$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a77dbde-8981-442a-a4a0-5e4ad5a49e85.roa File: 3a77dbde-8981-442a-a4a0-5e4ad5a49e85.roa (raw, json) Hash identifier: wjR0ar4b9NKVALVEFgnBLxfCJxhqNm4hdQIQOH/FRrQ= Subject key identifier: DB:F0:05:3B:9E:AA:F1:78:41:FD:85:63:06:7E:F5:C9:98:0A:52:78 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 0D97A78F41822D8D6E9F61B2DC7E1C5E47F671E8 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a77dbde-8981-442a-a4a0-5e4ad5a49e85.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:97:a7:8f:41:82:2d:8d:6e:9f:61:b2:dc:7e:1c:5e:47:f6:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=b73ac8916116b028a3bbf3d8c0fe76bdb50a50299064aea8977257f6158ac28c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0f:bb:17:1c:b2:ac:75:58:6a:27:6c:fa:02: 99:33:70:93:5f:5c:29:ac:ca:93:06:27:ad:40:80: 8d:78:42:36:70:bd:b3:29:8d:2d:97:24:b2:d5:88: 72:62:2f:93:12:61:1d:b9:2e:70:c9:f8:87:62:81: 3f:3a:4a:5c:7d:d5:de:02:83:b5:20:b8:4b:6b:4e: f6:de:90:21:ed:04:6d:78:61:e6:89:73:98:24:a1: 9e:14:f9:ab:e7:2e:55:f5:d1:7c:34:f8:eb:1d:41: c9:11:61:65:da:56:06:ee:eb:d1:eb:d5:90:cf:e0: 10:bd:c1:b3:50:e0:35:46:7d:90:0f:72:4e:2a:cc: a2:86:09:33:c1:10:88:de:5d:5e:0b:7b:3a:23:a7: ea:55:63:d7:14:46:f3:40:80:6a:5a:aa:02:66:01: 72:f2:4c:1b:ec:58:35:68:23:28:51:32:e7:c9:a0: 9c:5a:19:28:ba:56:4b:cb:53:8c:e6:6b:23:13:3c: fe:e3:fa:c9:b4:f0:65:39:1a:0e:38:2d:95:cf:87: a8:dd:5b:54:fd:e9:bf:95:b1:27:46:36:e5:fb:dc: 51:fa:9b:ba:37:58:d2:d4:4f:e7:b2:bf:cf:cd:1c: 60:5a:e0:bc:45:8e:5d:29:8f:a1:1f:f1:e6:21:52: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:05:3B:9E:AA:F1:78:41:FD:85:63:06:7E:F5:C9:98:0A:52:78 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a77dbde-8981-442a-a4a0-5e4ad5a49e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.224.0/21 Signature Algorithm: sha256WithRSAEncryption 1c:00:d1:b6:aa:7f:07:b3:0a:e9:af:0b:75:31:46:6a:fe:f3: 68:c5:61:e3:36:f9:30:3f:a4:82:22:70:2e:2e:63:b6:8e:8c: d0:8c:f2:b2:95:bc:33:b2:10:c7:e5:2b:b3:66:a3:f4:7a:51: a7:d8:f5:59:25:66:71:cc:75:b4:39:48:a1:ef:8a:91:85:0a: db:03:cf:0a:7e:a1:b7:6e:53:15:20:16:dd:83:5c:33:a3:f5: ee:51:b9:c5:ff:93:b1:fd:a6:ff:be:7b:df:d1:1d:58:c3:7d: 0f:d6:85:6c:42:77:6b:57:dd:54:93:e5:93:89:a2:8b:98:1d: 6c:d4:25:0e:82:23:7f:e0:69:54:eb:93:02:24:ad:fa:cc:72: 86:c6:bd:a5:38:43:09:10:28:bb:7b:85:78:2a:8c:e5:58:ac: 13:22:43:a8:e6:5a:60:b3:4d:51:fd:38:80:96:92:d9:26:a3: d5:91:29:8a:9f:e8:a7:0f:6d:e0:6e:3a:0d:d4:4f:20:08:ab: 65:28:ba:02:ac:3a:c5:20:f8:2e:3a:ca:4f:5f:28:44:fc:8f: d7:ab:02:f2:85:4d:1b:a8:9e:ee:57:6c:d9:a3:05:ad:bd:b6: 1e:95:52:d9:03:71:4c:a1:59:63:38:62:25:20:3c:3b:eb:83: e6:63:41:93 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUDZenj0GCLY1un2Gy3H4cXkf2cegwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAYjczYWM4OTE2MTE2YjAyOGEzYmJm M2Q4YzBmZTc2YmRiNTBhNTAyOTkwNjRhZWE4OTc3MjU3ZjYxNThhYzI4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A+7FxyyrHVYaids+gKZM3CTX1wp rMqTBietQICNeEI2cL2zKY0tlySy1YhyYi+TEmEduS5wyfiHYoE/OkpcfdXeAoO1 ILhLa0723pAh7QRteGHmiXOYJKGeFPmr5y5V9dF8NPjrHUHJEWFl2lYG7uvR69WQ z+AQvcGzUOA1Rn2QD3JOKsyihgkzwRCI3l1eC3s6I6fqVWPXFEbzQIBqWqoCZgFy 8kwb7Fg1aCMoUTLnyaCcWhkoulZLy1OM5msjEzz+4/rJtPBlORoOOC2Vz4eo3VtU /em/lbEnRjbl+9xR+pu6N1jS1E/nsr/PzRxgWuC8RY5dKY+hH/HmIVJFDQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNvwBTueqvF4Qf2FYwZ+9cmYClJ4MB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhNzdkYmRlLTg5ODEtNDQyYS1hNGEwLTVlNGFkNWE0OWU4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jgMA0GCSqGSIb3DQEBCwUAA4IBAQAcANG2qn8Hswrprwt1MUZq /vNoxWHjNvkwP6SCInAuLmO2jozQjPKylbwzshDH5SuzZqP0elGn2PVZJWZxzHW0 OUih74qRhQrbA88KfqG3blMVIBbdg1wzo/XuUbnF/5Ox/ab/vnvf0R1Yw30P1oVs QndrV91Uk+WTiaKLmB1s1CUOgiN/4GlU65MCJK36zHKGxr2lOEMJECi7e4V4Kozl WKwTIkOo5lpgs01R/TiAlpLZJqPVkSmKn+inD23gbjoN1E8gCKtlKLoCrDrFIPgu OspPXyhE/I/XqwLyhU0bqJ7uV2zZowWtvbYelVLZA3FMoVljOGIlIDw764PmY0GT -----END CERTIFICATE-----Generated at Fri Sep 22 00:27:51 2023 by rpki-client on console-ams.rpki-client.org