$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa File: 1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa (raw, json) Hash identifier: 1t6cuXSjkpSAuauiWWcLYweXc3s1wJx9aAP2YoMnGD8= Subject key identifier: 55:40:EE:7D:35:2A:44:3B:68:60:6B:BE:93:04:3B:40:02:BE:DA:D1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6EBC009C85539382F70F17D79ABDCD28019424AA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bc:00:9c:85:53:93:82:f7:0f:17:d7:9a:bd:cd:28:01:94:24:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=ab48f9fa0663a9d095cfd12bceb627e9d01e7d0d472169281f1eb5454d5949fb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:1f:77:5b:84:18:d8:0c:ff:6b:a6:98:f8: 60:51:76:e2:f7:de:46:7f:6d:84:fc:1d:4d:e8:6a: 32:7a:d4:2c:a8:1e:fa:14:f4:cc:9c:d7:dd:df:07: 99:a9:60:c0:73:a2:eb:de:44:32:ab:f1:83:72:0c: cc:c3:1c:9f:c2:3c:6c:40:d6:64:fb:a8:90:8d:88: 22:51:28:b1:0e:9f:24:e0:a0:4a:a8:5b:80:30:85: 7f:68:b8:3c:62:d3:85:d6:f0:59:38:b0:e7:99:83: 91:09:e7:bf:cd:0a:85:63:ec:a9:c9:a2:02:fd:87: a3:0f:15:94:6f:d5:af:d6:9a:e1:26:de:35:f6:91: 98:d4:3d:e0:7f:77:23:2c:33:55:d0:18:bf:8f:cb: d3:df:ef:8a:e9:f9:28:a9:f8:19:ea:18:27:e4:92: b5:b4:35:84:cc:94:16:5c:d9:8f:9b:17:76:a1:41: 53:78:d9:71:fc:fb:ad:2a:fe:c0:62:2b:2d:42:8b: 07:24:1d:56:37:38:d7:1c:de:c5:0d:0f:a9:fa:96: 06:60:a0:05:e3:8f:03:b4:99:35:bc:73:2a:5a:e2: 4c:a2:db:47:37:47:4a:24:f1:36:45:ee:7d:85:3d: 93:34:4b:e2:b0:ab:bc:d8:bd:06:75:c3:cf:49:ac: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:40:EE:7D:35:2A:44:3B:68:60:6B:BE:93:04:3B:40:02:BE:DA:D1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e::/32 Signature Algorithm: sha256WithRSAEncryption ac:31:bd:b5:66:a9:5a:3b:85:4c:b0:0c:18:cc:7d:40:5d:19: 51:9e:3f:f3:c4:1e:7c:d6:19:6f:3b:ef:2e:d5:de:0c:5d:6b: 74:92:55:c1:9d:d8:c8:90:7d:7f:2b:df:6f:28:6a:48:d4:a3: b7:98:d1:52:bd:31:04:86:ee:fa:35:0f:c5:d4:30:ab:9e:a7: e2:2a:26:a1:51:47:cb:d7:89:13:54:b1:77:14:77:5b:d7:24: ca:9f:76:08:85:a0:ea:8d:34:a6:5b:f6:d7:42:f8:3c:fd:22: 50:43:34:bf:d1:8c:0d:c2:e4:6b:8b:78:65:c1:71:bb:56:c0: 51:73:82:8f:7f:01:3b:c5:42:e8:7f:a3:69:85:6b:d1:3e:ad: ae:f9:a9:bf:33:80:15:4f:61:13:85:82:c4:ef:6e:8a:cb:05: a8:a3:9a:f3:e5:6e:f0:ab:a1:9f:19:4e:7e:c1:03:35:d4:64: 18:17:39:e7:7b:3e:44:2c:00:3d:7c:b3:75:8a:c9:6d:4a:54: c7:18:44:bf:14:44:08:bd:f3:84:5b:7e:45:aa:b9:2d:6c:80: 76:71:1a:b5:16:59:8b:a6:ee:f3:0d:63:26:4e:d2:94:b9:9e: 42:3e:2a:7c:ac:d3:cb:13:07:72:aa:a8:2b:97:79:d1:d2:1f: b5:53:ee:5d -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUbrwAnIVTk4L3DxfXmr3NKAGUJKowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAYWI0OGY5ZmEwNjYzYTlkMDk1Y2Zk MTJiY2ViNjI3ZTlkMDFlN2QwZDQ3MjE2OTI4MWYxZWI1NDU0ZDU5NDlmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWcfd1uEGNgM/2ummPhgUXbi995G f22E/B1N6GoyetQsqB76FPTMnNfd3weZqWDAc6Lr3kQyq/GDcgzMwxyfwjxsQNZk +6iQjYgiUSixDp8k4KBKqFuAMIV/aLg8YtOF1vBZOLDnmYORCee/zQqFY+ypyaIC /YejDxWUb9Wv1prhJt419pGY1D3gf3cjLDNV0Bi/j8vT3++K6fkoqfgZ6hgn5JK1 tDWEzJQWXNmPmxd2oUFTeNlx/PutKv7AYistQosHJB1WNzjXHN7FDQ+p+pYGYKAF 448DtJk1vHMqWuJMottHN0dKJPE2Re59hT2TNEvisKu82L0GdcPPSayMJwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFFVA7n01KkQ7aGBrvpMEO0ACvtrRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlZGY2MmE1LTNjZTAtNDYwNi1hNjFjLTg0ZjFlNDg0ZmU1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaHjANBgkqhkiG9w0BAQsFAAOCAQEArDG9tWapWjuFTLAMGMx9 QF0ZUZ4/88QefNYZbzvvLtXeDF1rdJJVwZ3YyJB9fyvfbyhqSNSjt5jRUr0xBIbu +jUPxdQwq56n4iomoVFHy9eJE1SxdxR3W9ckyp92CIWg6o00plv210L4PP0iUEM0 v9GMDcLka4t4ZcFxu1bAUXOCj38BO8VC6H+jaYVr0T6trvmpvzOAFU9hE4WCxO9u issFqKOa8+Vu8KuhnxlOfsEDNdRkGBc553s+RCwAPXyzdYrJbUpUxxhEvxRECL3z hFt+Raq5LWyAdnEatRZZi6bu8w1jJk7SlLmeQj4qfKzTyxMHcqqoK5d50dIftVPu XQ== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:34 2024 by rpki-client on console-fra.rpki-client.org