$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24683228-c9f1-4e7e-886d-5b9e99ecef04.roa File: 24683228-c9f1-4e7e-886d-5b9e99ecef04.roa (raw, json) Hash identifier: 2C6SWuQnHrf5tDNf6Mcd80Cv1+2bt+tYp3GhFIMF1MQ= Subject key identifier: 35:34:58:8E:85:95:99:20:8D:D5:7E:32:22:74:C1:9D:79:66:F8:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42EF92724D31672322EFD96C0BD79FC477722F39 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24683228-c9f1-4e7e-886d-5b9e99ecef04.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 00:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ef:92:72:4d:31:67:23:22:ef:d9:6c:0b:d7:9f:c4:77:72:2f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=3a6b02a6dad20e88abced32870f809c4623a3a8c38c2bc4e514300b2d6730322, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:15:2c:08:92:a2:13:75:4d:f1:3b:5a:0f: 5d:4d:4f:61:2f:4d:71:eb:bd:4c:fd:29:53:10:c8: ad:6c:f7:d6:d4:ba:c8:f0:d3:a9:c8:dc:a2:02:05: 87:ab:dd:13:a6:c8:a0:66:1a:d4:9d:33:9f:bc:f1: 2d:78:47:2a:fc:20:38:1f:7c:b7:e2:be:1a:95:1e: 8c:7b:3d:f5:86:41:4b:32:8d:6a:6b:af:92:95:81: 18:c7:c3:3d:1e:ef:d6:fe:fc:1a:c6:4b:fe:ce:ef: 8e:27:8e:7a:ca:6d:d7:78:d8:00:8c:0f:ee:f4:5c: 59:04:18:fb:4f:bf:3b:0d:d0:bd:98:54:16:e4:b8: 46:0b:69:da:36:a4:33:3b:1a:eb:95:61:90:fc:b1: ce:60:fa:0e:46:33:ee:98:ed:13:ab:a1:fb:88:d8: 4f:99:9a:0c:02:a3:47:64:81:77:ce:0e:c4:53:30: 5f:e0:1f:d6:d5:cd:89:cf:cf:5b:03:88:68:e3:fe: 28:4c:ab:3a:48:91:74:f0:67:6b:e4:7b:e5:7c:d7: 28:96:6e:d0:f6:ac:b2:f3:00:95:19:53:e5:d7:06: a1:a9:10:42:a5:0f:d0:4d:04:a9:03:47:03:5e:96: 4e:d2:54:6c:29:dc:dc:4e:c9:20:1a:ab:1e:88:2e: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:34:58:8E:85:95:99:20:8D:D5:7E:32:22:74:C1:9D:79:66:F8:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24683228-c9f1-4e7e-886d-5b9e99ecef04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:f000::/40 Signature Algorithm: sha256WithRSAEncryption 3f:ad:bc:58:2f:2d:62:78:6d:0c:7d:7f:bd:a6:fc:e3:0b:86: e0:94:ea:ae:07:92:87:34:08:2b:eb:42:51:8e:77:00:69:6f: 7d:25:0d:ee:14:a4:41:f5:31:1a:e9:87:c2:56:59:22:02:67: 80:bd:03:81:d1:42:d3:2b:b6:fa:36:a1:c6:2d:02:76:4e:27: 9e:c1:4b:70:79:7a:ec:c6:be:52:b1:83:b9:0c:7b:82:db:50: af:dc:98:b6:f4:d3:16:ea:86:34:59:52:a2:74:c3:fb:59:97: 9e:47:73:63:43:9d:d0:4e:86:12:58:f9:8f:79:b8:d5:0e:2b: ad:c2:d3:77:b2:24:8d:81:3a:c5:9f:7b:0d:3c:49:3e:05:16: d0:aa:45:79:55:b6:50:a4:1c:69:ef:3a:2d:a1:33:a7:28:50: 56:50:3e:d0:75:58:22:26:27:cb:dc:c6:44:33:39:89:8c:0e: 28:72:07:3c:b6:08:0f:87:42:98:ce:c3:e3:e6:f0:3a:02:70: b4:4b:ff:ec:bc:b6:1a:0e:ba:b9:62:e3:b2:2b:a5:89:17:45: 8e:35:be:d1:cc:9e:eb:db:b6:33:eb:1f:12:bb:7c:32:92:a2: 71:77:4f:55:1a:ec:f4:4e:8f:f8:b5:d5:5a:0e:ab:10:2f:cf: e5:d1:a9:57 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQu+Sck0xZyMi79lsC9efxHdyLzkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMzAwMDAwMFoX DTI0MDYwNzIzNTk1OVowejFJMEcGA1UEBRNAM2E2YjAyYTZkYWQyMGU4OGFiY2Vk MzI4NzBmODA5YzQ2MjNhM2E4YzM4YzJiYzRlNTE0MzAwYjJkNjczMDMyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug0VLAiSohN1TfE7Wg9dTU9hL01x 671M/SlTEMitbPfW1LrI8NOpyNyiAgWHq90TpsigZhrUnTOfvPEteEcq/CA4H3y3 4r4alR6Mez31hkFLMo1qa6+SlYEYx8M9Hu/W/vwaxkv+zu+OJ456ym3XeNgAjA/u 9FxZBBj7T787DdC9mFQW5LhGC2naNqQzOxrrlWGQ/LHOYPoORjPumO0Tq6H7iNhP mZoMAqNHZIF3zg7EUzBf4B/W1c2Jz89bA4ho4/4oTKs6SJF08Gdr5HvlfNcolm7Q 9qyy8wCVGVPl1wahqRBCpQ/QTQSpA0cDXpZO0lRsKdzcTskgGqseiC5F8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDU0WI6FlZkgjdV+MiJ0wZ15ZvhCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NjgzMjI4LWM5ZjEtNGU3ZS04ODZkLTViOWU5OWVjZWYwNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9PAwDQYJKoZIhvcNAQELBQADggEBAD+tvFgvLWJ4bQx9f72m /OMLhuCU6q4Hkoc0CCvrQlGOdwBpb30lDe4UpEH1MRrph8JWWSICZ4C9A4HRQtMr tvo2ocYtAnZOJ57BS3B5euzGvlKxg7kMe4LbUK/cmLb00xbqhjRZUqJ0w/tZl55H c2NDndBOhhJY+Y95uNUOK63C03eyJI2BOsWfew08ST4FFtCqRXlVtlCkHGnvOi2h M6coUFZQPtB1WCImJ8vcxkQzOYmMDihyBzy2CA+HQpjOw+Pm8DoCcLRL/+y8thoO urli47IrpYkXRY41vtHMnuvbtjPrHxK7fDKSonF3T1Ua7PROj/i11VoOqxAvz+XR qVc= -----END CERTIFICATE-----Generated at Sat May 18 05:19:51 2024 by rpki-client on console-fra.rpki-client.org