$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa File: 3e4420de-ff86-4c47-a15d-ae9ee811974e.roa (raw, json) Hash identifier: qNPh9Zpm9gxO2Rz/0dItg7iXocVH36455AZDTwJp3GQ= Subject key identifier: B3:68:55:3D:E7:C1:26:27:1E:48:73:70:2A:F7:CC:0C:3F:68:96:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A470C58F72615B9BD7FB757788BA9AF04EA25C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:47:0c:58:f7:26:15:b9:bd:7f:b7:57:78:8b:a9:af:04:ea:25:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=d08f8e02da4e9bb1c2567ec5cac226897339c7cdb8f4a54ee63a178c1f477090, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:ee:2a:f3:04:d5:dd:a3:9a:e6:e2:76:1a: dd:e3:df:44:a0:fd:a0:c6:50:30:fd:8c:86:20:f7: 77:58:11:d8:f2:ab:a8:c0:27:51:db:74:ed:fb:d0: 28:9b:de:ff:fb:26:34:17:e2:c8:78:10:f3:aa:d2: 25:58:2e:8f:05:1e:93:aa:16:f6:e1:80:84:2e:61: d0:17:22:3a:7c:a0:fb:7b:d6:ff:b8:4f:75:ff:2c: e3:91:e7:70:c5:82:82:6e:17:5e:ce:1a:a0:b2:59: 5e:b0:a9:96:c5:68:4a:58:42:78:19:0e:65:64:0c: d7:9d:e4:76:33:f4:d1:6e:c0:40:04:52:0a:ca:a1: 35:40:3e:2d:23:1d:95:61:d8:9e:e4:b2:d1:e0:d9: 64:7a:fa:0c:90:8c:7c:a6:99:7d:aa:9a:14:86:af: 02:40:6e:44:bd:d2:68:24:e1:ad:1f:2e:b8:a7:e2: 26:19:13:94:6f:23:43:3c:52:a0:58:db:b4:cd:17: a6:70:ba:10:f9:e5:de:93:a9:c4:ed:29:05:38:35: 74:3e:18:72:e1:3b:05:93:19:61:2c:9d:c7:02:a6: a7:0a:82:32:c6:aa:6e:65:cf:0d:29:37:7c:7a:96: 2f:73:b4:c4:29:1d:e2:fa:6c:4a:45:cf:a8:b7:36: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:68:55:3D:E7:C1:26:27:1E:48:73:70:2A:F7:CC:0C:3F:68:96:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:e000::/40 Signature Algorithm: sha256WithRSAEncryption 2e:f3:40:ec:74:dd:5f:af:76:ef:ed:de:00:a4:80:dd:cf:b5: 64:70:18:10:a2:2a:4d:a7:40:32:71:43:74:dd:11:39:a5:0f: 82:1b:73:1a:35:7f:3f:af:a2:4d:ae:e8:5d:a7:f6:de:dc:32: 40:74:cb:a3:78:a8:35:95:ec:f2:90:5d:9b:99:aa:d0:4c:27: 44:07:40:02:b6:08:a0:1b:05:20:b8:db:69:0e:7b:dd:5f:52: 63:b0:dc:fd:b1:63:a4:4d:85:c6:78:7f:84:ee:a5:04:24:fb: 3c:e0:83:d5:5a:0f:ce:6a:ea:0b:4f:28:e1:d2:c6:77:3e:b7: 3c:c7:dc:6b:dd:fe:27:9e:f2:95:e8:c5:4b:40:57:ac:3e:99: d2:6b:0e:74:01:b2:a4:3d:84:0a:d4:b1:a7:25:06:8e:9c:f2: 6d:e5:d9:86:64:f2:fa:42:39:4b:ad:60:b5:2b:02:0b:bb:6f: b0:bc:fd:da:37:c6:3f:1d:19:4a:39:4e:a3:07:42:ef:f2:61: fa:cb:0b:69:f1:a9:c0:86:16:81:07:6c:4a:25:a6:72:ae:87: 9f:6c:85:17:29:e6:db:62:e9:64:4d:ff:2a:f7:c0:54:94:99: d4:c3:86:08:7a:8a:f5:f1:46:5c:58:a1:a7:15:11:07:d7:86: 79:87:a1:f2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKkcMWPcmFbm9f7dXeIuprwTqJcIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAZDA4ZjhlMDJkYTRlOWJiMWMyNTY3 ZWM1Y2FjMjI2ODk3MzM5YzdjZGI4ZjRhNTRlZTYzYTE3OGMxZjQ3NzA5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6juKvME1d2jmubidhrd499EoP2g xlAw/YyGIPd3WBHY8quowCdR23Tt+9Aom97/+yY0F+LIeBDzqtIlWC6PBR6Tqhb2 4YCELmHQFyI6fKD7e9b/uE91/yzjkedwxYKCbhdezhqgsllesKmWxWhKWEJ4GQ5l ZAzXneR2M/TRbsBABFIKyqE1QD4tIx2VYdie5LLR4NlkevoMkIx8ppl9qpoUhq8C QG5EvdJoJOGtHy64p+ImGROUbyNDPFKgWNu0zRemcLoQ+eXek6nE7SkFODV0Phhy 4TsFkxlhLJ3HAqanCoIyxqpuZc8NKTd8epYvc7TEKR3i+mxKRc+otzY0WwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLNoVT3nwSYnHkhzcCr3zAw/aJbvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlNDQyMGRlLWZmODYtNGM0Ny1hMTVkLWFlOWVlODExOTc0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9+AwDQYJKoZIhvcNAQELBQADggEBAC7zQOx03V+vdu/t3gCk gN3PtWRwGBCiKk2nQDJxQ3TdETmlD4Ibcxo1fz+vok2u6F2n9t7cMkB0y6N4qDWV 7PKQXZuZqtBMJ0QHQAK2CKAbBSC422kOe91fUmOw3P2xY6RNhcZ4f4TupQQk+zzg g9VaD85q6gtPKOHSxnc+tzzH3Gvd/iee8pXoxUtAV6w+mdJrDnQBsqQ9hArUsacl Bo6c8m3l2YZk8vpCOUutYLUrAgu7b7C8/do3xj8dGUo5TqMHQu/yYfrLC2nxqcCG FoEHbEolpnKuh59shRcp5tti6WRN/yr3wFSUmdTDhgh6ivXxRlxYoacVEQfXhnmH ofI= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:38 2024 by rpki-client on console-ams.rpki-client.org