$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa File: 3e4420de-ff86-4c47-a15d-ae9ee811974e.roa (raw, json) Hash identifier: 3ilYWDX/4OJXWjfRAC5TC1BFHHEyWhdsbqPeJs71hqU= Subject key identifier: 72:C1:42:E4:21:CB:AA:87:91:ED:4A:74:C6:E0:F7:D0:A8:B5:4B:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E4DD74C0FB39A9B08854E4BB5F0A4978C5A4B9B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4d:d7:4c:0f:b3:9a:9b:08:85:4e:4b:b5:f0:a4:97:8c:5a:4b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=1a4099a0d4ae0971d59446d5fac6ffc818462c8deb4d8f87880cff92603319fa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:cb:5b:c7:36:df:0b:09:2d:9c:de:43:b1: bb:f6:45:71:ef:67:25:4e:d1:88:8f:8c:48:f3:e1: 00:fc:f0:dc:d0:8d:3a:60:65:14:b0:b6:3e:c9:dc: 2c:b5:f6:b7:ef:ab:49:ed:f5:5c:75:e0:63:fe:33: db:50:8d:63:f2:ee:77:9a:05:d2:bc:0e:78:69:9f: e7:0f:1f:a4:cb:87:72:07:75:a1:08:d5:87:43:2f: ac:33:21:cf:39:3d:2c:35:06:a7:b3:eb:0e:26:5b: e5:ee:a8:7c:f1:01:e4:3b:69:c6:4c:e2:10:6e:3e: 78:e5:c5:19:4c:31:c4:0a:c6:35:63:4d:6e:a5:f2: e9:d6:17:87:d4:10:5c:3a:ba:58:6b:b2:97:3c:c3: 8b:63:d5:46:57:31:ef:0e:f7:98:00:f8:b2:81:f1: 0a:06:1e:62:8b:6a:d1:8f:86:a9:87:09:e9:5f:b8: 51:26:da:77:9e:9a:fa:d1:e8:41:93:a2:16:9b:bc: db:1b:00:40:33:fd:2a:e6:5b:89:c5:5f:db:07:92: 6b:d2:ea:ee:5a:9d:40:fa:b2:0d:b2:8b:f0:ca:83: 93:46:82:bf:95:af:80:94:0a:8a:a7:f1:f3:88:ed: ac:6c:e4:ed:fe:5c:77:0c:62:07:4d:48:f0:55:3b: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C1:42:E4:21:CB:AA:87:91:ED:4A:74:C6:E0:F7:D0:A8:B5:4B:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:e000::/40 Signature Algorithm: sha256WithRSAEncryption 18:51:6c:9e:1b:1e:21:c7:db:2d:81:bf:a2:f8:a1:31:2a:3a: 00:f5:2a:2a:ad:5b:ea:4a:de:d8:bd:36:79:bf:ef:2c:92:01: 89:a9:de:01:7d:5f:13:18:d4:8a:ed:2a:aa:ff:d3:f2:ab:3d: 17:68:df:29:54:79:3d:36:9c:37:e8:a0:8a:1a:67:00:6e:40: ba:5a:4d:5f:c8:0f:8a:93:2a:41:a7:2d:11:68:97:3b:cd:f2: 01:c8:52:36:62:e7:37:2d:4e:4d:6c:ac:6b:fa:19:28:4f:d6: 6f:90:31:48:95:4c:11:e7:f1:db:16:1e:85:73:4c:2a:a4:7a: b8:ce:57:bc:05:62:9c:2e:36:7c:5f:bc:21:7c:ef:6a:f5:1b: 20:2e:29:16:10:5e:79:20:f4:3b:d0:3d:c0:f7:12:b8:17:c7: 2d:95:8a:d7:84:e5:0c:c1:b6:5e:77:d1:d1:8c:cc:15:bb:6c: fb:82:01:42:06:99:43:a9:23:2b:58:54:2b:94:4f:44:45:a3: cf:4d:d7:2e:bc:e2:93:77:7d:6d:b0:e7:7f:12:94:54:02:46: c4:51:1d:c1:34:82:0e:3b:a8:ef:3a:38:e5:20:b4:fb:90:82: 56:3e:83:f6:30:91:d0:30:fe:8d:8c:05:6c:83:41:c3:70:47: c2:90:72:a2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDk3XTA+zmpsIhU5LtfCkl4xaS5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMWE0MDk5YTBkNGFlMDk3MWQ1OTQ0 NmQ1ZmFjNmZmYzgxODQ2MmM4ZGViNGQ4Zjg3ODgwY2ZmOTI2MDMzMTlmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnprLW8c23wsJLZzeQ7G79kVx72cl TtGIj4xI8+EA/PDc0I06YGUUsLY+ydwstfa376tJ7fVcdeBj/jPbUI1j8u53mgXS vA54aZ/nDx+ky4dyB3WhCNWHQy+sMyHPOT0sNQans+sOJlvl7qh88QHkO2nGTOIQ bj545cUZTDHECsY1Y01upfLp1heH1BBcOrpYa7KXPMOLY9VGVzHvDveYAPiygfEK Bh5ii2rRj4aphwnpX7hRJtp3npr60ehBk6IWm7zbGwBAM/0q5luJxV/bB5Jr0uru Wp1A+rINsovwyoOTRoK/la+AlAqKp/HziO2sbOTt/lx3DGIHTUjwVTsD/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHLBQuQhy6qHke1KdMbg99CotUujMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlNDQyMGRlLWZmODYtNGM0Ny1hMTVkLWFlOWVlODExOTc0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9+AwDQYJKoZIhvcNAQELBQADggEBABhRbJ4bHiHH2y2Bv6L4 oTEqOgD1KiqtW+pK3ti9Nnm/7yySAYmp3gF9XxMY1IrtKqr/0/KrPRdo3ylUeT02 nDfooIoaZwBuQLpaTV/ID4qTKkGnLRFolzvN8gHIUjZi5zctTk1srGv6GShP1m+Q MUiVTBHn8dsWHoVzTCqkerjOV7wFYpwuNnxfvCF872r1GyAuKRYQXnkg9DvQPcD3 ErgXxy2ViteE5QzBtl530dGMzBW7bPuCAUIGmUOpIytYVCuUT0RFo89N1y684pN3 fW2w538SlFQCRsRRHcE0gg47qO86OOUgtPuQglY+g/YwkdAw/o2MBWyDQcNwR8KQ cqI= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org