$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e8d8271-3a39-44e7-8971-4754b2796103.roa File: 2e8d8271-3a39-44e7-8971-4754b2796103.roa (raw, json) Hash identifier: W+yI73l6TAtTLvsuQKv5oXCUXtCC3WxV70LA6GOL81c= Subject key identifier: DA:6F:64:85:F0:31:81:C1:69:5D:6B:F2:34:89:BA:05:8A:BD:5A:3C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2400F846752AB37CEEB7FCCCC89B8F49AB311EE6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e8d8271-3a39-44e7-8971-4754b2796103.roa Signing time: Fri 06 Sep 2024 00:00:00 +0000 ROA not before: Fri 06 Sep 2024 00:00:00 +0000 ROA not after: Fri 11 Oct 2024 23:59:59 +0000 asID: 8987 IP address blocks: 43.200.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Sep 2024 00:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:00:f8:46:75:2a:b3:7c:ee:b7:fc:cc:c8:9b:8f:49:ab:31:1e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 6 00:00:00 2024 GMT Not After : Oct 11 23:59:59 2024 GMT Subject: serialNumber=928095778a033a28e9601bd0cc2ae5c4cd5f96f887a7a992f3ab16c5d428094f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:35:bd:05:2f:87:ec:86:8d:1e:a7:81:9c: fa:b7:4c:f1:18:94:fe:c8:53:73:3c:fc:21:04:ef: 7d:65:83:a0:94:0b:40:ae:6a:e1:c0:19:81:60:34: 61:b9:05:e5:7a:03:10:25:8c:9f:20:3a:bc:17:0b: b9:9f:32:6c:ab:af:c5:ea:62:75:ab:1f:0a:f5:20: 47:da:2a:34:12:e6:41:de:2b:f2:54:19:a5:6d:3f: 6e:23:a3:bb:1f:1a:ba:47:18:a8:8b:13:6c:77:17: 5c:7d:3e:e4:82:ab:8c:ad:fe:81:07:b8:cc:aa:0c: de:e8:48:ee:51:51:c9:9d:c4:21:6b:0b:63:a8:e6: 96:63:4e:71:2d:89:11:d9:60:68:d8:c4:af:6b:bb: d1:0b:1e:fc:32:5e:62:d0:c8:34:e5:49:99:97:73: 54:6f:13:e6:54:af:51:c7:b2:e6:09:98:98:44:f0: c9:10:2a:87:85:68:3b:3d:1b:0f:fe:54:93:cd:df: ea:45:5a:05:ed:80:2e:cf:94:f6:0d:59:d2:77:58: b5:97:1a:9a:47:ce:db:7e:f9:35:40:e0:29:cc:6d: f9:0c:b4:50:ae:49:96:8b:3d:f1:28:94:4b:4d:6a: 1b:85:41:c7:ca:5d:53:61:16:45:b7:8e:eb:d5:ee: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6F:64:85:F0:31:81:C1:69:5D:6B:F2:34:89:BA:05:8A:BD:5A:3C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e8d8271-3a39-44e7-8971-4754b2796103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 0b:96:da:16:c6:dc:09:a8:c4:da:04:c4:f6:df:3d:43:0b:80: 88:9b:fb:3e:1d:1d:58:1b:28:eb:ff:92:64:26:a3:f0:db:6b: da:7c:13:9c:95:46:c1:f7:d9:f0:40:92:7d:69:a1:2f:89:01: 2f:97:23:28:51:b4:33:64:4b:ec:e6:99:a4:06:1e:d2:34:02: 97:e4:82:b7:af:31:50:6e:7f:a4:09:02:35:b4:97:49:c7:24: 9f:18:bc:4d:f9:10:25:ea:2f:82:c2:de:ef:df:0c:e6:d0:49: 72:87:43:bd:9f:54:97:48:d0:a6:23:3a:da:74:fd:31:1d:e8: 5a:9c:ce:8d:0d:26:d3:f7:fd:c1:a3:9d:c9:53:38:ec:c2:51: d7:d5:1c:3d:79:7a:72:22:a3:d3:06:a3:d8:8a:1e:c6:a8:93: 30:46:65:9d:3c:55:79:61:eb:d3:e0:f7:48:5f:b2:66:30:ae: 38:6d:cc:00:db:f4:cf:08:47:bd:9d:39:32:30:60:ec:36:5d: 9a:2e:09:91:47:03:3f:7b:aa:d8:cf:20:bf:9f:42:b4:83:c2: a6:6e:29:0c:f4:78:18:70:9e:99:7c:4c:b2:93:bb:c9:4d:fe: 79:7b:60:63:bc:a9:fb:1b:b1:dd:a7:cc:16:04:fa:54:4a:81: ea:6e:e3:4e -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUJAD4RnUqs3zut/zMyJuPSasxHuYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDkwNjAwMDAwMFoX DTI0MTAxMTIzNTk1OVowejFJMEcGA1UEBRNAOTI4MDk1Nzc4YTAzM2EyOGU5NjAx YmQwY2MyYWU1YzRjZDVmOTZmODg3YTdhOTkyZjNhYjE2YzVkNDI4MDk0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGI1vQUvh+yGjR6ngZz6t0zxGJT+ yFNzPPwhBO99ZYOglAtArmrhwBmBYDRhuQXlegMQJYyfIDq8Fwu5nzJsq6/F6mJ1 qx8K9SBH2io0EuZB3ivyVBmlbT9uI6O7Hxq6RxioixNsdxdcfT7kgquMrf6BB7jM qgze6EjuUVHJncQhawtjqOaWY05xLYkR2WBo2MSva7vRCx78Ml5i0Mg05UmZl3NU bxPmVK9Rx7LmCZiYRPDJECqHhWg7PRsP/lSTzd/qRVoF7YAuz5T2DVnSd1i1lxqa R87bfvk1QOApzG35DLRQrkmWiz3xKJRLTWobhUHHyl1TYRZFt47r1e49mwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFNpvZIXwMYHBaV1r8jSJugWKvVo8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlOGQ4MjcxLTNhMzktNDRlNy04OTcxLTQ3NTRiMjc5NjEwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMDK8gwDQYJKoZIhvcNAQELBQADggEBAAuW2hbG3AmoxNoExPbfPUML gIib+z4dHVgbKOv/kmQmo/Dba9p8E5yVRsH32fBAkn1poS+JAS+XIyhRtDNkS+zm maQGHtI0ApfkgrevMVBuf6QJAjW0l0nHJJ8YvE35ECXqL4LC3u/fDObQSXKHQ72f VJdI0KYjOtp0/TEd6Fqczo0NJtP3/cGjnclTOOzCUdfVHD15enIio9MGo9iKHsao kzBGZZ08VXlh69Pg90hfsmYwrjhtzADb9M8IR72dOTIwYOw2XZouCZFHAz97qtjP IL+fQrSDwqZuKQz0eBhwnpl8TLKTu8lN/nl7YGO8qfsbsd2nzBYE+lRKgepu404= -----END CERTIFICATE-----Generated at Sat Sep 7 01:39:00 2024 by rpki-client on console-ams.rpki-client.org