$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa File: 230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa (raw, json) Hash identifier: DinWDiE+wTWESDVDb7w+w/ENFHWHG7Gbs6j8IV15ox0= Subject key identifier: DF:42:1D:EA:DB:C0:8B:41:00:00:D0:29:E8:58:60:1F:B7:10:0F:A1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7925B5D69C64FD26FC114B630EA868D0128690E3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 27.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:25:b5:d6:9c:64:fd:26:fc:11:4b:63:0e:a8:68:d0:12:86:90:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=69413bec560ae8e05bbda3ad0ea457a0c5b4980b1379ced40a6e635ce38d9681, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:34:5a:23:3e:eb:1d:1c:ee:1c:6b:8a:65: c1:58:56:6a:c6:a8:ed:88:28:d1:9e:95:88:b2:23: 5c:f8:d6:3c:a4:32:2c:32:63:51:94:d5:b9:bd:79: ea:31:81:dc:bd:ba:7c:44:17:9e:d2:a9:89:67:16: 2e:2c:d5:07:16:05:f0:b7:58:d0:5d:9e:d4:29:f5: df:6b:61:26:e8:f2:05:e1:d2:fc:fa:13:75:b7:00: fb:1d:75:19:d2:7a:6c:b9:b4:38:8e:a2:2f:b2:7f: 3a:86:97:35:96:bb:fb:d5:48:ce:e6:2a:a6:f1:31: 39:ce:1b:49:b6:a7:7b:94:0b:db:8f:f4:5a:9c:a7: c6:de:0b:01:ca:48:02:d2:6f:e0:11:ca:cf:34:d4: cd:0a:7d:4a:f8:8a:61:7f:eb:29:cc:7f:4f:35:3e: eb:50:e1:2c:06:26:04:fd:7a:84:a0:28:2e:04:23: a1:9c:81:9f:c6:0b:f5:6c:bf:f6:c8:3a:59:8c:b4: 76:b9:3d:0e:5f:4f:3b:dd:dc:5f:12:f3:cf:8b:59: 83:78:c1:2f:74:e0:6d:e6:54:c7:2e:ff:0c:10:c3: 39:a5:a6:83:5e:fe:7b:ee:ad:e4:68:6d:f0:6a:d8: d1:1e:a1:77:dd:80:14:9d:47:32:be:ec:ce:d9:1d: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:42:1D:EA:DB:C0:8B:41:00:00:D0:29:E8:58:60:1F:B7:10:0F:A1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.0.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:76:ca:ff:a8:e0:6e:b6:ec:6e:36:03:2d:94:cf:4c:f8:da: 43:44:61:93:ca:11:0b:34:34:80:d3:a8:d5:5e:38:39:09:05: 45:ab:2a:83:0f:29:18:39:de:d4:66:1c:74:70:99:e5:53:c2: 0b:e8:0e:e9:83:6f:a9:46:69:76:17:00:1b:ec:67:2c:e4:3e: 2c:48:dd:b2:39:ab:86:c6:f1:f9:87:d5:e6:e3:f7:b4:f3:e5: 02:c6:73:ee:67:f1:b1:8e:05:63:f4:9c:be:fc:f0:cc:7e:db: ca:85:96:5a:3d:d7:a8:fa:c4:17:3f:ba:53:be:10:c8:08:ea: 56:b6:44:6a:76:94:ce:93:4c:cd:46:cd:80:f1:7b:f5:db:a5: 14:96:07:57:83:98:ce:8e:58:bf:75:be:72:e4:0b:e8:ee:d5: 74:b6:ad:4d:f6:05:07:c7:d6:9b:73:8c:e3:86:0b:ea:37:d2: 03:4c:a6:c8:49:87:17:33:67:79:09:23:d6:b0:41:43:36:38: 52:78:3c:3e:fc:fc:ed:a2:25:51:cb:0e:d6:0c:30:c6:cf:2a: a1:61:84:77:e1:27:0a:74:48:4f:0c:de:c0:34:47:df:9f:fa: 84:12:a4:0c:fa:55:ff:a0:3b:12:8b:a4:6f:29:0f:9c:ea:1b: 00:a2:cd:b7 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUeSW11pxk/Sb8EUtjDqho0BKGkOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNANjk0MTNiZWM1NjBhZThlMDViYmRh M2FkMGVhNDU3YTBjNWI0OTgwYjEzNzljZWQ0MGE2ZTYzNWNlMzhkOTY4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxw0WiM+6x0c7hxrimXBWFZqxqjt iCjRnpWIsiNc+NY8pDIsMmNRlNW5vXnqMYHcvbp8RBee0qmJZxYuLNUHFgXwt1jQ XZ7UKfXfa2Em6PIF4dL8+hN1twD7HXUZ0npsubQ4jqIvsn86hpc1lrv71UjO5iqm 8TE5zhtJtqd7lAvbj/RanKfG3gsBykgC0m/gEcrPNNTNCn1K+Iphf+spzH9PNT7r UOEsBiYE/XqEoCguBCOhnIGfxgv1bL/2yDpZjLR2uT0OX0873dxfEvPPi1mDeMEv dOBt5lTHLv8MEMM5paaDXv577q3kaG3watjRHqF33YAUnUcyvuzO2R1mjQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFN9CHerbwItBAADQKehYYB+3EA+hMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDg5M2RiLTNmMjgtNGVhMy04YTlhLThiNGJhNmJiMTU4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCGwAAMA0GCSqGSIb3DQEBCwUAA4IBAQCNdsr/qOButuxuNgMtlM9M +NpDRGGTyhELNDSA06jVXjg5CQVFqyqDDykYOd7UZhx0cJnlU8IL6A7pg2+pRml2 FwAb7Gcs5D4sSN2yOauGxvH5h9Xm4/e08+UCxnPuZ/GxjgVj9Jy+/PDMftvKhZZa Pdeo+sQXP7pTvhDICOpWtkRqdpTOk0zNRs2A8Xv126UUlgdXg5jOjli/db5y5Avo 7tV0tq1N9gUHx9abc4zjhgvqN9IDTKbISYcXM2d5CSPWsEFDNjhSeDw+/PztoiVR yw7WDDDGzyqhYYR34ScKdEhPDN7ANEffn/qEEqQM+lX/oDsSi6RvKQ+c6hsAos23 -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:34 2024 by rpki-client on console-fra.rpki-client.org