$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa File: 326b5e17-ace3-4579-8ae9-5219c81c9034.roa (raw, json) Hash identifier: BsUUaaHWYcemOw3G1sQ15QhR745kjrD796C/RdiXjkM= Subject key identifier: E3:CB:33:EA:12:62:D8:C8:BF:7C:BF:3D:EF:F0:7E:E7:61:8F:DB:2A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7423CA3A7E3B791B97685BA36BCC934EB2B3EC2B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa Signing time: Mon 01 Apr 2024 00:00:00 +0000 ROA not before: Mon 01 Apr 2024 00:00:00 +0000 ROA not after: Mon 06 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:23:ca:3a:7e:3b:79:1b:97:68:5b:a3:6b:cc:93:4e:b2:b3:ec:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 1 00:00:00 2024 GMT Not After : May 6 23:59:59 2024 GMT Subject: serialNumber=946940cd14bcb8245a2a0ce379cf96c39d81932bc916712ca7c2e97906d2ba52, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:dd:34:01:da:d4:8f:74:aa:bd:8e:be:bb: 49:43:5d:07:48:5b:05:f4:82:b8:02:c3:0b:29:fa: 77:a1:93:a0:cc:56:3a:f5:3a:33:60:f2:d9:88:86: 85:ee:53:27:1c:55:e9:ac:90:08:99:09:a4:fd:96: 58:18:a1:0f:6c:a9:ac:e9:eb:f7:d6:35:ea:f4:3f: da:78:fa:7e:11:2b:0d:f1:43:cb:06:36:ff:c7:8a: f8:fb:14:fa:64:93:41:9d:6f:f5:c5:40:40:d1:15: 22:49:54:b1:91:a1:66:f9:04:33:df:4b:0e:64:40: 09:42:49:09:1a:f4:b3:f4:8e:a4:41:c8:2d:ac:eb: 59:42:95:ef:b6:83:4d:b4:ba:ec:e0:00:31:13:57: 64:71:ec:f5:2c:92:ee:49:6b:8c:96:e4:65:19:11: 36:be:19:69:bd:9a:57:0a:0d:f0:60:f3:4c:0a:81: 98:92:62:27:34:4a:4b:ff:52:9d:fa:aa:99:fc:bb: 52:b0:5a:ba:04:ba:48:b6:86:2e:93:5c:93:71:0a: fe:ae:4c:26:36:ff:ed:9d:65:d1:49:c3:c7:32:50: 66:6b:20:28:43:3d:20:2b:71:5b:55:d6:32:8a:69: 5b:be:fa:f8:6c:7f:3d:0c:4d:6c:94:20:fa:e7:d3: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CB:33:EA:12:62:D8:C8:BF:7C:BF:3D:EF:F0:7E:E7:61:8F:DB:2A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/326b5e17-ace3-4579-8ae9-5219c81c9034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2e::/36 Signature Algorithm: sha256WithRSAEncryption 06:40:d5:96:4c:a0:32:65:57:0f:3e:e8:9e:59:9f:21:e4:90: 87:8b:7d:79:3e:d9:85:12:74:e5:e5:00:ae:66:53:ed:13:74: 60:5b:b1:39:d7:09:91:b7:2d:95:ed:ab:ac:ba:be:7e:d2:ae: 05:74:d3:10:af:4c:78:af:a2:77:74:6a:bd:d8:cb:1d:9d:ce: 96:f1:2c:88:6c:ef:c3:d5:e2:63:08:56:b5:b7:8d:e8:13:49: 73:70:cb:f6:35:9c:85:89:a5:82:03:4c:f2:d7:9f:99:7b:de: 70:05:1f:05:dc:ee:79:3e:f0:e1:af:0b:be:59:b9:da:8b:27: 83:85:35:7e:59:3b:0b:45:fd:2d:13:28:8d:d2:83:a2:3f:79: 2d:a9:79:bb:01:a6:3d:ef:95:b2:17:4f:14:3a:31:31:95:35: 1b:b0:34:36:be:90:8b:93:0e:c0:51:52:27:08:93:2d:5a:77: 1c:1b:28:78:30:04:8d:5f:15:f0:93:45:5d:c4:1b:0c:a2:32: 19:ad:00:a4:4c:a6:0a:c7:93:99:9f:c2:ca:6a:cb:b5:fc:8b: 05:74:b2:30:5b:80:93:09:17:69:9f:81:d9:5a:99:ff:13:42: 56:c0:14:59:26:05:dc:11:2b:8d:35:33:b4:9c:52:1f:59:8d: fa:e8:af:e4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdCPKOn47eRuXaFuja8yTTrKz7CswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwMTAwMDAwMFoX DTI0MDUwNjIzNTk1OVowejFJMEcGA1UEBRNAOTQ2OTQwY2QxNGJjYjgyNDVhMmEw Y2UzNzljZjk2YzM5ZDgxOTMyYmM5MTY3MTJjYTdjMmU5NzkwNmQyYmE1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcrdNAHa1I90qr2OvrtJQ10HSFsF 9IK4AsMLKfp3oZOgzFY69TozYPLZiIaF7lMnHFXprJAImQmk/ZZYGKEPbKms6ev3 1jXq9D/aePp+ESsN8UPLBjb/x4r4+xT6ZJNBnW/1xUBA0RUiSVSxkaFm+QQz30sO ZEAJQkkJGvSz9I6kQcgtrOtZQpXvtoNNtLrs4AAxE1dkcez1LJLuSWuMluRlGRE2 vhlpvZpXCg3wYPNMCoGYkmInNEpL/1Kd+qqZ/LtSsFq6BLpItoYuk1yTcQr+rkwm Nv/tnWXRScPHMlBmayAoQz0gK3FbVdYyimlbvvr4bH89DE1slCD659NWnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOPLM+oSYtjIv3y/Pe/wfudhj9sqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyNmI1ZTE3LWFjZTMtNDU3OS04YWU5LTUyMTljODFjOTAzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLgAwDQYJKoZIhvcNAQELBQADggEBAAZA1ZZMoDJlVw8+6J5Z nyHkkIeLfXk+2YUSdOXlAK5mU+0TdGBbsTnXCZG3LZXtq6y6vn7SrgV00xCvTHiv ond0ar3Yyx2dzpbxLIhs78PV4mMIVrW3jegTSXNwy/Y1nIWJpYIDTPLXn5l73nAF HwXc7nk+8OGvC75ZudqLJ4OFNX5ZOwtF/S0TKI3Sg6I/eS2pebsBpj3vlbIXTxQ6 MTGVNRuwNDa+kIuTDsBRUicIky1adxwbKHgwBI1fFfCTRV3EGwyiMhmtAKRMpgrH k5mfwspqy7X8iwV0sjBbgJMJF2mfgdlamf8TQlbAFFkmBdwRK401M7ScUh9Zjfro r+Q= -----END CERTIFICATE-----Generated at Thu Apr 18 05:01:25 2024 by rpki-client on console-ams.rpki-client.org