$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa File: 0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa (raw, json) Hash identifier: LOO5WtuRcNXOLijnGcp0Ay2D2AI8WLu+4MZlAD2Y6N8= Subject key identifier: 2A:F9:73:21:E2:FC:56:19:90:A6:D8:FA:3B:73:42:EF:6E:4F:A8:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A9EBA8F447FCA328333D321F02D9CC251E46D6F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9e:ba:8f:44:7f:ca:32:83:33:d3:21:f0:2d:9c:c2:51:e4:6d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=900be163b1618dcf7ab182bf5d612e3e942028a62a76d67894cfa953530e0494, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:b4:6b:97:72:97:d7:c3:d2:68:f6:55:91: 02:de:d8:ef:0a:cf:e0:43:c1:9b:71:70:ea:f2:e1: d3:0f:ca:93:a6:3e:4a:b2:00:75:dc:9f:e2:be:5a: e0:28:aa:f7:dd:31:53:6f:b2:1e:45:4a:18:d6:22: 9a:bf:c0:e7:86:49:6c:68:5e:8c:87:f8:b8:2b:8a: 62:72:c7:82:25:cd:99:b6:6f:d0:de:ef:e1:38:73: 86:af:37:69:a9:67:c4:0b:9f:24:dc:22:31:08:1d: 54:56:a4:8d:f7:db:cf:5e:da:14:f3:26:1e:6c:b7: 0f:8c:52:55:51:f3:34:ac:94:3b:51:85:4c:60:de: af:5a:c3:6e:41:57:b7:9b:43:38:c2:4f:3d:c5:2d: cb:af:68:7b:c5:b9:e8:e1:03:c5:65:ca:ee:e1:41: 23:d2:d2:8c:e8:ea:82:26:78:cb:aa:7f:fd:ba:8e: 63:55:3a:85:00:c2:7a:ac:60:b3:f0:f4:db:28:aa: b6:19:4c:ee:6a:50:a3:73:95:8d:69:0e:57:02:ab: d0:09:fe:31:d6:1e:ad:a4:be:77:cb:fe:b4:f3:a8: 73:d8:8f:8a:a9:ad:b6:46:8a:95:94:44:24:c9:b2: ba:d0:41:ee:60:49:b1:56:fd:c8:f4:da:c1:19:0b: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F9:73:21:E2:FC:56:19:90:A6:D8:FA:3B:73:42:EF:6E:4F:A8:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b000::/40 Signature Algorithm: sha256WithRSAEncryption bb:e2:c5:05:81:14:b7:8e:94:8d:5f:19:f2:3c:69:f4:db:ce: 68:cd:d9:94:cb:c3:8f:cb:64:18:d4:ba:6d:b8:0f:60:9b:0e: da:76:a8:29:53:21:7f:37:59:45:0d:dd:be:2a:30:6c:c1:ca: 49:f0:d2:37:d8:3d:c3:43:a0:9a:95:01:64:c0:c7:55:85:56: 23:6b:3a:ff:fd:43:93:82:68:a0:86:d0:c6:ec:3e:e3:b7:e7: 63:bb:58:bc:eb:36:c8:41:9b:41:a3:0c:f2:2d:a4:a8:71:d9: ad:8a:10:3d:93:c7:9b:c2:99:1d:30:44:e7:b1:56:2f:46:2e: 74:c9:23:22:95:66:f3:98:5b:a5:d5:f8:8c:71:da:f2:4d:85: c2:b1:3a:32:aa:55:6f:f2:86:68:67:3e:d0:3e:65:05:6d:c4: 68:21:88:40:98:4e:a3:de:ec:ab:61:08:cd:73:1b:16:94:1e: 16:4a:87:f0:d6:d1:2b:b1:1c:19:b4:f8:95:0a:0b:0e:35:53: 74:71:ce:66:38:e3:6d:1d:71:ba:6d:79:f8:db:7d:6f:0e:e9: ce:5f:3c:ed:ed:43:8a:e4:a6:0b:9d:22:98:54:8f:39:74:ca: b9:af:37:1a:6b:00:80:89:2e:23:7b:fb:fe:42:57:7b:2c:d2: cf:10:37:e7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWp66j0R/yjKDM9Mh8C2cwlHkbW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAOTAwYmUxNjNiMTYxOGRjZjdhYjE4 MmJmNWQ2MTJlM2U5NDIwMjhhNjJhNzZkNjc4OTRjZmE5NTM1MzBlMDQ5NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4W0a5dyl9fD0mj2VZEC3tjvCs/g Q8GbcXDq8uHTD8qTpj5KsgB13J/ivlrgKKr33TFTb7IeRUoY1iKav8DnhklsaF6M h/i4K4picseCJc2Ztm/Q3u/hOHOGrzdpqWfEC58k3CIxCB1UVqSN99vPXtoU8yYe bLcPjFJVUfM0rJQ7UYVMYN6vWsNuQVe3m0M4wk89xS3Lr2h7xbno4QPFZcru4UEj 0tKM6OqCJnjLqn/9uo5jVTqFAMJ6rGCz8PTbKKq2GUzualCjc5WNaQ5XAqvQCf4x 1h6tpL53y/6086hz2I+Kqa22RoqVlEQkybK60EHuYEmxVv3I9NrBGQvWxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCr5cyHi/FYZkKbY+jtzQu9uT6jCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmNDBjZGFhLTQ5N2EtNDc5MC1hZjNlLTVkN2M0OWZhNDlmMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaALAwDQYJKoZIhvcNAQELBQADggEBALvixQWBFLeOlI1fGfI8 afTbzmjN2ZTLw4/LZBjUum24D2CbDtp2qClTIX83WUUN3b4qMGzByknw0jfYPcND oJqVAWTAx1WFViNrOv/9Q5OCaKCG0MbsPuO352O7WLzrNshBm0GjDPItpKhx2a2K ED2Tx5vCmR0wROexVi9GLnTJIyKVZvOYW6XV+Ixx2vJNhcKxOjKqVW/yhmhnPtA+ ZQVtxGghiECYTqPe7KthCM1zGxaUHhZKh/DW0SuxHBm0+JUKCw41U3RxzmY4420d cbptefjbfW8O6c5fPO3tQ4rkpgudIphUjzl0yrmvNxprAICJLiN7+/5CV3ss0s8Q N+c= -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org