$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa File: 50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa (raw, json) Hash identifier: wL/jL9wOKLZsvzr5u0J/Pefcse1t+igTk1b+s1UUGQ8= Subject key identifier: 9B:CD:3D:BA:1E:97:E5:96:67:16:F5:22:1C:66:20:76:CB:E5:12:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 416DAD5476FE12C8226F24E53240ED15A01679D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6d:ad:54:76:fe:12:c8:22:6f:24:e5:32:40:ed:15:a0:16:79:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=be1617d8647e349122ad6cbb9dce988710584f0e130e5e75796421c2fc8c6da8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d8:64:0b:67:9a:dc:ac:d3:bd:34:89:23:02: 79:67:19:98:40:d1:7f:af:7b:96:6b:1d:db:0e:5f: 30:4f:39:10:5c:73:06:2b:30:c8:59:d3:b8:37:78: 23:89:d6:e6:15:e7:d6:4e:5f:86:56:13:99:3a:be: 1d:86:4a:b6:9f:25:ee:28:a7:7f:61:33:37:89:9b: 35:be:44:ce:8d:0e:fc:95:d9:76:43:a3:ec:cb:a0: 2a:ba:2f:70:a9:58:8b:31:f9:bf:99:2d:a8:67:6b: 2f:bf:b5:2a:0c:5b:eb:cc:c7:f1:4f:f6:d2:cc:37: c5:c2:72:68:ec:45:d8:af:35:79:5f:ca:89:56:66: c5:e8:88:53:0c:99:03:d2:28:84:58:cb:2f:b8:9c: 79:1b:e3:9c:40:c9:fe:36:a4:eb:70:76:22:91:54: 04:97:71:f5:e0:bf:1c:34:76:64:e0:5c:1f:38:ff: 7b:41:5a:32:a0:65:f7:54:2b:0a:47:73:6a:a4:72: 33:5e:46:61:0f:04:eb:76:3b:96:e3:70:6a:3d:3a: af:e0:c3:3e:99:04:0d:90:b2:66:df:03:6f:c7:3b: d0:28:7f:0b:58:4e:12:11:bd:25:0b:6d:35:1c:59: d4:c8:83:6c:f6:cf:72:0b:dc:36:b4:67:ea:b1:02: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:3D:BA:1E:97:E5:96:67:16:F5:22:1C:66:20:76:CB:E5:12:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f000::/40 Signature Algorithm: sha256WithRSAEncryption 47:c0:07:89:1d:00:27:38:32:0b:d9:5b:cb:a7:39:ec:1a:d0: 38:64:8f:76:83:69:59:c3:c2:8a:5a:5b:da:b5:3e:52:4f:84: 16:31:e2:ff:c3:35:05:53:be:8a:93:41:7f:c1:75:ca:51:f4: c6:cc:a5:d9:3a:8d:5a:4a:76:ff:1b:a4:17:49:3d:e5:ff:ef: 50:83:ab:a3:1f:ac:3a:a9:58:aa:19:8c:46:77:9c:de:40:9d: 98:54:27:85:50:97:97:19:d4:cc:f9:10:13:e9:17:d7:34:a4: ab:86:8b:a5:b5:25:55:4e:7a:1b:7a:a0:5f:25:de:5a:8c:e8: 0a:97:c1:8d:08:c5:8a:4b:cb:ca:91:66:b9:eb:4c:fb:7d:b4: bc:41:e3:7a:66:2f:bb:3b:e3:a7:ba:87:9e:a8:c6:86:fa:c7: 93:99:73:8b:33:5d:41:c9:cb:62:b0:1d:8f:6c:67:74:ae:fd: 00:97:cd:0c:f8:e9:3c:9b:0b:3f:95:a0:88:86:43:38:b3:8b: 03:c5:0c:1c:34:b5:7c:f1:8f:d3:b4:4a:47:8a:62:07:02:aa: c0:d6:ef:b2:9f:8d:33:16:86:6c:45:43:d0:13:49:bf:e2:b5: 6c:fe:23:60:46:ed:7d:c9:74:57:31:a5:c0:7c:17:70:d8:d7: b6:8d:c0:db -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQW2tVHb+EsgibyTlMkDtFaAWedgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAYmUxNjE3ZDg2NDdlMzQ5MTIyYWQ2 Y2JiOWRjZTk4ODcxMDU4NGYwZTEzMGU1ZTc1Nzk2NDIxYzJmYzhjNmRhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2thkC2ea3KzTvTSJIwJ5ZxmYQNF/ r3uWax3bDl8wTzkQXHMGKzDIWdO4N3gjidbmFefWTl+GVhOZOr4dhkq2nyXuKKd/ YTM3iZs1vkTOjQ78ldl2Q6Psy6Aqui9wqViLMfm/mS2oZ2svv7UqDFvrzMfxT/bS zDfFwnJo7EXYrzV5X8qJVmbF6IhTDJkD0iiEWMsvuJx5G+OcQMn+NqTrcHYikVQE l3H14L8cNHZk4FwfOP97QVoyoGX3VCsKR3NqpHIzXkZhDwTrdjuW43BqPTqv4MM+ mQQNkLJm3wNvxzvQKH8LWE4SEb0lC201HFnUyINs9s9yC9w2tGfqsQIODQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJvNPboel+WWZxb1IhxmIHbL5RLIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUwYWJmZGUwLTFiZjQtNDI3Ni1iMWI4LTBjNWE0OWEzYTNiMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8vAwDQYJKoZIhvcNAQELBQADggEBAEfAB4kdACc4MgvZW8un Oewa0Dhkj3aDaVnDwopaW9q1PlJPhBYx4v/DNQVTvoqTQX/BdcpR9MbMpdk6jVpK dv8bpBdJPeX/71CDq6MfrDqpWKoZjEZ3nN5AnZhUJ4VQl5cZ1Mz5EBPpF9c0pKuG i6W1JVVOeht6oF8l3lqM6AqXwY0IxYpLy8qRZrnrTPt9tLxB43pmL7s746e6h56o xob6x5OZc4szXUHJy2KwHY9sZ3Su/QCXzQz46TybCz+VoIiGQziziwPFDBw0tXzx j9O0SkeKYgcCqsDW77KfjTMWhmxFQ9ATSb/itWz+I2BG7X3JdFcxpcB8F3DY17aN wNs= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:25 2024 by rpki-client on console-ams.rpki-client.org