$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa File: 1540c3fc-a358-468a-8b3b-ad533b744ee9.roa (raw, json) Hash identifier: JCadyeNzytfaSSaDhdmLO70NDBXjPj4MPzmciYamGQY= Subject key identifier: 2C:CE:2B:0B:40:9D:64:87:65:FC:D7:6F:74:F6:D2:C8:BB:1C:F9:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A6CAD7FC430664B4A968919B3F0602408A3331A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6c:ad:7f:c4:30:66:4b:4a:96:89:19:b3:f0:60:24:08:a3:33:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=d9bf1b41ac9d94c1ec967e09d447806dbe4545c3f5ebcff6cecec1af77f0abb4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:ce:57:26:90:1e:38:e9:b1:30:30:96:c2: 59:ee:10:5b:d9:0c:cd:52:07:a4:28:e3:b1:be:29: a2:b5:36:8f:5e:7d:06:11:76:27:64:d7:7b:c5:ac: ad:1b:97:07:3e:e7:68:60:f8:10:aa:a2:16:d2:c9: 17:d9:ce:f4:e9:ee:37:29:0c:bc:64:8e:30:3e:af: c4:48:b8:d1:f8:16:45:5a:cf:47:5d:10:8f:7a:8c: c8:83:63:7f:be:5f:d7:76:ff:a0:78:d9:2a:cf:ad: 5a:ec:32:5e:14:48:65:fd:13:1f:3b:3d:50:9d:9c: ab:22:62:1f:a0:ac:a4:9d:df:e8:8d:2f:88:de:71: 32:25:4e:d9:4a:8b:14:b3:b6:8d:b5:6e:00:09:a6: 95:c6:9e:61:00:2b:0b:8d:a6:49:a0:67:a5:ac:20: de:bb:64:50:76:e4:d1:8c:b0:84:2f:f0:db:b3:a4: d6:a4:f7:c2:57:a9:e2:cf:f7:55:0d:d9:5c:0e:c7: dd:42:6e:b3:5c:a6:4b:f8:75:6a:66:a7:97:db:c4: d4:e5:c3:b6:b8:9a:92:d5:20:bd:d0:2b:67:03:5a: 11:69:68:1b:4c:f1:f9:8b:9b:8f:60:fe:22:10:a7: 8e:4a:af:a4:5b:99:7e:cb:a9:56:64:f6:87:f4:83: d3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CE:2B:0B:40:9D:64:87:65:FC:D7:6F:74:F6:D2:C8:BB:1C:F9:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8000::/40 Signature Algorithm: sha256WithRSAEncryption a9:9a:7e:9f:3e:bb:70:71:25:49:d2:69:d5:c3:a3:17:58:33: 48:39:77:65:b1:33:28:e9:2c:b2:cf:61:26:13:94:f2:99:95: d9:e3:3b:84:c9:17:08:54:75:2e:73:67:a7:11:ed:29:f2:52: fc:8d:62:00:02:a6:42:6e:93:07:17:b1:89:d4:ab:fc:ed:61: f0:b1:3b:f3:db:e9:3b:0f:88:86:28:1e:c0:47:2a:11:31:f8: c5:b1:df:25:22:99:2b:60:d1:26:fd:eb:a3:6f:b6:fe:9f:b9: 4e:f4:59:ff:e3:17:4a:a9:8b:18:77:55:83:cd:d9:94:f3:54: 74:4c:3d:1b:b7:05:93:a8:47:7e:3c:e2:2e:41:de:b0:b7:c9: 53:c0:bb:b8:ff:1d:bd:fe:37:ee:06:f0:e2:36:f4:2e:87:ff: 96:f4:a7:c6:25:10:21:0e:db:4e:0e:b0:db:16:d4:aa:8f:93: 8c:8f:68:27:a8:29:c8:f5:fb:94:b9:b3:d5:f9:29:e6:14:ff: 31:b9:1c:dd:15:54:58:a4:e9:04:96:a3:7e:c0:51:c4:7d:10: 7b:f7:b9:d8:00:77:83:6b:d5:8c:29:8f:ce:7e:b2:51:32:3d: c1:20:1e:c8:7f:4e:05:3e:fa:4c:11:ae:5f:be:69:e2:dc:2d: 03:82:1a:c8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSmytf8QwZktKlokZs/BgJAijMxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAZDliZjFiNDFhYzlkOTRjMWVjOTY3 ZTA5ZDQ0NzgwNmRiZTQ1NDVjM2Y1ZWJjZmY2Y2VjZWMxYWY3N2YwYWJiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylLOVyaQHjjpsTAwlsJZ7hBb2QzN UgekKOOxvimitTaPXn0GEXYnZNd7xaytG5cHPudoYPgQqqIW0skX2c706e43KQy8 ZI4wPq/ESLjR+BZFWs9HXRCPeozIg2N/vl/Xdv+geNkqz61a7DJeFEhl/RMfOz1Q nZyrImIfoKyknd/ojS+I3nEyJU7ZSosUs7aNtW4ACaaVxp5hACsLjaZJoGelrCDe u2RQduTRjLCEL/Dbs6TWpPfCV6niz/dVDdlcDsfdQm6zXKZL+HVqZqeX28TU5cO2 uJqS1SC90CtnA1oRaWgbTPH5i5uPYP4iEKeOSq+kW5l+y6lWZPaH9IPTYwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCzOKwtAnWSHZfzXb3T20si7HPkvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NDBjM2ZjLWEzNTgtNDY4YS04YjNiLWFkNTMzYjc0NGVlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaYAwDQYJKoZIhvcNAQELBQADggEBAKmafp8+u3BxJUnSadXD oxdYM0g5d2WxMyjpLLLPYSYTlPKZldnjO4TJFwhUdS5zZ6cR7SnyUvyNYgACpkJu kwcXsYnUq/ztYfCxO/Pb6TsPiIYoHsBHKhEx+MWx3yUimStg0Sb966Nvtv6fuU70 Wf/jF0qpixh3VYPN2ZTzVHRMPRu3BZOoR3484i5B3rC3yVPAu7j/Hb3+N+4G8OI2 9C6H/5b0p8YlECEO204OsNsW1KqPk4yPaCeoKcj1+5S5s9X5KeYU/zG5HN0VVFik 6QSWo37AUcR9EHv3udgAd4Nr1Ywpj85+slEyPcEgHsh/TgU++kwRrl++aeLcLQOC Gsg= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:23 2024 by rpki-client on console-ams.rpki-client.org