$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa File: 43415e42-fad6-4a8a-a252-a59b3de45f5c.roa (raw, json) Hash identifier: 7vrN8a08SPGnbjvL2T3D3bYMXy1q4HMdWS1IybKdXQ8= Subject key identifier: 41:DD:16:0A:01:90:CC:D9:B4:D1:20:E8:D7:17:F6:32:8B:2C:FC:FA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5852DD30A7FA7179EE0223B86F59EE63B14FE8C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:52:dd:30:a7:fa:71:79:ee:02:23:b8:6f:59:ee:63:b1:4f:e8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=0ddd668533fe5106ebb0aa2ef1473757f8e528e1425eafaccccf26171f171fe5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:61:f9:07:97:61:80:84:43:0e:4b:c7:17: 2d:01:ee:83:12:28:37:aa:28:ff:2e:5b:6f:23:87: ce:88:e4:35:ee:2d:8b:83:30:51:08:83:e0:3c:3e: e7:9f:9b:69:fd:83:22:21:76:99:23:9c:d9:e7:76: a1:b9:d4:51:72:8f:e1:5b:0f:72:af:2b:47:03:89: 1e:92:fe:9f:a6:0e:d0:d4:33:f8:8d:6b:e1:0d:9e: a5:5d:da:18:e9:22:a5:6f:f3:14:45:57:fb:f3:ca: 01:4a:06:1b:78:06:ff:a4:b1:cc:44:cd:7d:ff:dc: 50:f4:50:fd:6c:ea:3d:ab:59:79:95:c7:b5:c7:4c: f4:fe:49:05:b8:fe:5d:8e:fa:10:6c:77:73:ca:f8: 2c:76:83:b7:f9:61:62:bb:39:11:10:bf:77:37:a3: aa:c2:71:b2:0f:24:c5:d2:f6:b2:27:ed:4b:6d:b1: b1:94:61:f5:9e:4b:10:e4:d0:ac:d3:10:ec:63:14: 0b:cd:2b:5f:e8:ca:75:64:d4:f2:d6:87:af:ae:d1: b1:26:e7:79:f4:10:68:5a:1f:e2:90:72:2f:3c:5a: 01:33:65:d4:8d:20:2c:da:e8:8b:d5:24:88:45:46: 61:ce:63:62:7e:8e:a1:6b:e2:ba:d4:59:f7:be:86: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DD:16:0A:01:90:CC:D9:B4:D1:20:E8:D7:17:F6:32:8B:2C:FC:FA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption 29:67:af:86:cd:02:89:d7:91:f9:6a:80:cf:9e:db:8e:2c:c0: 1e:95:b5:78:f2:b3:f9:0d:1d:eb:9d:31:eb:d9:7b:d2:88:7a: 45:3f:a6:e4:3d:65:fc:1e:c4:12:9a:b9:2b:2b:8d:b0:0c:19: 4f:48:4a:cb:50:8f:7a:87:a5:4e:3d:3d:e2:ff:3a:8f:f4:d9: 7d:23:f1:21:1f:65:b4:13:97:54:09:ba:ce:7b:51:bb:10:4f: af:4f:05:cf:79:da:34:00:dc:e3:1f:ee:94:a6:da:23:20:5d: 07:5e:6a:ca:69:dd:58:87:9b:40:c2:b6:b0:9f:46:40:9e:66: e2:de:56:37:78:69:f9:b9:96:75:c2:43:b8:50:3f:e1:56:27: 08:27:a1:21:1f:6a:1e:ac:58:20:fb:e4:c6:35:05:84:63:8b: 88:57:a7:ae:72:89:1d:8b:f8:e6:7a:a7:0f:4b:4d:de:db:49: ce:0b:c7:55:21:dc:f0:b6:15:f8:fe:a1:93:dd:93:cd:a6:30: ae:93:b7:90:a1:48:83:64:3d:79:82:2a:74:71:2a:1a:5f:79: e8:53:48:1f:cc:87:2f:6d:97:6b:15:18:65:f5:c3:c4:b6:da: e1:c2:34:4b:94:6e:33:a4:4c:5e:94:9e:0c:5c:ec:16:75:c3: 56:88:a3:3e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWFLdMKf6cXnuAiO4b1nuY7FP6McwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMGRkZDY2ODUzM2ZlNTEwNmViYjBh YTJlZjE0NzM3NTdmOGU1MjhlMTQyNWVhZmFjY2NjZjI2MTcxZjE3MWZlNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X5h+QeXYYCEQw5LxxctAe6DEig3 qij/LltvI4fOiOQ17i2LgzBRCIPgPD7nn5tp/YMiIXaZI5zZ53ahudRRco/hWw9y rytHA4kekv6fpg7Q1DP4jWvhDZ6lXdoY6SKlb/MURVf788oBSgYbeAb/pLHMRM19 /9xQ9FD9bOo9q1l5lce1x0z0/kkFuP5djvoQbHdzyvgsdoO3+WFiuzkREL93N6Oq wnGyDyTF0vayJ+1LbbGxlGH1nksQ5NCs0xDsYxQLzStf6Mp1ZNTy1oevrtGxJud5 9BBoWh/ikHIvPFoBM2XUjSAs2uiL1SSIRUZhzmNifo6ha+K61Fn3voaNswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEHdFgoBkMzZtNEg6NcX9jKLLPz6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzNDE1ZTQyLWZhZDYtNGE4YS1hMjUyLWE1OWIzZGU0NWY1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBAClnr4bNAonXkflqgM+e 244swB6VtXjys/kNHeudMevZe9KIekU/puQ9ZfwexBKauSsrjbAMGU9ISstQj3qH pU49PeL/Oo/02X0j8SEfZbQTl1QJus57UbsQT69PBc952jQA3OMf7pSm2iMgXQde aspp3ViHm0DCtrCfRkCeZuLeVjd4afm5lnXCQ7hQP+FWJwgnoSEfah6sWCD75MY1 BYRji4hXp65yiR2L+OZ6pw9LTd7bSc4Lx1Uh3PC2Ffj+oZPdk82mMK6Tt5ChSINk PXmCKnRxKhpfeehTSB/Mhy9tl2sVGGX1w8S22uHCNEuUbjOkTF6Ungxc7BZ1w1aI oz4= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org