$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa File: 5c3824f8-42e9-4418-8966-1b2766cf39bd.roa (raw, json) Hash identifier: 6gjiAt677PvRkO3m8SLc+VH/ExDlq0q/bujsKqFs4u4= Subject key identifier: F5:B2:F8:3D:FF:B2:57:1D:BD:B1:C3:CB:E1:82:C3:76:B4:B8:02:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F6555FAF29E36B6BD7FACE7DCE82D697426E499 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:65:55:fa:f2:9e:36:b6:bd:7f:ac:e7:dc:e8:2d:69:74:26:e4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=cb4f99f87b72d2fa41482c0d23c695ade14e6a3c080c011f99f09b4efc4513a3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:ef:a8:f5:b6:96:d7:e8:1b:d6:75:0e:dd: 0d:c0:00:3b:01:3e:cf:01:33:8a:f5:60:a8:f0:40: 8f:24:22:2a:7e:64:02:e8:18:b2:df:8a:49:9d:4e: be:4c:57:41:22:5d:3f:05:bf:3d:c4:de:94:51:12: 15:fe:a4:61:e0:6d:f5:3e:9f:72:ce:e1:0f:51:57: a5:06:2e:2e:c9:e0:a3:78:2b:ea:68:1c:89:a0:67: 9c:3b:d9:25:3a:c3:60:5c:d1:46:d2:b2:a4:f2:32: 17:db:4d:54:e4:4f:0d:56:93:ff:60:61:b9:72:e7: 4f:84:88:22:bf:92:79:3f:11:dd:a0:86:03:89:e6: ab:eb:13:23:5a:7d:f1:fc:dc:50:ce:53:47:df:28: 30:dc:51:3c:78:1a:0d:86:9c:96:f3:22:3f:e8:6b: e5:da:71:e7:53:17:68:72:bf:60:65:42:ee:14:43: 80:d2:1c:bb:1a:c7:20:f6:c3:16:60:89:d4:f0:ee: 69:4f:e0:12:34:40:6e:fa:8d:97:b1:9a:5d:5d:0e: af:54:e1:27:9b:92:21:ca:c9:2a:9c:25:8f:3e:eb: 16:4e:3d:21:e8:6b:7d:84:77:57:54:01:f5:bd:77: 08:fd:59:3e:85:f6:df:19:7d:49:dc:8d:f2:6e:0b: 61:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B2:F8:3D:FF:B2:57:1D:BD:B1:C3:CB:E1:82:C3:76:B4:B8:02:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:7000::/40 Signature Algorithm: sha256WithRSAEncryption 60:1c:55:e2:55:42:56:64:7c:7c:5a:f5:fd:88:a8:b7:8d:4c: 89:a4:ae:32:16:b6:93:6f:f1:1a:7f:ed:6b:9c:e7:97:0c:fe: d6:af:e6:e9:0a:24:9b:7e:48:c8:15:bd:10:ab:a9:04:b6:0f: b9:05:8c:7a:db:00:ac:38:76:df:2e:5c:76:81:20:dd:15:b8: 30:22:5a:65:49:91:e0:f3:54:9b:2e:e6:b0:ff:34:ed:73:80: e8:4d:39:4c:cf:6d:1c:ce:23:c5:92:58:cb:8d:6f:3f:fa:37: b4:e6:20:71:82:ba:7a:2c:64:77:44:a4:9a:c8:f3:a2:58:2a: 03:eb:8c:a3:26:67:89:3f:b7:4d:e1:6b:d6:5c:a9:27:c2:f7: 12:a5:f9:6d:98:e4:56:ee:62:28:26:b1:56:c2:d5:8d:74:1b: 9c:fe:ba:ea:b3:d0:5b:5e:a5:0f:4f:c2:ad:8a:e5:68:6e:59: cd:19:2a:8f:6c:57:05:d6:a6:97:12:61:ae:aa:77:8a:1f:e1: 77:09:5f:e8:62:2e:d7:25:c4:32:23:f5:eb:8f:5b:f5:22:a7: 49:5c:62:19:18:44:20:cf:af:39:83:1d:31:a6:88:d9:0d:6d: c7:d4:c7:aa:72:d7:4a:24:9e:05:9d:60:3b:cf:c2:c8:68:d8: 33:ae:47:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf2VV+vKeNra9f6zn3OgtaXQm5JkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAY2I0Zjk5Zjg3YjcyZDJmYTQxNDgy YzBkMjNjNjk1YWRlMTRlNmEzYzA4MGMwMTFmOTlmMDliNGVmYzQ1MTNhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuPvqPW2ltfoG9Z1Dt0NwAA7AT7P ATOK9WCo8ECPJCIqfmQC6Biy34pJnU6+TFdBIl0/Bb89xN6UURIV/qRh4G31Pp9y zuEPUVelBi4uyeCjeCvqaByJoGecO9klOsNgXNFG0rKk8jIX201U5E8NVpP/YGG5 cudPhIgiv5J5PxHdoIYDiear6xMjWn3x/NxQzlNH3ygw3FE8eBoNhpyW8yI/6Gvl 2nHnUxdocr9gZULuFEOA0hy7Gscg9sMWYInU8O5pT+ASNEBu+o2XsZpdXQ6vVOEn m5IhyskqnCWPPusWTj0h6Gt9hHdXVAH1vXcI/Vk+hfbfGX1J3I3ybgthUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPWy+D3/slcdvbHDy+GCw3a0uAIYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjMzgyNGY4LTQyZTktNDQxOC04OTY2LTFiMjc2NmNmMzliZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8XAwDQYJKoZIhvcNAQELBQADggEBAGAcVeJVQlZkfHxa9f2I qLeNTImkrjIWtpNv8Rp/7Wuc55cM/tav5ukKJJt+SMgVvRCrqQS2D7kFjHrbAKw4 dt8uXHaBIN0VuDAiWmVJkeDzVJsu5rD/NO1zgOhNOUzPbRzOI8WSWMuNbz/6N7Tm IHGCunosZHdEpJrI86JYKgPrjKMmZ4k/t03ha9ZcqSfC9xKl+W2Y5FbuYigmsVbC 1Y10G5z+uuqz0FtepQ9Pwq2K5WhuWc0ZKo9sVwXWppcSYa6qd4of4XcJX+hiLtcl xDIj9euPW/Uip0lcYhkYRCDPrzmDHTGmiNkNbcfUx6py10okngWdYDvPwsho2DOu RxE= -----END CERTIFICATE-----Generated at Fri Apr 19 00:30:57 2024 by rpki-client on console-fra.rpki-client.org