$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5caef593-3e1a-4239-836f-142b22751593.roa File: 5caef593-3e1a-4239-836f-142b22751593.roa (raw, json) Hash identifier: Q16ZZSNLXcsMpwJe6hXnQ77Hn6qShGlYgFlBdpO/VyQ= Subject key identifier: 79:D5:83:DA:E0:57:54:DF:F0:44:8F:94:07:A7:0A:4F:BA:5B:A3:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0644E77512D71A6275C32E7054D71634EB97EA3C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5caef593-3e1a-4239-836f-142b22751593.roa Signing time: Thu 02 May 2024 00:00:00 +0000 ROA not before: Thu 02 May 2024 00:00:00 +0000 ROA not after: Thu 06 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 00:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:44:e7:75:12:d7:1a:62:75:c3:2e:70:54:d7:16:34:eb:97:ea:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:00:00 2024 GMT Not After : Jun 6 23:59:59 2024 GMT Subject: serialNumber=34fc6d48cc3dc5cb4739bad3787286eaac9b3791ade162585c6fccbf703f4b64, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:40:e8:36:32:62:f5:46:cc:88:1c:24:a9: d0:4e:ad:32:5c:7a:3d:a7:db:60:99:d3:c4:47:be: 7f:94:cf:e1:7d:59:2c:f1:ef:9d:dd:f8:bd:46:46: 19:63:9a:56:3c:2b:36:d3:ef:ec:80:2c:20:bf:eb: 05:13:89:da:52:06:13:1f:da:37:80:5a:bb:7d:83: 2e:0e:4d:8b:7d:2a:70:ae:f2:c9:2a:3b:45:73:ac: 4f:55:7a:55:bd:b1:c3:5e:89:f9:b8:1a:93:33:87: 6c:5e:8a:2c:5f:e8:8c:c8:c1:14:68:7d:69:6e:42: 7f:0c:51:87:ec:dc:f9:6e:b9:f7:14:2e:c8:10:cf: 15:8b:54:e5:78:7b:95:73:98:21:55:6e:6b:27:65: 22:34:55:25:7d:33:de:d4:3e:1a:12:c1:7f:ec:ac: 24:4e:7e:aa:d2:cb:84:26:bf:7e:76:a3:56:8c:1c: 15:d8:23:83:9d:ec:fe:7b:d5:43:08:17:7c:1f:02: af:68:db:b4:54:28:9f:1c:55:47:d3:3e:e5:66:43: d4:9b:dc:d5:9d:73:a2:fb:4a:5b:ae:88:d9:70:43: 40:81:fc:7e:f8:05:0f:83:d0:04:9c:90:3d:89:5f: 0c:25:a2:75:c0:a9:e6:30:6c:d4:29:9b:84:87:3a: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D5:83:DA:E0:57:54:DF:F0:44:8F:94:07:A7:0A:4F:BA:5B:A3:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5caef593-3e1a-4239-836f-142b22751593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:1000::/40 Signature Algorithm: sha256WithRSAEncryption 74:e1:9e:5c:19:a5:2e:6e:19:43:80:77:3b:e1:54:2d:08:9d: ab:d1:2c:2c:20:05:10:99:bc:67:ed:b0:3e:14:cb:68:f9:c7: 45:e0:86:de:c9:b3:0e:8a:dd:c0:4c:f1:ab:2f:79:f0:9c:ec: 30:22:35:72:ec:88:af:cd:df:29:79:fd:9a:52:5f:3f:80:97: 38:e1:1b:23:c6:06:3e:cb:b3:c2:20:e0:e2:1f:b7:0a:3b:fa: cd:db:9e:81:ba:25:16:9d:91:fb:47:4a:fb:84:05:5e:ee:d2: 46:db:ed:d8:49:16:17:b7:ed:fc:23:f6:22:b3:ce:2c:f2:72: 1a:8d:8d:39:41:b7:fd:51:8e:22:b4:49:da:30:41:bf:b7:9c: 5a:64:0f:b2:65:a9:4e:12:4e:81:5a:43:36:f0:cb:77:79:be: 0a:42:43:65:2b:c1:ce:84:7e:5d:52:f5:c4:cd:ce:27:e1:f3: 79:bb:a9:92:f0:4b:de:7d:00:af:3d:4d:33:ca:18:b5:61:52: c0:2e:99:2f:63:31:5b:1c:1c:5d:7f:ba:94:9a:4f:c5:3a:c1: d8:77:68:36:80:64:5d:31:63:2d:e1:a6:a9:7a:8a:ac:ae:f2: 2e:f3:32:e0:b0:a4:7c:55:ce:14:dc:77:6a:ba:c8:5f:7b:07: a4:99:d6:10 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBkTndRLXGmJ1wy5wVNcWNOuX6jwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMjAwMDAwMFoX DTI0MDYwNjIzNTk1OVowejFJMEcGA1UEBRNAMzRmYzZkNDhjYzNkYzVjYjQ3Mzli YWQzNzg3Mjg2ZWFhYzliMzc5MWFkZTE2MjU4NWM2ZmNjYmY3MDNmNGI2NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZVA6DYyYvVGzIgcJKnQTq0yXHo9 p9tgmdPER75/lM/hfVks8e+d3fi9RkYZY5pWPCs20+/sgCwgv+sFE4naUgYTH9o3 gFq7fYMuDk2LfSpwrvLJKjtFc6xPVXpVvbHDXon5uBqTM4dsXoosX+iMyMEUaH1p bkJ/DFGH7Nz5brn3FC7IEM8Vi1TleHuVc5ghVW5rJ2UiNFUlfTPe1D4aEsF/7Kwk Tn6q0suEJr9+dqNWjBwV2CODnez+e9VDCBd8HwKvaNu0VCifHFVH0z7lZkPUm9zV nXOi+0pbrojZcENAgfx++AUPg9AEnJA9iV8MJaJ1wKnmMGzUKZuEhzrKJQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHnVg9rgV1Tf8ESPlAenCk+6W6P/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjYWVmNTkzLTNlMWEtNDIzOS04MzZmLTE0MmIyMjc1MTU5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauRAwDQYJKoZIhvcNAQELBQADggEBAHThnlwZpS5uGUOAdzvh VC0InavRLCwgBRCZvGftsD4Uy2j5x0Xght7Jsw6K3cBM8asvefCc7DAiNXLsiK/N 3yl5/ZpSXz+AlzjhGyPGBj7Ls8Ig4OIftwo7+s3bnoG6JRadkftHSvuEBV7u0kbb 7dhJFhe37fwj9iKzzizychqNjTlBt/1RjiK0SdowQb+3nFpkD7JlqU4SToFaQzbw y3d5vgpCQ2Urwc6Efl1S9cTNzifh83m7qZLwS959AK89TTPKGLVhUsAumS9jMVsc HF1/upSaT8U6wdh3aDaAZF0xYy3hpql6iqyu8i7zMuCwpHxVzhTcd2q6yF97B6SZ 1hA= -----END CERTIFICATE-----Generated at Sat May 18 05:19:51 2024 by rpki-client on console-fra.rpki-client.org