$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0cd8066d-3f8d-48c1-8221-f7790e3c6384.roa File: 0cd8066d-3f8d-48c1-8221-f7790e3c6384.roa (raw, json) Hash identifier: vtL0Lz58IPSm4HJONq26WMfeMnCl3r41tnV1Ie4Lhwc= Subject key identifier: E5:40:DB:43:C3:26:79:8A:1D:15:E6:6E:EC:31:05:55:22:F1:E5:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4F7CD015A2FC96042FD0D4B097463346AB7E0969 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0cd8066d-3f8d-48c1-8221-f7790e3c6384.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7c:d0:15:a2:fc:96:04:2f:d0:d4:b0:97:46:33:46:ab:7e:09:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=fd835c6c01941a776b8a384cc6defa7d9bb82185fa51e2a39191ef8341bcc932, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:21:d3:64:6b:7f:98:d4:9e:a3:91:fa:cd: e4:3b:25:b0:77:68:86:6e:a4:12:00:c1:fc:ad:b4: 62:03:c1:91:40:f7:78:71:26:76:ef:ff:b4:52:be: 48:2f:40:a8:54:57:bf:ce:92:b4:aa:a6:ee:1f:e7: 3a:8d:02:0c:6c:d0:24:fc:96:1f:03:4a:49:e8:ee: aa:0a:fd:ac:a1:fb:b6:08:69:a7:d2:d9:c0:56:a4: 84:5d:9e:59:6f:da:21:57:8a:19:ba:97:85:19:e4: eb:cb:89:f3:58:16:2a:f7:8d:2a:86:fa:ee:38:8a: 4f:c3:8d:1b:63:0c:70:e6:51:f5:2c:7c:19:ce:80: 85:7c:80:f1:a4:3b:5f:2f:82:20:eb:00:6b:4d:c1: fd:8f:6b:b1:10:57:79:73:cf:9d:2a:66:11:9e:2e: 14:98:8d:cb:32:0b:7f:0c:92:94:76:74:50:f4:8b: 3d:1e:6e:71:d2:b0:ce:30:85:d9:b9:90:43:33:27: e3:9b:e2:15:82:8d:8f:08:8f:10:74:66:8e:2c:56: c3:71:5b:ed:d7:c5:e5:bc:9f:e5:1c:25:46:8b:89: 0b:33:95:83:db:2c:69:f4:e3:df:38:f3:a5:1c:cd: 4e:44:6f:e4:c2:45:3f:4d:09:42:6a:20:3a:0a:38: 78:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:DB:43:C3:26:79:8A:1D:15:E6:6E:EC:31:05:55:22:F1:E5:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0cd8066d-3f8d-48c1-8221-f7790e3c6384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8800::/40 Signature Algorithm: sha256WithRSAEncryption 0f:95:63:7e:dc:5b:02:47:e2:8a:c6:f8:05:e0:dd:4d:20:fa: a7:d1:eb:18:0f:2d:47:b9:26:db:25:d8:fd:7a:a3:3a:3d:e2: 23:6f:dc:ef:5e:ad:2c:6c:2d:d4:d4:46:b1:db:69:d4:a1:e2: e9:15:a8:8f:4c:03:22:8e:ec:9c:e7:f4:e4:22:ae:7a:85:0d: 9d:ae:9f:fe:f0:10:d2:43:77:3a:f5:f3:ac:b4:44:a6:87:4c: 7a:10:fb:2d:12:a4:29:02:0b:6d:78:bb:31:18:77:db:1a:6a: b8:79:1d:7e:67:65:65:73:f9:ca:05:19:2c:34:75:38:85:ca: 12:39:0f:77:79:4f:eb:a5:b2:6b:dc:2a:12:04:35:b8:df:a1: 73:88:d2:3c:50:61:ae:2a:6b:38:fe:cd:2b:c0:49:52:26:68: 16:ea:c6:54:48:4d:23:3a:a2:2a:17:61:81:7d:c7:bd:4e:b2: 60:24:63:8d:17:7c:23:73:76:26:27:8b:ef:ff:a6:1a:ff:eb: 9c:58:c1:c0:e4:b3:6e:a3:1b:09:af:e9:b8:45:0d:54:b4:df: 59:06:67:93:84:44:4b:9d:95:ec:ea:88:19:48:bf:97:c6:1e: 80:9d:f2:ee:79:94:c4:ab:62:96:5a:9f:97:fb:ad:76:c9:1a: 5c:7a:2f:b2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUT3zQFaL8lgQv0NSwl0YzRqt+CWkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEwNTAwMDAwMFoX DTI0MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAZmQ4MzVjNmMwMTk0MWE3NzZiOGEz ODRjYzZkZWZhN2Q5YmI4MjE4NWZhNTFlMmEzOTE5MWVmODM0MWJjYzkzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKYh02Rrf5jUnqOR+s3kOyWwd2iG bqQSAMH8rbRiA8GRQPd4cSZ27/+0Ur5IL0CoVFe/zpK0qqbuH+c6jQIMbNAk/JYf A0pJ6O6qCv2sofu2CGmn0tnAVqSEXZ5Zb9ohV4oZupeFGeTry4nzWBYq940qhvru OIpPw40bYwxw5lH1LHwZzoCFfIDxpDtfL4Ig6wBrTcH9j2uxEFd5c8+dKmYRni4U mI3LMgt/DJKUdnRQ9Is9Hm5x0rDOMIXZuZBDMyfjm+IVgo2PCI8QdGaOLFbDcVvt 18XlvJ/lHCVGi4kLM5WD2yxp9OPfOPOlHM1ORG/kwkU/TQlCaiA6Cjh41wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOVA20PDJnmKHRXmbuwxBVUi8eV1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBjZDgwNjZkLTNmOGQtNDhjMS04MjIxLWY3NzkwZTNjNjM4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaYgwDQYJKoZIhvcNAQELBQADggEBAA+VY37cWwJH4orG+AXg 3U0g+qfR6xgPLUe5Jtsl2P16ozo94iNv3O9erSxsLdTURrHbadSh4ukVqI9MAyKO 7Jzn9OQirnqFDZ2un/7wENJDdzr186y0RKaHTHoQ+y0SpCkCC214uzEYd9saarh5 HX5nZWVz+coFGSw0dTiFyhI5D3d5T+ulsmvcKhIENbjfoXOI0jxQYa4qazj+zSvA SVImaBbqxlRITSM6oioXYYF9x71OsmAkY40XfCNzdiYni+//phr/65xYwcDks26j Gwmv6bhFDVS031kGZ5OEREudlezqiBlIv5fGHoCd8u55lMSrYpZan5f7rXbJGlx6 L7I= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org