$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa File: 24cb31a9-0c7a-482c-879d-89bfe0260659.roa (raw, json) Hash identifier: 3700KeOB3YoZSEtNnVGZpqb7c7FMonHsL+nbqDTT8q8= Subject key identifier: 92:F1:24:7A:69:C2:00:12:68:F3:1F:BE:8D:F1:AF:6D:F3:84:CD:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E946EFC5C828CF9A1DCBB3840BEC108BB0113E6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa Signing time: Sat 20 Jul 2024 00:00:00 +0000 ROA not before: Sat 20 Jul 2024 00:00:00 +0000 ROA not after: Sat 24 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:94:6e:fc:5c:82:8c:f9:a1:dc:bb:38:40:be:c1:08:bb:01:13:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 20 00:00:00 2024 GMT Not After : Aug 24 23:59:59 2024 GMT Subject: serialNumber=370da13fab8d57c6c58b15717d82f3f1c69308d3b59da604330c2ab3cbd9bde3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:6f:15:30:fe:89:06:b6:47:15:5a:f4:bf: 6e:5a:e8:e1:ba:50:1e:6a:d5:35:40:de:dc:95:ce: 4f:e7:4e:ac:47:3a:3f:eb:a2:12:14:34:5a:63:08: b1:f2:90:74:8f:57:0a:39:7d:0c:2e:a2:91:9c:13: 93:bd:5f:32:25:da:3e:42:42:3b:2e:55:81:71:50: b3:dc:48:ec:82:56:5f:45:30:2f:6b:5b:f0:7a:c1: 1b:d3:8b:63:e0:52:2b:14:89:a5:2d:01:7c:94:cd: 75:11:9e:a8:99:70:fc:21:2c:ce:8d:ce:8a:87:a3: 33:ff:b5:29:73:c9:d1:67:7b:d9:a6:d1:2d:05:96: a7:29:9e:b3:75:df:8b:ff:32:e9:58:58:38:eb:5b: c8:03:bd:8e:dd:b5:93:83:f7:f2:b6:6a:04:43:86: 0e:81:08:cd:4c:27:f1:45:d7:4f:57:83:3c:e4:f8: cd:31:af:98:d0:ed:51:4d:1d:c9:97:a9:6e:30:ee: 0a:b0:20:2d:5f:da:9a:85:a0:b1:25:25:83:30:87: 6d:d8:7a:fa:b9:19:e5:73:f0:b7:80:18:fd:cd:3b: 0d:7f:45:1d:31:2c:a9:38:4f:17:38:c9:12:e7:88: b0:eb:8f:90:ac:79:21:0d:14:fa:4e:df:a2:76:e5: 8a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F1:24:7A:69:C2:00:12:68:F3:1F:BE:8D:F1:AF:6D:F3:84:CD:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cb31a9-0c7a-482c-879d-89bfe0260659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:800::/40 Signature Algorithm: sha256WithRSAEncryption 73:f7:0e:9a:2e:57:21:17:06:d4:98:fb:cd:31:f9:5b:0a:d8: 1e:01:f8:d6:fa:35:da:87:3d:09:f3:d3:b0:44:0f:e5:0c:d5: 54:b0:5d:35:8b:88:63:b9:d5:88:9c:93:3c:48:54:81:ae:04: 42:eb:3e:b0:14:3d:6c:21:c0:9d:d5:b1:56:5a:03:ef:a9:dd: 7f:86:80:5e:fb:a1:d1:48:be:25:e9:ea:88:58:73:1d:07:43: 45:14:8d:e0:7b:74:b3:b5:d5:0f:f3:17:2f:5b:be:14:85:c5: 8a:e7:a0:f8:be:7a:62:2d:53:9b:5a:ec:c6:7d:25:6e:12:0b: a4:0c:ff:8c:31:3b:f5:c8:0e:25:31:e1:c5:94:2f:a4:de:20: 66:c3:09:f1:d4:11:40:4d:95:2a:22:54:50:ae:56:62:9b:d6: c9:a7:7e:98:80:34:fb:95:ec:18:d4:61:2d:da:7a:46:43:3a: c7:b4:e1:9e:28:e6:e6:75:34:16:25:13:a3:87:2d:9c:cb:33: 65:59:62:b5:e8:ae:b9:f1:2a:58:b2:80:b6:ad:84:b0:69:07: ae:ab:c0:d4:f4:28:63:d0:c9:a4:4b:dd:05:55:95:8a:94:68: 8e:f7:3b:7e:3f:03:e5:36:18:1e:3d:cd:8d:aa:d8:86:f4:6a: af:f7:a7:81 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULpRu/FyCjPmh3Ls4QL7BCLsBE+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcyMDAwMDAwMFoX DTI0MDgyNDIzNTk1OVowejFJMEcGA1UEBRNAMzcwZGExM2ZhYjhkNTdjNmM1OGIx NTcxN2Q4MmYzZjFjNjkzMDhkM2I1OWRhNjA0MzMwYzJhYjNjYmQ5YmRlMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnlvFTD+iQa2RxVa9L9uWujhulAe atU1QN7clc5P506sRzo/66ISFDRaYwix8pB0j1cKOX0MLqKRnBOTvV8yJdo+QkI7 LlWBcVCz3EjsglZfRTAva1vwesEb04tj4FIrFImlLQF8lM11EZ6omXD8ISzOjc6K h6Mz/7Upc8nRZ3vZptEtBZanKZ6zdd+L/zLpWFg461vIA72O3bWTg/fytmoEQ4YO gQjNTCfxRddPV4M85PjNMa+Y0O1RTR3Jl6luMO4KsCAtX9qahaCxJSWDMIdt2Hr6 uRnlc/C3gBj9zTsNf0UdMSypOE8XOMkS54iw64+QrHkhDRT6Tt+iduWKYwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJLxJHppwgASaPMfvo3xr23zhM3oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0Y2IzMWE5LTBjN2EtNDgyYy04NzlkLTg5YmZlMDI2MDY1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9QgwDQYJKoZIhvcNAQELBQADggEBAHP3DpouVyEXBtSY+80x +VsK2B4B+Nb6NdqHPQnz07BED+UM1VSwXTWLiGO51YickzxIVIGuBELrPrAUPWwh wJ3VsVZaA++p3X+GgF77odFIviXp6ohYcx0HQ0UUjeB7dLO11Q/zFy9bvhSFxYrn oPi+emItU5ta7MZ9JW4SC6QM/4wxO/XIDiUx4cWUL6TeIGbDCfHUEUBNlSoiVFCu VmKb1smnfpiANPuV7BjUYS3aekZDOse04Z4o5uZ1NBYlE6OHLZzLM2VZYrXorrnx KliygLathLBpB66rwNT0KGPQyaRL3QVVlYqUaI73O34/A+U2GB49zY2q2Ib0aq/3 p4E= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:14 2024 by rpki-client on console-fra.rpki-client.org