$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45b8187c-dace-4e33-8da2-63d784f9353b.roa File: 45b8187c-dace-4e33-8da2-63d784f9353b.roa (raw, json) Hash identifier: kzMl+3YS9FBpCCiShxBf/t2Wbf0zeRwz9pWEVaJZnEk= Subject key identifier: 14:1B:F0:A1:26:91:EB:34:5F:DB:71:A7:7B:F3:69:33:7F:40:4F:7F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2C3B9B93B1AC6D46F3C4CEF13DE618B42E1E620A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45b8187c-dace-4e33-8da2-63d784f9353b.roa Signing time: Sat 09 Nov 2024 00:00:00 +0000 ROA not before: Sat 09 Nov 2024 00:00:00 +0000 ROA not after: Sat 14 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 00:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3b:9b:93:b1:ac:6d:46:f3:c4:ce:f1:3d:e6:18:b4:2e:1e:62:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:00:00 2024 GMT Not After : Dec 14 23:59:59 2024 GMT Subject: serialNumber=0c985025c6ce384075f50c9502f6dde600ea1999f204cf88c6fa7d3e3c300d37, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:29:99:28:ed:15:ec:e1:fc:32:07:2d:45: 7e:5d:92:bb:80:b3:81:5a:d3:94:fe:29:07:7d:1b: 67:79:ad:7e:77:cc:03:47:68:9c:88:11:fd:61:40: a1:71:fc:c7:12:5d:ad:3e:3f:a8:c4:da:27:83:6e: 65:73:c2:c0:fc:d0:e9:53:2d:f4:8d:a5:09:63:19: 91:4f:a8:79:65:81:e0:7e:2b:81:6b:65:00:8f:f6: db:b6:31:26:a6:ea:ef:bb:40:82:ec:3e:e6:58:98: 32:e8:7f:f1:e3:9c:cd:ae:c3:6f:5d:1d:ef:e9:ff: dc:a6:97:7f:02:88:a8:4f:52:57:da:77:3f:73:9e: ad:ee:b1:42:4e:84:e4:3a:28:ef:20:23:27:12:cd: f1:f9:a9:96:d1:90:e6:49:9d:be:94:b2:35:32:ae: 5d:b4:5d:f0:03:4e:bc:63:a9:4c:09:31:9d:b0:c0: ce:f5:1b:94:6f:f5:12:db:b9:96:5d:c3:c8:a7:3e: 32:d6:16:4d:c4:ac:9a:5d:bf:f2:f8:72:57:b0:8a: 03:45:b3:c4:e5:81:5f:ff:26:9e:9c:55:16:19:99: 3d:44:30:3c:1d:c7:da:a7:14:de:13:65:f5:b9:bb: 47:a6:8f:9c:3c:88:4e:e0:52:b6:57:f6:7c:86:f9: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1B:F0:A1:26:91:EB:34:5F:DB:71:A7:7B:F3:69:33:7F:40:4F:7F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45b8187c-dace-4e33-8da2-63d784f9353b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:7000::/40 Signature Algorithm: sha256WithRSAEncryption bf:59:d3:0c:d3:cb:3b:68:24:a1:44:1a:a4:e7:42:70:6d:e6: 8b:f3:84:e6:d0:a7:2b:ef:9b:f1:17:bf:4b:4c:df:de:5d:e9: fa:09:71:05:51:34:bd:63:aa:a4:ae:75:f9:29:47:c9:52:1c: 69:12:0b:3a:4f:4a:30:c1:b3:88:8b:8f:96:e1:19:58:22:c1: db:1d:d6:81:66:55:ca:bc:ad:62:26:d6:db:bd:ef:a0:1e:61: 30:4f:8e:e8:05:55:bf:c2:23:c0:39:89:be:61:91:55:ae:55: 35:ee:5c:b5:58:40:32:7c:d3:a2:f1:5b:4a:2a:3c:86:f4:23: 41:30:7d:f0:62:fa:e3:14:02:7e:e8:d1:5e:07:f3:ae:93:5b: c5:1e:98:71:9e:be:b1:63:2c:28:8f:8d:f2:eb:14:95:e8:a7: bb:cb:b0:67:b9:8b:dd:b6:2f:df:6b:0b:a3:dd:1f:c0:d8:aa: 3e:35:de:d0:4a:85:41:2b:39:af:3a:bd:12:a1:4a:04:30:74: a8:20:b7:95:f9:84:17:c3:3d:97:dc:09:3b:52:3b:a9:ed:07: 70:a2:ef:f7:de:ae:3e:f2:79:0d:06:a6:e7:ea:48:d3:db:2d: 10:d1:81:f8:1c:f4:be:08:81:cb:57:e8:77:76:c8:1f:96:c5: 20:3b:13:e9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULDubk7GsbUbzxM7xPeYYtC4eYgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEwOTAwMDAwMFoX DTI0MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMGM5ODUwMjVjNmNlMzg0MDc1ZjUw Yzk1MDJmNmRkZTYwMGVhMTk5OWYyMDRjZjg4YzZmYTdkM2UzYzMwMGQzNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9opmSjtFezh/DIHLUV+XZK7gLOB WtOU/ikHfRtnea1+d8wDR2iciBH9YUChcfzHEl2tPj+oxNong25lc8LA/NDpUy30 jaUJYxmRT6h5ZYHgfiuBa2UAj/bbtjEmpurvu0CC7D7mWJgy6H/x45zNrsNvXR3v 6f/cppd/AoioT1JX2nc/c56t7rFCToTkOijvICMnEs3x+amW0ZDmSZ2+lLI1Mq5d tF3wA068Y6lMCTGdsMDO9RuUb/US27mWXcPIpz4y1hZNxKyaXb/y+HJXsIoDRbPE 5YFf/yaenFUWGZk9RDA8HcfapxTeE2X1ubtHpo+cPIhO4FK2V/Z8hvknXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBQb8KEmkes0X9txp3vzaTN/QE9/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ1YjgxODdjLWRhY2UtNGUzMy04ZGEyLTYzZDc4NGY5MzUzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMnAwDQYJKoZIhvcNAQELBQADggEBAL9Z0wzTyztoJKFEGqTn QnBt5ovzhObQpyvvm/EXv0tM395d6foJcQVRNL1jqqSudfkpR8lSHGkSCzpPSjDB s4iLj5bhGVgiwdsd1oFmVcq8rWIm1tu976AeYTBPjugFVb/CI8A5ib5hkVWuVTXu XLVYQDJ806LxW0oqPIb0I0EwffBi+uMUAn7o0V4H866TW8UemHGevrFjLCiPjfLr FJXop7vLsGe5i922L99rC6PdH8DYqj413tBKhUErOa86vRKhSgQwdKggt5X5hBfD PZfcCTtSO6ntB3Ci7/ferj7yeQ0GpufqSNPbLRDRgfgc9L4IgctX6Hd2yB+WxSA7 E+k= -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:15 2024 by rpki-client on console-fra.rpki-client.org