$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa File: 2639bf0c-c600-4558-856f-20c495695807.roa (raw, json) Hash identifier: 0Nmhtfb3xfSw4rvLKRwI7F5nxRJuUm95dzE+81ikf4E= Subject key identifier: 77:1D:76:E5:AD:00:C1:F4:F4:12:85:53:8F:CB:5C:9C:BE:BA:3C:57 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2305426382292F7996BE6416E7F362DA42CEB96F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:05:42:63:82:29:2f:79:96:be:64:16:e7:f3:62:da:42:ce:b9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=6d77a4118b771742e48860cd9b406bce55f3695538475eff9a8e75ba2e5f1d1c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:a9:68:71:6e:59:a9:97:fc:50:9d:79:ad: 33:84:2f:75:ad:c3:84:f5:40:e3:55:45:8a:1b:e9: 83:71:97:26:b3:da:b4:99:4e:22:5a:94:23:01:eb: ce:22:37:46:65:9e:d8:31:cb:65:9f:f9:0c:0b:8b: 43:eb:7f:c4:08:83:ab:8a:a0:93:c7:df:dc:b2:7d: dc:f8:7a:be:52:a6:b5:9d:f8:ad:ed:0c:fc:78:d6: 30:2f:3e:6e:4b:33:d0:1d:44:1c:59:79:38:48:5c: 74:08:56:bf:7a:93:23:9f:57:61:72:13:77:cb:37: 9d:d4:07:2c:21:25:ac:f7:a8:4c:17:9e:a2:1e:a1: 0f:1c:52:1d:53:0d:29:9f:e7:ae:0e:11:b3:f9:0b: ad:8d:d0:2c:e2:2a:3f:76:70:5e:76:16:7d:19:0a: ea:2a:83:1d:2d:78:2b:51:df:20:2a:d0:b0:9c:1e: 01:ca:bf:cf:1c:36:0a:c5:1d:aa:2e:fd:3a:78:bc: 75:f4:7e:03:b7:3b:f9:fd:c1:f3:f8:2b:31:6f:64: ec:5a:c7:16:d8:3e:33:90:89:7e:e3:5c:f4:44:f9: 43:0f:6e:b7:d6:56:72:33:8d:49:a3:2f:67:f1:7a: 4f:38:3e:8e:b6:6e:08:95:d6:2c:32:76:36:ba:c8: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1D:76:E5:AD:00:C1:F4:F4:12:85:53:8F:CB:5C:9C:BE:BA:3C:57 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.0.0/13 Signature Algorithm: sha256WithRSAEncryption ac:bb:72:34:ba:c7:1c:5e:f3:05:98:12:75:d2:a3:46:2c:eb: 09:8a:30:c7:cf:82:0d:e0:fa:d4:21:aa:1e:14:d3:01:c8:47: c9:f9:07:23:7e:a5:ec:a2:66:60:0a:b4:ef:c1:ef:09:c7:30: d6:94:e6:22:dc:42:d5:06:38:12:2a:69:8c:98:f5:95:b0:bf: d5:50:2e:3a:a5:de:bb:42:95:b6:39:7f:79:06:3d:34:1f:65: f3:b7:e1:ee:6f:6e:bc:f3:b3:fc:a0:60:1a:7c:40:c6:e7:b6: 55:46:f0:65:ec:47:e9:98:5b:8e:b3:96:6a:a0:83:f9:3d:50: bb:07:0a:55:76:aa:5a:5d:fb:cf:1a:a0:2e:44:22:ff:c1:3b: 83:85:09:f6:3f:b7:86:01:82:56:d2:0c:c1:bc:a6:02:47:95: 9e:cb:37:15:b6:2b:c6:20:f5:20:0c:52:33:e7:b3:ec:9e:b7: 7b:50:bf:d7:21:46:2d:97:d8:cd:52:63:46:99:ac:36:00:9c: f5:65:88:3f:69:0b:12:b2:81:76:09:60:55:2e:88:be:8b:99: 0e:5b:f0:43:7b:7e:dc:42:17:2f:12:e7:06:06:28:37:43:79: 4a:60:ef:53:cc:b8:c2:d2:6e:52:50:52:b1:7d:de:45:7b:57: e8:88:ae:86 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUIwVCY4IpL3mWvmQW5/Ni2kLOuW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwODAwMDAwMFoX DTI0MDUxMzIzNTk1OVowejFJMEcGA1UEBRNANmQ3N2E0MTE4Yjc3MTc0MmU0ODg2 MGNkOWI0MDZiY2U1NWYzNjk1NTM4NDc1ZWZmOWE4ZTc1YmEyZTVmMWQxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiypaHFuWamX/FCdea0zhC91rcOE 9UDjVUWKG+mDcZcms9q0mU4iWpQjAevOIjdGZZ7YMctln/kMC4tD63/ECIOriqCT x9/csn3c+Hq+Uqa1nfit7Qz8eNYwLz5uSzPQHUQcWXk4SFx0CFa/epMjn1dhchN3 yzed1AcsISWs96hMF56iHqEPHFIdUw0pn+euDhGz+QutjdAs4io/dnBedhZ9GQrq KoMdLXgrUd8gKtCwnB4Byr/PHDYKxR2qLv06eLx19H4Dtzv5/cHz+Csxb2TsWscW 2D4zkIl+41z0RPlDD2631lZyM41Joy9n8XpPOD6Otm4IldYsMnY2usimYwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFHcdduWtAMH09BKFU4/LXJy+ujxXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2MzliZjBjLWM2MDAtNDU1OC04NTZmLTIwYzQ5NTY5NTgwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMDK9AwDQYJKoZIhvcNAQELBQADggEBAKy7cjS6xxxe8wWYEnXSo0Ys 6wmKMMfPgg3g+tQhqh4U0wHIR8n5ByN+peyiZmAKtO/B7wnHMNaU5iLcQtUGOBIq aYyY9ZWwv9VQLjql3rtClbY5f3kGPTQfZfO34e5vbrzzs/ygYBp8QMbntlVG8GXs R+mYW46zlmqgg/k9ULsHClV2qlpd+88aoC5EIv/BO4OFCfY/t4YBglbSDMG8pgJH lZ7LNxW2K8Yg9SAMUjPns+yet3tQv9chRi2X2M1SY0aZrDYAnPVliD9pCxKygXYJ YFUuiL6LmQ5b8EN7ftxCFy8S5wYGKDdDeUpg71PMuMLSblJQUrF93kV7V+iIroY= -----END CERTIFICATE-----Generated at Fri Apr 26 11:00:08 2024 by rpki-client on console-ams.rpki-client.org