$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11f2fdee-b71b-465c-aafa-18e96081ee2e.roa File: 11f2fdee-b71b-465c-aafa-18e96081ee2e.roa (raw, json) Hash identifier: 2453BHFyJ6skNAe4iE+SOoeE4Z2XAdNGIpDiub2Enq4= Subject key identifier: 86:57:20:59:A0:C4:D7:E1:C7:53:8E:2F:C7:48:28:0B:CB:A5:F3:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D2AC0F2481344B8C09C3CE04821CF77379A39C8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11f2fdee-b71b-465c-aafa-18e96081ee2e.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2a:c0:f2:48:13:44:b8:c0:9c:3c:e0:48:21:cf:77:37:9a:39:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=ffa9d13f37c47fc19387128399cae3c39bb84a68b211f8fc0e1a2bebdf3ed1ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:f3:49:f1:f5:00:ae:cb:c6:de:19:80:c2: fb:39:ac:ba:5a:91:55:e5:27:d1:50:ea:ee:1e:1a: b2:d9:7b:f8:1e:17:d0:d0:87:47:e7:55:e6:72:12: d6:99:59:88:04:3a:a8:e4:80:02:56:09:fc:ba:f1: f3:2c:fc:0f:34:e6:ba:41:60:7b:01:04:f5:06:95: 7c:75:80:13:50:2d:a1:6f:f8:f0:3d:47:26:c5:e7: a8:d2:b6:78:14:11:0f:4e:9d:b6:2d:b0:f1:e7:76: 51:f5:ed:1f:b9:93:77:0d:c6:ac:2a:64:0a:02:eb: 1d:b9:2a:aa:97:3c:41:0c:c3:09:0a:f3:c6:f1:d2: 6d:bc:c7:99:86:45:22:ac:4f:a2:b6:0e:08:af:fe: bc:80:de:c7:49:ed:a8:b7:df:be:b1:b0:0b:28:69: 76:bb:5c:0d:aa:d6:c8:4b:14:df:19:24:35:b7:bd: c6:44:c1:88:47:e1:69:1d:5e:d6:31:b8:9f:fd:a8: 73:35:32:4d:32:62:9d:cb:8d:5f:4c:10:76:29:e5: 33:83:2e:45:1a:91:ca:ec:b7:0d:1d:9d:77:61:dd: 22:f7:3b:e3:1e:05:c4:34:c5:62:82:c1:30:03:25: 6f:ef:bb:5e:86:d3:99:ff:77:9b:47:ab:98:8e:35: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:57:20:59:A0:C4:D7:E1:C7:53:8E:2F:C7:48:28:0B:CB:A5:F3:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/11f2fdee-b71b-465c-aafa-18e96081ee2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:a000::/40 Signature Algorithm: sha256WithRSAEncryption 39:33:9d:e6:f8:9c:40:1a:c4:96:0a:af:d3:99:05:4b:34:39: 39:b3:a1:fe:c6:0f:2f:13:45:2f:9d:8b:4c:af:23:b8:47:f0: 92:2d:ab:eb:c2:fd:e4:c8:ad:ba:87:ab:76:c7:4b:38:d5:33: 0a:b2:07:ee:8e:db:5e:4f:59:12:fe:3e:25:48:5e:c3:c3:5b: 72:b6:79:f1:06:3a:d3:df:c9:d2:7a:52:57:6a:7f:ee:71:d9: b8:68:28:04:14:57:34:77:95:dc:7e:ba:fe:50:e4:4a:35:ff: ce:72:1c:57:12:76:63:42:86:6f:7e:93:fb:4f:a7:ca:66:f3: d0:4f:4a:8a:d5:5e:2b:6c:3d:c8:7e:90:6c:4f:ea:9d:4f:db: 86:6e:25:a0:dd:b5:cd:2e:62:d8:59:7d:f4:ea:f3:2f:dd:78: a7:9d:2a:1f:a3:83:15:48:50:fb:02:41:f6:02:66:8e:1e:1f: 9d:19:78:73:d7:eb:e4:fd:fa:4e:6a:bb:b7:67:ae:d5:c3:52: bc:d7:fc:c7:0a:0a:68:bc:8a:d4:67:9f:13:13:4d:ed:37:bc: c9:1a:d9:cf:41:52:03:71:f1:29:cd:73:54:8f:6a:7c:99:06: d5:a4:4a:5b:2e:66:59:e8:0f:07:6b:50:b3:5f:26:84:6d:0f: b8:69:68:22 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDSrA8kgTRLjAnDzgSCHPdzeaOcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAZmZhOWQxM2YzN2M0N2ZjMTkzODcx MjgzOTljYWUzYzM5YmI4NGE2OGIyMTFmOGZjMGUxYTJiZWJkZjNlZDFiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVTzSfH1AK7Lxt4ZgML7Oay6WpFV 5SfRUOruHhqy2Xv4HhfQ0IdH51XmchLWmVmIBDqo5IACVgn8uvHzLPwPNOa6QWB7 AQT1BpV8dYATUC2hb/jwPUcmxeeo0rZ4FBEPTp22LbDx53ZR9e0fuZN3DcasKmQK AusduSqqlzxBDMMJCvPG8dJtvMeZhkUirE+itg4Ir/68gN7HSe2ot9++sbALKGl2 u1wNqtbISxTfGSQ1t73GRMGIR+FpHV7WMbif/ahzNTJNMmKdy41fTBB2KeUzgy5F GpHK7LcNHZ13Yd0i9zvjHgXENMVigsEwAyVv77tehtOZ/3ebR6uYjjW8YwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIZXIFmgxNfhx1OOL8dIKAvLpfMrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzExZjJmZGVlLWI3MWItNDY1Yy1hYWZhLTE4ZTk2MDgxZWUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+6AwDQYJKoZIhvcNAQELBQADggEBADkzneb4nEAaxJYKr9OZ BUs0OTmzof7GDy8TRS+di0yvI7hH8JItq+vC/eTIrbqHq3bHSzjVMwqyB+6O215P WRL+PiVIXsPDW3K2efEGOtPfydJ6Uldqf+5x2bhoKAQUVzR3ldx+uv5Q5Eo1/85y HFcSdmNChm9+k/tPp8pm89BPSorVXitsPch+kGxP6p1P24ZuJaDdtc0uYthZffTq 8y/deKedKh+jgxVIUPsCQfYCZo4eH50ZeHPX6+T9+k5qu7dnrtXDUrzX/McKCmi8 itRnnxMTTe03vMka2c9BUgNx8SnNc1SPanyZBtWkSlsuZlnoDwdrULNfJoRtD7hp aCI= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org