$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7061fa-5c37-4494-8c7f-d198ecf9a78a.roa File: 5a7061fa-5c37-4494-8c7f-d198ecf9a78a.roa (raw, json) Hash identifier: XRkxal/dKX2oKg+agi/Cbp/JYGzRXMWw0PhJuXnOowY= Subject key identifier: 0E:30:22:BB:A2:17:E3:92:46:7A:34:45:28:71:BE:5C:16:37:F1:F8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C8963C5CCBD1F8C29C7912433ECAD0D7130C769 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7061fa-5c37-4494-8c7f-d198ecf9a78a.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 00:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:89:63:c5:cc:bd:1f:8c:29:c7:91:24:33:ec:ad:0d:71:30:c7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=8b2d7672ae41c1143ecd9b9525dc9af03041fd0e8ceb6a37cd11f7ec3c6cda39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:32:6c:81:c7:24:72:3c:43:f5:25:bc:90:84: e2:bb:f9:b7:f3:d6:a9:35:38:43:ad:36:d0:b7:ed: d2:74:df:be:d6:35:b2:2c:af:24:1d:4c:86:ce:73: 08:2b:85:e9:19:b5:86:1a:fb:80:6c:fe:2a:66:3e: 9e:be:95:cd:dc:53:47:3e:f8:1b:e6:9e:e4:e4:80: 12:e5:a9:93:f1:e9:37:b6:5d:5d:b6:cb:69:d7:6e: 12:7a:fd:43:70:4d:09:e0:58:dc:ce:13:95:56:d7: db:da:f0:90:19:37:66:73:8d:9e:93:11:6b:49:b7: 45:5c:38:00:35:9e:6c:cc:29:1f:ab:e4:a0:41:eb: 33:f6:2d:03:86:aa:54:52:ca:2b:f0:d8:98:4c:ff: d6:c3:be:dd:df:1d:0e:9c:24:a1:6a:15:08:aa:68: 11:02:f2:a2:6b:f4:05:9e:54:2a:c2:ae:06:cd:a2: ca:b0:2a:d5:f3:e8:27:96:1a:71:95:b2:42:c5:3c: 26:76:2c:04:da:f8:ed:ff:95:1a:80:0d:4a:3f:af: 06:40:0b:6a:fd:96:72:ba:0b:9c:e4:41:89:36:65: 2a:7a:fa:e6:74:53:0f:1f:27:05:0d:2f:36:c7:9e: cb:fc:2d:ef:7e:e4:34:fa:61:9c:84:e7:7b:9b:ae: da:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:30:22:BB:A2:17:E3:92:46:7A:34:45:28:71:BE:5C:16:37:F1:F8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7061fa-5c37-4494-8c7f-d198ecf9a78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:c800::/40 Signature Algorithm: sha256WithRSAEncryption 8d:00:80:c1:e6:b8:16:6e:0e:08:13:6d:6d:52:0b:2b:4a:f9: 72:eb:11:0c:17:15:41:e6:3e:56:dc:35:60:60:2e:04:96:84: 3b:20:14:9f:d5:d2:df:6d:62:f1:a3:c6:83:8d:50:4c:8b:03: ef:73:63:79:71:29:85:7d:18:1d:2a:e7:82:82:2f:c0:92:d3: 5c:4b:57:83:dd:98:cf:99:79:25:04:db:70:63:0f:e5:6f:cc: ff:a1:fa:23:b2:15:ec:82:29:cd:45:85:a9:d5:f9:5c:f6:80: 66:6f:eb:ff:4f:ee:df:88:b9:a4:5c:57:de:a2:fd:89:f8:f3: 53:66:54:19:59:22:3d:cf:ce:d6:1f:39:b8:81:4e:28:41:dd: f2:c0:20:cd:ad:bb:b2:38:90:d0:42:a1:fc:ee:82:3c:13:64: 54:c7:d9:c7:40:39:8e:a0:80:d8:04:cd:8a:45:1a:f5:50:be: 5f:da:54:0b:04:eb:68:9a:9a:a4:94:5c:bf:da:f5:1b:a9:13: 75:5f:7c:dd:5a:84:1b:0a:32:3c:2d:64:9d:aa:34:38:2d:0b: b8:ed:5d:9b:86:5c:30:01:05:0a:56:74:7c:48:c4:11:65:70: 89:31:ad:0d:75:4b:a4:1c:0f:19:2b:19:ea:6a:6e:2a:7f:a8: 2f:8b:e2:2c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTIljxcy9H4wpx5EkM+ytDXEwx2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQyMzAwMDAwMFoX DTI0MDUyODIzNTk1OVowejFJMEcGA1UEBRNAOGIyZDc2NzJhZTQxYzExNDNlY2Q5 Yjk1MjVkYzlhZjAzMDQxZmQwZThjZWI2YTM3Y2QxMWY3ZWMzYzZjZGEzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zJsgcckcjxD9SW8kITiu/m389ap NThDrTbQt+3SdN++1jWyLK8kHUyGznMIK4XpGbWGGvuAbP4qZj6evpXN3FNHPvgb 5p7k5IAS5amT8ek3tl1dtstp124Sev1DcE0J4FjczhOVVtfb2vCQGTdmc42ekxFr SbdFXDgANZ5szCkfq+SgQesz9i0DhqpUUsor8NiYTP/Ww77d3x0OnCShahUIqmgR AvKia/QFnlQqwq4GzaLKsCrV8+gnlhpxlbJCxTwmdiwE2vjt/5UagA1KP68GQAtq /ZZyuguc5EGJNmUqevrmdFMPHycFDS82x57L/C3vfuQ0+mGchOd7m67aYwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA4wIruiF+OSRno0RShxvlwWN/H4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhNzA2MWZhLTVjMzctNDQ5NC04YzdmLWQxOThlY2Y5YTc4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaMgwDQYJKoZIhvcNAQELBQADggEBAI0AgMHmuBZuDggTbW1S CytK+XLrEQwXFUHmPlbcNWBgLgSWhDsgFJ/V0t9tYvGjxoONUEyLA+9zY3lxKYV9 GB0q54KCL8CS01xLV4PdmM+ZeSUE23BjD+VvzP+h+iOyFeyCKc1FhanV+Vz2gGZv 6/9P7t+IuaRcV96i/Yn481NmVBlZIj3PztYfObiBTihB3fLAIM2tu7I4kNBCofzu gjwTZFTH2cdAOY6ggNgEzYpFGvVQvl/aVAsE62iamqSUXL/a9RupE3VffN1ahBsK MjwtZJ2qNDgtC7jtXZuGXDABBQpWdHxIxBFlcIkxrQ11S6QcDxkrGepqbip/qC+L 4iw= -----END CERTIFICATE-----Generated at Sun May 5 01:11:59 2024 by rpki-client on console-ams.rpki-client.org