$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa File: 43415e42-fad6-4a8a-a252-a59b3de45f5c.roa (raw, json) Hash identifier: 4LXJl9zQ5hO3U046HafSm9f5KTkncCLIVOwUV3fgf2s= Subject key identifier: 68:7D:FB:8A:FF:E9:41:19:1F:18:FC:D5:2D:92:D6:F9:FB:F3:28:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2BCD57054C2DF4229C48F3BC48862874C8F78BFF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:cd:57:05:4c:2d:f4:22:9c:48:f3:bc:48:86:28:74:c8:f7:8b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=04d05d70c212b71e931daba25cd02cb88efe50d9cf47d9a739964fdaf47ee860, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:51:33:fb:f0:42:0b:c9:53:25:de:59:07: d4:bc:30:aa:36:2e:72:06:c8:cf:a6:88:ea:2d:cf: 3d:d9:fe:c9:36:74:68:f6:fe:1e:f8:e2:b3:4a:fb: 74:37:fa:04:41:50:66:ec:35:e1:53:a0:78:a4:c3: 4e:36:9f:a2:49:dc:c9:69:30:e3:93:ec:40:42:c7: 74:01:2e:4b:af:d0:60:1a:f6:97:d4:b0:ce:4d:a7: 8a:29:35:85:79:15:aa:ae:75:78:3c:eb:49:f4:b0: 7f:87:a7:28:da:31:eb:f7:ee:44:89:bd:7c:8e:b9: af:e8:21:79:b6:75:a1:3a:36:9b:e1:4e:d9:1d:d9: 2c:2b:4e:47:6f:3f:d1:55:5b:e6:9f:e9:69:08:b7: 85:b2:1e:82:03:42:d5:df:2c:33:64:09:02:65:39: 6b:e7:f1:7b:2d:5e:1a:c9:42:4c:90:47:c1:e4:a4: 2b:75:5c:a9:00:a0:30:ec:57:65:0a:ca:46:f9:b1: d4:ff:94:ab:fa:37:c9:f1:d4:ee:9d:d3:cc:49:93: 0d:ef:8f:4c:81:cb:f1:7e:7c:81:7e:81:11:11:cc: 44:f1:58:27:3f:8c:39:db:bd:11:4e:25:3d:63:12: 6d:e3:74:59:b3:74:14:11:dc:aa:c4:5b:5d:71:89: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7D:FB:8A:FF:E9:41:19:1F:18:FC:D5:2D:92:D6:F9:FB:F3:28:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption 52:14:3b:5d:44:63:d8:2a:cd:d0:77:7a:e1:bf:79:c1:75:e8: 17:97:d0:89:f5:40:98:08:e7:1c:22:fd:11:ff:80:67:82:b9: 20:ff:39:50:43:73:59:f2:e3:2e:5f:21:73:4c:2d:d0:e6:91: b1:98:eb:92:9c:65:27:6a:05:f8:21:59:98:8b:76:dc:79:47: 40:41:cd:10:c8:d8:4e:29:c8:6d:b8:2b:28:6a:e6:9a:ba:3a: bb:9a:7f:28:a4:7b:26:3e:7d:eb:e4:54:22:98:0c:b1:63:8d: 9e:9b:6c:72:12:29:b0:b2:32:28:42:67:0a:d1:57:95:63:0c: 00:1c:ac:38:b8:67:ed:3d:0c:74:22:a5:15:12:d6:1f:13:ca: 78:cb:52:ac:2b:90:c8:fd:57:bf:95:cc:2a:de:24:8f:ae:76: 83:58:de:bd:fb:34:06:dc:10:42:5e:46:8f:70:84:ab:e8:ee: a2:d2:3f:4c:4d:98:c6:55:a1:0a:c7:32:a6:cb:e3:34:5a:39: 5d:84:f2:de:b5:9e:58:c7:80:3b:ae:c4:3c:37:41:88:ed:1a: 0a:bb:ec:df:48:c9:68:e4:59:b7:99:9f:92:91:04:39:6f:fb: 70:e9:d1:96:26:85:d4:f4:a5:b6:cf:a6:6f:f8:65:cd:98:a4: c1:d7:f4:93 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUK81XBUwt9CKcSPO8SIYodMj3i/8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAMDRkMDVkNzBjMjEyYjcxZTkzMWRh YmEyNWNkMDJjYjg4ZWZlNTBkOWNmNDdkOWE3Mzk5NjRmZGFmNDdlZTg2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ctRM/vwQgvJUyXeWQfUvDCqNi5y BsjPpojqLc892f7JNnRo9v4e+OKzSvt0N/oEQVBm7DXhU6B4pMNONp+iSdzJaTDj k+xAQsd0AS5Lr9BgGvaX1LDOTaeKKTWFeRWqrnV4POtJ9LB/h6co2jHr9+5Eib18 jrmv6CF5tnWhOjab4U7ZHdksK05Hbz/RVVvmn+lpCLeFsh6CA0LV3ywzZAkCZTlr 5/F7LV4ayUJMkEfB5KQrdVypAKAw7FdlCspG+bHU/5Sr+jfJ8dTundPMSZMN749M gcvxfnyBfoEREcxE8VgnP4w5270RTiU9YxJt43RZs3QUEdyqxFtdcYmjzQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGh9+4r/6UEZHxj81S2S1vn78yi4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzNDE1ZTQyLWZhZDYtNGE4YS1hMjUyLWE1OWIzZGU0NWY1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBAFIUO11EY9gqzdB3euG/ ecF16BeX0In1QJgI5xwi/RH/gGeCuSD/OVBDc1ny4y5fIXNMLdDmkbGY65KcZSdq BfghWZiLdtx5R0BBzRDI2E4pyG24Kyhq5pq6OruafyikeyY+fevkVCKYDLFjjZ6b bHISKbCyMihCZwrRV5VjDAAcrDi4Z+09DHQipRUS1h8TynjLUqwrkMj9V7+VzCre JI+udoNY3r37NAbcEEJeRo9whKvo7qLSP0xNmMZVoQrHMqbL4zRaOV2E8t61nljH gDuuxDw3QYjtGgq77N9IyWjkWbeZn5KRBDlv+3Dp0ZYmhdT0pbbPpm/4Zc2YpMHX 9JM= -----END CERTIFICATE-----Generated at Fri Apr 26 11:00:08 2024 by rpki-client on console-ams.rpki-client.org