$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3077dfbe-9c7e-4045-aabd-01925b7044ae.roa File: 3077dfbe-9c7e-4045-aabd-01925b7044ae.roa (raw, json) Hash identifier: A/kbx00wCGsKC2h1c4PlfSGa/ZqFVUMmyx7ObUqlVL8= Subject key identifier: 04:66:42:D3:2F:1E:62:C6:31:70:53:77:9B:30:26:19:A3:29:D1:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A679D563B5C9FDAB3484FF7A96454F65230013E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3077dfbe-9c7e-4045-aabd-01925b7044ae.roa Signing time: Fri 04 Oct 2024 00:00:00 +0000 ROA not before: Fri 04 Oct 2024 00:00:00 +0000 ROA not after: Fri 08 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:67:9d:56:3b:5c:9f:da:b3:48:4f:f7:a9:64:54:f6:52:30:01:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:00 2024 GMT Not After : Nov 8 23:59:59 2024 GMT Subject: serialNumber=114bce28200cd737776475beb25b7b2d975a35d2a9cd782833f5aefe1221a8f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:00:87:39:52:f0:40:80:e3:e7:fa:69:81:dd: 81:1d:06:8e:29:29:e5:2b:a1:70:e1:a3:6e:9e:30: 2f:c7:31:e8:bc:cc:5e:e3:74:27:0d:6a:15:31:fc: 35:21:c5:c6:1f:6b:e4:bd:cb:ba:db:6b:79:de:dc: 0f:20:1d:7b:5f:ac:73:45:0b:12:bd:2f:31:1b:ee: cb:2f:d8:24:b9:15:20:5c:5c:b8:9b:86:ff:d3:f7: e3:b9:e6:25:d4:df:d2:ee:ba:27:34:6b:32:85:92: 72:2c:0a:b5:f3:a1:a1:9b:11:af:c8:27:bf:73:b8: 9b:cf:51:a0:1e:77:8f:55:3e:64:3c:fc:2c:f7:55: bb:8b:63:0c:ef:70:b0:7e:a2:60:66:a4:da:c3:ce: 4b:8a:f5:01:3d:7b:f5:75:01:78:55:49:93:1f:5b: 79:c6:4e:c1:f7:fb:9b:d9:7d:dc:6a:f3:fb:14:49: b7:9f:eb:21:8f:c0:b8:5f:ba:bf:12:9a:f4:b4:df: ec:5e:17:ed:18:76:72:4e:e5:6e:7a:74:89:fa:da: b1:cc:be:e5:a7:f0:8a:35:1c:14:aa:1c:b4:e3:6a: 1b:0c:ee:ac:94:a1:c0:b4:e9:72:99:a6:ef:98:be: d0:0a:bb:62:00:8c:65:21:3f:17:1a:11:e2:ba:f6: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:66:42:D3:2F:1E:62:C6:31:70:53:77:9B:30:26:19:A3:29:D1:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3077dfbe-9c7e-4045-aabd-01925b7044ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:e000::/40 Signature Algorithm: sha256WithRSAEncryption 30:78:db:ce:db:fb:c4:3e:f2:24:a8:35:f0:2c:56:be:25:e5: 60:d8:d8:a6:3a:34:e3:2b:83:72:ad:cc:83:44:f9:8d:f0:b9: 81:a7:05:97:ea:fc:42:a0:0d:ca:88:60:2f:f2:2d:d9:7d:cc: 43:f2:64:12:5f:0b:86:ff:0b:66:62:d5:2e:e3:5c:43:a3:47: 08:36:3a:b2:f2:18:ef:41:91:cf:8a:c9:f1:0a:79:f3:23:e5: 9a:c5:bf:2f:6a:0b:52:f4:0f:e7:5c:69:87:fe:00:aa:56:4f: c2:c1:1b:93:44:9c:02:fb:ad:9c:09:4f:89:e9:2a:93:b0:e4: 03:37:f5:c4:f6:f5:39:8b:f0:23:69:b4:7b:a2:8f:e1:78:1e: 14:bc:42:65:9e:67:01:d2:30:24:fe:3e:9d:6c:03:a3:76:1f: ef:3c:84:1e:2d:4f:b7:f9:ea:3e:ba:1f:f9:f5:37:b9:e2:90: 87:dd:bb:70:d1:1e:50:e8:d8:e9:61:26:ca:a1:56:cb:ad:12: ab:80:7b:b5:95:ac:00:00:2c:dc:0f:f0:c7:bb:e9:e0:9c:66: f0:99:21:be:5a:8a:a0:28:88:2d:55:31:9f:63:b3:a5:7f:08: c3:09:06:25:b7:d1:9b:75:f5:41:bf:1d:fc:1e:46:80:19:db: a1:aa:ae:ec -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSmedVjtcn9qzSE/3qWRU9lIwAT4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwNDAwMDAwMFoX DTI0MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMTE0YmNlMjgyMDBjZDczNzc3NjQ3 NWJlYjI1YjdiMmQ5NzVhMzVkMmE5Y2Q3ODI4MzNmNWFlZmUxMjIxYThmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ACHOVLwQIDj5/ppgd2BHQaOKSnl K6Fw4aNunjAvxzHovMxe43QnDWoVMfw1IcXGH2vkvcu622t53twPIB17X6xzRQsS vS8xG+7LL9gkuRUgXFy4m4b/0/fjueYl1N/S7ronNGsyhZJyLAq186GhmxGvyCe/ c7ibz1GgHnePVT5kPPws91W7i2MM73CwfqJgZqTaw85LivUBPXv1dQF4VUmTH1t5 xk7B9/ub2X3cavP7FEm3n+shj8C4X7q/Epr0tN/sXhftGHZyTuVuenSJ+tqxzL7l p/CKNRwUqhy042obDO6slKHAtOlymabvmL7QCrtiAIxlIT8XGhHiuvYOoQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFARmQtMvHmLGMXBTd5swJhmjKdFWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMwNzdkZmJlLTljN2UtNDA0NS1hYWJkLTAxOTI1YjcwNDRhZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYOAwDQYJKoZIhvcNAQELBQADggEBADB4287b+8Q+8iSoNfAs Vr4l5WDY2KY6NOMrg3KtzINE+Y3wuYGnBZfq/EKgDcqIYC/yLdl9zEPyZBJfC4b/ C2Zi1S7jXEOjRwg2OrLyGO9Bkc+KyfEKefMj5ZrFvy9qC1L0D+dcaYf+AKpWT8LB G5NEnAL7rZwJT4npKpOw5AM39cT29TmL8CNptHuij+F4HhS8QmWeZwHSMCT+Pp1s A6N2H+88hB4tT7f56j66H/n1N7nikIfdu3DRHlDo2OlhJsqhVsutEquAe7WVrAAA LNwP8Me76eCcZvCZIb5aiqAoiC1VMZ9js6V/CMMJBiW30Zt19UG/HfweRoAZ26Gq ruw= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:32 2024 by rpki-client on console-fra.rpki-client.org