$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa File: 1540c3fc-a358-468a-8b3b-ad533b744ee9.roa (raw, json) Hash identifier: mDRPY4/LR7sTRX9BGfSUWvJ8xxV/uVdBrDM85pyaAI0= Subject key identifier: C9:03:B7:7F:D0:97:C1:01:0B:9B:21:E3:40:68:0D:DF:38:A8:70:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74711E2B81DE9BA671CE92D5014B10C3681ED208 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 00:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:71:1e:2b:81:de:9b:a6:71:ce:92:d5:01:4b:10:c3:68:1e:d2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=dcfb5cc115d3dc1a1038a41b43623b74bc271dab80d174f6d1dd7e0bc75b950e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:f4:7f:fc:c7:9e:46:fb:ea:eb:af:36:14: fb:a3:c9:ae:b6:55:2a:5d:1f:bb:04:49:a2:3f:aa: 33:dc:a3:f3:ed:31:f9:db:bb:60:13:6e:e2:cb:7d: 1a:c4:4a:82:c3:fa:59:e4:0e:22:f5:bd:0b:68:72: 18:e7:bb:9c:5b:9d:4a:6e:e9:8b:f9:80:da:d5:fd: 92:97:58:bd:34:73:9c:a8:b7:0d:d5:4c:a6:ea:46: 82:be:70:3a:04:77:26:aa:ea:76:2a:3c:15:1f:f2: af:56:5d:b6:cf:c6:2f:95:c3:6f:bf:29:e2:0c:64: 56:55:c1:3d:9a:3f:5a:6d:13:10:af:a6:04:39:44: 1b:7b:78:57:a4:35:ae:a7:24:77:4a:7f:ac:c4:1b: f7:70:9a:db:f9:dc:85:15:e3:02:a5:44:6d:9e:b1: 36:be:0b:1a:c8:0f:be:e2:97:07:27:35:4f:71:2c: 43:a9:60:e8:27:63:f3:30:c8:f1:7a:86:8f:12:11: f2:0b:32:33:fb:e2:bd:11:36:32:f1:8f:25:37:3f: b2:48:87:a9:b7:8a:7f:81:7d:97:b8:d0:e4:9f:8e: b0:15:5c:9d:b3:90:9d:20:f0:18:7c:3e:b7:90:8e: 0b:22:a0:19:25:19:e8:9e:65:b1:da:d9:bf:0a:2b: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:B7:7F:D0:97:C1:01:0B:9B:21:E3:40:68:0D:DF:38:A8:70:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8000::/40 Signature Algorithm: sha256WithRSAEncryption 38:1c:28:01:51:29:75:70:71:77:60:7f:d3:cc:52:6e:0c:eb: 9f:97:3d:42:20:f5:3f:48:bd:1b:37:10:84:7d:62:5e:68:8a: e1:32:b5:e6:ad:fd:ca:e6:15:fe:0f:e6:d6:5b:e6:fb:ad:89: 45:5a:97:2e:fb:e8:40:88:86:ca:40:23:34:9c:11:5c:f2:5d: d8:e9:a5:19:c0:90:9c:70:e6:a6:42:f1:8a:86:e3:4a:ef:e0: 27:c3:72:fb:07:58:38:5c:f3:50:b6:88:81:6f:d5:a5:ea:9f: 92:c5:9c:d9:4e:f5:ae:9a:95:36:06:02:db:c6:6c:b6:b0:d1: 23:c5:4f:18:e5:af:f5:ab:ac:33:c0:01:31:40:56:6c:80:2d: 66:23:65:92:89:4c:5a:1e:79:f9:f3:70:1c:a2:1a:64:31:fd: e8:7e:2d:7a:f5:bb:c4:70:b1:13:53:fb:44:91:28:4a:b6:64: 77:ab:32:67:81:56:68:94:12:9d:f0:e5:a5:89:cf:f9:cf:23: a5:e9:24:6b:04:53:46:e2:46:30:7f:33:16:29:0e:b5:07:7f: 2a:9a:44:1c:67:42:74:2e:68:cc:c0:f4:0e:67:d7:9a:61:f3: 5c:2f:92:64:0b:7d:4d:62:22:9a:6e:ec:eb:8b:e2:87:0e:be: cd:be:22:84 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdHEeK4Hem6ZxzpLVAUsQw2ge0ggwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAZGNmYjVjYzExNWQzZGMxYTEwMzhh NDFiNDM2MjNiNzRiYzI3MWRhYjgwZDE3NGY2ZDFkZDdlMGJjNzViOTUwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheb0f/zHnkb76uuvNhT7o8mutlUq XR+7BEmiP6oz3KPz7TH527tgE27iy30axEqCw/pZ5A4i9b0LaHIY57ucW51KbumL +YDa1f2Sl1i9NHOcqLcN1Uym6kaCvnA6BHcmqup2KjwVH/KvVl22z8YvlcNvvyni DGRWVcE9mj9abRMQr6YEOUQbe3hXpDWupyR3Sn+sxBv3cJrb+dyFFeMCpURtnrE2 vgsayA++4pcHJzVPcSxDqWDoJ2PzMMjxeoaPEhHyCzIz++K9ETYy8Y8lNz+ySIep t4p/gX2XuNDkn46wFVyds5CdIPAYfD63kI4LIqAZJRnonmWx2tm/CitILQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMkDt3/Ql8EBC5sh40BoDd84qHDeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NDBjM2ZjLWEzNTgtNDY4YS04YjNiLWFkNTMzYjc0NGVlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaYAwDQYJKoZIhvcNAQELBQADggEBADgcKAFRKXVwcXdgf9PM Um4M65+XPUIg9T9IvRs3EIR9Yl5oiuEyteat/crmFf4P5tZb5vutiUValy776ECI hspAIzScEVzyXdjppRnAkJxw5qZC8YqG40rv4CfDcvsHWDhc81C2iIFv1aXqn5LF nNlO9a6alTYGAtvGbLaw0SPFTxjlr/WrrDPAATFAVmyALWYjZZKJTFoeefnzcByi GmQx/eh+LXr1u8RwsRNT+0SRKEq2ZHerMmeBVmiUEp3w5aWJz/nPI6XpJGsEU0bi RjB/MxYpDrUHfyqaRBxnQnQuaMzA9A5n15ph81wvkmQLfU1iIppu7OuL4ocOvs2+ IoQ= -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:14 2024 by rpki-client on console-fra.rpki-client.org