$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa File: 43415e42-fad6-4a8a-a252-a59b3de45f5c.roa (raw, json) Hash identifier: 1OdymIg7pk5zo+G80pHNLt4cpY6fjGnM0qYx2cNkQIE= Subject key identifier: AF:52:8D:7C:68:21:F7:94:9C:FC:91:F8:BB:0A:19:F0:CD:2E:E6:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 303FBE43E66ED9874181A50BFA856DAAD2C0EBF6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 00:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3f:be:43:e6:6e:d9:87:41:81:a5:0b:fa:85:6d:aa:d2:c0:eb:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=22e5e40d5f58b60ff70f307f71e6052b88a82a4c04373710d206acd9a3392c98, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:76:81:8f:6b:f0:41:68:66:23:67:49:8c: d3:b1:11:3b:40:93:9e:c5:13:39:70:bf:d1:5d:e4: 83:5f:2f:aa:82:a5:c0:a0:7d:fa:ad:7e:f1:dd:d0: d9:02:b0:a4:0c:f5:7c:01:2f:0e:bf:4c:ee:f2:ff: 59:95:b0:bc:63:4a:23:07:e4:b1:ef:5a:98:bc:d3: f9:68:03:6a:50:3e:21:32:05:23:66:85:78:6c:e2: f7:78:b9:5e:f8:f9:a4:8f:a6:1c:f5:e5:8c:cb:56: 46:82:02:d8:a9:2c:47:fd:37:92:ec:12:a1:9c:4d: 0c:46:c1:fa:40:ca:dc:bd:f6:2a:7c:18:3d:ac:e6: 0b:9d:5a:37:14:43:40:02:f5:06:95:3a:37:21:f7: 8e:04:bb:1b:15:74:d7:3c:77:08:80:64:a2:9a:bd: f7:56:6a:dd:4b:4f:8d:36:1f:70:a5:13:c3:89:d6: 3e:19:20:7c:45:e5:30:c6:fd:23:37:07:4b:43:cd: 10:0d:85:1e:5d:00:36:39:0d:3c:29:89:f7:ba:e2: 62:91:7a:d3:46:21:bf:5c:52:8d:0d:76:1a:16:e1: 5e:0a:76:1f:d3:56:10:b7:1a:75:66:36:3e:ca:65: 18:b2:52:69:27:aa:fd:ea:63:b8:6d:ce:b7:9e:a0: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:8D:7C:68:21:F7:94:9C:FC:91:F8:BB:0A:19:F0:CD:2E:E6:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption b5:a3:79:d8:f9:b9:d7:d9:d1:9d:7a:f1:d2:c4:c2:da:5e:5c: a4:6e:80:c7:34:cd:fc:e8:c8:14:c4:a1:b9:2a:87:68:17:03: c2:c3:9d:c1:69:f9:e3:e5:7d:48:7a:f5:7a:b6:32:d1:38:df: 39:88:cf:71:52:61:14:3d:65:9e:37:2e:54:d1:30:b9:8d:18: d6:34:e2:a0:e7:51:ce:2f:6a:e5:d2:91:6b:2b:30:3a:f9:24: 48:10:e1:29:e9:4b:73:05:ea:6d:cd:62:66:3b:f6:3c:91:b6: 03:5e:da:98:5f:d2:7d:fc:6a:d5:9d:98:68:7d:1c:2c:04:14: ea:86:ed:03:ec:f4:62:83:c2:a6:3d:24:3f:b3:9a:65:6e:5b: 80:1a:93:ff:00:4d:1f:ee:34:0f:bc:a9:0e:8d:32:45:fa:c2: e2:86:95:ca:b2:50:f6:92:1e:33:b9:9d:f6:9a:6f:ef:fd:58: 83:bd:f0:c9:09:1c:3f:06:92:73:d8:02:d3:cd:0d:69:1a:31: 86:66:66:2b:4e:8c:62:df:3a:1d:30:b2:96:ee:bc:60:21:45: f6:ef:17:ee:a7:b0:e3:4e:0a:ce:f2:3f:99:16:30:7c:96:c3: a2:48:db:56:5f:0f:c1:2a:46:6b:4f:6e:fc:3a:24:6e:d8:52: d5:26:d7:34 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMD++Q+Zu2YdBgaUL+oVtqtLA6/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAMjJlNWU0MGQ1ZjU4YjYwZmY3MGYz MDdmNzFlNjA1MmI4OGE4MmE0YzA0MzczNzEwZDIwNmFjZDlhMzM5MmM5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt152gY9r8EFoZiNnSYzTsRE7QJOe xRM5cL/RXeSDXy+qgqXAoH36rX7x3dDZArCkDPV8AS8Ov0zu8v9ZlbC8Y0ojB+Sx 71qYvNP5aANqUD4hMgUjZoV4bOL3eLle+Pmkj6Yc9eWMy1ZGggLYqSxH/TeS7BKh nE0MRsH6QMrcvfYqfBg9rOYLnVo3FENAAvUGlTo3IfeOBLsbFXTXPHcIgGSimr33 VmrdS0+NNh9wpRPDidY+GSB8ReUwxv0jNwdLQ80QDYUeXQA2OQ08KYn3uuJikXrT RiG/XFKNDXYaFuFeCnYf01YQtxp1ZjY+ymUYslJpJ6r96mO4bc63nqDd3QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK9SjXxoIfeUnPyR+LsKGfDNLuZAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzNDE1ZTQyLWZhZDYtNGE4YS1hMjUyLWE1OWIzZGU0NWY1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBALWjedj5udfZ0Z168dLE wtpeXKRugMc0zfzoyBTEobkqh2gXA8LDncFp+ePlfUh69Xq2MtE43zmIz3FSYRQ9 ZZ43LlTRMLmNGNY04qDnUc4vauXSkWsrMDr5JEgQ4SnpS3MF6m3NYmY79jyRtgNe 2phf0n38atWdmGh9HCwEFOqG7QPs9GKDwqY9JD+zmmVuW4Aak/8ATR/uNA+8qQ6N MkX6wuKGlcqyUPaSHjO5nfaab+/9WIO98MkJHD8GknPYAtPNDWkaMYZmZitOjGLf Oh0wspbuvGAhRfbvF+6nsONOCs7yP5kWMHyWw6JI21ZfD8EqRmtPbvw6JG7YUtUm 1zQ= -----END CERTIFICATE-----Generated at Mon Nov 25 02:46:10 2024 by rpki-client on console-ams.rpki-client.org