$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa File: 50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa (raw, json) Hash identifier: sdcsI/CrYhatuOzzbKI439nyaX3HDee9CBaQkfwaBp8= Subject key identifier: 14:D2:A2:65:C5:FF:77:37:F6:E0:ED:E6:E7:85:DA:BC:51:FA:34:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E22FE1B730055EFF025AABE4D4C96A36EEDAA4B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:22:fe:1b:73:00:55:ef:f0:25:aa:be:4d:4c:96:a3:6e:ed:aa:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=bde47a1eb9fac6f93f3fae4d303cc08a0663d2d5ee0bc97c5873f21d0f8776a3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:65:dc:e3:2e:f2:b4:e7:3d:9b:95:a8:e1: f4:7e:d7:7e:ab:7e:32:5a:16:f7:18:d1:1b:0e:c3: 62:cb:6b:7f:ac:86:cf:fa:dc:cc:22:18:b2:d9:8d: 33:4c:de:de:27:83:57:b0:1c:31:19:40:cf:5f:0d: b3:47:5d:7c:66:26:5a:23:d2:43:c9:31:1f:ea:af: 61:ab:c7:29:92:d6:db:6d:21:99:be:43:e1:1d:db: dd:76:58:aa:97:f0:cb:48:f9:0e:dc:57:f0:f5:27: d7:5f:96:da:13:24:b8:4f:ae:74:48:49:3c:73:a0: c6:76:6b:f4:88:8a:11:10:4c:c6:f3:4d:13:39:85: 26:ec:8e:5a:99:ee:74:f5:e1:d6:46:8b:d9:9e:f2: 02:05:88:01:09:24:93:f3:f5:0b:54:b0:44:25:aa: 9e:d1:21:bf:40:3c:36:6e:ef:be:af:f0:8e:90:23: 2b:f1:3c:c5:41:47:b7:25:cd:a3:f6:33:c5:0d:bb: 44:33:f9:fb:1e:77:56:e7:22:ad:e1:c8:2b:d5:55: fb:ba:d5:eb:08:5c:7e:11:09:8b:5f:2c:52:22:b0: 1c:14:a6:f9:8a:27:fe:c0:c9:ce:b8:ad:1e:f6:33: 3e:06:3e:34:e4:e6:00:94:c9:8a:dc:fc:a3:c2:b2: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D2:A2:65:C5:FF:77:37:F6:E0:ED:E6:E7:85:DA:BC:51:FA:34:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:ef:39:0a:90:b3:d4:fb:ba:ed:c8:49:23:4c:4b:38:db:d9: 9a:35:cd:dc:79:b3:4b:09:79:74:37:2e:bf:a4:08:ae:c8:48: c0:3e:72:41:27:f4:d3:05:0b:45:77:05:b4:fe:23:74:98:cb: 6a:ed:02:e2:43:81:47:ec:8f:be:03:de:ac:f7:ef:73:36:fd: 89:35:2a:b5:28:27:76:52:c9:87:83:79:ed:12:a9:7a:e1:b9: 91:89:c1:d7:22:b9:77:c5:78:e6:4d:64:99:44:05:e6:44:ce: ff:22:63:6d:62:a6:cb:56:a9:91:a8:4b:c4:20:05:e5:4b:13: 89:85:44:e1:ae:f8:f1:d6:e7:39:1b:e1:95:ea:25:b9:7b:4c: 57:eb:44:48:9b:e9:56:60:eb:de:e4:9d:8a:59:fc:34:d1:68: 45:73:9e:76:37:ef:f0:8f:3f:e9:b6:2f:87:88:54:0a:b9:fc: f8:43:6e:1f:c3:71:4b:bd:5d:ed:2b:5e:0f:9b:60:46:19:11: 6d:5a:4d:37:7c:18:e8:6d:67:64:ee:c3:75:70:58:f3:80:e2: a6:9d:61:60:4c:2f:86:fb:4f:ac:a8:a6:46:71:54:cb:8f:26: bc:b9:0b:1d:4f:a0:11:e4:98:e5:06:5e:5b:d0:e3:5e:37:1d: 92:1e:87:34 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbiL+G3MAVe/wJaq+TUyWo27tqkswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAYmRlNDdhMWViOWZhYzZmOTNmM2Zh ZTRkMzAzY2MwOGEwNjYzZDJkNWVlMGJjOTdjNTg3M2YyMWQwZjg3NzZhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMxl3OMu8rTnPZuVqOH0ftd+q34y Whb3GNEbDsNiy2t/rIbP+tzMIhiy2Y0zTN7eJ4NXsBwxGUDPXw2zR118ZiZaI9JD yTEf6q9hq8cpktbbbSGZvkPhHdvddliql/DLSPkO3Ffw9SfXX5baEyS4T650SEk8 c6DGdmv0iIoREEzG800TOYUm7I5ame509eHWRovZnvICBYgBCSST8/ULVLBEJaqe 0SG/QDw2bu++r/COkCMr8TzFQUe3Jc2j9jPFDbtEM/n7HndW5yKt4cgr1VX7utXr CFx+EQmLXyxSIrAcFKb5iif+wMnOuK0e9jM+Bj405OYAlMmK3PyjwrJq+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBTSomXF/3c39uDt5ueF2rxR+jTvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUwYWJmZGUwLTFiZjQtNDI3Ni1iMWI4LTBjNWE0OWEzYTNiMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8vAwDQYJKoZIhvcNAQELBQADggEBADrvOQqQs9T7uu3ISSNM Szjb2Zo1zdx5s0sJeXQ3Lr+kCK7ISMA+ckEn9NMFC0V3BbT+I3SYy2rtAuJDgUfs j74D3qz373M2/Yk1KrUoJ3ZSyYeDee0SqXrhuZGJwdciuXfFeOZNZJlEBeZEzv8i Y21ipstWqZGoS8QgBeVLE4mFROGu+PHW5zkb4ZXqJbl7TFfrREib6VZg697knYpZ /DTRaEVznnY37/CPP+m2L4eIVAq5/PhDbh/DcUu9Xe0rXg+bYEYZEW1aTTd8GOht Z2Tuw3VwWPOA4qadYWBML4b7T6yopkZxVMuPJry5Cx1PoBHkmOUGXlvQ4143HZIe hzQ= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org