$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa File: 4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa (raw, json) Hash identifier: lLf/MbdRtLBej3EUpxangagJUv0LhM9JTXcBAQOjPqM= Subject key identifier: F8:6B:F9:C7:0E:9C:A1:93:15:09:F0:F2:D0:17:6F:F8:76:43:B8:F1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 117DF144853C911E75DA132D19377ED02A8C1FD9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 00:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7d:f1:44:85:3c:91:1e:75:da:13:2d:19:37:7e:d0:2a:8c:1f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=0e12bcd5ffe1862fcaab3d9ed8072d86b94704c6d082589aa837ffbc0123d5a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:85:e3:7e:e2:38:ab:1f:9b:48:65:a8:9a: 0d:e7:c4:47:bd:78:09:f2:70:23:06:47:98:4d:59: 34:98:90:84:38:1f:e2:e2:63:c6:0b:9b:4e:f1:6c: c0:54:79:fc:48:13:a8:aa:90:ae:0c:a3:de:6d:d2: 43:34:3f:83:f3:0e:43:6b:fb:11:48:f7:99:4a:33: e1:03:49:66:82:38:c8:bf:0b:13:f8:d2:a0:fc:e1: 6a:3e:5c:f0:62:a7:45:a4:42:28:dc:13:ad:e0:b5: e1:d3:b8:69:31:6d:54:61:a0:dd:d2:65:21:5c:54: 7c:ae:5f:4e:27:5d:79:31:d2:9a:09:08:d2:f6:9b: 6b:11:6a:56:f7:ff:c8:58:4f:ae:85:1c:2d:65:a1: 41:5a:e5:97:82:7b:69:22:bf:48:02:f9:d1:93:24: 09:73:79:10:7e:8f:06:71:28:fb:2f:f8:9d:80:20: e3:50:54:70:4e:f4:eb:d5:ad:e0:5a:be:9b:21:05: 28:3d:48:74:3b:79:9c:39:66:8e:9c:43:77:e0:32: 98:be:3c:83:1e:5a:a3:24:0f:f3:04:2f:91:94:3b: c5:d4:e7:91:04:e2:2a:96:6a:26:39:53:80:9e:18: 94:54:38:50:eb:20:98:dc:ef:d3:97:42:ce:9f:cd: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:F9:C7:0E:9C:A1:93:15:09:F0:F2:D0:17:6F:F8:76:43:B8:F1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:e000::/40 Signature Algorithm: sha256WithRSAEncryption 8e:df:e6:3d:c7:b1:34:26:7d:af:1a:e4:f2:e8:d3:65:ae:b8: 29:69:cd:d6:ed:bc:d2:36:b9:35:e2:a8:14:05:e9:08:8d:8d: 08:bd:01:79:b4:35:a0:27:1d:91:61:fa:5e:e6:35:29:40:67: ec:8a:bf:08:a6:eb:21:06:18:28:3d:5c:ec:2d:48:1e:20:c7: 3b:d1:fa:b1:e9:29:fd:e9:ae:26:7f:0c:f9:96:28:9e:ba:0d: f1:2a:90:31:2d:c0:90:44:e4:4d:5e:79:68:ad:a4:d1:84:8c: ba:fe:1b:ae:7d:82:f8:ab:ec:a1:bb:21:17:13:c5:13:1c:ac: 66:3c:34:0e:ae:d4:5a:3a:4e:54:d5:0a:75:ac:06:bd:02:59: 3e:09:03:eb:e2:92:05:2a:f0:b2:2c:7b:a7:0a:83:99:d9:d0: a1:4f:7a:ff:d7:ad:7b:34:be:8a:0d:b5:91:c1:91:53:74:e4: 0d:ef:e5:d1:22:7b:ef:c3:14:86:82:dc:ab:9b:78:77:c9:01: 8d:0e:92:84:23:5b:17:0d:fd:6e:75:c5:93:30:3a:71:b5:2a: 96:33:6c:89:f4:30:6b:66:48:f1:53:81:98:72:f5:81:46:ce: ea:5f:5d:55:3e:5e:83:fa:55:85:8a:a0:80:af:45:9e:df:6b: d6:8d:14:19 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEX3xRIU8kR512hMtGTd+0CqMH9kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxMDAwMDAwMFoX DTI0MDUxNTIzNTk1OVowejFJMEcGA1UEBRNAMGUxMmJjZDVmZmUxODYyZmNhYWIz ZDllZDgwNzJkODZiOTQ3MDRjNmQwODI1ODlhYTgzN2ZmYmMwMTIzZDVhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApieF437iOKsfm0hlqJoN58RHvXgJ 8nAjBkeYTVk0mJCEOB/i4mPGC5tO8WzAVHn8SBOoqpCuDKPebdJDND+D8w5Da/sR SPeZSjPhA0lmgjjIvwsT+NKg/OFqPlzwYqdFpEIo3BOt4LXh07hpMW1UYaDd0mUh XFR8rl9OJ115MdKaCQjS9ptrEWpW9//IWE+uhRwtZaFBWuWXgntpIr9IAvnRkyQJ c3kQfo8GcSj7L/idgCDjUFRwTvTr1a3gWr6bIQUoPUh0O3mcOWaOnEN34DKYvjyD HlqjJA/zBC+RlDvF1OeRBOIqlmomOVOAnhiUVDhQ6yCY3O/Tl0LOn81yAwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPhr+ccOnKGTFQnw8tAXb/h2Q7jxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiYmZmMTE1LWEwZWEtNGEzZi05MWQ2LWNkNzY0OGJhYWJiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9uAwDQYJKoZIhvcNAQELBQADggEBAI7f5j3HsTQmfa8a5PLo 02WuuClpzdbtvNI2uTXiqBQF6QiNjQi9AXm0NaAnHZFh+l7mNSlAZ+yKvwim6yEG GCg9XOwtSB4gxzvR+rHpKf3priZ/DPmWKJ66DfEqkDEtwJBE5E1eeWitpNGEjLr+ G659gvir7KG7IRcTxRMcrGY8NA6u1Fo6TlTVCnWsBr0CWT4JA+vikgUq8LIse6cK g5nZ0KFPev/XrXs0vooNtZHBkVN05A3v5dEie+/DFIaC3KubeHfJAY0OkoQjWxcN /W51xZMwOnG1KpYzbIn0MGtmSPFTgZhy9YFGzupfXVU+XoP6VYWKoICvRZ7fa9aN FBk= -----END CERTIFICATE-----Generated at Fri May 3 01:27:44 2024 by rpki-client on console-fra.rpki-client.org