$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/165f5afe-0226-4ced-83dc-8c6c9abd975d.roa File: 165f5afe-0226-4ced-83dc-8c6c9abd975d.roa (raw, json) Hash identifier: iB4eeR1NLKd/nRyHh9VciHYeAym6R/cs1gGgzjViI08= Subject key identifier: 9E:C7:45:CB:3D:2D:71:84:01:10:6F:E2:F1:EB:88:B3:5F:EA:0E:A9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74A4ED001F9E352BFAE99AD57B7F678072B0FAFC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/165f5afe-0226-4ced-83dc-8c6c9abd975d.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a4:ed:00:1f:9e:35:2b:fa:e9:9a:d5:7b:7f:67:80:72:b0:fa:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=91d366f60d0e3377969d821ef5f20065b31c1d6019d704334d26136e9ec47383, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:37:16:4f:88:91:bc:f8:f8:9a:79:7d:de:6b: 11:b8:00:e3:48:3a:66:cc:27:38:46:e9:9c:ce:3d: fa:01:a1:eb:19:c9:59:74:f1:16:25:37:31:09:10: 1a:6e:7e:c5:03:d2:3b:b7:aa:3e:45:5b:5e:33:6f: 41:70:f7:ce:75:3d:99:92:57:89:3e:e8:a7:c5:ef: 6f:e7:f3:2a:09:14:ff:5e:e6:69:eb:7c:90:e4:9e: d2:c5:6e:3c:a1:08:25:7e:77:f2:da:f0:79:86:87: b2:07:c3:e2:af:73:db:da:14:69:ea:8b:6d:fb:c6: a2:93:2d:94:4f:76:41:9f:18:9a:86:ea:ac:c9:f5: e4:8b:f8:fe:8c:f9:2f:35:e2:77:6a:94:46:42:14: ab:3a:d8:62:cc:6d:e3:ac:a2:47:7d:2c:6b:80:da: e5:cd:32:2f:05:0b:83:b8:8d:7f:79:d2:23:c4:e7: c1:83:33:a2:be:ff:6d:1d:c2:b2:b8:72:87:17:4d: b6:16:ba:7c:89:29:54:cc:e7:c3:aa:94:89:40:75: b4:90:ee:69:01:b4:0c:45:d6:03:dd:4d:9f:59:13: 33:27:7d:10:ab:32:f0:19:c1:cb:f6:7e:4e:0b:fb: 32:cb:a1:47:7b:5a:a7:7e:95:76:6b:5e:3a:2a:7b: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C7:45:CB:3D:2D:71:84:01:10:6F:E2:F1:EB:88:B3:5F:EA:0E:A9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/165f5afe-0226-4ced-83dc-8c6c9abd975d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:4000::/40 Signature Algorithm: sha256WithRSAEncryption ba:d4:ab:0b:8b:50:47:f2:f5:71:6c:76:bb:a5:51:0d:cb:ac: 92:c8:b7:cd:ca:a9:94:3e:f1:9e:3b:57:ae:ee:73:79:4b:a9: 8b:62:49:68:b6:b7:2a:5a:a6:a2:f6:e0:ca:9c:e0:96:a9:d4: ab:45:f6:fd:d6:ee:a3:04:ae:ca:c9:83:65:6e:1d:1b:1a:b5: 81:f4:17:e7:94:d3:69:75:fc:6f:aa:e5:6e:53:32:89:f6:f0: f3:fe:d0:e7:24:4b:8f:78:17:bd:f7:fb:d4:d9:8d:93:aa:f4: f1:ef:9a:30:8a:d9:c4:97:77:80:3a:31:13:a9:74:c9:ea:2b: 8a:a5:58:cd:53:3a:e9:28:2a:d3:5c:69:64:af:fb:f5:c9:c9: 43:ee:60:a7:d0:03:c3:1e:f6:97:93:33:a1:c6:1f:4f:2e:7a: 24:e9:8b:49:14:62:ad:8c:4d:dc:b6:f1:dc:76:cf:f6:12:cb: cb:8b:39:26:04:95:a1:a2:0b:08:b8:3a:0d:ef:c1:27:bf:50: 5e:6e:9d:7b:8a:01:7b:98:cf:76:5b:c5:6e:60:41:f5:ad:e8: 92:5f:e3:e3:80:1a:ee:81:fc:25:5b:64:dc:c4:3d:bc:6d:f2: 6a:22:e0:cd:c6:23:17:e4:b7:b4:d4:fa:82:a0:f1:46:dd:4e: a0:d6:fd:b9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdKTtAB+eNSv66ZrVe39ngHKw+vwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAOTFkMzY2ZjYwZDBlMzM3Nzk2OWQ4 MjFlZjVmMjAwNjViMzFjMWQ2MDE5ZDcwNDMzNGQyNjEzNmU5ZWM0NzM4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jcWT4iRvPj4mnl93msRuADjSDpm zCc4Rumczj36AaHrGclZdPEWJTcxCRAabn7FA9I7t6o+RVteM29BcPfOdT2ZkleJ Puinxe9v5/MqCRT/XuZp63yQ5J7SxW48oQglfnfy2vB5hoeyB8Pir3Pb2hRp6ott +8aiky2UT3ZBnxiahuqsyfXki/j+jPkvNeJ3apRGQhSrOthizG3jrKJHfSxrgNrl zTIvBQuDuI1/edIjxOfBgzOivv9tHcKyuHKHF022Frp8iSlUzOfDqpSJQHW0kO5p AbQMRdYD3U2fWRMzJ30QqzLwGcHL9n5OC/syy6FHe1qnfpV2a146KnsSnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ7HRcs9LXGEARBv4vHriLNf6g6pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE2NWY1YWZlLTAyMjYtNGNlZC04M2RjLThjNmM5YWJkOTc1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba90AwDQYJKoZIhvcNAQELBQADggEBALrUqwuLUEfy9XFsdrul UQ3LrJLIt83KqZQ+8Z47V67uc3lLqYtiSWi2typapqL24Mqc4Jap1KtF9v3W7qME rsrJg2VuHRsatYH0F+eU02l1/G+q5W5TMon28PP+0OckS494F733+9TZjZOq9PHv mjCK2cSXd4A6MROpdMnqK4qlWM1TOukoKtNcaWSv+/XJyUPuYKfQA8Me9peTM6HG H08ueiTpi0kUYq2MTdy28dx2z/YSy8uLOSYElaGiCwi4Og3vwSe/UF5unXuKAXuY z3ZbxW5gQfWt6JJf4+OAGu6B/CVbZNzEPbxt8moi4M3GIxfkt7TU+oKg8UbdTqDW /bk= -----END CERTIFICATE-----Generated at Wed Apr 24 05:35:17 2024 by rpki-client on console-ams.rpki-client.org