$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa File: 28319024-d945-4c6d-8d47-94e901bf897b.roa (raw, json) Hash identifier: HEUTxUzFIKoXa2mGwmxEAV4+lLl6IhGeRy8du+F/4FA= Subject key identifier: FA:3D:77:19:10:F2:A1:29:C5:63:06:FF:F1:FC:55:9D:CE:18:03:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D87422F04F09B993EC97FEC1BE59A293C14BAEF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:87:42:2f:04:f0:9b:99:3e:c9:7f:ec:1b:e5:9a:29:3c:14:ba:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=214eadff602c9eaf8d7e44f9b08dc0d47811922724757767b5d11bb60517accd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:e9:64:a5:23:3e:92:06:ae:f3:66:ff:65: 21:a2:77:16:7a:22:07:87:28:84:c8:98:4c:fb:f4: 52:0e:16:ed:15:e7:61:07:0a:34:98:28:cf:93:c2: 10:1e:a4:14:3d:c8:0b:8f:1a:7a:84:cf:20:7a:ca: e5:29:e0:3e:5e:82:bc:74:e2:d8:a1:6d:28:25:3a: 63:30:20:08:c7:c7:38:33:42:b2:1c:c1:c2:d9:e6: 1e:7d:bc:59:c0:1d:2d:58:e9:7f:12:a4:04:8a:67: ba:d3:f8:e6:12:7f:f5:38:7d:84:a2:6c:b3:0c:3c: 77:b3:33:67:98:fe:43:bf:91:a4:e3:4f:2c:95:a7: 00:f4:5d:79:28:94:54:ee:25:aa:a7:e6:9b:7a:1c: 33:51:fb:90:c9:12:1b:f1:8a:3f:78:c4:3b:11:09: 6b:56:46:35:e5:8a:0c:65:a0:aa:e4:0f:8b:85:dd: d4:97:9b:63:6b:8d:1c:00:ec:98:f4:12:c7:fa:3d: 3b:25:5b:2f:3e:f6:49:2a:99:ac:15:5e:9e:6d:3d: d4:81:82:27:1a:2b:ee:ae:75:ea:35:0e:13:c1:79: 49:91:03:8f:37:c8:20:5b:35:8c:76:8e:d6:14:26: 95:5e:7a:11:ba:b3:1f:e1:e2:ff:8d:e2:0e:00:4f: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3D:77:19:10:F2:A1:29:C5:63:06:FF:F1:FC:55:9D:CE:18:03:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4000::/40 Signature Algorithm: sha256WithRSAEncryption 0f:c5:50:d0:0a:fe:a7:c0:be:50:d2:9e:0a:84:4a:5a:aa:a2: 69:05:03:b7:88:e8:4b:ea:e5:82:ab:33:4b:33:82:2c:42:a4: a3:25:fb:0f:c4:4e:08:7b:13:64:97:d8:23:1d:7a:8a:c1:d8: 18:2d:7f:ff:46:27:a0:c1:19:3b:fc:5c:fb:47:7b:0b:cf:46: 67:5f:8f:84:cd:ba:85:ca:74:47:74:7d:17:2a:51:03:58:a8: d4:0c:38:ce:d8:0a:fc:61:dd:c6:3a:15:b1:69:cb:a1:01:cd: eb:51:2f:c8:86:50:13:18:4d:4d:30:9c:c1:4d:00:2f:56:5b: 61:23:ac:55:16:09:62:4d:92:8f:0a:fd:5e:8a:c7:77:5d:57: ed:84:14:c0:6a:3e:cb:3e:5f:d1:d6:6c:24:2b:69:1c:66:e0: 5e:5a:e3:83:52:d4:02:9d:b9:77:1e:3f:5e:7f:f3:4a:57:43: 69:da:f3:c8:61:d8:94:f3:8d:40:49:d3:68:98:18:60:ff:ba: 73:86:71:66:51:40:ea:2a:16:bd:d6:f8:0d:f8:bb:55:2c:ef: b9:a8:f3:39:dc:41:cc:cf:4b:53:34:30:80:91:46:09:bb:5d: 32:6c:65:45:ec:2b:51:e5:f3:8c:47:09:b4:ca:1e:84:d9:b4: 07:fe:37:fa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXYdCLwTwm5k+yX/sG+WaKTwUuu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMjE0ZWFkZmY2MDJjOWVhZjhkN2U0 NGY5YjA4ZGMwZDQ3ODExOTIyNzI0NzU3NzY3YjVkMTFiYjYwNTE3YWNjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCfpZKUjPpIGrvNm/2UhoncWeiIH hyiEyJhM+/RSDhbtFedhBwo0mCjPk8IQHqQUPcgLjxp6hM8gesrlKeA+XoK8dOLY oW0oJTpjMCAIx8c4M0KyHMHC2eYefbxZwB0tWOl/EqQEime60/jmEn/1OH2Eomyz DDx3szNnmP5Dv5Gk408slacA9F15KJRU7iWqp+abehwzUfuQyRIb8Yo/eMQ7EQlr VkY15YoMZaCq5A+Lhd3Ul5tja40cAOyY9BLH+j07JVsvPvZJKpmsFV6ebT3UgYIn GivurnXqNQ4TwXlJkQOPN8ggWzWMdo7WFCaVXnoRurMf4eL/jeIOAE8lJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPo9dxkQ8qEpxWMG//H8VZ3OGAPrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4MzE5MDI0LWQ5NDUtNGM2ZC04ZDQ3LTk0ZTkwMWJmODk3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+0AwDQYJKoZIhvcNAQELBQADggEBAA/FUNAK/qfAvlDSngqE SlqqomkFA7eI6Evq5YKrM0szgixCpKMl+w/ETgh7E2SX2CMdeorB2Bgtf/9GJ6DB GTv8XPtHewvPRmdfj4TNuoXKdEd0fRcqUQNYqNQMOM7YCvxh3cY6FbFpy6EBzetR L8iGUBMYTU0wnMFNAC9WW2EjrFUWCWJNko8K/V6Kx3ddV+2EFMBqPss+X9HWbCQr aRxm4F5a44NS1AKduXceP15/80pXQ2na88hh2JTzjUBJ02iYGGD/unOGcWZRQOoq Fr3W+A34u1Us77mo8zncQczPS1M0MICRRgm7XTJsZUXsK1Hl84xHCbTKHoTZtAf+ N/o= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org