$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa File: 3af4fecd-904e-49c7-94d7-b5d1c015d996.roa (raw, json) Hash identifier: hOJdWAltejUXOyAw1r35FbDQ3VhZGkjVUPGyfT+mn7Q= Subject key identifier: B1:64:30:00:0E:14:F3:43:D8:EA:2C:69:52:5D:3F:E9:B9:A8:10:B5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7DE7017D2388258E059866DC30AC4A7B663D8347 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e7:01:7d:23:88:25:8e:05:98:66:dc:30:ac:4a:7b:66:3d:83:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=b0b07bd398b152fec078457f39b115ba3dabac7e79c5aadbdd93690cec7f5e8d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:76:42:8d:64:e6:1f:5b:f1:a2:6d:25:97:b3: e5:58:f7:95:fe:0b:6b:98:01:d9:0c:a6:d9:1f:f3: 8c:2c:5a:7a:6a:e5:54:e2:e8:ad:c6:08:d7:ec:fc: c8:7c:a5:b4:c8:bb:39:68:83:48:af:7c:e0:0b:3f: 83:23:68:95:dd:ee:32:51:cb:58:c6:33:34:6f:c6: c3:75:4b:31:5e:62:17:d3:9b:98:3b:a2:d8:df:c7: e6:9c:e2:ad:8f:69:1e:10:c4:ec:a8:8d:2d:a3:2b: 4c:6e:45:25:1c:13:58:9b:cf:bb:e5:15:fc:93:f7: b3:df:e3:c5:30:e4:c1:de:8d:83:9f:59:4b:87:45: f8:93:60:b2:e6:7a:32:0c:6e:c4:44:ea:cb:1a:00: 07:cd:0b:02:04:a9:a6:e7:77:d9:28:84:38:3c:57: dc:38:d7:34:82:82:df:db:89:27:89:00:c1:f6:09: b0:7a:2d:57:cc:5b:7f:ce:95:95:b7:b3:dd:07:37: e6:bd:40:4d:7b:c2:2f:9c:7e:fb:44:bd:9f:c1:33: 02:b0:de:f2:bc:54:d9:9b:87:9e:38:a8:f5:46:69: bf:bd:4a:a5:59:b4:17:f9:58:f9:b8:6f:53:c5:9a: 39:6e:a3:d4:6e:c8:33:28:b3:97:27:bb:9f:68:5f: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:64:30:00:0E:14:F3:43:D8:EA:2C:69:52:5D:3F:E9:B9:A8:10:B5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3af4fecd-904e-49c7-94d7-b5d1c015d996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:8000::/40 Signature Algorithm: sha256WithRSAEncryption 9f:b1:d5:8d:4e:ab:51:dd:c1:7a:76:e2:8e:5e:71:64:29:c4: 8a:4f:99:32:d2:f3:a5:b2:f2:3b:af:47:ff:9a:73:1c:2e:95: fa:a9:2f:ea:b8:4d:b2:70:ad:f8:37:4c:aa:00:b0:d7:7f:17: 13:69:3f:5b:ae:c0:78:fb:4c:f2:d5:4d:01:1b:6c:dc:f6:7e: fd:98:1b:24:91:cd:36:4a:f1:23:30:2e:3d:0e:6f:04:6f:55: 05:de:89:57:43:e4:06:73:5e:3d:0e:d4:5a:a0:17:d2:8d:bc: 13:a8:92:ce:de:9c:f0:d4:a7:3f:0a:21:02:9e:ce:79:89:6b: 0e:21:37:98:50:df:dd:24:11:3d:60:51:cd:57:9e:41:40:82: b9:45:9b:d3:27:7e:1f:2b:75:a1:bf:0b:9f:70:10:71:ce:4e: 58:6d:3b:de:71:fc:9a:05:b7:d3:4b:89:ff:dc:68:8a:17:d4: 0e:93:65:13:68:25:d4:9b:56:ae:80:d7:74:db:d9:4a:11:01: 7b:20:8f:fa:6e:25:37:59:17:12:37:a5:ee:b3:67:94:29:6f: 40:bc:93:ee:0b:69:04:66:45:b8:d0:00:22:48:a3:37:d5:5e: 26:68:cb:5b:e1:51:2f:13:46:bf:41:1e:ce:90:73:ce:59:ff: 02:1b:1a:d3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfecBfSOIJY4FmGbcMKxKe2Y9g0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAYjBiMDdiZDM5OGIxNTJmZWMwNzg0 NTdmMzliMTE1YmEzZGFiYWM3ZTc5YzVhYWRiZGQ5MzY5MGNlYzdmNWU4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnZCjWTmH1vxom0ll7PlWPeV/gtr mAHZDKbZH/OMLFp6auVU4uitxgjX7PzIfKW0yLs5aINIr3zgCz+DI2iV3e4yUctY xjM0b8bDdUsxXmIX05uYO6LY38fmnOKtj2keEMTsqI0toytMbkUlHBNYm8+75RX8 k/ez3+PFMOTB3o2Dn1lLh0X4k2Cy5noyDG7EROrLGgAHzQsCBKmm53fZKIQ4PFfc ONc0goLf24kniQDB9gmwei1XzFt/zpWVt7PdBzfmvUBNe8IvnH77RL2fwTMCsN7y vFTZm4eeOKj1Rmm/vUqlWbQX+Vj5uG9TxZo5bqPUbsgzKLOXJ7ufaF8pzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLFkMAAOFPND2OosaVJdP+m5qBC1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhZjRmZWNkLTkwNGUtNDljNy05NGQ3LWI1ZDFjMDE1ZDk5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacIAwDQYJKoZIhvcNAQELBQADggEBAJ+x1Y1Oq1HdwXp24o5e cWQpxIpPmTLS86Wy8juvR/+acxwulfqpL+q4TbJwrfg3TKoAsNd/FxNpP1uuwHj7 TPLVTQEbbNz2fv2YGySRzTZK8SMwLj0ObwRvVQXeiVdD5AZzXj0O1FqgF9KNvBOo ks7enPDUpz8KIQKeznmJaw4hN5hQ390kET1gUc1XnkFAgrlFm9Mnfh8rdaG/C59w EHHOTlhtO95x/JoFt9NLif/caIoX1A6TZRNoJdSbVq6A13Tb2UoRAXsgj/puJTdZ FxI3pe6zZ5Qpb0C8k+4LaQRmRbjQACJIozfVXiZoy1vhUS8TRr9BHs6Qc85Z/wIb GtM= -----END CERTIFICATE-----Generated at Fri Sep 22 00:27:51 2023 by rpki-client on console-ams.rpki-client.org