$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24530a80-10e8-4a49-a230-127756a86b17.roa File: 24530a80-10e8-4a49-a230-127756a86b17.roa (raw, json) Hash identifier: NIRBUa+P1oA6YGp5BhRjx49mhQg8NG+ZP2dwiXQbM78= Subject key identifier: 47:79:9A:75:32:40:99:8B:01:A2:BF:22:2F:5B:85:30:7A:05:34:32 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CD4648FC5F25846C4FEF0FE16DBE151507C79F4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24530a80-10e8-4a49-a230-127756a86b17.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Apr 2024 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d4:64:8f:c5:f2:58:46:c4:fe:f0:fe:16:db:e1:51:50:7c:79:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=4c6c14d4e56e6b61c81c4758e3f344bbeee5be1b2b9ddc4f2f7e7229f3add022, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:8b:47:aa:97:0c:f2:a5:32:d1:ae:57:72: d7:38:bc:22:15:ff:98:f1:64:11:55:94:2c:0d:05: 30:dd:41:87:04:52:db:ca:f6:c9:e5:ef:21:86:ed: 9c:24:5d:82:d5:32:f8:45:6f:67:af:0c:d9:e9:4f: e0:f2:c6:3f:19:8f:5d:14:79:aa:ed:c6:d3:f2:f1: 9a:e9:42:31:ad:05:eb:0e:5f:8b:95:1f:54:4b:83: a7:2c:de:87:6e:41:9d:3f:9a:b4:71:8f:b0:5a:62: d7:9e:0f:c9:20:4e:b5:d8:1e:ef:9d:52:b7:72:47: 8a:30:c3:3b:60:04:ee:5a:5d:7f:e2:bc:b6:5c:cc: 7f:03:ed:8b:0e:51:79:d7:cc:5d:b2:67:3b:2e:f7: ed:24:57:16:eb:2f:3e:61:da:9f:2d:b7:05:f1:a8: 4f:0c:20:4d:5f:4f:a5:f4:93:f1:2b:23:0c:c5:36: 1d:a1:8e:a6:3c:6d:5f:68:a1:df:37:13:5c:a7:71: 11:8c:7d:00:93:95:2d:3f:e9:e5:7f:e6:cb:8f:c3: 88:c5:06:6b:5a:f8:15:f1:cb:37:27:91:be:a2:7e: b5:b0:79:30:bb:e7:77:32:ec:73:6e:bb:79:b1:3e: 7b:2e:4e:0b:c9:0a:f9:4d:9b:42:ca:62:4d:53:28: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:79:9A:75:32:40:99:8B:01:A2:BF:22:2F:5B:85:30:7A:05:34:32 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24530a80-10e8-4a49-a230-127756a86b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:b000::/40 Signature Algorithm: sha256WithRSAEncryption 9f:e5:1d:f1:97:05:72:29:8c:cf:7e:e2:bf:d7:98:b5:46:89: 7d:67:a1:ca:08:f5:ad:5a:b6:ad:81:7b:51:5a:dc:83:24:e1: 61:3c:f8:eb:34:23:ee:63:5e:d4:f3:bd:ce:b0:74:e2:c2:5f: 61:11:7c:20:58:64:f1:cc:ed:20:f3:f8:a5:91:a2:00:d4:60: 5f:57:f9:37:e7:43:e5:c1:ff:17:0b:f9:2c:2d:d1:b1:56:7b: e4:4d:ae:0c:5b:aa:74:5e:42:e0:f8:55:ec:27:25:36:fb:f0: 2a:82:44:31:d4:4d:b7:96:64:73:ed:49:e5:9b:ae:d8:35:89: 02:e9:d2:a4:c9:8e:e5:71:d1:a7:ae:b3:17:18:1f:0e:ce:01: 70:e5:55:ec:5c:b1:ff:68:a9:e5:0b:14:79:48:21:b2:01:02: 8a:a7:11:1f:17:ce:79:23:98:f2:c8:6f:a0:37:6e:c8:de:db: f3:91:13:4a:c3:e2:43:25:7e:a7:83:a5:0c:fa:11:46:4e:6f: 83:ee:64:5d:bb:55:63:92:01:b6:74:8a:ec:88:98:fd:89:7b: c2:13:45:30:00:80:0b:33:bf:4a:9d:ad:3b:ed:0d:3e:24:0f: 23:f8:fc:12:b5:12:f2:93:3d:25:ae:60:f6:f0:5f:bf:ac:02: 29:d8:cc:2e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDNRkj8XyWEbE/vD+FtvhUVB8efQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNANGM2YzE0ZDRlNTZlNmI2MWM4MWM0 NzU4ZTNmMzQ0YmJlZWU1YmUxYjJiOWRkYzRmMmY3ZTcyMjlmM2FkZDAyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyGLR6qXDPKlMtGuV3LXOLwiFf+Y 8WQRVZQsDQUw3UGHBFLbyvbJ5e8hhu2cJF2C1TL4RW9nrwzZ6U/g8sY/GY9dFHmq 7cbT8vGa6UIxrQXrDl+LlR9US4OnLN6HbkGdP5q0cY+wWmLXng/JIE612B7vnVK3 ckeKMMM7YATuWl1/4ry2XMx/A+2LDlF518xdsmc7LvftJFcW6y8+YdqfLbcF8ahP DCBNX0+l9JPxKyMMxTYdoY6mPG1faKHfNxNcp3ERjH0Ak5UtP+nlf+bLj8OIxQZr WvgV8cs3J5G+on61sHkwu+d3Muxzbrt5sT57Lk4LyQr5TZtCymJNUyhYrQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEd5mnUyQJmLAaK/Ii9bhTB6BTQyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NTMwYTgwLTEwZTgtNGE0OS1hMjMwLTEyNzc1NmE4NmIxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/rAwDQYJKoZIhvcNAQELBQADggEBAJ/lHfGXBXIpjM9+4r/X mLVGiX1nocoI9a1atq2Be1Fa3IMk4WE8+Os0I+5jXtTzvc6wdOLCX2ERfCBYZPHM 7SDz+KWRogDUYF9X+TfnQ+XB/xcL+Swt0bFWe+RNrgxbqnReQuD4VewnJTb78CqC RDHUTbeWZHPtSeWbrtg1iQLp0qTJjuVx0aeusxcYHw7OAXDlVexcsf9oqeULFHlI IbIBAoqnER8XznkjmPLIb6A3bsje2/ORE0rD4kMlfqeDpQz6EUZOb4PuZF27VWOS AbZ0iuyImP2Je8ITRTAAgAszv0qdrTvtDT4kDyP4/BK1EvKTPSWuYPbwX7+sAinY zC4= -----END CERTIFICATE-----Generated at Sat Apr 20 01:01:16 2024 by rpki-client on console-fra.rpki-client.org