$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa File: 0e2f1462-567a-429e-af20-4c8510347ac3.roa (raw, json) Hash identifier: rLoz0N5S9yfHzxlNg1BfPtNZ/do/cgvCSc9/cw8LIXE= Subject key identifier: 41:60:2F:42:D1:1A:55:21:6E:55:A6:EF:38:AF:C0:A6:BB:F1:6F:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6C0E8ED168D20E466E3E5D76DEF9BCB24C7DA7C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa Signing time: Tue 30 Apr 2024 00:00:00 +0000 ROA not before: Tue 30 Apr 2024 00:00:00 +0000 ROA not after: Tue 04 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0e:8e:d1:68:d2:0e:46:6e:3e:5d:76:de:f9:bc:b2:4c:7d:a7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 30 00:00:00 2024 GMT Not After : Jun 4 23:59:59 2024 GMT Subject: serialNumber=2cc7eed2ce80ae84d3c66f2ee193dd2e7ef2dadb3aca762d58395eb88215277e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:fb:aa:f8:13:a5:64:31:5d:d2:5b:1b:43: d5:3f:96:2d:77:99:b6:8d:36:2f:75:25:60:6b:e9: 7b:fa:57:a6:79:88:27:d3:69:4d:5c:6a:2e:ce:b4: fe:c9:53:1f:35:3f:3f:54:03:75:55:8c:b5:0c:be: 3d:2c:1a:2a:44:65:40:ea:c6:1f:c3:a1:8f:09:62: 36:81:ff:56:12:e6:93:87:f2:5b:c1:26:8e:49:5c: f7:ac:ff:7e:81:0a:8c:77:3f:2c:92:81:89:93:a7: c9:82:bd:8f:3f:c2:4e:21:44:06:aa:22:74:8c:97: 1f:cc:81:cc:7c:92:bd:68:42:a6:7b:8f:2b:04:a4: 4d:6a:be:df:ef:a6:2a:b8:b9:d0:4e:f2:17:c1:2a: a6:8b:5d:67:d2:c2:0a:36:2f:0e:27:25:68:0c:09: c4:21:35:5f:71:e6:ad:36:b2:82:8d:7e:b8:f2:5a: 79:50:dd:3c:25:af:63:a1:24:71:c4:62:7d:41:a7: ad:36:07:f3:72:c1:63:27:38:bc:01:ac:6f:fb:2c: 0f:ce:06:79:aa:be:cc:c8:a3:35:24:3f:86:89:75: f1:55:58:fe:9d:6c:a5:14:2a:44:93:52:d2:bc:5e: 89:48:c8:8d:4e:9f:7c:0f:26:8a:96:50:79:3b:57: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:2F:42:D1:1A:55:21:6E:55:A6:EF:38:AF:C0:A6:BB:F1:6F:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8000::/36 Signature Algorithm: sha256WithRSAEncryption a8:cb:8d:db:10:a9:d7:37:dd:5a:c7:76:39:9e:fd:bc:95:dd: 00:4c:f9:39:f5:b0:7a:78:9c:8f:ef:20:ae:c6:cf:2f:8c:cc: 74:a4:60:69:21:7e:74:00:e1:98:c2:60:d6:f8:a7:8a:f2:72: db:58:cf:06:57:17:a8:0d:c3:06:04:98:8c:53:a0:45:65:d7: 62:41:82:76:a0:68:62:4e:d9:b9:3f:c9:78:ad:19:97:a8:72: 29:59:62:ea:59:55:90:93:07:67:98:bb:97:51:2c:28:20:94: a1:85:f4:55:5e:fe:56:7b:1c:01:67:a1:59:00:48:02:1b:b8: d9:92:cc:a0:5f:d5:6d:b4:8f:5a:67:4b:64:30:5a:a3:61:36: 8d:53:bd:0e:ff:2f:83:66:01:ad:9c:da:d0:0c:c4:28:9c:f3: c5:53:58:2e:e3:52:e4:48:ad:01:38:c0:d2:16:17:c1:7a:67: 53:91:fe:8b:83:d6:a3:43:e7:0d:40:1a:c3:69:43:17:3e:16: bf:90:01:5a:73:c9:c0:17:85:d9:08:15:b0:01:db:f9:e5:f3: f5:0b:c0:d6:3f:50:c8:2e:df:4b:f3:56:90:8f:37:4f:68:62: ee:69:37:e7:10:0b:50:18:27:ae:a2:99:07:98:cb:ef:97:93: 67:e5:fd:8b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbA6O0WjSDkZuPl123vm8skx9p8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQzMDAwMDAwMFoX DTI0MDYwNDIzNTk1OVowejFJMEcGA1UEBRNAMmNjN2VlZDJjZTgwYWU4NGQzYzY2 ZjJlZTE5M2RkMmU3ZWYyZGFkYjNhY2E3NjJkNTgzOTVlYjg4MjE1Mjc3ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl77qvgTpWQxXdJbG0PVP5Ytd5m2 jTYvdSVga+l7+lemeYgn02lNXGouzrT+yVMfNT8/VAN1VYy1DL49LBoqRGVA6sYf w6GPCWI2gf9WEuaTh/JbwSaOSVz3rP9+gQqMdz8skoGJk6fJgr2PP8JOIUQGqiJ0 jJcfzIHMfJK9aEKme48rBKRNar7f76YquLnQTvIXwSqmi11n0sIKNi8OJyVoDAnE ITVfceatNrKCjX648lp5UN08Ja9joSRxxGJ9QaetNgfzcsFjJzi8Aaxv+ywPzgZ5 qr7MyKM1JD+GiXXxVVj+nWylFCpEk1LSvF6JSMiNTp98DyaKllB5O1fA5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEFgL0LRGlUhblWm7zivwKa78W+GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlMmYxNDYyLTU2N2EtNDI5ZS1hZjIwLTRjODUxMDM0N2FjMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaFIAwDQYJKoZIhvcNAQELBQADggEBAKjLjdsQqdc33VrHdjme /byV3QBM+Tn1sHp4nI/vIK7Gzy+MzHSkYGkhfnQA4ZjCYNb4p4rycttYzwZXF6gN wwYEmIxToEVl12JBgnagaGJO2bk/yXitGZeocilZYupZVZCTB2eYu5dRLCgglKGF 9FVe/lZ7HAFnoVkASAIbuNmSzKBf1W20j1pnS2QwWqNhNo1TvQ7/L4NmAa2c2tAM xCic88VTWC7jUuRIrQE4wNIWF8F6Z1OR/ouD1qND5w1AGsNpQxc+Fr+QAVpzycAX hdkIFbAB2/nl8/ULwNY/UMgu30vzVpCPN09oYu5pN+cQC1AYJ66imQeYy++Xk2fl /Ys= -----END CERTIFICATE-----Generated at Thu May 2 17:40:57 2024 by rpki-client on console-fra.rpki-client.org