$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa File: 156a801c-a48c-4b4a-9ec7-341721d78915.roa (raw, json) Hash identifier: AtqNUJTXdSUUTAKGx508FkMVOJg+jW+Mv6YQCNsj47g= Subject key identifier: DC:22:D8:DC:31:F0:08:B5:DE:E5:FC:8B:73:C4:09:E0:C6:54:72:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 32B375CB25F1E5D32D8DF19188D82524F32B4D06 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b3:75:cb:25:f1:e5:d3:2d:8d:f1:91:88:d8:25:24:f3:2b:4d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=af29eeaf181ef40d174ea798f11405763edd78e95ec69a46cc93572b31dad19d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:51:9b:dd:fc:5b:83:1b:fd:e9:9b:00:84:56: f6:b3:77:ec:29:0f:34:63:81:1e:ef:ba:24:af:64: 75:77:49:a0:c8:6b:f0:63:a4:06:e0:e0:63:80:d1: 5a:99:99:00:eb:57:f8:a3:6f:a5:0f:88:1d:cd:a9: 7d:21:f4:14:38:bd:87:bd:e0:b3:8d:98:94:92:62: 44:1a:24:a6:28:e9:a4:1c:20:f0:c6:93:d7:06:6d: 25:12:f7:63:41:28:1f:78:ba:8a:6d:44:93:86:e7: 61:e0:a1:07:f4:2b:46:83:27:2a:d1:a0:2f:3f:96: 1e:11:7c:90:da:52:08:3c:7e:fd:d0:5a:6d:28:66: 8a:7d:1e:f6:68:56:c0:63:5d:6a:c3:5c:cf:57:e0: 9c:19:b6:b2:1f:41:55:5e:72:ca:ab:4b:70:b6:26: 99:3b:65:2e:84:fb:89:66:9b:e3:de:ca:c9:96:72: bc:8b:b1:fb:82:57:42:ea:9b:28:4f:ed:e9:47:41: 64:40:85:f3:8e:43:77:a6:af:93:6f:a8:90:e4:39: 38:92:66:f9:7a:47:29:09:ab:28:a7:76:d7:5f:c1: f7:c9:ab:98:0f:98:31:f6:d0:66:27:7b:4b:47:53: 5a:4e:e6:42:c1:21:d9:e2:bd:35:d4:d3:c7:ef:4b: 9d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:22:D8:DC:31:F0:08:B5:DE:E5:FC:8B:73:C4:09:E0:C6:54:72:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:6000::/40 Signature Algorithm: sha256WithRSAEncryption 60:4c:1f:e3:a8:8d:61:36:0c:8e:b7:3b:10:17:51:56:35:f8: a2:bb:46:e1:f4:64:8b:0d:75:66:d6:07:56:c7:b9:a4:3d:44: cf:cc:47:be:f7:8b:c8:16:21:a2:95:8f:c7:e0:3c:47:1d:db: d7:1e:f7:a1:07:46:97:f9:27:8f:13:24:22:dc:2b:81:5c:b7: ff:93:14:67:45:f8:ea:9b:7e:4f:90:85:3d:86:25:5f:03:cd: d8:ae:d8:6e:44:95:d8:a8:b7:bc:30:ee:c1:b9:90:46:48:e0: bb:ad:08:e9:99:7e:1e:9e:0d:3d:e0:0c:23:b8:8c:06:c2:41: f4:8e:a4:41:f6:4b:e4:3b:35:2b:ab:7d:2b:17:15:fe:e4:ba: 96:ca:51:6d:70:4a:63:63:9d:e4:ef:73:42:2f:9e:7a:bc:de: e0:42:86:80:29:dd:a5:83:2b:ad:f6:16:a0:4c:7a:2e:ef:d4: a0:7c:9e:1e:17:b9:55:9a:31:5f:e6:fc:94:8c:83:30:06:12: ab:a6:72:2f:7a:b3:39:7f:b8:37:84:63:66:70:fc:2d:ff:16: e4:88:12:18:60:9f:54:c5:54:31:bb:54:d4:c4:53:b1:c1:3a: 93:08:92:ea:80:fa:3b:ea:50:1d:c5:4b:f6:2d:07:b9:a7:b4: 69:54:f3:38 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMrN1yyXx5dMtjfGRiNglJPMrTQYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAYWYyOWVlYWYxODFlZjQwZDE3NGVh Nzk4ZjExNDA1NzYzZWRkNzhlOTVlYzY5YTQ2Y2M5MzU3MmIzMWRhZDE5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FGb3fxbgxv96ZsAhFb2s3fsKQ80 Y4Ee77okr2R1d0mgyGvwY6QG4OBjgNFamZkA61f4o2+lD4gdzal9IfQUOL2HveCz jZiUkmJEGiSmKOmkHCDwxpPXBm0lEvdjQSgfeLqKbUSThudh4KEH9CtGgycq0aAv P5YeEXyQ2lIIPH790FptKGaKfR72aFbAY11qw1zPV+CcGbayH0FVXnLKq0twtiaZ O2UuhPuJZpvj3srJlnK8i7H7gldC6psoT+3pR0FkQIXzjkN3pq+Tb6iQ5Dk4kmb5 ekcpCasop3bXX8H3yauYD5gx9tBmJ3tLR1NaTuZCwSHZ4r011NPH70udkwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNwi2Nwx8Ai13uX8i3PECeDGVHL0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NmE4MDFjLWE0OGMtNGI0YS05ZWM3LTM0MTcyMWQ3ODkxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaWAwDQYJKoZIhvcNAQELBQADggEBAGBMH+OojWE2DI63OxAX UVY1+KK7RuH0ZIsNdWbWB1bHuaQ9RM/MR773i8gWIaKVj8fgPEcd29ce96EHRpf5 J48TJCLcK4Fct/+TFGdF+Oqbfk+QhT2GJV8Dzdiu2G5Eldiot7ww7sG5kEZI4Lut COmZfh6eDT3gDCO4jAbCQfSOpEH2S+Q7NSurfSsXFf7kupbKUW1wSmNjneTvc0Iv nnq83uBChoAp3aWDK632FqBMei7v1KB8nh4XuVWaMV/m/JSMgzAGEqumci96szl/ uDeEY2Zw/C3/FuSIEhhgn1TFVDG7VNTEU7HBOpMIkuqA+jvqUB3FS/YtB7mntGlU 8zg= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org