$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa File: 4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa (raw, json) Hash identifier: 2hjj5r1IqKcmHIJ3SBIb2pPZ2ULsRVhoRHREA6VdLPk= Subject key identifier: 30:2B:AC:FA:CB:AB:8D:C3:BD:60:F0:4A:4A:08:56:9A:DD:1F:D0:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1843B045DE3D8BA8A6AE461BC8EF88F9FC885A1E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:43:b0:45:de:3d:8b:a8:a6:ae:46:1b:c8:ef:88:f9:fc:88:5a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=193d7b94d6f84ca26530627cc9d582e34e498e96a6a4f9d883f400589df87394, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:96:05:34:6f:ba:7f:22:05:05:39:89:18: fa:68:55:01:49:d6:1d:0b:0e:b5:f0:ed:11:86:5e: 30:25:cf:aa:1b:8b:57:96:f0:b9:d4:39:eb:fa:0c: 55:35:7a:13:25:d4:70:5d:aa:d2:93:93:5f:af:6f: 50:ec:d8:cc:bf:a3:d3:63:53:38:9b:60:b0:a3:27: ea:8e:6f:28:1a:b7:6e:c8:79:51:ce:7d:2e:b3:30: fc:67:28:77:22:29:a5:91:89:50:05:f8:bc:5a:d2: 02:a7:cb:01:f6:59:7d:4a:23:b9:35:3e:b9:29:22: 1f:1c:79:15:2d:86:b8:73:b3:a1:dd:ea:87:3b:73: 64:05:cc:70:fc:7b:8e:1b:0f:56:52:e3:6b:1a:76: e6:aa:10:39:a6:97:81:54:0b:c2:4b:44:d0:95:6e: f8:fd:d9:01:d5:d0:91:77:dc:3e:9d:90:de:e4:25: ba:fe:a8:64:2d:05:d5:d0:15:30:e8:42:84:7d:17: 24:59:45:cc:4f:41:b9:0d:cd:3a:53:b2:85:e4:d4: b2:9e:ef:c8:f8:63:24:07:7b:34:73:46:2f:f4:b7: aa:ca:71:7f:8c:16:1a:26:bb:14:ab:51:d1:ec:76: e9:3f:f0:a9:1c:6a:39:71:9c:12:03:88:1e:cc:bf: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2B:AC:FA:CB:AB:8D:C3:BD:60:F0:4A:4A:08:56:9A:DD:1F:D0:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:e000::/40 Signature Algorithm: sha256WithRSAEncryption af:dd:dd:e2:75:a9:ad:76:05:e8:13:77:85:fa:88:fa:fa:2a: 2d:ef:c1:fe:72:5c:0d:9d:8e:fb:94:8e:2f:62:72:7f:b9:56: 17:26:70:3d:9b:3a:1b:56:4d:6a:26:7b:f2:1d:1a:05:6f:44: 55:a4:2e:8a:e4:4a:e1:96:62:45:50:b4:7c:f3:47:b2:52:35: 1b:9d:fa:04:cd:dc:b0:4d:8b:7f:95:f0:44:b2:3f:29:cb:ea: 7a:72:ca:75:1c:de:ae:c7:67:65:0f:b2:da:3d:c4:25:31:f9: 7d:89:9a:5e:cf:67:e0:6a:cf:28:b6:67:b9:bd:8b:86:37:78: ff:e1:1c:b0:d9:6d:17:eb:11:d0:ef:e4:53:58:e8:ba:bb:99: ac:8e:af:3e:34:a4:a2:d6:b6:f7:08:ff:3b:a2:e3:e1:73:16: d3:5e:87:f6:db:da:39:4d:4f:0f:41:58:87:e8:e6:89:55:84: db:47:5b:c9:81:63:98:71:c6:4a:4d:ca:97:a2:bb:e6:4c:f7: 99:e3:a6:84:6d:c2:c0:31:57:74:79:39:ef:71:20:be:03:49: c3:82:a2:98:dc:33:85:d3:c1:7b:0e:eb:21:b9:ab:7c:1b:e0: 0d:82:c4:a0:20:a2:64:89:49:82:d7:6d:37:91:d3:6d:d6:c6: 2b:5d:3e:3c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGEOwRd49i6imrkYbyO+I+fyIWh4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExMTAwMDAwMFoX DTI0MTIxNjIzNTk1OVowejFJMEcGA1UEBRNAMTkzZDdiOTRkNmY4NGNhMjY1MzA2 MjdjYzlkNTgyZTM0ZTQ5OGU5NmE2YTRmOWQ4ODNmNDAwNTg5ZGY4NzM5NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNiWBTRvun8iBQU5iRj6aFUBSdYd Cw618O0Rhl4wJc+qG4tXlvC51Dnr+gxVNXoTJdRwXarSk5Nfr29Q7NjMv6PTY1M4 m2Cwoyfqjm8oGrduyHlRzn0uszD8Zyh3IimlkYlQBfi8WtICp8sB9ll9SiO5NT65 KSIfHHkVLYa4c7Oh3eqHO3NkBcxw/HuOGw9WUuNrGnbmqhA5ppeBVAvCS0TQlW74 /dkB1dCRd9w+nZDe5CW6/qhkLQXV0BUw6EKEfRckWUXMT0G5Dc06U7KF5NSynu/I +GMkB3s0c0Yv9LeqynF/jBYaJrsUq1HR7HbpP/CpHGo5cZwSA4gezL/EHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDArrPrLq43DvWDwSkoIVprdH9AVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlMjRlYmFiLTVmMzEtNGViNS05OWRkLWU1ZmUxMTNmMjFmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauOAwDQYJKoZIhvcNAQELBQADggEBAK/d3eJ1qa12BegTd4X6 iPr6Ki3vwf5yXA2djvuUji9icn+5VhcmcD2bOhtWTWome/IdGgVvRFWkLorkSuGW YkVQtHzzR7JSNRud+gTN3LBNi3+V8ESyPynL6npyynUc3q7HZ2UPsto9xCUx+X2J ml7PZ+Bqzyi2Z7m9i4Y3eP/hHLDZbRfrEdDv5FNY6Lq7mayOrz40pKLWtvcI/zui 4+FzFtNeh/bb2jlNTw9BWIfo5olVhNtHW8mBY5hxxkpNypeiu+ZM95njpoRtwsAx V3R5Oe9xIL4DScOCopjcM4XTwXsO6yG5q3wb4A2CxKAgomSJSYLXbTeR023Wxitd Pjw= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:35 2024 by rpki-client on console-fra.rpki-client.org