$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/244daf8a-02db-4c32-adf0-1e937ff6a2fe.roa File: 244daf8a-02db-4c32-adf0-1e937ff6a2fe.roa (raw, json) Hash identifier: yOR4FWOW84ZIlrTqG6HJ4f3obnNhzk14lc+TZEaHziE= Subject key identifier: 37:C4:02:F1:F8:FA:72:21:32:ED:A9:EA:99:B9:8D:E0:22:5C:AC:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C265678ABE6B1B18953A08431F2E2E6A4121397 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/244daf8a-02db-4c32-adf0-1e937ff6a2fe.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:26:56:78:ab:e6:b1:b1:89:53:a0:84:31:f2:e2:e6:a4:12:13:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=32d76aa338ad219fd394e452972037f984273c924f41e24d44f8f224a3568a06, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:22:50:4e:74:45:e6:d3:35:22:59:8f:79: 64:c3:13:94:8d:52:9f:e2:87:0e:4f:7e:3b:3b:12: f7:87:19:57:47:46:2e:4d:8e:1c:7c:8f:4b:00:fb: 76:e4:05:90:d6:08:9a:d7:bb:0b:a7:b1:5b:b4:5b: 81:2c:d9:4c:6c:2f:d6:1c:e9:6b:ec:49:20:cc:1e: 24:c8:dd:82:d7:66:3b:3d:e7:42:ab:6a:71:84:af: c3:2a:7e:fc:73:1a:ce:94:b4:c7:e5:e0:18:33:e5: 5c:12:fd:89:8f:65:41:4f:ea:d6:41:36:bc:f0:be: 57:cc:3d:e4:67:0e:9b:95:40:b7:91:0d:1e:18:62: 33:d9:9b:b4:d7:e1:53:77:4a:88:d4:b9:33:f2:1b: 5e:ab:ae:0d:46:36:8f:49:29:88:2f:95:08:27:21: 6a:70:bc:80:9c:e7:a2:23:61:8d:1e:86:ea:cd:7d: 98:2f:05:1c:55:cf:50:fb:28:fb:9a:c3:89:0a:2d: f7:80:b5:41:dd:8c:dc:77:1d:54:bb:2c:ec:79:9d: 1f:93:19:54:2c:25:b1:71:86:f5:50:d8:f4:3f:81: c1:4b:4a:bf:b8:1c:e9:92:b9:db:33:3e:17:90:5b: 23:ad:6b:38:f3:65:25:07:2c:9f:bf:38:ee:dc:31: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:02:F1:F8:FA:72:21:32:ED:A9:EA:99:B9:8D:E0:22:5C:AC:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/244daf8a-02db-4c32-adf0-1e937ff6a2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:7000::/40 Signature Algorithm: sha256WithRSAEncryption 89:c8:e2:6c:1a:2b:6b:c3:5a:b6:7d:a2:27:d7:8b:f5:80:c1: 06:05:a5:6e:c7:f0:eb:3a:46:75:ba:f8:56:eb:91:ca:4b:f5: 78:72:df:74:41:dc:9a:f2:af:eb:c1:f4:f5:c9:52:fa:ab:01: 96:29:2a:7a:98:2d:3f:f7:84:1a:32:2b:85:a5:6f:4a:2b:20: a4:c8:d8:f5:68:59:67:b7:0c:77:bb:b0:21:0b:c1:5b:83:5c: 83:76:76:7c:c3:df:f6:be:74:67:1d:b0:d1:97:59:ec:c2:46: 3c:90:33:b3:22:eb:59:cc:7e:98:80:d6:57:cf:33:ba:a5:dc: 18:61:fe:f4:ba:18:af:da:36:97:34:e4:cb:01:c0:a8:1e:d0: c8:0e:8a:89:8d:69:db:5d:a1:4b:69:f6:03:62:60:1b:7f:53: 7c:80:d5:56:23:94:90:4d:a1:ef:3e:ff:b8:bf:92:63:ad:24: ef:5b:ad:60:00:36:c3:12:d0:ab:8d:e1:bd:da:67:bc:f3:e0: 96:26:8e:0e:40:06:61:ee:dc:33:38:35:a8:8e:b0:cd:63:cb: a6:a3:22:8a:4f:bb:0a:69:f9:ce:87:96:04:67:f8:6f:8a:ac: 0f:1f:c4:ed:cf:1f:a6:23:bc:5d:f5:3d:50:3d:2a:79:de:e3: a2:96:8c:5d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPCZWeKvmsbGJU6CEMfLi5qQSE5cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAMzJkNzZhYTMzOGFkMjE5ZmQzOTRl NDUyOTcyMDM3Zjk4NDI3M2M5MjRmNDFlMjRkNDRmOGYyMjRhMzU2OGEwNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkQiUE50RebTNSJZj3lkwxOUjVKf 4ocOT347OxL3hxlXR0YuTY4cfI9LAPt25AWQ1gia17sLp7FbtFuBLNlMbC/WHOlr 7EkgzB4kyN2C12Y7PedCq2pxhK/DKn78cxrOlLTH5eAYM+VcEv2Jj2VBT+rWQTa8 8L5XzD3kZw6blUC3kQ0eGGIz2Zu01+FTd0qI1Lkz8hteq64NRjaPSSmIL5UIJyFq cLyAnOeiI2GNHobqzX2YLwUcVc9Q+yj7msOJCi33gLVB3Yzcdx1UuyzseZ0fkxlU LCWxcYb1UNj0P4HBS0q/uBzpkrnbMz4XkFsjrWs482UlByyfvzju3DFEwwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDfEAvH4+nIhMu2p6pm5jeAiXKwdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NGRhZjhhLTAyZGItNGMzMi1hZGYwLTFlOTM3ZmY2YTJmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/3AwDQYJKoZIhvcNAQELBQADggEBAInI4mwaK2vDWrZ9oifX i/WAwQYFpW7H8Os6RnW6+FbrkcpL9Xhy33RB3Jryr+vB9PXJUvqrAZYpKnqYLT/3 hBoyK4Wlb0orIKTI2PVoWWe3DHe7sCELwVuDXIN2dnzD3/a+dGcdsNGXWezCRjyQ M7Mi61nMfpiA1lfPM7ql3Bhh/vS6GK/aNpc05MsBwKge0MgOiomNadtdoUtp9gNi YBt/U3yA1VYjlJBNoe8+/7i/kmOtJO9brWAANsMS0KuN4b3aZ7zz4JYmjg5ABmHu 3DM4NaiOsM1jy6ajIopPuwpp+c6HlgRn+G+KrA8fxO3PH6YjvF31PVA9Knne46KW jF0= -----END CERTIFICATE-----Generated at Fri Apr 26 11:00:08 2024 by rpki-client on console-ams.rpki-client.org