$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa File: 43415e42-fad6-4a8a-a252-a59b3de45f5c.roa (raw, json) Hash identifier: kJwK33XfDgPoHRxyP9iDAtnclbfzsHKkp+Jm7EQIsJI= Subject key identifier: 49:0C:D4:06:46:12:FE:F8:44:19:DB:65:98:2B:A4:90:EE:91:AC:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25C70FCD0DDE432DF6D8D2F38D7B43657AD7CBE1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c7:0f:cd:0d:de:43:2d:f6:d8:d2:f3:8d:7b:43:65:7a:d7:cb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=d790e3dc880070df9ba38bd0299263f187fdcea06f285c44d8efcd09c4ffd96b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:1f:c3:70:85:91:e6:20:ea:86:3e:fb:8d: e3:70:2a:5a:13:e6:5a:a3:c6:71:c4:a9:33:d9:fd: a8:4b:f8:19:52:32:89:89:3d:ee:a0:da:67:62:00: 76:a6:f9:a6:33:cd:8d:0d:2c:63:4e:56:f1:7a:09: b3:71:cf:65:85:9b:af:99:96:29:ac:4c:c9:e0:35: 5a:26:c0:ce:d9:56:a2:11:65:59:be:27:26:1c:50: 0f:6a:4e:0c:6a:7a:cc:34:42:fa:23:6b:01:bd:8a: de:73:fc:e7:30:32:c6:c1:9f:61:5c:42:b0:6a:a3: aa:69:bf:d6:a5:76:ec:5e:04:ef:2f:bc:e8:32:37: b2:b8:73:f5:54:28:45:9e:02:19:b5:e9:c7:55:ea: 29:f4:37:48:2b:de:52:3d:3e:5d:9c:57:71:b6:5e: 96:dc:4c:d6:07:bf:b2:90:8c:17:f6:29:21:c4:07: b9:71:da:0e:5d:40:71:00:bd:cb:71:83:ae:26:aa: ed:65:c7:5a:62:fa:eb:e2:12:28:5b:b6:6e:87:e9: 92:79:f7:9a:0b:d6:ba:82:f3:ff:af:68:2c:5b:bf: ea:c2:2d:65:5d:2e:37:8c:f7:5d:98:ef:9e:63:82: 34:70:d3:be:aa:93:84:84:4b:17:e1:17:22:93:2f: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0C:D4:06:46:12:FE:F8:44:19:DB:65:98:2B:A4:90:EE:91:AC:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption 06:24:00:95:9f:6a:08:2b:f6:c0:f9:ba:d4:cf:a6:0b:bd:e7: 0d:0d:c8:57:23:1c:83:7a:06:01:63:0f:25:40:bf:3f:38:51: 39:2e:da:d0:dc:f9:99:54:07:b5:32:e1:2d:cf:f5:4b:8b:aa: 79:9d:a6:b6:20:8c:19:d0:36:0e:7b:68:48:cd:44:2b:d3:49: e9:f9:10:92:94:7b:0c:27:a5:5c:40:80:e6:fa:3a:78:20:2e: 94:6f:b2:b6:d9:3a:9b:6b:ba:66:cd:c1:27:13:72:5a:8e:c7: 32:49:9b:22:4d:70:26:2e:40:7b:67:48:46:53:63:97:bf:d5: d9:18:74:5c:e1:60:0e:bf:b2:2d:e3:d8:26:ad:87:c9:e0:3f: e7:b5:f4:2f:bb:b1:50:8f:d9:33:44:4f:3a:73:51:2b:02:d5: bb:51:54:18:2b:b9:19:22:78:00:18:d6:e7:bf:89:13:c2:d1: 1c:2c:1c:2b:29:cc:4c:40:81:b7:5b:98:a4:10:79:10:5b:89: d5:7b:a8:cb:38:46:1d:ef:e2:4a:d0:8c:ac:a4:ea:d4:a6:4e: 6b:2b:2c:fa:fc:b5:32:5c:98:10:71:c4:71:86:98:53:86:04: a4:bf:6b:28:7a:78:8d:13:59:c6:c3:7a:b8:0b:99:1e:af:51: f4:7c:5a:b1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJccPzQ3eQy322NLzjXtDZXrXy+EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAZDc5MGUzZGM4ODAwNzBkZjliYTM4 YmQwMjk5MjYzZjE4N2ZkY2VhMDZmMjg1YzQ0ZDhlZmNkMDljNGZmZDk2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskIfw3CFkeYg6oY++43jcCpaE+Za o8ZxxKkz2f2oS/gZUjKJiT3uoNpnYgB2pvmmM82NDSxjTlbxegmzcc9lhZuvmZYp rEzJ4DVaJsDO2VaiEWVZvicmHFAPak4ManrMNEL6I2sBvYrec/znMDLGwZ9hXEKw aqOqab/WpXbsXgTvL7zoMjeyuHP1VChFngIZtenHVeop9DdIK95SPT5dnFdxtl6W 3EzWB7+ykIwX9ikhxAe5cdoOXUBxAL3LcYOuJqrtZcdaYvrr4hIoW7Zuh+mSefea C9a6gvP/r2gsW7/qwi1lXS43jPddmO+eY4I0cNO+qpOEhEsX4Rciky9qSwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEkM1AZGEv74RBnbZZgrpJDukawYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzNDE1ZTQyLWZhZDYtNGE4YS1hMjUyLWE1OWIzZGU0NWY1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBAAYkAJWfaggr9sD5utTP pgu95w0NyFcjHIN6BgFjDyVAvz84UTku2tDc+ZlUB7Uy4S3P9UuLqnmdprYgjBnQ Ng57aEjNRCvTSen5EJKUewwnpVxAgOb6OnggLpRvsrbZOptrumbNwScTclqOxzJJ myJNcCYuQHtnSEZTY5e/1dkYdFzhYA6/si3j2Cath8ngP+e19C+7sVCP2TNETzpz USsC1btRVBgruRkieAAY1ue/iRPC0RwsHCspzExAgbdbmKQQeRBbidV7qMs4Rh3v 4krQjKyk6tSmTmsrLPr8tTJcmBBxxHGGmFOGBKS/ayh6eI0TWcbDergLmR6vUfR8 WrE= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:32 2024 by rpki-client on console-fra.rpki-client.org