$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51948e3c-37a6-4d66-a172-46657634e09a.roa File: 51948e3c-37a6-4d66-a172-46657634e09a.roa (raw, json) Hash identifier: dRuXSVi1xlqiQx2G0okxF1bx2fE6TGFu5lFihDq7vPA= Subject key identifier: 4A:AB:CC:9D:F6:83:96:E0:7F:2E:6E:4E:07:AD:AF:1A:9D:15:D2:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 710D76E7B64C951E0F487300CCD46CC467D4C53C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51948e3c-37a6-4d66-a172-46657634e09a.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0d:76:e7:b6:4c:95:1e:0f:48:73:00:cc:d4:6c:c4:67:d4:c5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=6ee70d11fccca3b7ef7798d87485833764a777b881100a4bc5bd6d4bb9d8cb9d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:7c:09:c4:aa:e7:86:95:7c:4d:97:0c:c9: e3:bb:bf:78:0d:7d:c1:a8:99:ce:fa:f3:52:44:dc: f6:91:9c:df:a1:0f:33:9d:af:94:17:77:03:62:5c: 47:e0:a6:e5:e7:42:48:1f:35:d2:34:e0:19:1e:53: cc:64:f7:d2:bb:2e:15:89:aa:4e:f7:11:c0:4c:90: c5:22:b8:f7:a3:de:3c:c1:90:d8:8d:90:cc:a2:f5: d5:9b:d7:a4:d7:55:ed:55:9b:32:99:f2:f4:ee:7a: 6b:2a:82:82:c3:cd:04:72:18:66:d7:32:84:a8:e6: d4:da:7f:5e:eb:4a:ba:78:76:c7:58:15:e0:d4:ee: 98:c5:61:93:a2:6e:14:ab:e4:1e:7e:09:f4:d7:b4: 00:58:79:61:d5:9e:60:6b:0e:c0:bb:1c:e0:44:76: 79:67:fb:1c:03:85:8f:db:b9:f9:fa:50:d4:dd:89: 7c:80:ca:a2:88:52:13:ae:3a:37:d8:87:16:d8:f0: 6c:d4:40:d6:b1:6c:9c:eb:23:fe:31:fd:75:01:4f: 00:dd:98:9f:87:d2:1e:c7:44:88:fe:e4:eb:a4:8c: 31:91:86:76:3d:95:4e:55:8d:bc:ee:cf:e0:d8:0f: 2e:95:e1:f4:d1:2b:64:78:f9:82:a1:27:98:43:8a: 74:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AB:CC:9D:F6:83:96:E0:7F:2E:6E:4E:07:AD:AF:1A:9D:15:D2:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51948e3c-37a6-4d66-a172-46657634e09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b000::/40 Signature Algorithm: sha256WithRSAEncryption 89:3e:1c:c0:bb:10:cb:64:a7:00:23:5f:3d:99:ec:7f:c6:ad: fa:cf:fa:95:db:10:d4:c4:75:e5:18:dd:4c:0d:cd:9d:fd:45: 29:ea:1c:ca:34:0f:46:2b:f2:d7:c6:28:f1:fa:8d:e6:09:cf: a7:f3:e3:51:b7:1b:65:82:69:b9:a6:83:8c:cc:eb:4d:88:5c: 1d:57:9d:39:0e:4d:bf:ad:c5:88:ba:63:5c:6c:10:eb:90:4b: d1:2c:26:e5:7b:cc:37:69:cb:55:34:50:9b:d0:e4:14:9f:cd: cc:7e:96:fc:44:f4:97:03:7e:8e:b1:53:f5:06:8e:f8:0f:ef: dd:9f:ff:98:c8:a3:2e:20:38:e8:d1:c2:ad:b4:64:68:cc:34: 1d:71:21:0e:e5:1a:c7:88:bf:b7:b1:40:2b:ca:4c:a3:33:1f: bf:3f:9c:88:e3:b6:fb:2f:bc:c4:eb:71:69:74:08:25:78:eb: aa:29:51:68:fd:f6:b5:ee:49:b1:8f:4a:75:c3:d3:0f:bc:00: 15:38:19:b3:74:14:cc:e3:7b:a8:b9:f9:81:96:35:fc:93:b9: 7b:98:0e:f8:69:70:1d:f4:dd:29:1b:47:38:a8:b9:ea:0a:88: a3:28:74:44:95:fa:ff:b7:4b:eb:d6:b7:0d:c1:46:67:f1:c5: 21:92:5c:61 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcQ1257ZMlR4PSHMAzNRsxGfUxTwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNANmVlNzBkMTFmY2NjYTNiN2VmNzc5 OGQ4NzQ4NTgzMzc2NGE3NzdiODgxMTAwYTRiYzViZDZkNGJiOWQ4Y2I5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH98CcSq54aVfE2XDMnju794DX3B qJnO+vNSRNz2kZzfoQ8zna+UF3cDYlxH4Kbl50JIHzXSNOAZHlPMZPfSuy4ViapO 9xHATJDFIrj3o948wZDYjZDMovXVm9ek11XtVZsymfL07nprKoKCw80Echhm1zKE qObU2n9e60q6eHbHWBXg1O6YxWGTom4Uq+Qefgn017QAWHlh1Z5gaw7AuxzgRHZ5 Z/scA4WP27n5+lDU3Yl8gMqiiFITrjo32IcW2PBs1EDWsWyc6yP+Mf11AU8A3Zif h9Iex0SI/uTrpIwxkYZ2PZVOVY287s/g2A8uleH00StkePmCoSeYQ4p0GQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEqrzJ32g5bgfy5uTgetrxqdFdIUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxOTQ4ZTNjLTM3YTYtNGQ2Ni1hMTcyLTQ2NjU3NjM0ZTA5YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8rAwDQYJKoZIhvcNAQELBQADggEBAIk+HMC7EMtkpwAjXz2Z 7H/GrfrP+pXbENTEdeUY3UwNzZ39RSnqHMo0D0Yr8tfGKPH6jeYJz6fz41G3G2WC abmmg4zM602IXB1XnTkOTb+txYi6Y1xsEOuQS9EsJuV7zDdpy1U0UJvQ5BSfzcx+ lvxE9JcDfo6xU/UGjvgP792f/5jIoy4gOOjRwq20ZGjMNB1xIQ7lGseIv7exQCvK TKMzH78/nIjjtvsvvMTrcWl0CCV466opUWj99rXuSbGPSnXD0w+8ABU4GbN0FMzj e6i5+YGWNfyTuXuYDvhpcB303SkbRzioueoKiKModESV+v+3S+vWtw3BRmfxxSGS XGE= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org