$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa File: 156a801c-a48c-4b4a-9ec7-341721d78915.roa (raw, json) Hash identifier: CeWAKX+M8x36Jlv7yoHxkXMYMzaS+GfqYuuHqmFUGpI= Subject key identifier: 09:FD:37:E5:23:97:42:88:BB:96:32:12:44:18:6B:1D:7A:43:CD:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C0825B0E533D5AEAE520BFFB478595F58102CF8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:08:25:b0:e5:33:d5:ae:ae:52:0b:ff:b4:78:59:5f:58:10:2c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=a9a5c777fbae64ad98a582561c28072023047ae9f8ad55954df376288fa3e170, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:a9:7e:8a:f1:ad:f1:83:47:d5:15:cf:a0: b2:d9:b8:0b:2d:5c:cf:26:f7:0b:a0:67:4e:78:11: 1a:8b:8c:04:6d:31:b8:f6:f8:00:19:4f:ee:f8:08: aa:c9:34:9b:73:1d:70:ee:61:76:ce:fb:7c:d6:a9: cb:ea:c7:2e:8e:ee:7c:c1:f4:01:f0:5f:07:e7:c6: bd:9f:c5:26:ce:60:f6:ef:e5:6e:d9:86:c7:d0:3a: 2b:eb:15:9c:28:ea:bc:3a:e7:4f:e8:d2:80:49:66: 5b:db:c2:78:67:5c:35:a0:af:bd:bf:2f:fb:89:ec: c0:46:8b:d1:91:73:96:a5:3e:c8:ba:56:c5:82:5c: 2a:6d:f3:c4:13:19:50:29:95:46:ba:47:ec:b1:2e: 75:01:75:5a:2e:13:ab:c9:a6:6a:53:89:43:e2:a7: 92:6f:f5:da:5f:0f:63:9b:21:93:b7:37:5b:54:ca: 20:64:e2:9a:e9:98:10:f7:e3:e0:cc:7b:ef:9e:b5: aa:fb:13:b5:3e:40:3d:9b:56:8a:fa:07:57:8d:76: 0d:e3:b7:ea:c5:57:15:e4:4c:a0:d6:3b:c7:d0:40: d4:11:84:2b:95:09:2c:e6:ad:0c:e7:e7:bd:cc:b9: 88:0e:f0:ee:f9:21:1c:57:96:61:6f:cd:fc:c1:54: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FD:37:E5:23:97:42:88:BB:96:32:12:44:18:6B:1D:7A:43:CD:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/156a801c-a48c-4b4a-9ec7-341721d78915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:6000::/40 Signature Algorithm: sha256WithRSAEncryption 2b:20:0c:fe:db:5f:15:23:db:a8:12:f7:06:04:01:36:6c:74: fe:86:8a:6d:6f:c2:88:0a:f1:9c:16:2d:a2:52:c0:9c:f1:61: 55:72:51:bc:47:20:3e:fd:b2:b0:04:a5:f8:2a:ba:94:c4:26: cd:8b:cc:e2:db:8f:d6:36:82:34:cd:98:b0:0d:8f:66:4d:64: b2:0f:8d:30:f2:d9:43:42:be:e3:0b:65:e5:8e:7a:f2:d5:f5: 00:d4:68:bd:80:99:ab:05:5f:eb:72:fa:64:a8:df:d3:a9:21: 8a:eb:f6:95:19:6e:2d:02:52:09:7c:32:7a:e1:fa:bc:6f:c2: 52:7d:59:f2:ad:80:6d:fe:36:b6:42:e9:68:b7:fa:cf:5b:10: 44:bd:92:b6:5b:ec:a8:5b:ec:d5:c0:ab:94:c9:04:a5:91:22: ad:2d:19:b6:8b:8d:fb:1b:58:2c:a1:47:61:70:4d:9a:78:99: dd:e3:84:10:72:33:87:9d:66:fc:cb:d4:4b:d3:8a:11:af:f2: 2f:cd:c0:41:c8:54:be:4f:e0:04:a5:26:eb:94:03:8f:6b:da: 3b:f9:d1:bf:1f:03:8e:65:85:ac:e2:bd:b9:b5:e0:82:3a:1f: a9:cb:bc:d0:57:17:ff:30:9b:88:da:5b:48:72:c4:57:8e:8b: 4a:a1:4a:75 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPAglsOUz1a6uUgv/tHhZX1gQLPgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAYTlhNWM3NzdmYmFlNjRhZDk4YTU4 MjU2MWMyODA3MjAyMzA0N2FlOWY4YWQ1NTk1NGRmMzc2Mjg4ZmEzZTE3MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SOpforxrfGDR9UVz6Cy2bgLLVzP JvcLoGdOeBEai4wEbTG49vgAGU/u+AiqyTSbcx1w7mF2zvt81qnL6scuju58wfQB 8F8H58a9n8UmzmD27+Vu2YbH0Dor6xWcKOq8OudP6NKASWZb28J4Z1w1oK+9vy/7 iezARovRkXOWpT7IulbFglwqbfPEExlQKZVGukfssS51AXVaLhOryaZqU4lD4qeS b/XaXw9jmyGTtzdbVMogZOKa6ZgQ9+PgzHvvnrWq+xO1PkA9m1aK+gdXjXYN47fq xVcV5Eyg1jvH0EDUEYQrlQks5q0M5+e9zLmIDvDu+SEcV5Zhb838wVQFBQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAn9N+Ujl0KIu5YyEkQYax16Q82TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NmE4MDFjLWE0OGMtNGI0YS05ZWM3LTM0MTcyMWQ3ODkxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaWAwDQYJKoZIhvcNAQELBQADggEBACsgDP7bXxUj26gS9wYE ATZsdP6Gim1vwogK8ZwWLaJSwJzxYVVyUbxHID79srAEpfgqupTEJs2LzOLbj9Y2 gjTNmLANj2ZNZLIPjTDy2UNCvuMLZeWOevLV9QDUaL2AmasFX+ty+mSo39OpIYrr 9pUZbi0CUgl8Mnrh+rxvwlJ9WfKtgG3+NrZC6Wi3+s9bEES9krZb7Khb7NXAq5TJ BKWRIq0tGbaLjfsbWCyhR2FwTZp4md3jhBByM4edZvzL1EvTihGv8i/NwEHIVL5P 4ASlJuuUA49r2jv50b8fA45lhazivbm14II6H6nLvNBXF/8wm4jaW0hyxFeOi0qh SnU= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org