$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa File: 4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa (raw, json) Hash identifier: l08bgqdBcNbnYK6jdNE6790Bvj/eqsYSnP7MT+ln74I= Subject key identifier: 89:39:E4:E1:88:01:46:84:B1:83:79:6E:D1:CD:81:8B:19:33:5F:C0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2746187BF568184A4CF02FD94D26FF9D35BC544B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:46:18:7b:f5:68:18:4a:4c:f0:2f:d9:4d:26:ff:9d:35:bc:54:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=925326bec5f5af03cb71668792fde2b5d634d3d45af79fe12a74701a001722f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fe:cd:b2:46:b0:e3:a0:50:7d:05:5b:e4:2a: b4:77:b4:81:0e:3c:1f:81:14:68:f6:49:90:6f:7f: 8c:df:4b:81:44:98:92:a9:ef:27:11:55:b6:c8:11: 03:6f:05:9c:d2:38:d8:e3:25:2c:ff:02:76:11:bb: c5:78:c1:10:a8:45:ed:51:06:c7:7c:a6:9f:8f:1a: bb:b7:4a:a4:f8:e4:9a:67:c1:b4:b2:d1:e3:27:1b: 20:94:91:ae:7c:b8:1a:f2:2a:3d:e4:64:8c:b6:b0: ab:ea:95:0d:5f:1d:dc:b4:48:9b:fb:77:53:c3:2c: 0d:98:3b:4a:94:4e:42:2d:d0:dd:7b:9f:ce:ab:b4: 0d:e0:f8:98:2a:de:fe:25:a9:20:82:ae:6f:b0:c0: 51:2f:70:30:7c:97:20:ea:5d:e0:69:d9:b1:08:00: 21:27:be:f7:97:50:1c:99:29:1c:f7:88:c9:aa:61: 84:80:4d:bc:d1:db:f5:22:db:b2:e7:57:6c:5e:87: 42:c2:15:0a:06:37:18:3c:0d:3d:72:15:ae:10:38: b5:b2:8b:6f:dc:14:bb:54:37:ba:d1:e5:da:7d:5d: 98:de:0f:4d:e7:5c:1f:65:e5:a6:ac:aa:9c:f9:0b: 8e:47:ca:1d:67:2d:41:32:e7:21:12:56:c9:c0:d2: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:39:E4:E1:88:01:46:84:B1:83:79:6E:D1:CD:81:8B:19:33:5F:C0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:e000::/40 Signature Algorithm: sha256WithRSAEncryption b4:bc:ee:49:a0:b4:c0:7f:b1:01:e5:9b:c8:cd:00:d8:45:31: 17:d2:b9:81:07:fe:55:2d:3c:58:7e:53:5e:13:86:2c:b2:25: 69:56:da:68:8d:98:50:c0:c1:4a:cf:7d:e5:f7:37:c3:4d:40: d8:7b:1e:10:ae:c2:2e:3b:f8:8d:f7:cd:83:5d:f2:49:3d:eb: 35:ab:4c:72:5d:5b:55:bb:4d:21:d1:04:bc:1b:94:5d:f8:60: d5:fe:64:6a:6e:5d:f4:5b:42:ce:25:bb:f7:79:f7:ed:87:b9: a1:79:70:5a:6a:86:43:b5:d1:cc:b0:3e:b3:6f:23:7a:b7:c4: 9e:e4:6d:fd:a5:dd:72:e2:d7:bb:51:91:64:3f:28:8f:fa:ab: c8:1f:e0:db:93:95:db:8e:0c:16:1a:c3:ca:dc:17:95:39:11: 37:b2:42:a1:08:27:c5:98:1b:aa:d3:af:c6:76:74:1c:00:0e: 02:98:4c:c2:62:d4:45:66:87:bf:8f:f4:7d:d7:91:b4:4b:bb: 42:c1:3c:9f:30:e9:b6:5c:2e:b3:06:6a:64:06:a5:3f:8d:a7: 21:b1:bc:71:44:26:9c:29:49:1e:21:2f:3c:9e:e8:95:d6:88: a8:d2:95:5c:ad:a0:6c:97:03:67:31:73:ee:b7:dd:f2:0d:d5: 7d:05:98:bd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJ0YYe/VoGEpM8C/ZTSb/nTW8VEswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyOTAwMDAwMFoX DTI0MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAOTI1MzI2YmVjNWY1YWYwM2NiNzE2 Njg3OTJmZGUyYjVkNjM0ZDNkNDVhZjc5ZmUxMmE3NDcwMWEwMDE3MjJmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/7Nskaw46BQfQVb5Cq0d7SBDjwf gRRo9kmQb3+M30uBRJiSqe8nEVW2yBEDbwWc0jjY4yUs/wJ2EbvFeMEQqEXtUQbH fKafjxq7t0qk+OSaZ8G0stHjJxsglJGufLga8io95GSMtrCr6pUNXx3ctEib+3dT wywNmDtKlE5CLdDde5/Oq7QN4PiYKt7+Jakggq5vsMBRL3AwfJcg6l3gadmxCAAh J773l1AcmSkc94jJqmGEgE280dv1Ituy51dsXodCwhUKBjcYPA09chWuEDi1sotv 3BS7VDe60eXafV2Y3g9N51wfZeWmrKqc+QuOR8odZy1BMuchElbJwNLQWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIk55OGIAUaEsYN5btHNgYsZM1/AMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiYmZmMTE1LWEwZWEtNGEzZi05MWQ2LWNkNzY0OGJhYWJiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9uAwDQYJKoZIhvcNAQELBQADggEBALS87kmgtMB/sQHlm8jN ANhFMRfSuYEH/lUtPFh+U14ThiyyJWlW2miNmFDAwUrPfeX3N8NNQNh7HhCuwi47 +I33zYNd8kk96zWrTHJdW1W7TSHRBLwblF34YNX+ZGpuXfRbQs4lu/d59+2HuaF5 cFpqhkO10cywPrNvI3q3xJ7kbf2l3XLi17tRkWQ/KI/6q8gf4NuTlduODBYaw8rc F5U5ETeyQqEIJ8WYG6rTr8Z2dBwADgKYTMJi1EVmh7+P9H3XkbRLu0LBPJ8w6bZc LrMGamQGpT+NpyGxvHFEJpwpSR4hLzye6JXWiKjSlVytoGyXA2cxc+633fIN1X0F mL0= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:38 2024 by rpki-client on console-ams.rpki-client.org