$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa File: 0e2f1462-567a-429e-af20-4c8510347ac3.roa (raw, json) Hash identifier: zjNUj0vXHYWabAqh3VT5R6vYoQrMkZpFWP3x3JTlZ14= Subject key identifier: 99:F3:81:13:C3:56:F5:72:B9:7C:48:82:1F:DE:CF:AA:7B:2A:3A:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 379FBFB9D02B34146B4EAAE4D2C1C4766E875121 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa Signing time: Mon 15 Jul 2024 00:00:00 +0000 ROA not before: Mon 15 Jul 2024 00:00:00 +0000 ROA not after: Mon 19 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9f:bf:b9:d0:2b:34:14:6b:4e:aa:e4:d2:c1:c4:76:6e:87:51:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 15 00:00:00 2024 GMT Not After : Aug 19 23:59:59 2024 GMT Subject: serialNumber=b6beb0ae2f17097caac9089d2cf29304ba99b8bfed4baccfa1e29be39b57169e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:a5:5f:70:f4:55:53:1e:7d:93:b2:46:48: 03:9d:38:2c:7a:21:b8:4b:df:83:67:2e:44:37:86: a0:04:5c:ec:10:c9:d6:aa:76:24:00:4a:a4:66:24: 56:05:8c:b5:aa:b5:f2:34:ad:c7:4e:d2:3e:e1:cb: 5c:14:46:d1:1e:2c:e1:a6:2b:69:7d:13:d8:3d:f1: e7:66:5e:6d:5f:4b:b0:4c:b7:ec:2c:02:c7:f9:36: 95:f4:93:12:5e:d0:f2:b0:d1:9e:6a:43:db:01:79: ae:8c:9d:d9:05:6e:cd:bb:c5:d2:f5:52:f2:f9:8a: 9d:23:b7:05:55:43:f0:e4:96:d9:8b:49:65:38:1e: 2a:5e:be:30:6a:92:89:66:1a:a6:28:b2:40:a2:4a: 9c:56:5b:3e:2f:85:8a:07:bd:12:5a:42:03:44:02: 85:96:f2:1b:bc:51:20:32:ac:dd:67:ab:8d:fd:76: 6b:e2:ba:b4:ca:46:0c:04:f0:62:84:43:cd:61:4d: 7a:53:b5:0c:b1:f2:95:bd:1d:fb:1c:19:b2:dc:84: 3d:9c:70:a4:41:b4:06:90:49:b1:68:00:6e:b1:c4: 76:24:22:15:94:c7:56:21:a6:4a:f3:6b:01:05:84: 2e:2c:41:bf:6e:20:0e:79:d4:5c:9b:a7:b1:2e:5c: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F3:81:13:C3:56:F5:72:B9:7C:48:82:1F:DE:CF:AA:7B:2A:3A:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8000::/36 Signature Algorithm: sha256WithRSAEncryption 64:77:1f:1f:06:15:62:31:e8:a9:5b:a1:bc:d5:b5:4f:86:0e: 91:56:53:ba:7a:78:1a:51:21:69:43:5c:4f:7e:b1:02:29:5b: 4a:2c:86:0f:ca:da:e5:1f:26:ec:08:a7:8c:b4:38:ca:56:ce: 6a:1e:3f:1b:78:96:c9:0d:59:e8:3e:e7:3f:e8:70:2f:6d:4b: b0:c2:3d:cb:b3:9a:c8:0e:df:4f:46:a3:4e:3d:b6:83:11:2a: 7c:62:b2:01:0a:c8:73:f6:5a:50:9a:dc:f1:df:34:45:2e:04: 20:8f:ce:20:45:8f:ce:7c:eb:e0:16:5f:0e:d2:30:71:0e:d1: d7:8e:d2:a2:2e:2a:56:4b:fb:7d:a8:dc:6a:12:2a:b2:94:e6: 5c:eb:0d:94:84:7d:21:f5:ed:99:8d:fa:c3:54:7d:d6:14:7e: 5a:c2:4d:35:7e:fc:38:74:19:43:bc:54:38:45:ed:b1:d2:15: 84:db:9f:3c:ca:2a:ad:f2:24:9a:c0:8a:f4:ad:58:fa:cb:c9: ed:f9:6d:b7:33:2c:5c:9e:52:35:7c:fc:11:06:7b:58:c3:1f: 2a:fc:cf:f0:56:f7:3e:08:42:ff:1d:f0:de:4c:8b:aa:4d:81: 95:bb:53:06:4d:c5:43:ef:88:08:8b:a9:29:04:74:61:6f:55: 45:2f:04:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN5+/udArNBRrTqrk0sHEdm6HUSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNTAwMDAwMFoX DTI0MDgxOTIzNTk1OVowejFJMEcGA1UEBRNAYjZiZWIwYWUyZjE3MDk3Y2FhYzkw ODlkMmNmMjkzMDRiYTk5YjhiZmVkNGJhY2NmYTFlMjliZTM5YjU3MTY5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJKlX3D0VVMefZOyRkgDnTgseiG4 S9+DZy5EN4agBFzsEMnWqnYkAEqkZiRWBYy1qrXyNK3HTtI+4ctcFEbRHizhpitp fRPYPfHnZl5tX0uwTLfsLALH+TaV9JMSXtDysNGeakPbAXmujJ3ZBW7Nu8XS9VLy +YqdI7cFVUPw5JbZi0llOB4qXr4wapKJZhqmKLJAokqcVls+L4WKB70SWkIDRAKF lvIbvFEgMqzdZ6uN/XZr4rq0ykYMBPBihEPNYU16U7UMsfKVvR37HBmy3IQ9nHCk QbQGkEmxaABuscR2JCIVlMdWIaZK82sBBYQuLEG/biAOedRcm6exLlyO8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJnzgRPDVvVyuXxIgh/ez6p7KjrhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlMmYxNDYyLTU2N2EtNDI5ZS1hZjIwLTRjODUxMDM0N2FjMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaFIAwDQYJKoZIhvcNAQELBQADggEBAGR3Hx8GFWIx6KlbobzV tU+GDpFWU7p6eBpRIWlDXE9+sQIpW0oshg/K2uUfJuwIp4y0OMpWzmoePxt4lskN Weg+5z/ocC9tS7DCPcuzmsgO309Go049toMRKnxisgEKyHP2WlCa3PHfNEUuBCCP ziBFj8586+AWXw7SMHEO0deO0qIuKlZL+32o3GoSKrKU5lzrDZSEfSH17ZmN+sNU fdYUflrCTTV+/Dh0GUO8VDhF7bHSFYTbnzzKKq3yJJrAivStWPrLye35bbczLFye UjV8/BEGe1jDHyr8z/BW9z4IQv8d8N5Mi6pNgZW7UwZNxUPviAiLqSkEdGFvVUUv BCs= -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:39 2024 by rpki-client on console-ams.rpki-client.org