$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa File: 2639bf0c-c600-4558-856f-20c495695807.roa (raw, json) Hash identifier: Udg4tlE7U8Nk+gVtaDyBukEjERGFNZlz7GL6ikGBjaA= Subject key identifier: 96:FE:69:5F:DC:72:F7:BD:6D:E0:F6:A9:6C:0C:8C:DE:9C:98:34:D9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43D3BD9FBDED3E79C17120E4011A10FAAE768734 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa Signing time: Sat 23 Nov 2024 00:00:00 +0000 ROA not before: Sat 23 Nov 2024 00:00:00 +0000 ROA not after: Sat 28 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d3:bd:9f:bd:ed:3e:79:c1:71:20:e4:01:1a:10:fa:ae:76:87:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:00 2024 GMT Not After : Dec 28 23:59:59 2024 GMT Subject: serialNumber=367fdbc5340aec2dac2101a2b19934f46c8ad41b154e06c7a3853d9a067be04e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:69:af:b4:ff:18:5a:0f:60:54:03:05:8b: 17:f1:71:30:2d:a0:ec:88:49:4c:a6:de:1b:c4:05: de:10:84:9b:3e:99:d2:b2:57:76:12:5b:51:2f:86: 59:27:0e:b0:66:38:dc:fa:8b:30:55:72:ce:18:f8: 69:ac:47:44:d1:a5:10:fd:b5:c0:a1:57:18:f8:f0: ae:9c:00:a5:4f:bd:50:e8:79:a2:f9:37:73:87:0e: d7:3a:e6:e9:dd:76:b7:d3:7d:95:6f:9f:85:aa:5f: b6:dd:5a:e7:13:cd:de:07:15:64:d3:7a:7f:13:39: f5:7f:a9:6f:04:44:3b:04:fc:6e:17:0f:de:04:c4: dd:15:35:d6:85:e6:2f:6c:30:69:d0:5b:a8:38:b2: 74:61:af:48:c4:87:a4:8c:73:1f:95:8f:09:43:ba: 44:ec:23:31:8d:17:e9:15:c5:4d:31:48:de:c2:81: 35:02:5f:9f:7e:c3:97:c8:bf:dd:04:d8:03:84:5e: 7f:82:34:72:af:ae:7b:85:9c:fc:45:94:a4:2a:25: 2e:b1:41:e0:fd:f0:57:63:31:2d:ba:6b:e3:00:76: ac:52:a9:c4:ed:01:31:7c:64:1a:31:7c:01:2c:fd: 2a:ae:4c:e6:f5:73:8b:00:e1:f0:2d:ea:98:f6:27: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FE:69:5F:DC:72:F7:BD:6D:E0:F6:A9:6C:0C:8C:DE:9C:98:34:D9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.0.0/13 Signature Algorithm: sha256WithRSAEncryption 75:96:ee:97:aa:af:9a:ce:7c:c4:37:b3:01:f4:57:42:51:c6: f8:33:c0:35:82:df:d1:c9:0b:95:45:e5:57:23:0b:ed:be:4f: 2d:7a:68:4c:11:17:75:b1:55:3a:5a:f9:89:8e:f1:1e:93:d4: 22:04:26:cb:38:5d:89:e3:93:50:12:57:28:1f:ec:37:aa:95: ff:be:5b:93:7b:fe:d7:2e:d0:77:40:88:46:e8:f3:33:07:0d: 60:ef:36:a3:7f:74:7b:a5:86:f2:6e:c3:38:ac:4b:5c:bd:62: de:e9:02:0c:0f:1b:8c:28:07:46:d8:be:56:8a:45:94:65:3c: dc:e0:fe:f2:19:56:92:00:34:e5:b7:64:44:3b:fa:0f:78:40: 84:14:c6:b4:d8:20:2e:49:04:c6:8d:a3:54:22:22:c5:be:c1: 44:b7:d8:f2:e1:10:6c:c8:b4:7e:f8:95:87:e0:d4:dc:0e:5c: cf:9e:48:84:97:ae:6e:cc:7e:02:46:5b:d4:f5:0b:0b:ec:b9: 8b:26:8b:3e:1a:11:e9:c9:56:3a:d4:a9:b2:87:6a:8f:0f:ee: 48:0c:86:0a:1d:a3:b9:ab:17:fe:ba:a1:04:6a:76:9b:e9:ed: 5d:b5:5c:5f:7d:83:be:f7:5f:e6:d3:8a:0a:6e:b8:ba:85:22: ce:1b:3b:f2 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUQ9O9n73tPnnBcSDkARoQ+q52hzQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMzAwMDAwMFoX DTI0MTIyODIzNTk1OVowejFJMEcGA1UEBRNAMzY3ZmRiYzUzNDBhZWMyZGFjMjEw MWEyYjE5OTM0ZjQ2YzhhZDQxYjE1NGUwNmM3YTM4NTNkOWEwNjdiZTA0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbppr7T/GFoPYFQDBYsX8XEwLaDs iElMpt4bxAXeEISbPpnSsld2EltRL4ZZJw6wZjjc+oswVXLOGPhprEdE0aUQ/bXA oVcY+PCunAClT71Q6Hmi+Tdzhw7XOubp3Xa3032Vb5+Fql+23VrnE83eBxVk03p/ Ezn1f6lvBEQ7BPxuFw/eBMTdFTXWheYvbDBp0FuoOLJ0Ya9IxIekjHMflY8JQ7pE 7CMxjRfpFcVNMUjewoE1Al+ffsOXyL/dBNgDhF5/gjRyr657hZz8RZSkKiUusUHg /fBXYzEtumvjAHasUqnE7QExfGQaMXwBLP0qrkzm9XOLAOHwLeqY9id5lwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFJb+aV/ccve9beD2qWwMjN6cmDTZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2MzliZjBjLWM2MDAtNDU1OC04NTZmLTIwYzQ5NTY5NTgwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMDK9AwDQYJKoZIhvcNAQELBQADggEBAHWW7peqr5rOfMQ3swH0V0JR xvgzwDWC39HJC5VF5VcjC+2+Ty16aEwRF3WxVTpa+YmO8R6T1CIEJss4XYnjk1AS Vygf7Deqlf++W5N7/tcu0HdAiEbo8zMHDWDvNqN/dHulhvJuwzisS1y9Yt7pAgwP G4woB0bYvlaKRZRlPNzg/vIZVpIANOW3ZEQ7+g94QIQUxrTYIC5JBMaNo1QiIsW+ wUS32PLhEGzItH74lYfg1NwOXM+eSISXrm7MfgJGW9T1CwvsuYsmiz4aEenJVjrU qbKHao8P7kgMhgodo7mrF/66oQRqdpvp7V21XF99g773X+bTigpuuLqFIs4bO/I= -----END CERTIFICATE-----Generated at Sun Nov 24 02:34:55 2024 by rpki-client on console-fra.rpki-client.org