$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b187890-685c-4969-8caa-cdf63b9dfbf4.roa File: 5b187890-685c-4969-8caa-cdf63b9dfbf4.roa (raw, json) Hash identifier: oqLpZPMavToXfnTZgUabjfHKjsVfgy2OLQ8rE19QBN8= Subject key identifier: 41:27:BB:17:D6:BF:3E:A2:01:66:FF:09:02:DB:41:02:6E:14:21:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F22776E9098A08154A71F8AF42F011BF1F20BD2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b187890-685c-4969-8caa-cdf63b9dfbf4.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:22:77:6e:90:98:a0:81:54:a7:1f:8a:f4:2f:01:1b:f1:f2:0b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=800f768c324742a0b5128c1cd5ddf5d67f1e136cab8aa68f6c942f951aba3974, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:3b:69:c2:ac:63:04:81:5d:67:df:24:21: 21:7d:ad:f3:d4:b5:4b:f0:cc:2a:18:d3:5f:d2:38: 77:03:73:8b:dd:da:d3:f6:b8:53:71:cb:73:9f:33: 10:63:4d:20:08:c4:3d:be:43:a9:20:55:8b:51:69: 25:b8:97:46:a5:29:a8:54:26:e5:bd:1e:fa:74:9b: c3:b9:0f:7b:4b:5b:82:0e:38:d6:3c:ed:dd:06:5e: 24:5f:cb:29:1b:bd:23:8c:59:64:b4:e3:f3:8d:3c: 01:30:dc:b0:35:b5:e4:e3:f7:96:e4:45:40:13:ec: 01:2e:e5:dc:13:6d:53:5d:e7:76:01:a5:49:f5:da: b1:75:d6:33:86:1f:0c:1e:90:92:97:b5:22:5c:0e: 0d:9d:e0:f5:70:a8:f0:17:f0:e2:8c:45:fd:b7:17: f4:56:88:9c:63:46:c1:71:2f:0a:34:c1:18:a7:64: e0:fa:c1:83:07:bb:5c:d9:92:97:78:c0:dc:3f:29: 85:11:23:99:dd:53:ae:d1:ed:60:8c:3b:8b:94:9a: a5:32:82:31:47:74:8f:27:1a:98:94:69:26:2c:0e: 2d:63:a8:7c:69:65:a6:46:f8:0d:70:e5:b8:9c:42: 88:9e:cb:5c:06:e4:55:b2:c3:a2:fc:c4:be:a5:cb: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:27:BB:17:D6:BF:3E:A2:01:66:FF:09:02:DB:41:02:6E:14:21:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b187890-685c-4969-8caa-cdf63b9dfbf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:b000::/40 Signature Algorithm: sha256WithRSAEncryption 00:10:a6:d5:41:74:21:d0:e0:95:c8:53:91:e4:e0:b4:e5:8d: 1d:65:1e:09:39:30:c8:46:5f:e3:0b:da:bd:f1:34:5e:63:d2: 05:8f:0a:80:90:bd:ce:2d:a3:a6:3c:56:37:9e:80:3d:8f:34: a4:d5:fd:56:95:9b:59:24:17:1d:51:a4:d6:de:5a:99:30:68: e6:cf:fb:77:8f:68:ce:d2:06:4f:a9:99:1e:10:5a:61:40:a9: 2c:90:db:5e:29:fd:55:48:c4:91:00:29:74:19:d7:91:39:84: 64:52:9d:e3:fb:01:24:b2:47:f2:89:c6:59:26:b0:3f:63:99: 0d:ca:17:7f:d7:04:49:74:10:84:87:ca:12:e7:c8:dd:f2:f8: b7:c6:74:99:b9:d3:18:53:c6:90:07:95:54:e3:fe:28:11:40: ee:f5:bb:69:3e:0a:78:f2:6c:73:75:c3:66:f2:3f:7c:47:6e: d3:c3:cc:9f:c6:be:b5:a6:41:fd:47:f4:1e:5e:77:e4:13:39: b4:00:d1:94:2a:ff:01:44:ff:ad:d4:e4:c4:cc:19:b8:10:8e: 0e:97:a9:85:fe:33:b3:69:ef:4c:9a:bd:c8:37:e2:f2:79:b8: 59:fe:c4:98:98:02:04:59:c0:68:55:f1:b4:e4:b9:f7:d3:e4: eb:bf:99:d7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULyJ3bpCYoIFUpx+K9C8BG/HyC9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAODAwZjc2OGMzMjQ3NDJhMGI1MTI4 YzFjZDVkZGY1ZDY3ZjFlMTM2Y2FiOGFhNjhmNmM5NDJmOTUxYWJhMzk3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslk7acKsYwSBXWffJCEhfa3z1LVL 8MwqGNNf0jh3A3OL3drT9rhTcctznzMQY00gCMQ9vkOpIFWLUWkluJdGpSmoVCbl vR76dJvDuQ97S1uCDjjWPO3dBl4kX8spG70jjFlktOPzjTwBMNywNbXk4/eW5EVA E+wBLuXcE21TXed2AaVJ9dqxddYzhh8MHpCSl7UiXA4NneD1cKjwF/DijEX9txf0 VoicY0bBcS8KNMEYp2Tg+sGDB7tc2ZKXeMDcPymFESOZ3VOu0e1gjDuLlJqlMoIx R3SPJxqYlGkmLA4tY6h8aWWmRvgNcOW4nEKInstcBuRVssOi/MS+pcsy8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEEnuxfWvz6iAWb/CQLbQQJuFCFNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViMTg3ODkwLTY4NWMtNDk2OS04Y2FhLWNkZjYzYjlkZmJmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNrAwDQYJKoZIhvcNAQELBQADggEBAAAQptVBdCHQ4JXIU5Hk 4LTljR1lHgk5MMhGX+ML2r3xNF5j0gWPCoCQvc4to6Y8VjeegD2PNKTV/VaVm1kk Fx1RpNbeWpkwaObP+3ePaM7SBk+pmR4QWmFAqSyQ214p/VVIxJEAKXQZ15E5hGRS neP7ASSyR/KJxlkmsD9jmQ3KF3/XBEl0EISHyhLnyN3y+LfGdJm50xhTxpAHlVTj /igRQO71u2k+CnjybHN1w2byP3xHbtPDzJ/GvrWmQf1H9B5ed+QTObQA0ZQq/wFE /63U5MTMGbgQjg6XqYX+M7Np70yavcg34vJ5uFn+xJiYAgRZwGhV8bTkuffT5Ou/ mdc= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:32 2024 by rpki-client on console-fra.rpki-client.org