$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa File: 1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa (raw, json) Hash identifier: rF/iXY6HTVWdXewXUgG8Tzzs0i2nDHFDkpmmRHSCxcM= Subject key identifier: 97:7B:CB:58:C1:4A:7E:29:82:A9:61:C0:60:C2:4A:05:34:1A:5A:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C3168B6243FCF94E2C95D580D6A4F8424E5EDBC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:31:68:b6:24:3f:cf:94:e2:c9:5d:58:0d:6a:4f:84:24:e5:ed:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=00111959d1f2a41b3a53c3710002dcd9528f2486d9d2f4b80bc32c8971025449, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:47:ad:eb:06:36:b1:10:b8:41:47:69:db: ee:cd:4b:8d:b1:c8:2a:25:02:ec:f0:be:a2:43:c9: 96:e0:31:71:86:47:0e:66:77:da:8f:00:e1:d7:c3: 5a:f9:93:7d:96:c8:96:1a:ea:d3:34:45:12:53:29: 29:06:cb:24:ba:ad:60:7a:7c:cb:62:c2:44:b0:c8: 00:94:74:63:a1:8a:60:7a:53:32:fa:8a:d2:0b:67: fe:3a:f6:ed:98:5c:be:0a:a1:02:a5:d1:bf:af:db: 91:75:22:62:c3:0c:82:6a:65:7c:34:8d:e3:21:d9: 72:41:20:e3:2f:34:3f:b3:d2:be:8c:d7:b3:93:a7: c8:87:3e:a4:f7:e5:83:a0:29:4f:eb:cb:f4:27:d3: 0f:eb:a0:fc:31:21:e7:8b:50:68:80:62:05:24:1f: d1:8d:71:04:9a:9f:76:d2:d9:11:72:d6:5a:f6:6e: a3:b2:06:51:81:f9:aa:89:a8:f9:b1:9d:5a:eb:30: e1:df:a2:1f:27:70:7a:43:b7:50:5c:a9:3c:68:5b: b4:7e:0d:e6:bd:81:e2:46:19:ec:9d:30:a7:06:31: 5f:e2:bb:7b:3c:41:52:97:f6:bf:24:87:14:6f:11: 33:3c:c0:e1:e2:4f:cc:3f:82:46:9b:27:46:99:67: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:CB:58:C1:4A:7E:29:82:A9:61:C0:60:C2:4A:05:34:1A:5A:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1edf62a5-3ce0-4606-a61c-84f1e484fe58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e::/32 Signature Algorithm: sha256WithRSAEncryption 7e:e0:f3:27:13:b0:8a:d7:a2:5f:e4:e1:17:15:83:9a:4d:c5: 96:6c:26:93:c7:df:1f:fd:b9:69:98:61:d9:de:dc:10:89:bd: 5b:78:5b:2d:89:1a:b9:72:84:84:4d:89:84:f9:52:64:12:05: 1d:24:d0:a9:d2:86:fd:b8:0b:74:9d:9e:45:e3:1b:52:58:99: b9:5d:0b:a1:4b:56:2d:c2:20:16:3e:41:d7:d6:de:91:18:d9: 37:17:36:fa:54:bb:23:ec:97:bf:83:78:6c:50:95:24:38:5c: 2f:ed:21:5f:45:48:8f:94:f5:ee:eb:35:36:78:a3:ab:c5:21: 4c:d5:73:df:00:73:fa:02:46:ba:62:a4:68:fc:5f:7c:7c:31: 2c:68:f4:16:07:21:65:b6:42:30:03:e0:b5:f3:ee:8d:5a:3c: 27:ae:79:24:9d:b0:49:04:1c:d2:6d:1b:61:a1:b4:89:14:39: 53:09:6a:bc:64:1f:c8:50:b6:00:d8:1a:45:f1:25:14:19:fd: b6:f3:43:ec:56:e8:ba:23:fb:0f:b5:91:2a:b0:64:af:6d:80: 45:ee:69:d0:cc:ed:8c:29:b8:36:d4:f0:a1:b7:39:1f:e6:51: 15:7c:ac:78:49:0d:16:4c:d3:4b:e3:45:b9:72:69:9d:11:53: 05:a7:b6:ae -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUDDFotiQ/z5TiyV1YDWpPhCTl7bwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAMDAxMTE5NTlkMWYyYTQxYjNhNTNj MzcxMDAwMmRjZDk1MjhmMjQ4NmQ5ZDJmNGI4MGJjMzJjODk3MTAyNTQ0OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb9HresGNrEQuEFHadvuzUuNscgq JQLs8L6iQ8mW4DFxhkcOZnfajwDh18Na+ZN9lsiWGurTNEUSUykpBsskuq1genzL YsJEsMgAlHRjoYpgelMy+orSC2f+OvbtmFy+CqECpdG/r9uRdSJiwwyCamV8NI3j IdlyQSDjLzQ/s9K+jNezk6fIhz6k9+WDoClP68v0J9MP66D8MSHni1BogGIFJB/R jXEEmp920tkRctZa9m6jsgZRgfmqiaj5sZ1a6zDh36IfJ3B6Q7dQXKk8aFu0fg3m vYHiRhnsnTCnBjFf4rt7PEFSl/a/JIcUbxEzPMDh4k/MP4JGmydGmWfnkwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJd7y1jBSn4pgqlhwGDCSgU0Glr+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlZGY2MmE1LTNjZTAtNDYwNi1hNjFjLTg0ZjFlNDg0ZmU1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaHjANBgkqhkiG9w0BAQsFAAOCAQEAfuDzJxOwiteiX+ThFxWD mk3Flmwmk8ffH/25aZhh2d7cEIm9W3hbLYkauXKEhE2JhPlSZBIFHSTQqdKG/bgL dJ2eReMbUliZuV0LoUtWLcIgFj5B19bekRjZNxc2+lS7I+yXv4N4bFCVJDhcL+0h X0VIj5T17us1Nnijq8UhTNVz3wBz+gJGumKkaPxffHwxLGj0FgchZbZCMAPgtfPu jVo8J655JJ2wSQQc0m0bYaG0iRQ5UwlqvGQfyFC2ANgaRfElFBn9tvND7FbouiP7 D7WRKrBkr22ARe5p0MztjCm4NtTwobc5H+ZRFXyseEkNFkzTS+NFuXJpnRFTBae2 rg== -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:32 2024 by rpki-client on console-fra.rpki-client.org