$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa File: 28319024-d945-4c6d-8d47-94e901bf897b.roa (raw, json) Hash identifier: ocppq/w9ueFuDUSZmBSo42mBnRp7hTtugOyvBCqm/Us= Subject key identifier: 42:40:13:E8:EB:EE:C3:7D:24:A7:A1:E2:D9:E6:BC:05:C7:95:1B:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0225228B0FBA4BEB84C6D718A30B23A0208553BB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:25:22:8b:0f:ba:4b:eb:84:c6:d7:18:a3:0b:23:a0:20:85:53:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=0024507ec31adcf264a84802a585ac61037f012e907d95523570e8f2a233d9ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:ac:a1:22:27:b2:e5:84:5d:e8:54:ee:f7: 3d:4f:1b:23:8b:9c:2d:3a:0f:44:ed:e5:24:a4:30: df:81:be:7c:bf:81:ad:bf:88:e2:3b:5b:7e:bf:55: c0:11:2d:ce:7a:62:cb:30:bd:74:41:89:99:f5:50: b5:a3:90:a5:60:99:fb:61:5d:ba:e0:b8:14:6b:6f: 3f:dc:2f:95:19:ae:de:e4:4d:74:d8:5c:54:68:11: 09:31:0b:b8:cc:27:61:ca:26:17:fe:c1:32:9a:aa: 53:ec:f1:29:e3:76:05:38:c9:e7:9d:d8:ea:a7:b2: e4:1a:8b:b0:cf:4b:51:c7:36:ed:de:95:da:f0:f6: 6c:8c:df:f9:01:8b:57:d8:d5:78:f4:37:b0:c1:a7: c0:18:a7:ad:90:02:91:53:c1:30:88:74:aa:b9:7b: 23:87:96:0c:d2:a6:ea:69:7a:73:44:38:4a:93:46: 90:aa:ad:10:5c:ea:02:bd:fd:3c:54:60:eb:55:7a: b2:0b:f5:5d:8d:34:f8:6f:04:96:75:34:1b:7b:6d: d6:fa:fd:1b:2c:c2:63:12:6b:d4:5a:0a:72:17:37: 78:8a:69:eb:40:b8:40:d0:07:71:04:ec:c4:9b:3d: 32:14:d3:d3:9a:15:a5:aa:9d:ee:fd:df:7e:ea:b2: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:40:13:E8:EB:EE:C3:7D:24:A7:A1:E2:D9:E6:BC:05:C7:95:1B:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28319024-d945-4c6d-8d47-94e901bf897b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4000::/40 Signature Algorithm: sha256WithRSAEncryption 25:7d:df:15:74:fb:82:95:40:cc:07:b7:0b:39:85:f6:c0:59: bb:24:08:f7:66:8b:22:bc:27:9d:58:a5:64:d4:6c:ed:e2:d6: c6:f6:f3:dc:b1:4e:6b:6e:32:e5:70:2e:cc:fe:a3:92:3c:87: dd:16:ec:74:fc:96:1e:d9:72:1b:7a:56:5e:58:29:77:36:a4: 87:01:71:aa:35:dc:77:fe:24:1d:57:27:6c:df:89:b7:10:a8: f6:6c:aa:c0:9c:46:0e:05:f8:e0:10:6d:15:5a:89:2f:60:fa: ce:7b:f7:0c:a6:16:ae:e5:bf:93:b7:5f:f2:6a:88:ee:6b:ff: 88:19:51:f7:c9:36:24:fc:ef:cd:29:b1:c2:af:36:42:83:e7: 0d:4f:d2:92:e0:54:57:b0:05:bb:2c:64:9f:64:dc:3a:3f:c8: 44:7e:69:dc:54:be:2b:cb:88:e1:98:dc:43:11:73:e4:ea:18: 43:90:2b:af:f2:5a:70:cb:4c:8f:c9:e5:6f:48:3b:d2:5a:e8: 13:ec:13:33:99:dd:df:f5:bd:6a:a1:e8:3f:1d:2e:e1:31:05: 8d:6a:47:35:8c:8f:26:43:b1:89:da:df:55:1a:cb:9e:ac:3e: cf:ad:10:a8:46:3d:d1:a7:bb:d7:32:e8:46:88:9a:01:8b:92: 4e:72:a4:69 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAiUiiw+6S+uExtcYowsjoCCFU7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAMDAyNDUwN2VjMzFhZGNmMjY0YTg0 ODAyYTU4NWFjNjEwMzdmMDEyZTkwN2Q5NTUyMzU3MGU4ZjJhMjMzZDlmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8qsoSInsuWEXehU7vc9Txsji5wt Og9E7eUkpDDfgb58v4Gtv4jiO1t+v1XAES3OemLLML10QYmZ9VC1o5ClYJn7YV26 4LgUa28/3C+VGa7e5E102FxUaBEJMQu4zCdhyiYX/sEymqpT7PEp43YFOMnnndjq p7LkGouwz0tRxzbt3pXa8PZsjN/5AYtX2NV49DewwafAGKetkAKRU8EwiHSquXsj h5YM0qbqaXpzRDhKk0aQqq0QXOoCvf08VGDrVXqyC/VdjTT4bwSWdTQbe23W+v0b LMJjEmvUWgpyFzd4imnrQLhA0AdxBOzEmz0yFNPTmhWlqp3u/d9+6rInfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEJAE+jr7sN9JKeh4tnmvAXHlRv2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4MzE5MDI0LWQ5NDUtNGM2ZC04ZDQ3LTk0ZTkwMWJmODk3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+0AwDQYJKoZIhvcNAQELBQADggEBACV93xV0+4KVQMwHtws5 hfbAWbskCPdmiyK8J51YpWTUbO3i1sb289yxTmtuMuVwLsz+o5I8h90W7HT8lh7Z cht6Vl5YKXc2pIcBcao13Hf+JB1XJ2zfibcQqPZsqsCcRg4F+OAQbRVaiS9g+s57 9wymFq7lv5O3X/JqiO5r/4gZUffJNiT8780pscKvNkKD5w1P0pLgVFewBbssZJ9k 3Do/yER+adxUvivLiOGY3EMRc+TqGEOQK6/yWnDLTI/J5W9IO9Ja6BPsEzOZ3d/1 vWqh6D8dLuExBY1qRzWMjyZDsYna31Uay56sPs+tEKhGPdGnu9cy6EaImgGLkk5y pGk= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:23 2024 by rpki-client on console-ams.rpki-client.org