3c:98:95:4b:e6:9d:33:d4:81:f2:71:a3:a7:06:df:74:80:9b: 55:4a:c9:3b:f2:61:e7:b9:a6:8f:42:f9:09:46:32:ab:65:fa: 94:2c:16:58 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVhYlgVvIVGdqtTkL3IIGpK+O3cAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNANGEwNTgxMzdmNzJhYjhiOWMxYTE5 NzlmZWI1ZGFmZDM1MjkxMjJiMDQ2NjhiMjgzZDNjZjIwNjJkMWIwMGU0ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9azZVSqFlEnmfTfP7WwNNOFpJkzT WRB+BseUTb6fr1nWJ7ANbjxUmKeOrQ6uBLU17A7P/DEPY4Zl0jfTYSdR5NGI+YB1 2pz5Vvw1xkogfoXAxo1cAnFCxpPun77sAeFQVLcAMQA7i4XNeBnVqfO/rAvAk507 xFDkoU5SBRZcoPg5WOR20/ZNbMCbyLVk49k+ReUmFuaSa6eyt4SaGl7tn6Hseln4 Ik1Up29UtPG5E6f/TV7DfMqyaaHDCoQNG39nkLTgFzFDXlB+S+jyseoOi+y4v1nh Chets+4nW2/uNmWVvJ93zh+zVppOg6jL8cxFTyjqjEGYjOFQN8HQBE68ewIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCBnVl6f0XCTL7P6woJxtEiv8AiUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBiNTZlMjBmLTBjZDItNGYwYS05NWYzLWY5Y2U2ZDM2NzBlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAHAwDQYJKoZIhvcNAQELBQADggEBAJb/rXSLFz/KO+9KaNgW 5+b8oG9J6dC4WlCYMzbiuhNwAWHgTKtSnC6m2aihASbW7J7E/ViPcLU/HAguKdi/ xmh984gA6PPwQMHBO1A+yvbiE0RAVgpjc+tS+k/oHIaNC7RmheJhnf6zQc5s5u5t +V8A6/fY4LHlwbGCC8WGcpmqRF2DLvXcN2TmuDl7DdJA1Qco30zPwP5Rkt6Zp8ja 1/J6u/ZlzMtnX0wkdwp2TRsx92SZfY3XWKhJjvvJstE+PjD/iqjItSRXMXl9GSvv XLWavzuXdXkkqzyYlUvmnTPUgfJxo6cG33SAm1VKyTvyYee5po9C+QlGMqtl+pQs Flg= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:39 2024 by rpki-client on console-fra.rpki-client.org