$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2640d5-58c8-405a-a109-b09afc21d7bd.roa File: 0e2640d5-58c8-405a-a109-b09afc21d7bd.roa (raw, json) Hash identifier: gW4TwB3Qn4bD5mTR9Llri+gfdXA5v7x9B0ntSk1mlaQ= Subject key identifier: E1:8C:47:6D:23:56:6D:7A:38:F1:15:5E:D2:0C:3C:CC:41:27:C3:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 071A13458555827C9AF5C84E6585802411ED9E28 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2640d5-58c8-405a-a109-b09afc21d7bd.roa Signing time: Tue 19 Sep 2023 00:00:00 +0000 ROA not before: Tue 19 Sep 2023 00:00:00 +0000 ROA not after: Tue 24 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1a:13:45:85:55:82:7c:9a:f5:c8:4e:65:85:80:24:11:ed:9e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:00:00 2023 GMT Not After : Oct 24 23:59:59 2023 GMT Subject: serialNumber=1cf35a48935dd1b54b256a405d577709bd152593c5d2150c686c105575baed54, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:6b:30:86:14:12:ea:68:00:c6:d8:62:3f: 81:a5:e5:c9:10:97:05:07:52:9d:c8:bd:6f:7e:97: 16:6d:c3:85:d3:3a:16:be:08:43:df:d7:3d:17:6c: 0b:12:cb:37:84:e3:65:66:25:cb:71:44:ce:dc:64: 08:ae:c7:48:12:bd:6a:63:da:18:24:0b:de:aa:63: 5f:f9:68:01:b1:7f:31:4d:7c:d6:8d:4f:60:8a:12: 23:93:09:30:7e:3b:fb:7b:6e:56:fb:91:c6:2f:eb: 1d:49:48:b6:7e:50:a1:39:01:f6:7c:d8:10:d5:f2: c1:34:71:93:7e:33:f8:3d:26:fc:f1:ec:f3:4c:dd: 1e:3c:53:60:6a:dd:12:83:25:15:79:cf:3b:b6:b4: aa:88:ab:04:ae:ec:72:ce:00:6a:8a:80:32:af:4c: df:6c:57:a3:bc:a0:42:41:91:a1:d9:30:5f:23:37: ec:e9:25:f6:67:63:74:9c:a1:36:08:f2:0c:30:f9: f1:94:79:97:84:d6:9e:29:87:c1:bc:ad:c7:31:e2: 34:ce:56:d4:02:41:47:46:1b:3c:9e:d3:8b:06:63: ce:f7:ec:4e:d5:fd:db:b8:80:0d:d2:1c:20:ce:31: 50:2f:4b:39:e7:d7:71:f0:13:e5:72:98:9b:ca:08: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:47:6D:23:56:6D:7A:38:F1:15:5E:D2:0C:3C:CC:41:27:C3:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2640d5-58c8-405a-a109-b09afc21d7bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/15 Signature Algorithm: sha256WithRSAEncryption a9:10:01:84:81:2d:4a:32:c0:41:1a:55:2a:64:f2:c2:db:dc: c1:3d:75:6e:01:84:c8:4d:c7:f1:2e:cd:9a:5f:81:21:2d:a3: c8:80:26:68:79:1a:80:46:7d:e7:61:01:11:02:94:16:24:a2: 76:fe:10:ac:6c:d1:92:87:6a:7b:d3:f0:f7:4c:e2:8d:65:f0: 14:de:93:76:de:28:67:3e:ee:41:af:7d:ff:19:4d:f2:a0:7d: eb:24:d3:f4:13:ba:24:b9:c3:c7:8a:c1:4a:7b:17:d6:f4:75: e9:99:25:9f:45:d6:6e:a7:10:a7:71:7b:0f:b8:cf:a5:08:52: 0d:2f:2f:bd:56:81:cf:0b:72:62:36:57:f0:50:15:da:c1:00: ff:d9:a8:a5:1b:da:f8:e2:bf:ae:27:28:c5:94:68:3b:e0:53: 26:b1:e1:75:bf:28:00:8d:10:87:da:75:4d:c4:7f:4a:c6:e0: 4f:08:c3:df:cf:77:d9:7b:e2:47:de:34:bd:46:8b:f2:57:01: ba:3d:98:ef:6a:0e:3c:be:c2:45:52:8d:a6:cb:c2:14:bf:bd: f5:77:61:7a:33:fe:54:50:23:a6:a3:cc:2a:24:3e:06:14:a2: f7:4e:55:43:0b:a3:e8:fe:f0:9a:12:6f:c5:2e:65:32:7c:85: 39:ad:14:4f -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUBxoTRYVVgnya9chOZYWAJBHtnigwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxOTAwMDAwMFoX DTIzMTAyNDIzNTk1OVowejFJMEcGA1UEBRNAMWNmMzVhNDg5MzVkZDFiNTRiMjU2 YTQwNWQ1Nzc3MDliZDE1MjU5M2M1ZDIxNTBjNjg2YzEwNTU3NWJhZWQ1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRFrMIYUEupoAMbYYj+BpeXJEJcF B1KdyL1vfpcWbcOF0zoWvghD39c9F2wLEss3hONlZiXLcUTO3GQIrsdIEr1qY9oY JAveqmNf+WgBsX8xTXzWjU9gihIjkwkwfjv7e25W+5HGL+sdSUi2flChOQH2fNgQ 1fLBNHGTfjP4PSb88ezzTN0ePFNgat0SgyUVec87trSqiKsEruxyzgBqioAyr0zf bFejvKBCQZGh2TBfIzfs6SX2Z2N0nKE2CPIMMPnxlHmXhNaeKYfBvK3HMeI0zlbU AkFHRhs8ntOLBmPO9+xO1f3buIAN0hwgzjFQL0s559dx8BPlcpibygjtlQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFOGMR20jVm16OPEVXtIMPMxBJ8POMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlMjY0MGQ1LTU4YzgtNDA1YS1hMTA5LWIwOWFmYzIxZDdiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9wwDQYJKoZIhvcNAQELBQADggEBAKkQAYSBLUoywEEaVSpk8sLb 3ME9dW4BhMhNx/EuzZpfgSEto8iAJmh5GoBGfedhAREClBYkonb+EKxs0ZKHanvT 8PdM4o1l8BTek3beKGc+7kGvff8ZTfKgfesk0/QTuiS5w8eKwUp7F9b0demZJZ9F 1m6nEKdxew+4z6UIUg0vL71Wgc8LcmI2V/BQFdrBAP/ZqKUb2vjiv64nKMWUaDvg Uyax4XW/KACNEIfadU3Ef0rG4E8Iw9/Pd9l74kfeNL1Gi/JXAbo9mO9qDjy+wkVS jabLwhS/vfV3YXoz/lRQI6ajzCokPgYUovdOVUMLo+j+8JoSb8UuZTJ8hTmtFE8= -----END CERTIFICATE-----Generated at Tue Sep 19 00:21:19 2023 by rpki-client on console-fra.rpki-client.org