$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14e32f4b-b854-4d4d-ac6b-4e18cf9d46d3.roa File: 14e32f4b-b854-4d4d-ac6b-4e18cf9d46d3.roa (raw, json) Hash identifier: osZSevB3pwcm+g8mEcXMcMbPWKt8iQKzCNt5H+mBx4Y= Subject key identifier: D3:A9:B8:F0:99:CD:B5:F1:17:49:C6:26:6C:33:DA:30:8C:F4:1C:FC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F82F9C83337EF5734F66267F6B579EF05D90DA7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14e32f4b-b854-4d4d-ac6b-4e18cf9d46d3.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf9:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:82:f9:c8:33:37:ef:57:34:f6:62:67:f6:b5:79:ef:05:d9:0d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=52c501ae1641fe0b12f9fa4104c8752a6a1d0ed2ad97e8eb993aa0a62311d6f2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:3b:65:b8:76:42:7c:8c:e4:cd:f1:e6:81: 0c:c6:a2:e6:04:4d:70:be:14:fa:3f:48:b4:f8:f2: a5:77:6c:b5:8f:af:33:e3:cf:39:28:29:a5:8e:7b: 76:f3:1b:0f:72:5e:5a:d0:d8:5f:17:6a:bc:93:8e: c0:5f:63:46:67:6a:e0:c8:b6:63:30:91:ca:e9:84: 71:c2:c0:fe:a4:58:f1:5a:98:60:f6:29:78:95:6c: 89:12:fd:64:b2:bd:65:fc:2a:16:f1:af:20:4b:16: 6b:75:6d:dd:b4:e4:ea:84:4e:c9:3f:53:d5:8b:cc: 4e:89:d3:2c:9d:62:b2:a6:41:a0:f3:c1:9b:52:2e: a5:40:d7:ba:ac:4b:ba:1d:32:ff:44:99:12:31:df: 83:3c:a5:6a:04:2b:d0:dd:7c:58:ae:26:a4:71:47: 8c:0a:0a:ce:8d:76:54:8f:8b:7a:bb:bc:9e:73:03: ea:ac:68:3d:03:24:cf:5c:40:ec:06:41:ad:23:6b: f0:44:6a:33:6d:54:34:ed:75:af:7f:57:97:c3:9b: f8:9b:da:c3:9f:99:9f:43:9a:53:bf:ca:91:e8:b6: 90:c8:8e:84:4a:39:da:ec:f1:86:7e:28:5c:f6:ae: 03:7d:ab:2e:8f:24:1a:9b:06:58:28:c9:82:df:f4: aa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A9:B8:F0:99:CD:B5:F1:17:49:C6:26:6C:33:DA:30:8C:F4:1C:FC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/14e32f4b-b854-4d4d-ac6b-4e18cf9d46d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf9:b000::/40 Signature Algorithm: sha256WithRSAEncryption 0a:72:df:38:5a:1c:b3:44:9d:ed:bb:1c:c5:aa:c5:ef:22:d5: b0:86:cc:e0:fa:06:74:d5:b5:cd:1a:1a:94:a1:99:7d:d2:7e: 53:25:66:38:74:c4:f3:6d:b2:b8:86:19:1e:95:26:f5:00:79: fe:47:a4:3a:d3:4e:7d:83:bf:b3:48:e7:b7:49:2b:a5:06:e0: 08:1c:24:f6:af:8c:b5:c5:93:6d:bf:ac:ae:c7:60:03:e8:49: 3a:fd:1b:97:16:3e:7d:5b:68:dc:35:0f:75:57:5d:a8:e5:58: 97:6e:63:5c:a6:5d:10:28:e5:41:b2:f8:cc:94:bf:9b:ef:30: a3:cd:70:33:02:00:23:14:69:da:73:33:62:8c:ad:79:f5:ab: 0b:5c:36:3a:ef:1d:19:86:de:89:8a:f9:c9:97:c3:54:07:b3: 0b:e8:8e:e8:5a:cb:06:b5:d3:06:3b:e5:f5:db:2e:ed:24:e4: 91:89:7e:1e:cc:4a:23:41:bc:d7:43:d5:d6:be:b1:aa:c3:69: b7:02:9b:cf:79:3c:86:17:1d:db:43:4d:6e:10:98:f3:d7:c5: 37:f1:a6:fa:df:42:ca:de:af:1e:ff:f2:b1:b6:a7:96:6e:53: 8a:02:4e:7f:06:60:7f:52:26:4d:c2:e6:cb:0e:c7:a9:c4:85: 97:e5:03:fd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX4L5yDM371c09mJn9rV57wXZDacwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNANTJjNTAxYWUxNjQxZmUwYjEyZjlm YTQxMDRjODc1MmE2YTFkMGVkMmFkOTdlOGViOTkzYWEwYTYyMzExZDZmMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdw7Zbh2QnyM5M3x5oEMxqLmBE1w vhT6P0i0+PKld2y1j68z4885KCmljnt28xsPcl5a0NhfF2q8k47AX2NGZ2rgyLZj MJHK6YRxwsD+pFjxWphg9il4lWyJEv1ksr1l/CoW8a8gSxZrdW3dtOTqhE7JP1PV i8xOidMsnWKypkGg88GbUi6lQNe6rEu6HTL/RJkSMd+DPKVqBCvQ3XxYriakcUeM CgrOjXZUj4t6u7yecwPqrGg9AyTPXEDsBkGtI2vwRGozbVQ07XWvf1eXw5v4m9rD n5mfQ5pTv8qR6LaQyI6ESjna7PGGfihc9q4DfasujyQamwZYKMmC3/SqtQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNOpuPCZzbXxF0nGJmwz2jCM9Bz8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE0ZTMyZjRiLWI4NTQtNGQ0ZC1hYzZiLTRlMThjZjlkNDZkMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+bAwDQYJKoZIhvcNAQELBQADggEBAApy3zhaHLNEne27HMWq xe8i1bCGzOD6BnTVtc0aGpShmX3SflMlZjh0xPNtsriGGR6VJvUAef5HpDrTTn2D v7NI57dJK6UG4AgcJPavjLXFk22/rK7HYAPoSTr9G5cWPn1baNw1D3VXXajlWJdu Y1ymXRAo5UGy+MyUv5vvMKPNcDMCACMUadpzM2KMrXn1qwtcNjrvHRmG3omK+cmX w1QHswvojuhaywa10wY75fXbLu0k5JGJfh7MSiNBvNdD1da+sarDabcCm895PIYX HdtDTW4QmPPXxTfxpvrfQsrerx7/8rG2p5ZuU4oCTn8GYH9SJk3C5ssOx6nEhZfl A/0= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org