$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e8d8271-3a39-44e7-8971-4754b2796103.roa File: 2e8d8271-3a39-44e7-8971-4754b2796103.roa (raw, json) Hash identifier: Tndj8eCiN9Qzin5Gb8NviSqd/5B1sLlfJVtYl3dXjPo= Subject key identifier: EF:D9:FB:52:99:CC:70:73:AF:CC:6A:25:73:27:6E:01:70:19:55:F5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2AB3248769AC2E536476468E8F93FFBABDDCC5E5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e8d8271-3a39-44e7-8971-4754b2796103.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 43.200.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b3:24:87:69:ac:2e:53:64:76:46:8e:8f:93:ff:ba:bd:dc:c5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=a727e7d7b00eb6252e98e143cbf1310d9b3f22e8250d3dd46645124c94c23bd4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:4d:f4:c7:a4:b6:b8:3e:08:d3:d2:9c:df: 63:de:86:17:54:c0:23:99:ba:9f:06:ac:b6:d4:82: b9:7f:b2:62:c0:e2:11:d8:89:b0:b6:fb:d7:8d:25: ea:d6:6b:fa:58:69:8e:1d:bb:72:75:ab:8f:d7:7f: ea:04:90:d8:c8:f6:cf:94:75:bd:a0:8f:d7:a8:03: 42:8f:b2:e0:3f:5d:5a:8e:2f:e4:e6:bb:72:10:d0: 75:4b:db:f5:cc:fc:29:2d:c3:3b:eb:12:43:4e:3a: 2b:28:d5:bf:ff:23:60:ff:52:d2:71:2c:12:51:bd: 0c:ab:4a:23:e5:a9:4b:79:5a:bb:42:52:d1:d8:7e: 63:f1:b5:a0:84:6a:c0:9f:34:d8:08:f5:5d:0b:5f: 47:20:a6:dd:f9:4d:7f:ba:2c:65:ab:5b:11:91:8a: 1b:c2:cd:3c:75:36:08:7f:f7:88:bd:f5:7c:e4:ed: 7e:69:3d:40:e6:cf:c3:b5:1d:e7:0c:5d:4c:05:b3: fa:cb:8f:a7:66:98:67:c0:33:75:b4:2b:fc:f1:28: 91:c6:41:b0:7f:48:86:21:c1:3b:39:43:5b:96:23: 36:27:e2:f8:ff:bb:6b:ee:5b:d1:3b:75:07:06:e9: e1:e4:f1:0b:09:40:3e:3a:1d:9e:04:bf:a1:dc:c8: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:FB:52:99:CC:70:73:AF:CC:6A:25:73:27:6E:01:70:19:55:F5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e8d8271-3a39-44e7-8971-4754b2796103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 6a:23:91:71:3c:54:fa:7a:bf:7d:48:ac:c1:f6:7c:7a:e4:b1: 74:38:f2:91:2e:07:ef:c6:4e:f0:47:4e:3d:22:a4:7d:04:d5: 80:82:e5:ec:db:43:41:43:2f:f2:f5:cd:aa:e5:26:04:40:b3: e8:03:40:6b:ae:5a:a6:a5:18:4c:5a:a7:ce:37:d7:dc:6e:86: 4b:b3:aa:2d:e8:5d:13:db:3e:99:4d:40:1f:2a:9d:d2:ab:a7: 57:28:c6:94:a8:16:a4:aa:a8:86:64:e3:de:79:95:dc:fe:de: c6:a0:c2:ac:16:3a:50:dc:63:fe:78:81:78:e5:ff:41:5c:ce: ed:d3:79:8b:bb:2e:ad:b4:ad:4b:10:4e:78:b8:52:f7:5b:d8: 68:4d:09:be:22:7b:3a:6f:b0:25:f9:e5:10:f0:19:9a:4a:57: 73:5f:bb:9b:bf:9b:65:b2:2d:69:55:b3:03:e2:cc:8f:13:af: 5b:9c:99:be:0d:85:90:79:66:5d:e6:5f:39:1f:cc:85:4f:71: 41:27:f1:1b:fb:ec:6e:e6:88:9b:79:99:c3:2f:71:79:f0:48: f4:c6:1e:4b:17:b1:f1:67:6b:cd:6b:24:7c:57:40:9d:7f:43: 58:40:4f:1f:c7:f8:16:24:bd:ef:a1:a1:5e:e2:8e:ee:cf:22: 5c:61:3f:28 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUKrMkh2msLlNkdkaOj5P/ur3cxeUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAYTcyN2U3ZDdiMDBlYjYyNTJlOThl MTQzY2JmMTMxMGQ5YjNmMjJlODI1MGQzZGQ0NjY0NTEyNGM5NGMyM2JkNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyxN9Mektrg+CNPSnN9j3oYXVMAj mbqfBqy21IK5f7JiwOIR2ImwtvvXjSXq1mv6WGmOHbtydauP13/qBJDYyPbPlHW9 oI/XqANCj7LgP11aji/k5rtyENB1S9v1zPwpLcM76xJDTjorKNW//yNg/1LScSwS Ub0Mq0oj5alLeVq7QlLR2H5j8bWghGrAnzTYCPVdC19HIKbd+U1/uixlq1sRkYob ws08dTYIf/eIvfV85O1+aT1A5s/DtR3nDF1MBbP6y4+nZphnwDN1tCv88SiRxkGw f0iGIcE7OUNbliM2J+L4/7tr7lvRO3UHBunh5PELCUA+Oh2eBL+h3Mjk4wIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFO/Z+1KZzHBzr8xqJXMnbgFwGVX1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlOGQ4MjcxLTNhMzktNDRlNy04OTcxLTQ3NTRiMjc5NjEwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMDK8gwDQYJKoZIhvcNAQELBQADggEBAGojkXE8VPp6v31IrMH2fHrk sXQ48pEuB+/GTvBHTj0ipH0E1YCC5ezbQ0FDL/L1zarlJgRAs+gDQGuuWqalGExa p84319xuhkuzqi3oXRPbPplNQB8qndKrp1coxpSoFqSqqIZk4955ldz+3sagwqwW OlDcY/54gXjl/0Fczu3TeYu7Lq20rUsQTni4Uvdb2GhNCb4iezpvsCX55RDwGZpK V3Nfu5u/m2WyLWlVswPizI8Tr1ucmb4NhZB5Zl3mXzkfzIVPcUEn8Rv77G7miJt5 mcMvcXnwSPTGHksXsfFna81rJHxXQJ1/Q1hATx/H+BYkve+hoV7iju7PIlxhPyg= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:34 2024 by rpki-client on console-fra.rpki-client.org