$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13ddd53e-3089-45ac-af7b-4c7931bf479b.roa File: 13ddd53e-3089-45ac-af7b-4c7931bf479b.roa (raw, json) Hash identifier: yAFhUtJherRADvHdu/TlssUG3OfVoySDfJ92f1tbFG4= Subject key identifier: 46:17:F5:19:9E:52:50:8C:D1:6E:9A:F7:73:C0:9C:4A:75:AA:73:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A4FD55E37F4702CFEFD57880FD2144BF747EFF3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13ddd53e-3089-45ac-af7b-4c7931bf479b.roa Signing time: Sat 20 Jul 2024 00:00:00 +0000 ROA not before: Sat 20 Jul 2024 00:00:00 +0000 ROA not after: Sat 24 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4f:d5:5e:37:f4:70:2c:fe:fd:57:88:0f:d2:14:4b:f7:47:ef:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 20 00:00:00 2024 GMT Not After : Aug 24 23:59:59 2024 GMT Subject: serialNumber=f25aade8bf3a7453c1039d3b8b5c21f170e2171f6bff8aea0411b83883f7cd1e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:2a:31:5a:6b:2a:23:67:07:80:bc:bd:a6: 66:17:70:7f:e0:ec:b2:38:a6:81:d2:e4:8a:2d:4e: 00:fb:9f:5b:da:8d:bf:2c:22:c4:e9:f1:f6:75:7d: e2:fa:07:ba:30:e6:46:dd:92:cf:93:40:f4:00:29: bd:05:a2:2b:20:81:af:1c:a5:52:e5:f5:68:36:27: 35:2c:5e:66:bd:93:f0:52:96:ff:97:e4:f7:de:38: fe:e6:e6:2e:c9:d8:af:5d:44:c3:8e:26:b1:3f:52: af:12:7e:33:af:f0:21:4f:7c:1a:3a:fe:9d:e6:27: 61:50:da:d6:8b:37:1e:b2:91:bc:fb:43:4e:d7:4f: 89:7b:54:f3:9c:6f:43:7e:be:58:a2:76:8c:0b:84: 25:f7:63:ab:6b:56:67:8e:01:9f:64:53:4d:45:d8: 05:22:c6:c0:79:9f:fc:b4:00:99:a8:00:bf:bb:89: 90:a1:44:c7:02:d8:c7:15:92:39:bb:e5:37:03:de: 9d:ab:9c:d1:b7:00:7c:33:77:c9:d9:3c:7b:ac:12: c5:43:7a:d9:4c:5d:b4:c5:16:6d:04:ba:1a:19:3b: a8:aa:ee:af:77:e1:f4:b4:b7:f7:7f:f3:f8:53:29: 1c:b0:f6:18:1a:d3:a9:84:ba:be:69:91:e9:c4:a9: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:17:F5:19:9E:52:50:8C:D1:6E:9A:F7:73:C0:9C:4A:75:AA:73:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13ddd53e-3089-45ac-af7b-4c7931bf479b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:800::/40 Signature Algorithm: sha256WithRSAEncryption a8:56:29:53:e4:99:ee:93:2c:32:ba:82:51:92:8f:4c:a4:05: 93:e5:9a:e6:3a:9c:b7:9c:26:83:f0:38:60:4c:be:b7:f0:29: 3d:fd:90:26:c8:c8:4b:3c:16:3d:42:eb:e1:b2:87:76:4c:e0: c3:33:5f:66:d5:c7:c5:0f:32:85:81:27:1b:67:2e:e3:1f:60: ec:df:0a:a6:40:b0:23:e7:ac:b9:92:0a:36:31:b6:e0:c8:71: a0:22:bb:33:15:03:d5:59:89:3f:19:85:07:29:a1:3b:9c:69: 94:71:a7:fe:5e:e7:fd:29:4e:ca:f3:25:00:d7:a2:35:de:73: 81:37:cb:5d:99:ca:c7:14:f7:41:25:60:cd:e6:9a:f9:9c:4a: a9:47:4a:14:9d:48:68:29:fa:5a:d9:61:f4:59:1f:e1:9d:bb: f1:27:78:af:f9:75:c1:a0:53:40:5b:bb:9d:04:1f:ff:3c:9a: 37:70:c4:5a:8b:6e:c1:d2:48:75:57:72:b7:cf:a8:52:20:cf: 40:5a:c2:c6:9d:61:47:14:b4:ba:85:b7:c2:f2:cf:fb:36:3f: 07:55:b2:4d:c6:22:06:f8:ae:75:7b:9e:59:91:ef:fb:01:6b: f3:ee:f6:8a:b6:6e:83:50:a2:db:ef:2b:5c:1b:6f:be:e4:38: 87:dd:41:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCk/VXjf0cCz+/VeID9IUS/dH7/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcyMDAwMDAwMFoX DTI0MDgyNDIzNTk1OVowejFJMEcGA1UEBRNAZjI1YWFkZThiZjNhNzQ1M2MxMDM5 ZDNiOGI1YzIxZjE3MGUyMTcxZjZiZmY4YWVhMDQxMWI4Mzg4M2Y3Y2QxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i8qMVprKiNnB4C8vaZmF3B/4Oyy OKaB0uSKLU4A+59b2o2/LCLE6fH2dX3i+ge6MOZG3ZLPk0D0ACm9BaIrIIGvHKVS 5fVoNic1LF5mvZPwUpb/l+T33jj+5uYuydivXUTDjiaxP1KvEn4zr/AhT3waOv6d 5idhUNrWizcespG8+0NO10+Je1TznG9Dfr5YonaMC4Ql92Ora1ZnjgGfZFNNRdgF IsbAeZ/8tACZqAC/u4mQoUTHAtjHFZI5u+U3A96dq5zRtwB8M3fJ2Tx7rBLFQ3rZ TF20xRZtBLoaGTuoqu6vd+H0tLf3f/P4UykcsPYYGtOphLq+aZHpxKlHUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEYX9RmeUlCM0W6a93PAnEp1qnNlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzZGRkNTNlLTMwODktNDVhYy1hZjdiLTRjNzkzMWJmNDc5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9wgwDQYJKoZIhvcNAQELBQADggEBAKhWKVPkme6TLDK6glGS j0ykBZPlmuY6nLecJoPwOGBMvrfwKT39kCbIyEs8Fj1C6+Gyh3ZM4MMzX2bVx8UP MoWBJxtnLuMfYOzfCqZAsCPnrLmSCjYxtuDIcaAiuzMVA9VZiT8ZhQcpoTucaZRx p/5e5/0pTsrzJQDXojXec4E3y12ZyscU90ElYM3mmvmcSqlHShSdSGgp+lrZYfRZ H+Gdu/EneK/5dcGgU0Bbu50EH/88mjdwxFqLbsHSSHVXcrfPqFIgz0BawsadYUcU tLqFt8Lyz/s2PwdVsk3GIgb4rnV7nlmR7/sBa/Pu9oq2boNQotvvK1wbb77kOIfd QRY= -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:39 2024 by rpki-client on console-ams.rpki-client.org