$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e0c688-3325-48df-8172-01b8157e560c.roa File: 57e0c688-3325-48df-8172-01b8157e560c.roa (raw, json) Hash identifier: 3qtm9ZFAMeh+Zapfiol0HsUVTrwEqEi60c1zeKRG1Xg= Subject key identifier: A3:23:A6:AA:74:E1:0F:CD:A9:9B:95:2E:E8:66:DA:70:76:46:57:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6082A41003553EAC369E653AC06B34B331CB694C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e0c688-3325-48df-8172-01b8157e560c.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Apr 2024 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:82:a4:10:03:55:3e:ac:36:9e:65:3a:c0:6b:34:b3:31:cb:69:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=e9510dec5b0ef39d26b55054452b180a21b271858b804104ab2c9ed19bef0f60, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:f4:b8:fd:60:b9:9b:ea:b7:0c:0a:c9:0f: a0:20:d9:33:93:fa:4d:60:87:5f:12:6a:6e:81:7a: a3:44:b9:e6:a4:c6:34:a0:de:d1:6f:4e:7e:80:9a: f7:8f:c2:18:69:7d:43:a0:fa:b2:28:79:d7:65:78: 4b:b2:be:a1:15:19:0b:d3:8d:80:00:87:e9:e5:df: e0:ab:a9:9c:2c:5d:a1:ef:ee:ab:9f:77:84:84:81: 6c:51:c6:67:23:05:8d:81:4b:af:71:b8:b1:24:62: 41:70:4d:dc:2e:8e:bb:cc:f1:59:ca:34:a6:49:33: c1:7d:dd:10:24:49:7a:da:ea:80:de:ce:17:bd:44: 8c:22:76:4d:79:d8:ee:c9:d6:fc:43:cc:58:83:4a: bd:54:37:f3:10:28:53:cd:c1:f7:fe:c3:13:73:16: f3:0c:06:86:38:01:2c:30:34:ff:d3:bc:80:6b:e6: 9f:66:44:e0:c2:f6:1b:69:52:74:27:fc:c2:30:10: e0:b9:11:2e:8e:c4:57:07:e4:4e:c1:e5:dd:95:e4: 8c:c1:a2:42:bb:70:d6:50:a1:8b:81:e3:7f:60:fa: 3a:f1:db:6d:ee:43:c1:1a:b1:12:18:ac:10:a5:d3: 7c:bd:17:e8:45:b6:7b:b4:ee:ba:c9:4f:13:bb:04: 46:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:23:A6:AA:74:E1:0F:CD:A9:9B:95:2E:E8:66:DA:70:76:46:57:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e0c688-3325-48df-8172-01b8157e560c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c000::/40 Signature Algorithm: sha256WithRSAEncryption 86:6b:67:70:4e:8d:37:8a:fb:2f:db:9d:e1:44:d4:9c:76:32: 0d:77:51:6d:33:56:95:d1:5a:25:71:d3:b2:5f:44:26:e9:7f: 40:bd:cd:63:39:27:0a:4f:57:0e:fc:df:93:c6:ed:3a:26:2f: c7:ce:4c:c5:be:de:fd:68:33:47:f8:b2:e2:61:bb:b1:f9:36: 92:b7:6a:ce:29:e1:ad:f8:71:5d:91:8d:29:16:16:4b:18:eb: e3:f8:68:65:88:7c:d3:1b:49:09:25:a0:c9:d6:ee:fe:c4:f3: c6:65:ab:f6:7e:1c:db:92:95:55:4e:94:fb:d2:5f:04:de:14: 2e:82:11:71:5f:28:a0:d1:cf:a5:7f:d4:b8:87:14:bb:4c:01: bd:a6:ab:7d:8d:23:7a:28:58:5e:90:6b:e2:eb:11:67:d7:fb: b6:2d:fa:2b:45:f7:89:32:e8:7e:42:46:bd:89:48:1b:9d:52: 53:0a:d9:b6:89:c4:87:e5:b0:ed:c9:11:8d:1a:9d:c8:fa:7e: 02:8a:ad:d9:4f:a4:96:97:69:e3:b6:e6:d6:e4:3d:e0:de:f3: e6:4b:8d:1e:87:68:d3:99:7f:25:8f:8e:bf:bb:f6:ae:b1:55: fb:9d:6e:36:0c:42:e9:52:24:10:02:a8:e5:2b:36:5d:92:da: 6d:f1:f9:36 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYIKkEANVPqw2nmU6wGs0szHLaUwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAZTk1MTBkZWM1YjBlZjM5ZDI2YjU1 MDU0NDUyYjE4MGEyMWIyNzE4NThiODA0MTA0YWIyYzllZDE5YmVmMGY2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv670uP1guZvqtwwKyQ+gINkzk/pN YIdfEmpugXqjRLnmpMY0oN7Rb05+gJr3j8IYaX1DoPqyKHnXZXhLsr6hFRkL042A AIfp5d/gq6mcLF2h7+6rn3eEhIFsUcZnIwWNgUuvcbixJGJBcE3cLo67zPFZyjSm STPBfd0QJEl62uqA3s4XvUSMInZNedjuydb8Q8xYg0q9VDfzEChTzcH3/sMTcxbz DAaGOAEsMDT/07yAa+afZkTgwvYbaVJ0J/zCMBDguREujsRXB+ROweXdleSMwaJC u3DWUKGLgeN/YPo68dtt7kPBGrESGKwQpdN8vRfoRbZ7tO66yU8TuwRGQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKMjpqp04Q/NqZuVLuhm2nB2RlejMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU3ZTBjNjg4LTMzMjUtNDhkZi04MTcyLTAxYjgxNTdlNTYwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAMAwDQYJKoZIhvcNAQELBQADggEBAIZrZ3BOjTeK+y/bneFE 1Jx2Mg13UW0zVpXRWiVx07JfRCbpf0C9zWM5JwpPVw7835PG7TomL8fOTMW+3v1o M0f4suJhu7H5NpK3as4p4a34cV2RjSkWFksY6+P4aGWIfNMbSQkloMnW7v7E88Zl q/Z+HNuSlVVOlPvSXwTeFC6CEXFfKKDRz6V/1LiHFLtMAb2mq32NI3ooWF6Qa+Lr EWfX+7Yt+itF94ky6H5CRr2JSBudUlMK2baJxIflsO3JEY0ancj6fgKKrdlPpJaX aeO25tbkPeDe8+ZLjR6HaNOZfyWPjr+79q6xVfudbjYMQulSJBACqOUrNl2S2m3x +TY= -----END CERTIFICATE-----Generated at Sat Apr 20 01:01:16 2024 by rpki-client on console-fra.rpki-client.org