$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a77dbde-8981-442a-a4a0-5e4ad5a49e85.roa File: 3a77dbde-8981-442a-a4a0-5e4ad5a49e85.roa (raw, json) Hash identifier: ksnTw9JW5mHY0Uvju9QrcuNYM1cBPjMxZoPbQbFejmk= Subject key identifier: D1:9A:AE:EF:86:84:30:B0:F1:3C:A6:E4:7F:02:CB:6F:C2:F3:80:5C Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 0CB852F93CC003757B7E7BA395947315B5DBDC87 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a77dbde-8981-442a-a4a0-5e4ad5a49e85.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 00:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b8:52:f9:3c:c0:03:75:7b:7e:7b:a3:95:94:73:15:b5:db:dc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=71717e3d4a6033e3f8cdd16408ee146c7ef6ae96537fbc4342f999ec5da11390, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e8:a6:78:30:83:05:71:93:94:48:c3:5b:c4: 5b:01:72:28:b9:ad:e0:63:07:b3:8f:f4:0b:8c:03: f3:e8:49:6b:b0:c3:f4:de:f6:59:80:4e:60:cb:87: 7e:17:35:f1:50:4a:d5:c0:08:99:35:50:38:3a:2b: 33:52:e4:3f:a5:09:ec:64:25:5f:57:90:72:e7:a7: 4e:77:0f:e3:93:53:63:f4:46:b4:71:3b:98:6d:64: 78:ea:6a:9b:72:25:1e:c9:c7:cd:91:f6:84:7d:8d: 8c:17:36:a2:44:f0:ff:36:54:28:72:4e:c8:c6:96: e7:56:54:c8:7e:0a:d4:a0:98:e8:ac:f6:a2:72:3e: bf:a2:b2:3c:d5:a8:10:64:93:e6:de:b4:1b:d1:0f: 33:70:01:76:d9:71:c6:82:81:18:a5:93:d3:e3:34: c7:6b:c9:11:45:87:87:a2:1b:b6:2f:aa:16:6e:40: 93:60:02:5e:f0:a1:4d:07:32:8f:66:b0:9e:36:b8: c1:61:fa:88:7d:bf:f6:4e:13:a8:ca:d6:d5:d7:53: 3b:19:5a:4e:94:64:d5:b8:68:9f:f7:28:1a:24:c2: a2:30:4e:1f:1e:8f:1f:5e:58:28:01:78:9d:55:75: 70:43:df:b4:c3:f9:43:4d:23:7b:4b:57:a0:3f:1d: d0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9A:AE:EF:86:84:30:B0:F1:3C:A6:E4:7F:02:CB:6F:C2:F3:80:5C X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a77dbde-8981-442a-a4a0-5e4ad5a49e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.224.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:67:29:45:b6:6d:0c:b3:95:59:c0:9a:49:0a:c1:79:39:b0: 23:26:0f:31:bc:bc:4e:46:62:7b:9c:a5:b9:ae:ba:25:75:75: 69:a2:82:a5:e3:29:9f:8c:b0:78:81:f2:63:3d:d5:5a:86:e4: dc:8c:71:d2:ce:d1:79:48:10:51:47:51:c1:f7:b5:68:dc:22: 92:17:7c:0b:61:6e:31:b7:db:82:6c:9b:07:5e:72:20:89:bf: ca:5f:b3:78:54:d8:1f:68:68:c7:ec:71:87:33:f9:3d:54:11: 1a:fa:fb:b0:68:06:20:c0:10:fb:d4:53:47:7e:f1:c5:4c:94: 29:f1:72:95:37:5e:e3:05:af:68:a2:d8:64:f0:55:67:e2:4e: 06:27:a8:e8:f1:34:d3:2e:d4:dd:02:29:19:13:21:48:0c:fc: b6:15:62:66:85:4c:8c:da:26:53:48:ca:af:63:9e:13:a1:71: d6:7e:7a:52:dd:e8:06:92:36:00:7e:b2:d7:4e:3a:a7:cc:27: c6:18:5a:fe:9d:57:77:97:f0:2f:5c:bc:8a:32:b6:86:21:64: e4:71:2a:46:e3:ca:f7:b0:85:76:08:78:01:a0:46:f4:73:fa: 54:a5:51:f2:00:eb:5e:2d:41:b8:4e:ff:59:8e:23:53:0d:a3: 59:1f:8e:b6 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUDLhS+TzAA3V7fnujlZRzFbXb3IcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI0MDQxMDAwMDAwMFoX DTI0MDUxNTIzNTk1OVowejFJMEcGA1UEBRNANzE3MTdlM2Q0YTYwMzNlM2Y4Y2Rk MTY0MDhlZTE0NmM3ZWY2YWU5NjUzN2ZiYzQzNDJmOTk5ZWM1ZGExMTM5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+imeDCDBXGTlEjDW8RbAXIoua3g Ywezj/QLjAPz6ElrsMP03vZZgE5gy4d+FzXxUErVwAiZNVA4OiszUuQ/pQnsZCVf V5By56dOdw/jk1Nj9Ea0cTuYbWR46mqbciUeycfNkfaEfY2MFzaiRPD/NlQock7I xpbnVlTIfgrUoJjorPaicj6/orI81agQZJPm3rQb0Q8zcAF22XHGgoEYpZPT4zTH a8kRRYeHohu2L6oWbkCTYAJe8KFNBzKPZrCeNrjBYfqIfb/2ThOoytbV11M7GVpO lGTVuGif9ygaJMKiME4fHo8fXlgoAXidVXVwQ9+0w/lDTSN7S1egPx3QsQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNGaru+GhDCw8Tym5H8Cy2/C84BcMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhNzdkYmRlLTg5ODEtNDQyYS1hNGEwLTVlNGFkNWE0OWU4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jgMA0GCSqGSIb3DQEBCwUAA4IBAQBMZylFtm0Ms5VZwJpJCsF5 ObAjJg8xvLxORmJ7nKW5rroldXVpooKl4ymfjLB4gfJjPdVahuTcjHHSztF5SBBR R1HB97Vo3CKSF3wLYW4xt9uCbJsHXnIgib/KX7N4VNgfaGjH7HGHM/k9VBEa+vuw aAYgwBD71FNHfvHFTJQp8XKVN17jBa9oothk8FVn4k4GJ6jo8TTTLtTdAikZEyFI DPy2FWJmhUyM2iZTSMqvY54ToXHWfnpS3egGkjYAfrLXTjqnzCfGGFr+nVd3l/Av XLyKMraGIWTkcSpG48r3sIV2CHgBoEb0c/pUpVHyAOteLUG4Tv9ZjiNTDaNZH462 -----END CERTIFICATE-----Generated at Fri Apr 19 00:30:57 2024 by rpki-client on console-fra.rpki-client.org