$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa File: 28319024-d945-4c6d-8d47-94e901bf897b.roa (raw, json) Hash identifier: sRadUi/vt4JafT673Q7lQErz7DdF9vkM9zPKjThZbW4= Subject key identifier: 42:1A:3F:AB:BF:5E:89:33:0A:7C:AB:F6:A4:D4:18:0B:1B:2E:E1:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 631CC93150418A574F89AEF6FE31FE57E778E2A8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1c:c9:31:50:41:8a:57:4f:89:ae:f6:fe:31:fe:57:e7:78:e2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=8b131c1c51810d1fc156839df70ee24b28605518a3f87b32c2ba47dc14c40fa9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:4f:f9:56:93:69:65:93:22:4c:a0:06:37: 94:ee:f0:64:8d:ca:ab:22:fd:0e:ff:5c:13:a4:20: 79:7f:21:48:0d:3a:93:cb:d2:7d:2f:1b:55:bf:40: 47:f1:c0:b1:81:7a:7f:4d:ec:b9:89:b3:d2:50:3d: fe:47:38:0d:c0:33:5e:0e:59:6c:98:52:e2:ac:b9: 6a:7d:00:a9:48:d1:fc:03:bd:68:6e:d1:bc:45:35: 20:f2:30:f7:e9:e2:33:b3:7a:9c:89:6c:7b:dc:04: 18:d5:d9:ab:da:5a:4b:10:ea:0d:6a:6b:c5:b9:24: f0:b9:76:0a:58:a2:c6:64:92:a6:0d:2d:01:e4:c5: 54:e2:49:27:c3:ed:6e:64:d2:20:05:97:c8:ae:3d: d9:54:15:68:27:bd:c1:78:b3:a1:78:20:b8:c5:23: cc:ee:a8:96:e1:04:a8:d9:fa:bf:ef:40:2d:8c:6f: 46:9f:13:4c:5b:75:51:7d:f9:22:3e:59:78:45:57: 55:95:17:66:b3:5e:68:b6:5e:fc:66:b1:52:66:2e: 84:81:da:38:c5:19:99:d0:d4:56:d1:26:20:2a:00: 99:c1:f2:32:04:2e:d7:9d:ba:a5:05:b1:b6:b1:31: ee:34:f3:16:69:de:77:ab:cb:65:f8:59:d3:06:f5: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:3F:AB:BF:5E:89:33:0A:7C:AB:F6:A4:D4:18:0B:1B:2E:E1:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4000::/40 Signature Algorithm: sha256WithRSAEncryption 53:94:9e:83:de:e4:0b:a3:16:07:91:63:fc:bb:0f:3f:a4:19: 6c:e6:e6:b5:dc:ac:7b:d4:06:94:bc:a2:42:73:7d:e2:46:11: 6d:5e:de:79:57:bc:d9:5e:58:41:0e:ba:f6:6f:83:30:71:7f: 89:66:2b:f0:f4:37:10:9a:23:ee:83:ba:d5:c6:8b:ed:ae:c4: ef:75:a0:69:eb:b4:36:39:9f:d5:8d:c8:48:43:f2:16:d2:8f: 53:3d:75:2f:62:88:64:64:5a:b4:97:f7:f3:e7:dc:9c:4d:27: d5:74:03:e8:04:21:95:b8:82:96:13:c3:68:2e:5f:18:73:7b: 29:6f:e7:d6:a0:bd:73:bc:7e:5d:d4:a0:54:6a:3b:cb:85:be: 8e:e9:38:32:83:32:f8:21:b5:aa:dd:97:d4:4c:1d:f4:bf:c0: b3:d8:3f:68:6e:48:8c:e9:c4:15:cf:c9:06:cc:62:6f:39:b3: 20:53:5a:17:3c:27:a7:38:39:1e:89:aa:47:8d:77:7d:42:ec: a4:f8:d8:c6:a7:b2:78:9d:1d:4f:3e:86:44:f3:10:d8:81:99: bc:90:76:57:f0:e4:c1:56:83:fc:2e:83:69:c1:30:7a:b3:f7: 51:ed:e6:80:41:10:de:19:33:60:90:bf:c3:d0:96:7b:f2:3a: 64:a6:ee:9e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYxzJMVBBildPia72/jH+V+d44qgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAOGIxMzFjMWM1MTgxMGQxZmMxNTY4 MzlkZjcwZWUyNGIyODYwNTUxOGEzZjg3YjMyYzJiYTQ3ZGMxNGM0MGZhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGJP+VaTaWWTIkygBjeU7vBkjcqr Iv0O/1wTpCB5fyFIDTqTy9J9LxtVv0BH8cCxgXp/Tey5ibPSUD3+RzgNwDNeDlls mFLirLlqfQCpSNH8A71obtG8RTUg8jD36eIzs3qciWx73AQY1dmr2lpLEOoNamvF uSTwuXYKWKLGZJKmDS0B5MVU4kknw+1uZNIgBZfIrj3ZVBVoJ73BeLOheCC4xSPM 7qiW4QSo2fq/70AtjG9GnxNMW3VRffkiPll4RVdVlRdms15otl78ZrFSZi6Egdo4 xRmZ0NRW0SYgKgCZwfIyBC7XnbqlBbG2sTHuNPMWad53q8tl+FnTBvUpvwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEIaP6u/XokzCnyr9qTUGAsbLuEdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4MzE5MDI0LWQ5NDUtNGM2ZC04ZDQ3LTk0ZTkwMWJmODk3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+0AwDQYJKoZIhvcNAQELBQADggEBAFOUnoPe5AujFgeRY/y7 Dz+kGWzm5rXcrHvUBpS8okJzfeJGEW1e3nlXvNleWEEOuvZvgzBxf4lmK/D0NxCa I+6DutXGi+2uxO91oGnrtDY5n9WNyEhD8hbSj1M9dS9iiGRkWrSX9/Pn3JxNJ9V0 A+gEIZW4gpYTw2guXxhzeylv59agvXO8fl3UoFRqO8uFvo7pODKDMvghtardl9RM HfS/wLPYP2huSIzpxBXPyQbMYm85syBTWhc8J6c4OR6JqkeNd31C7KT42Mansnid HU8+hkTzENiBmbyQdlfw5MFWg/wug2nBMHqz91Ht5oBBEN4ZM2CQv8PQlnvyOmSm 7p4= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:12 2024 by rpki-client on console-ams.rpki-client.org