$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa File: 1846b071-a17b-49fd-a4e6-836e72a5acfc.roa (raw, json) Hash identifier: xAx18be5JZaJFfDNGqmiEdD0Oaz2qbu4dNxno1sTSvY= Subject key identifier: 69:1A:1B:F3:A4:61:F5:EC:68:A2:D6:C2:C6:FE:F2:A7:DA:5F:CC:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 700DB2061C89F3D8077A9A363240201D41AA74C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0d:b2:06:1c:89:f3:d8:07:7a:9a:36:32:40:20:1d:41:aa:74:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=183a47a176575603b4af3ca08ee3b0026c11f17e63bbeaeec8c8f94bf5aae256, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:d2:cd:e0:bb:42:58:e5:e8:21:7a:3d:ed: 33:85:9c:6a:9b:7f:77:b1:cd:4a:1a:76:c9:35:61: cf:5c:ca:3e:32:7a:b9:b6:16:99:2a:a5:3d:c8:39: ea:d6:4c:53:e0:47:01:ea:a9:a4:6e:f1:82:5d:3b: b9:c4:ea:65:3e:27:7c:69:7e:44:d1:14:e8:31:a7: fc:cc:24:83:29:d1:68:83:2b:03:21:d9:5c:5f:e0: be:49:0f:e9:0d:6a:03:9e:fb:60:61:eb:da:89:67: 95:57:fd:35:19:71:ec:e9:d2:df:8c:0e:b1:54:40: 2e:b7:9d:dd:c0:e6:ec:cb:e6:1a:11:5e:5b:9d:ce: 21:a1:fa:fb:0e:7b:13:94:71:4f:bf:b0:ee:0f:b1: fb:d2:bd:32:01:a8:c6:e1:38:42:2c:14:76:cf:d2: 55:a3:ca:67:a6:0f:8e:b6:18:3e:3c:49:84:e4:06: 2e:4d:c2:d2:39:cf:ef:f9:e3:5f:9d:f6:37:53:07: 4f:47:50:e6:f5:eb:21:3f:79:d1:32:cd:05:83:64: 8c:e3:de:0f:de:bc:c6:13:f6:92:10:95:b4:d3:48: ab:cf:01:d0:a7:3d:01:27:d1:93:77:74:d3:98:77: c9:2a:79:a9:6b:93:f2:c1:3c:89:fe:39:d7:25:11: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:1B:F3:A4:61:F5:EC:68:A2:D6:C2:C6:FE:F2:A7:DA:5F:CC:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4000::/40 Signature Algorithm: sha256WithRSAEncryption 05:b7:ff:6b:15:5c:70:37:09:a6:09:85:6e:bd:97:65:2c:2f: cc:35:7a:07:a8:5a:1b:5c:6f:93:ef:f6:54:aa:b7:03:6b:5d: f4:d4:85:f7:17:e1:62:2b:a2:a7:c4:63:2c:1d:b9:64:bd:b3: aa:73:56:d3:eb:07:34:8d:55:ab:3d:1f:00:be:32:2a:0f:a4: 3e:e4:f2:76:5f:59:cd:29:49:ec:9c:ea:9a:a9:59:ee:d9:59: 19:e5:a8:f4:2c:b3:ea:a4:a9:24:c5:ee:b4:f7:41:32:b3:39: a8:ff:f1:c9:00:85:c3:51:e3:84:e1:27:a2:ac:51:85:23:d6: d3:e6:1a:6f:09:ee:57:03:0a:64:9b:54:dc:31:5f:f6:c4:49: 70:a0:4f:11:5d:8c:6e:f0:b6:c0:f4:77:87:0f:51:21:74:57: c2:9d:49:71:4a:6d:d8:f1:95:42:82:27:0d:ff:5e:40:d2:9c: dc:80:55:d3:30:84:fd:61:55:71:62:a1:06:6a:38:23:4e:dd: 64:35:f7:0b:39:2f:c0:b9:ff:46:93:86:c9:e5:83:78:13:c5: ab:a9:cf:f1:42:53:f4:cb:92:5b:b3:f9:49:54:01:27:17:d2: 2a:90:f5:d4:84:65:39:ca:3b:26:2d:7f:ca:ee:75:6a:40:55: 83:8b:b0:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcA2yBhyJ89gHepo2MkAgHUGqdMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAMTgzYTQ3YTE3NjU3NTYwM2I0YWYz Y2EwOGVlM2IwMDI2YzExZjE3ZTYzYmJlYWVlYzhjOGY5NGJmNWFhZTI1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutrSzeC7Qljl6CF6Pe0zhZxqm393 sc1KGnbJNWHPXMo+Mnq5thaZKqU9yDnq1kxT4EcB6qmkbvGCXTu5xOplPid8aX5E 0RToMaf8zCSDKdFogysDIdlcX+C+SQ/pDWoDnvtgYevaiWeVV/01GXHs6dLfjA6x VEAut53dwObsy+YaEV5bnc4hofr7DnsTlHFPv7DuD7H70r0yAajG4ThCLBR2z9JV o8pnpg+Othg+PEmE5AYuTcLSOc/v+eNfnfY3UwdPR1Dm9eshP3nRMs0Fg2SM494P 3rzGE/aSEJW000irzwHQpz0BJ9GTd3TTmHfJKnmpa5PywTyJ/jnXJRGlRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGkaG/OkYfXsaKLWwsb+8qfaX8yEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE4NDZiMDcxLWExN2ItNDlmZC1hNGU2LTgzNmU3MmE1YWNmYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EAwDQYJKoZIhvcNAQELBQADggEBAAW3/2sVXHA3CaYJhW69 l2UsL8w1egeoWhtcb5Pv9lSqtwNrXfTUhfcX4WIroqfEYywduWS9s6pzVtPrBzSN Vas9HwC+MioPpD7k8nZfWc0pSeyc6pqpWe7ZWRnlqPQss+qkqSTF7rT3QTKzOaj/ 8ckAhcNR44ThJ6KsUYUj1tPmGm8J7lcDCmSbVNwxX/bESXCgTxFdjG7wtsD0d4cP USF0V8KdSXFKbdjxlUKCJw3/XkDSnNyAVdMwhP1hVXFioQZqOCNO3WQ19ws5L8C5 /0aThsnlg3gTxaupz/FCU/TLkluz+UlUAScX0iqQ9dSEZTnKOyYtf8rudWpAVYOL sMA= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org