$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa File: 50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa (raw, json) Hash identifier: 1vdWMIgzKbQcNjkfVvJ9+8s1WoqvPpgRpabZvGYGnp0= Subject key identifier: A2:AB:59:6B:3A:D0:92:76:70:4B:AE:8F:55:BB:A6:DE:49:29:EC:23 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 164BFBFEA777E8227637FD85E084BAA7B8577B8F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4b:fb:fe:a7:77:e8:22:76:37:fd:85:e0:84:ba:a7:b8:57:7b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=842c5b94a1dc3007c7269dac74b279b180bdf48550bd18160e2cf4c50f5d5f66, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:46:32:78:d2:dc:79:ed:a7:bc:15:ba:51: 53:6e:f5:b2:ee:ba:0c:b5:e3:8c:f4:51:23:6e:bd: 07:7d:d8:1d:29:de:e0:87:35:a7:6b:6f:a0:41:b7: e9:a8:9f:89:90:c9:07:cd:b6:b9:52:2d:46:94:51: 85:f6:bb:54:e3:c1:c7:c4:c1:8b:79:18:ad:41:a5: 7d:8a:09:fe:60:66:e9:40:03:a3:13:9a:97:b2:ee: 67:39:41:0f:1d:79:6c:e9:e1:8f:d3:cb:27:53:29: 09:ab:6a:7c:84:a0:24:9b:fe:75:63:d2:57:36:c7: 7c:19:07:ed:af:a1:ac:25:6e:62:de:33:9e:ab:b9: be:cf:5f:2b:4f:d8:d6:ed:93:54:18:01:db:3c:83: 79:59:e4:33:8b:f2:d6:aa:86:ef:b8:3c:5d:84:c7: 65:09:df:57:de:44:bd:2e:3c:90:54:dc:48:dd:a7: d7:63:f4:6a:7e:43:e8:fe:26:47:fe:66:6d:82:fe: b7:73:6c:79:85:38:be:87:b8:87:7a:3f:70:c6:49: fe:b8:76:d9:a0:13:06:25:56:61:8b:e0:63:fa:4d: f2:e3:cc:e0:d0:41:7a:ee:c1:53:18:53:3c:f0:9e: 57:ed:51:d5:54:00:bc:3e:10:f6:1b:11:51:a0:4c: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AB:59:6B:3A:D0:92:76:70:4B:AE:8F:55:BB:A6:DE:49:29:EC:23 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50abfde0-1bf4-4276-b1b8-0c5a49a3a3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f000::/40 Signature Algorithm: sha256WithRSAEncryption 3b:52:8f:a0:a0:f1:a7:82:15:07:c8:51:c2:56:c8:5c:39:d1: 14:7a:11:26:c7:58:d8:30:40:2d:b7:cb:b8:15:79:25:af:bf: e7:be:5a:83:3e:86:44:b2:6c:32:aa:3b:19:0e:1e:54:4b:11: 13:7e:3e:ed:60:c1:6a:b4:ab:80:e2:75:10:06:13:63:6e:06: 54:df:18:0f:7f:66:f5:d6:54:3c:8f:7e:90:71:24:df:8a:ec: d1:e9:ee:3a:ec:fa:62:71:fd:0e:d7:28:5c:40:f2:d1:93:bf: f3:39:21:03:0e:f1:2b:5f:d5:9e:df:4b:25:07:04:8a:16:7e: af:73:4a:9b:b5:41:27:02:85:38:33:14:a8:68:7a:1d:8a:60: 45:1c:5d:c1:20:1a:5b:e1:73:cd:6e:f2:87:8b:9a:f4:8e:60: 0c:e0:f4:50:e7:c0:be:79:cd:d3:21:83:83:75:34:03:a5:f8: 1e:29:d2:75:64:ae:01:9c:53:43:46:a3:20:10:d6:a7:65:15: 67:37:72:89:3f:c5:ec:2e:49:b7:21:b3:c4:7b:f5:0e:cb:fb: 0d:18:7a:d4:74:ca:ac:58:02:c3:3f:91:3b:c1:2c:9b:35:55: 00:b8:b1:5d:19:61:97:22:16:48:63:9e:87:0b:01:3a:ba:22: 2f:9e:61:47 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFkv7/qd36CJ2N/2F4IS6p7hXe48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAODQyYzViOTRhMWRjMzAwN2M3MjY5 ZGFjNzRiMjc5YjE4MGJkZjQ4NTUwYmQxODE2MGUyY2Y0YzUwZjVkNWY2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOtGMnjS3Hntp7wVulFTbvWy7roM teOM9FEjbr0HfdgdKd7ghzWna2+gQbfpqJ+JkMkHzba5Ui1GlFGF9rtU48HHxMGL eRitQaV9ign+YGbpQAOjE5qXsu5nOUEPHXls6eGP08snUykJq2p8hKAkm/51Y9JX Nsd8GQftr6GsJW5i3jOeq7m+z18rT9jW7ZNUGAHbPIN5WeQzi/LWqobvuDxdhMdl Cd9X3kS9LjyQVNxI3afXY/RqfkPo/iZH/mZtgv63c2x5hTi+h7iHej9wxkn+uHbZ oBMGJVZhi+Bj+k3y48zg0EF67sFTGFM88J5X7VHVVAC8PhD2GxFRoExwIwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKKrWWs60JJ2cEuuj1W7pt5JKewjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUwYWJmZGUwLTFiZjQtNDI3Ni1iMWI4LTBjNWE0OWEzYTNiMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8vAwDQYJKoZIhvcNAQELBQADggEBADtSj6Cg8aeCFQfIUcJW yFw50RR6ESbHWNgwQC23y7gVeSWvv+e+WoM+hkSybDKqOxkOHlRLERN+Pu1gwWq0 q4DidRAGE2NuBlTfGA9/ZvXWVDyPfpBxJN+K7NHp7jrs+mJx/Q7XKFxA8tGTv/M5 IQMO8Stf1Z7fSyUHBIoWfq9zSpu1QScChTgzFKhoeh2KYEUcXcEgGlvhc81u8oeL mvSOYAzg9FDnwL55zdMhg4N1NAOl+B4p0nVkrgGcU0NGoyAQ1qdlFWc3cok/xewu Sbchs8R79Q7L+w0YetR0yqxYAsM/kTvBLJs1VQC4sV0ZYZciFkhjnocLATq6Ii+e YUc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:35 2024 by rpki-client on console-fra.rpki-client.org