$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa File: 156a801c-a48c-4b4a-9ec7-341721d78915.roa (raw, json) Hash identifier: bHpggnaQIllVwgfb0ku1ihLJEpuhtbwKpIPUQE8FyTM= Subject key identifier: E7:71:BB:65:68:47:D9:DE:01:41:66:B7:35:9D:27:43:97:13:1D:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 767A76F07D15B003BC48FCA88E243A564496EA11 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7a:76:f0:7d:15:b0:03:bc:48:fc:a8:8e:24:3a:56:44:96:ea:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=118e4278c327888ca7c98cbdaa78d4598b9885781e53b7bf9d90f372961237ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:ba:e9:b7:dc:34:5d:4e:6f:c7:4a:06:e2: f9:66:bd:9e:d7:b8:37:7f:93:6e:5a:86:99:a0:cf: 6f:7e:d0:2f:7a:c7:d7:43:67:dd:3a:18:ad:f6:81: bb:5e:63:76:ef:7f:c5:8d:26:c4:23:ad:f9:fa:43: c9:5e:42:b9:e8:6b:fe:7a:b7:4f:79:79:c0:5e:dc: 52:99:a8:d4:91:fa:3c:43:8c:00:1f:a6:4b:11:46: 31:b1:1b:84:a1:1b:2d:62:73:8b:bd:0c:37:56:55: a7:93:64:b1:1e:47:3e:60:01:fb:33:01:9c:52:71: 2e:d4:d6:37:b5:a6:34:2e:45:6a:64:26:4a:73:06: 44:67:46:c6:6d:46:d3:de:fd:6d:4a:17:9b:5a:8a: 55:d4:ba:29:8c:85:68:72:84:e3:4d:c4:0a:ee:51: be:44:65:2d:8b:e6:1b:22:6b:fe:66:90:f5:93:31: d7:56:06:55:53:80:58:7b:04:38:67:66:fc:a7:7e: 6c:46:9b:e1:9a:af:78:34:79:fb:fa:07:02:64:a3: b7:0f:25:2e:1e:32:5a:49:ff:69:71:39:ee:6d:a9: ae:ab:96:fe:6f:35:2d:b8:e9:d7:67:8f:c2:c5:69: b4:2e:93:ca:1f:1e:74:c8:4c:90:cb:84:c3:ec:30: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:71:BB:65:68:47:D9:DE:01:41:66:B7:35:9D:27:43:97:13:1D:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:6000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:ff:b2:73:71:e1:64:df:a9:2c:31:21:97:33:00:69:eb:c8: bd:9b:22:86:71:a2:2e:07:d7:ef:ff:16:e7:74:6b:e6:50:aa: 27:e0:57:9e:b2:65:7a:7c:86:bb:1e:51:80:7a:cf:e8:b9:b1: 2d:e6:20:f3:77:72:bf:64:21:37:a7:56:06:22:c5:c5:2a:f9: cf:44:9b:64:bd:46:22:c8:2f:dc:ee:67:c7:f7:b8:15:f9:37: 8b:ea:95:5e:58:bc:97:64:52:80:20:74:a6:af:a3:56:04:3f: ff:16:0f:c0:84:97:1d:bd:a6:2a:ec:9b:50:c6:d1:41:30:aa: d7:11:54:9b:49:f0:96:66:b7:10:a6:3c:f3:8f:5d:ed:90:b4: 78:5d:a8:97:42:53:0d:84:4e:c7:0a:78:34:aa:1f:95:7a:3f: 4e:f1:33:41:33:1f:41:fb:f6:aa:5e:f8:94:c9:b9:de:15:6b: 9b:83:68:ad:21:43:88:01:3d:98:9c:6b:b4:56:67:1e:e0:9e: cf:6d:60:64:f3:dd:dd:84:a0:c9:9d:d5:b0:eb:60:68:e5:b3: 87:c4:72:53:21:12:bc:b5:04:59:30:6d:13:1b:1f:a4:11:5b: 1c:ed:ad:43:09:aa:c7:56:8e:8c:0c:44:8d:1e:df:81:cb:cf: 2e:c5:c9:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdnp28H0VsAO8SPyojiQ6VkSW6hEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAMTE4ZTQyNzhjMzI3ODg4Y2E3Yzk4 Y2JkYWE3OGQ0NTk4Yjk4ODU3ODFlNTNiN2JmOWQ5MGYzNzI5NjEyMzdmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30i66bfcNF1Ob8dKBuL5Zr2e17g3 f5NuWoaZoM9vftAvesfXQ2fdOhit9oG7XmN273/FjSbEI635+kPJXkK56Gv+erdP eXnAXtxSmajUkfo8Q4wAH6ZLEUYxsRuEoRstYnOLvQw3VlWnk2SxHkc+YAH7MwGc UnEu1NY3taY0LkVqZCZKcwZEZ0bGbUbT3v1tShebWopV1LopjIVocoTjTcQK7lG+ RGUti+YbImv+ZpD1kzHXVgZVU4BYewQ4Z2b8p35sRpvhmq94NHn7+gcCZKO3DyUu HjJaSf9pcTnubamuq5b+bzUtuOnXZ4/CxWm0LpPKHx50yEyQy4TD7DDVIQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOdxu2VoR9neAUFmtzWdJ0OXEx18MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NmE4MDFjLWE0OGMtNGI0YS05ZWM3LTM0MTcyMWQ3ODkxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaWAwDQYJKoZIhvcNAQELBQADggEBABv/snNx4WTfqSwxIZcz AGnryL2bIoZxoi4H1+//Fud0a+ZQqifgV56yZXp8hrseUYB6z+i5sS3mIPN3cr9k ITenVgYixcUq+c9Em2S9RiLIL9zuZ8f3uBX5N4vqlV5YvJdkUoAgdKavo1YEP/8W D8CElx29pirsm1DG0UEwqtcRVJtJ8JZmtxCmPPOPXe2QtHhdqJdCUw2ETscKeDSq H5V6P07xM0EzH0H79qpe+JTJud4Va5uDaK0hQ4gBPZica7RWZx7gns9tYGTz3d2E oMmd1bDrYGjls4fEclMhEry1BFkwbRMbH6QRWxztrUMJqsdWjowMRI0e34HLzy7F ycA= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:31 2024 by rpki-client on console-fra.rpki-client.org