$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa File: 1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa (raw, json) Hash identifier: qAu39mk0hebpUx55w0/f48Rn/SEhxnteLlfFgoE9N7Y= Subject key identifier: 77:BC:05:5D:BC:83:1E:0E:2C:D6:81:FD:93:A8:05:A9:30:ED:C9:C1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F04EB6B713F0AFBBA6EE097F02E13ED00C2E7C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:04:eb:6b:71:3f:0a:fb:ba:6e:e0:97:f0:2e:13:ed:00:c2:e7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=06ce6458339100a5c8a758088dfc5cd4cac23a8d781d0915660b755a52ac73a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:06:a1:45:b5:38:1b:03:62:54:34:c5:a4:7b: c1:66:e1:9d:22:1a:f6:ab:04:0e:c0:86:0c:14:91: 54:a5:ea:f4:31:a8:a4:d7:a4:b5:58:d8:ce:f6:03: a3:bc:da:2f:cb:67:2f:79:e1:8a:60:91:19:05:23: f7:e2:d1:77:13:5f:6b:e9:cf:69:f1:1d:21:e2:ee: d1:21:c9:3d:fe:c7:8c:ad:5b:27:7d:f0:30:ec:bc: f5:46:82:a0:24:83:b6:eb:ac:eb:e8:91:83:a2:dc: 76:35:5d:2b:db:4d:a2:35:62:3c:b2:79:22:08:af: c2:b5:c0:3c:82:38:cd:57:53:f2:78:29:4d:02:ac: 53:5e:92:ed:6f:f1:16:7a:af:41:71:09:46:5b:d0: 68:cd:c9:d5:73:1e:a7:a4:7d:06:e1:0c:e0:a6:20: 01:45:31:a4:35:e2:92:9c:16:39:8f:82:ae:76:78: 3c:3d:d3:de:78:92:9b:ec:2b:a9:23:7f:c5:4a:d4: 06:09:bb:d5:e8:5f:95:11:2d:13:65:1d:0b:8e:23: 0b:87:4e:94:7d:7c:f2:28:fb:32:78:67:2d:c5:bb: f1:9b:93:ff:5d:50:f1:3d:6a:2c:02:5c:ab:90:93: 50:82:7d:2f:06:a1:fd:5e:37:8c:7d:ce:49:f6:1b: 47:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BC:05:5D:BC:83:1E:0E:2C:D6:81:FD:93:A8:05:A9:30:ED:C9:C1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e::/32 Signature Algorithm: sha256WithRSAEncryption 6d:2f:47:b8:53:4d:14:5d:55:be:93:b5:c0:11:68:43:cd:b8: b9:38:29:db:6d:af:8b:20:7d:87:7f:a9:35:b0:26:4c:64:da: a2:15:99:96:fb:7e:e5:34:7a:5f:f0:69:ac:ef:06:f0:60:5c: 81:24:ff:2c:4f:f0:c1:08:73:63:41:a3:4b:ce:4c:b6:52:a3: f8:64:8f:f1:bb:6d:7d:04:50:bd:e7:5e:aa:f1:4f:b7:d3:a1: 5e:db:51:eb:14:75:08:6e:ec:d7:77:54:a5:9c:23:35:58:cd: 30:9d:c9:42:4a:68:b3:03:7e:d5:4d:59:05:a3:4a:4c:a7:ae: 5f:85:80:a1:26:57:cd:d6:5f:72:d1:53:9c:da:a7:c0:12:86: 85:b7:11:d2:ac:28:1d:98:ca:04:4d:51:0e:e1:10:e9:cb:29: 66:22:75:e8:ef:a6:0e:7b:e9:34:d1:53:a2:d4:86:49:81:65: b0:97:df:6d:45:1a:2f:9b:ef:b1:7d:0f:9e:f4:f2:d8:47:b7: 1f:14:1f:cb:2c:25:af:d1:12:b0:fe:de:b7:39:60:a2:af:b0: aa:82:34:c3:20:c3:21:0e:fd:ab:37:72:ef:33:76:a0:be:64: bf:d6:31:f5:41:62:52:9f:e9:85:30:4f:cb:bf:e7:55:e9:af: f3:98:4e:38 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIULwTra3E/Cvu6buCX8C4T7QDC58cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAMDZjZTY0NTgzMzkxMDBhNWM4YTc1 ODA4OGRmYzVjZDRjYWMyM2E4ZDc4MWQwOTE1NjYwYjc1NWE1MmFjNzNhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AahRbU4GwNiVDTFpHvBZuGdIhr2 qwQOwIYMFJFUper0Maik16S1WNjO9gOjvNovy2cveeGKYJEZBSP34tF3E19r6c9p 8R0h4u7RIck9/seMrVsnffAw7Lz1RoKgJIO266zr6JGDotx2NV0r202iNWI8snki CK/CtcA8gjjNV1PyeClNAqxTXpLtb/EWeq9BcQlGW9BozcnVcx6npH0G4QzgpiAB RTGkNeKSnBY5j4Kudng8PdPeeJKb7CupI3/FStQGCbvV6F+VES0TZR0LjiMLh06U fXzyKPsyeGctxbvxm5P/XVDxPWosAlyrkJNQgn0vBqH9XjeMfc5J9htHnwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFHe8BV28gx4OLNaB/ZOoBakw7cnBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlZGY2MmE1LTNjZTAtNDYwNi1hNjFjLTg0ZjFlNDg0ZmU1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaHjANBgkqhkiG9w0BAQsFAAOCAQEAbS9HuFNNFF1VvpO1wBFo Q824uTgp222viyB9h3+pNbAmTGTaohWZlvt+5TR6X/BprO8G8GBcgST/LE/wwQhz Y0GjS85MtlKj+GSP8bttfQRQvedeqvFPt9OhXttR6xR1CG7s13dUpZwjNVjNMJ3J QkposwN+1U1ZBaNKTKeuX4WAoSZXzdZfctFTnNqnwBKGhbcR0qwoHZjKBE1RDuEQ 6cspZiJ16O+mDnvpNNFTotSGSYFlsJffbUUaL5vvsX0PnvTy2Ee3HxQfyywlr9ES sP7etzlgoq+wqoI0wyDDIQ79qzdy7zN2oL5kv9Yx9UFiUp/phTBPy7/nVemv85hO OA== -----END CERTIFICATE-----Generated at Fri Apr 26 11:00:08 2024 by rpki-client on console-ams.rpki-client.org