$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa File: 3af4fecd-904e-49c7-94d7-b5d1c015d996.roa (raw, json) Hash identifier: 4E3Db4+XmOjO+Q7rXS1wlU8Jnh/TRCI5FB8ir15rm+Q= Subject key identifier: AD:C9:D1:6F:AB:15:D3:BA:E7:C2:94:72:E3:62:D3:4E:99:CC:49:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02177F05DA10DCE7ECB3586724595E3BFD969069 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa Signing time: Fri 04 Oct 2024 00:00:00 +0000 ROA not before: Fri 04 Oct 2024 00:00:00 +0000 ROA not after: Fri 08 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:17:7f:05:da:10:dc:e7:ec:b3:58:67:24:59:5e:3b:fd:96:90:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:00 2024 GMT Not After : Nov 8 23:59:59 2024 GMT Subject: serialNumber=ae996f3a3fa90d8907bc46c2552602e24bc724bb904bc45f2bc7c04342481ba1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:43:77:4e:bc:cb:96:16:6e:d1:ce:38:de: 8e:23:9d:33:29:cc:ab:c4:7e:66:ea:53:af:ab:24: ec:02:a3:00:4b:12:c4:b4:77:b8:fd:66:1b:84:df: c7:1b:6e:f8:9d:22:60:8d:1b:9b:e2:5b:a4:ca:f2: a1:ec:6d:3f:52:0a:7e:3e:a3:fe:4f:5e:20:0d:df: 04:86:1e:b9:57:7d:15:82:f4:cf:71:5f:e2:d7:fe: 76:d5:d0:fd:f5:60:5e:7b:8d:46:3d:d8:61:23:59: 3b:3c:70:68:f5:bb:0b:3b:85:71:ae:66:c7:3b:5c: e0:11:20:65:cd:dc:c1:2d:6c:3b:05:a7:af:33:bd: e0:e5:de:b5:59:16:f2:1c:ec:78:db:e9:c2:d3:a6: 6d:6c:da:01:92:f5:04:0f:7d:4f:ec:b9:24:fd:a0: 57:83:8f:48:2f:0f:d8:01:e3:bc:bb:04:ad:e1:78: 8f:30:4f:e8:63:e0:28:8d:d0:25:23:21:ed:4a:6b: fa:c4:8e:52:6a:fd:9e:0f:5c:01:ab:93:49:bc:0a: 6d:7d:9a:ef:e4:48:28:7e:94:5c:ec:a0:70:cc:21: 88:6c:c0:ae:db:5e:0f:13:5e:ea:99:8e:31:17:34: 84:ff:39:08:ea:ff:b0:d8:67:7f:32:4e:80:fe:07: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C9:D1:6F:AB:15:D3:BA:E7:C2:94:72:E3:62:D3:4E:99:CC:49:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:8000::/40 Signature Algorithm: sha256WithRSAEncryption 14:6b:4e:67:d0:6a:c1:d7:ee:95:1a:ee:99:2b:4d:d9:f9:0d: 8f:66:81:0d:1d:6d:65:6d:a3:af:6f:65:ce:36:62:aa:27:33: 3d:6e:cf:21:97:1e:d9:b5:8a:e7:1e:b7:f9:f8:dc:68:29:19: 9e:c4:2b:e9:eb:72:47:12:e7:1a:77:e5:55:8f:da:0d:ff:fc: b8:f1:31:a7:71:ee:5a:2e:96:bf:3a:21:cb:83:e2:8b:db:f2: bc:14:b9:4c:5d:ae:de:10:55:f9:37:65:67:d2:2f:1a:7b:93: c0:fa:20:d9:06:c0:74:b2:27:d8:8a:55:9c:ff:b6:06:3f:4a: d7:a4:05:2a:e4:b9:e3:e9:41:44:19:c2:81:e4:ec:ba:67:f6: cc:73:16:5b:35:b7:47:41:b9:0a:e9:74:05:47:e3:a9:e2:cd: d7:b5:c5:2f:d2:7f:be:8d:ef:16:6d:17:e6:12:59:94:df:13: f6:c8:35:c1:b6:5a:48:56:01:31:e1:5e:f6:a8:f8:ba:2d:83: 5c:66:d0:fb:40:05:43:46:8f:67:e3:db:9e:b3:e0:17:f8:61: a9:e0:18:82:6b:33:4c:32:3d:30:c6:89:e6:eb:db:e0:f6:f8: 3f:f4:e3:c7:87:f3:18:9c:5b:07:29:93:11:bc:79:34:01:1a: 0d:7e:2e:b4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAhd/BdoQ3Ofss1hnJFleO/2WkGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwNDAwMDAwMFoX DTI0MTEwODIzNTk1OVowejFJMEcGA1UEBRNAYWU5OTZmM2EzZmE5MGQ4OTA3YmM0 NmMyNTUyNjAyZTI0YmM3MjRiYjkwNGJjNDVmMmJjN2MwNDM0MjQ4MWJhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyNDd068y5YWbtHOON6OI50zKcyr xH5m6lOvqyTsAqMASxLEtHe4/WYbhN/HG274nSJgjRub4lukyvKh7G0/Ugp+PqP+ T14gDd8Ehh65V30VgvTPcV/i1/521dD99WBee41GPdhhI1k7PHBo9bsLO4VxrmbH O1zgESBlzdzBLWw7BaevM73g5d61WRbyHOx42+nC06ZtbNoBkvUED31P7Lkk/aBX g49ILw/YAeO8uwSt4XiPME/oY+AojdAlIyHtSmv6xI5Sav2eD1wBq5NJvAptfZrv 5EgofpRc7KBwzCGIbMCu214PE17qmY4xFzSE/zkI6v+w2Gd/Mk6A/gfvOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK3J0W+rFdO658KUcuNi006ZzEl1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhZjRmZWNkLTkwNGUtNDljNy05NGQ3LWI1ZDFjMDE1ZDk5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacIAwDQYJKoZIhvcNAQELBQADggEBABRrTmfQasHX7pUa7pkr Tdn5DY9mgQ0dbWVto69vZc42YqonMz1uzyGXHtm1iucet/n43GgpGZ7EK+nrckcS 5xp35VWP2g3//LjxMadx7loulr86IcuD4ovb8rwUuUxdrt4QVfk3ZWfSLxp7k8D6 INkGwHSyJ9iKVZz/tgY/StekBSrkuePpQUQZwoHk7Lpn9sxzFls1t0dBuQrpdAVH 46nizde1xS/Sf76N7xZtF+YSWZTfE/bINcG2WkhWATHhXvao+Lotg1xm0PtABUNG j2fj256z4Bf4YangGIJrM0wyPTDGiebr2+D2+D/048eH8xicWwcpkxG8eTQBGg1+ LrQ= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:24 2024 by rpki-client on console-ams.rpki-client.org