$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa File: 3af4fecd-904e-49c7-94d7-b5d1c015d996.roa (raw, json) Hash identifier: OOpWHeD/VNVLduCV4Sf1K5Fbybv3Hy1RAPB9Wck/6z0= Subject key identifier: 95:2D:C7:FF:92:A1:1F:C6:01:B6:BE:EE:3F:06:83:24:1C:C5:94:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D6EA5CD85C05D1FB5180D08374B9CDF7CF6FB25 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6e:a5:cd:85:c0:5d:1f:b5:18:0d:08:37:4b:9c:df:7c:f6:fb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=5139a9bf932b8bfb04f469daee5383453102b6bca574b644debf67d11eeba9fa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0f:08:e4:1f:51:cd:43:bb:32:5c:2c:2e:53: 61:38:ec:10:89:1b:d9:e6:34:ba:dc:60:3f:96:b6: 2f:80:44:48:60:2b:3d:e1:24:fc:99:c5:29:36:39: 97:97:0e:1f:64:60:bc:a2:66:00:04:5a:ff:54:d6: 6d:5e:f0:14:39:f1:92:5f:c1:dc:8e:1d:45:8a:80: 0b:de:61:90:20:7c:8d:9b:0d:83:f1:48:fb:5c:d5: 82:98:7a:3b:5a:c7:09:12:37:a0:8b:5e:7d:b2:0c: 5c:30:38:7b:70:1e:b2:8a:0d:a5:12:b2:54:51:ed: 68:f5:c5:ec:ab:3e:d5:ba:19:21:c7:7a:c5:04:17: 89:2d:d6:95:52:04:5b:8e:03:ed:00:43:fa:47:8e: b3:12:7d:75:f1:c5:af:6b:f2:78:34:51:a5:e5:da: d8:07:dd:b2:25:f4:df:c0:8f:cb:c0:0e:21:50:f6: d7:d1:aa:d3:b1:6a:5b:1c:fb:0d:d0:f0:6c:21:fe: af:87:de:8b:4d:46:b3:2c:e6:c1:73:26:61:9d:68: 77:2d:cf:a2:c8:bf:5e:df:4b:a9:cd:73:5d:5b:b2: 78:dc:47:81:37:60:5a:f7:5a:71:85:87:2a:a2:59: 0d:de:5b:97:bc:3c:e3:9e:80:21:35:6a:c4:3d:85: 43:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:C7:FF:92:A1:1F:C6:01:B6:BE:EE:3F:06:83:24:1C:C5:94:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:8000::/40 Signature Algorithm: sha256WithRSAEncryption 97:c6:b7:29:c6:54:ab:3b:ab:3d:aa:07:c8:8e:c1:42:13:47: 1f:0c:77:d3:55:61:28:41:fe:2a:69:6b:6f:33:b0:77:e8:c4: 24:a8:a9:81:68:cc:c9:c5:f1:b4:9a:b6:dd:1f:ff:38:ea:e8: ac:22:bc:1b:66:9b:f2:c8:e2:c9:87:7e:a8:62:e4:43:b4:a4: 0b:8c:82:39:1d:2f:63:12:e0:0f:68:a9:a1:0e:d2:17:0f:00: df:b2:ff:69:ea:b9:d2:a0:12:31:d4:4e:3c:5b:7f:d8:54:48: 29:07:9a:b6:e7:b1:da:de:e1:a5:d7:7b:86:fc:5d:82:c5:48: 8d:42:38:dc:0a:84:1a:0e:af:29:02:c0:1d:03:56:a4:41:06: 4f:6a:24:9a:38:26:fb:81:af:64:ac:21:b8:ac:f6:ca:3c:42: 02:bc:1a:b2:7d:a2:a1:62:cd:ff:8c:ca:3a:b1:47:ff:50:36: a9:85:74:20:a7:6e:24:d3:57:23:05:40:43:1e:e5:10:50:3d: 7b:4c:fb:de:3b:a8:89:8d:94:69:14:b2:82:54:8e:4c:f7:8e: e8:dc:15:86:c0:7c:71:45:40:ec:8c:04:41:f9:62:9a:b0:d0: 2c:4c:03:e8:80:4f:ce:7e:ea:0d:ee:6c:ac:80:89:af:12:7c: 0c:84:d4:dd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXW6lzYXAXR+1GA0IN0uc33z2+yUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxMDAwMDAwMFoX DTI0MDUxNTIzNTk1OVowejFJMEcGA1UEBRNANTEzOWE5YmY5MzJiOGJmYjA0ZjQ2 OWRhZWU1MzgzNDUzMTAyYjZiY2E1NzRiNjQ0ZGViZjY3ZDExZWViYTlmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A8I5B9RzUO7MlwsLlNhOOwQiRvZ 5jS63GA/lrYvgERIYCs94ST8mcUpNjmXlw4fZGC8omYABFr/VNZtXvAUOfGSX8Hc jh1FioAL3mGQIHyNmw2D8Uj7XNWCmHo7WscJEjegi159sgxcMDh7cB6yig2lErJU Ue1o9cXsqz7Vuhkhx3rFBBeJLdaVUgRbjgPtAEP6R46zEn118cWva/J4NFGl5drY B92yJfTfwI/LwA4hUPbX0arTsWpbHPsN0PBsIf6vh96LTUazLObBcyZhnWh3Lc+i yL9e30upzXNdW7J43EeBN2Ba91pxhYcqolkN3luXvDzjnoAhNWrEPYVD8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJUtx/+SoR/GAba+7j8GgyQcxZQuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhZjRmZWNkLTkwNGUtNDljNy05NGQ3LWI1ZDFjMDE1ZDk5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacIAwDQYJKoZIhvcNAQELBQADggEBAJfGtynGVKs7qz2qB8iO wUITRx8Md9NVYShB/ippa28zsHfoxCSoqYFozMnF8bSatt0f/zjq6KwivBtmm/LI 4smHfqhi5EO0pAuMgjkdL2MS4A9oqaEO0hcPAN+y/2nqudKgEjHUTjxbf9hUSCkH mrbnsdre4aXXe4b8XYLFSI1CONwKhBoOrykCwB0DVqRBBk9qJJo4JvuBr2SsIbis 9so8QgK8GrJ9oqFizf+MyjqxR/9QNqmFdCCnbiTTVyMFQEMe5RBQPXtM+947qImN lGkUsoJUjkz3jujcFYbAfHFFQOyMBEH5Ypqw0CxMA+iAT85+6g3ubKyAia8SfAyE 1N0= -----END CERTIFICATE-----Generated at Fri Apr 19 00:50:21 2024 by rpki-client on console-ams.rpki-client.org