$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f473469-1950-4c37-871b-500821ae2950.roa File: 5f473469-1950-4c37-871b-500821ae2950.roa (raw, json) Hash identifier: SfChKEvH/TB93qU/+zuz9g+t4+Lrsr54W41yFFgFKLw= Subject key identifier: E2:6B:81:90:EB:83:45:83:5B:28:24:8E:E7:6B:80:95:2D:65:71:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B8FDF38ECF48C590357B2FFDCD1C21CC9368164 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f473469-1950-4c37-871b-500821ae2950.roa Signing time: Tue 09 Apr 2024 00:00:00 +0000 ROA not before: Tue 09 Apr 2024 00:00:00 +0000 ROA not after: Tue 14 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8f:df:38:ec:f4:8c:59:03:57:b2:ff:dc:d1:c2:1c:c9:36:81:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 9 00:00:00 2024 GMT Not After : May 14 23:59:59 2024 GMT Subject: serialNumber=95e134724478c8afb47697110eae4dbd02397589f9aac71e436eecf503ec7f22, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:fe:ce:25:9b:6e:97:ed:f6:26:3f:dc:c3: 22:b0:1a:61:1a:74:58:56:c2:3f:07:7f:ce:a0:5e: b3:e3:a5:ce:b9:5c:e4:ad:c0:8b:fc:80:04:52:58: 78:fa:25:ab:12:57:eb:b2:07:7b:03:9a:ca:79:84: a3:b8:54:29:5a:4b:f9:83:d5:e7:68:f3:f4:3b:4a: 99:76:35:e7:8b:5d:94:12:43:d3:de:ec:05:82:17: d0:54:6e:37:2b:c0:25:75:b6:6a:54:95:1a:99:f9: 85:3e:21:73:1f:d8:da:b2:7d:9f:31:ee:35:d0:86: 35:05:0f:f5:7a:14:75:95:bd:40:64:5a:ae:0b:f6: 96:d6:e2:ec:68:a6:61:0f:93:3f:26:8d:34:fe:da: f9:42:5c:1b:a4:ce:0d:67:6d:c2:29:22:8b:78:c3: e0:5f:9c:70:be:14:c7:eb:29:af:47:fb:4c:64:dd: b6:8b:86:95:67:4d:63:0e:cb:14:69:c5:f4:95:d1: a1:f6:d2:da:89:57:07:3e:40:0d:9b:50:71:3a:92: 2f:67:ac:4f:99:b7:71:78:e0:45:26:37:e0:31:aa: e3:d0:b1:ed:02:bd:a2:a5:8b:bb:ea:35:fa:cd:eb: d7:08:55:f0:b5:be:18:b4:d1:11:f2:ce:bd:cb:cd: 41:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:81:90:EB:83:45:83:5B:28:24:8E:E7:6B:80:95:2D:65:71:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f473469-1950-4c37-871b-500821ae2950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:2000::/40 Signature Algorithm: sha256WithRSAEncryption 98:c4:a0:8b:a8:db:40:03:6d:05:3d:8a:2e:85:2e:b5:dd:1b: fd:02:d7:b7:5c:72:dd:7c:f7:e7:df:21:67:1a:cd:a1:52:ca: ff:69:9a:d9:bc:2a:93:aa:9a:38:60:cd:21:fc:a5:9f:9c:35: 49:cc:8b:fc:af:1f:0a:f8:62:7c:3d:99:b6:52:ba:b5:40:13: aa:6f:da:df:0d:7e:98:20:eb:9b:47:e5:d3:ac:8f:a5:f5:cb: c3:69:5d:95:05:6f:11:39:bc:99:26:3c:a9:41:cb:03:87:90: 1a:04:23:96:e3:0f:16:dc:a8:60:1e:23:c0:7f:65:cf:5f:08: 91:60:f8:93:b2:d7:00:3f:f5:de:18:a6:3e:49:f7:a7:1d:53: fc:e6:70:9f:eb:f2:57:ba:49:1e:3d:42:51:d3:5b:5b:69:90: 2f:90:6a:fe:67:82:55:04:34:92:f5:98:b3:8e:3c:c7:33:e4: ac:77:fa:9e:5f:27:96:35:32:17:03:27:6b:2c:ee:4c:e3:a1: 4d:61:1a:17:9d:87:9c:07:2e:1a:03:c7:a0:85:d5:6a:09:ed: ee:46:5b:58:f4:1c:96:21:5c:93:4e:02:9a:ae:40:7d:62:bf: af:7e:8a:29:c5:bf:01:3d:7d:5b:52:e5:ec:dc:00:ce:4d:c8: 19:e0:42:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUS4/fOOz0jFkDV7L/3NHCHMk2gWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwOTAwMDAwMFoX DTI0MDUxNDIzNTk1OVowejFJMEcGA1UEBRNAOTVlMTM0NzI0NDc4YzhhZmI0NzY5 NzExMGVhZTRkYmQwMjM5NzU4OWY5YWFjNzFlNDM2ZWVjZjUwM2VjN2YyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqP+ziWbbpft9iY/3MMisBphGnRY VsI/B3/OoF6z46XOuVzkrcCL/IAEUlh4+iWrElfrsgd7A5rKeYSjuFQpWkv5g9Xn aPP0O0qZdjXni12UEkPT3uwFghfQVG43K8AldbZqVJUamfmFPiFzH9jasn2fMe41 0IY1BQ/1ehR1lb1AZFquC/aW1uLsaKZhD5M/Jo00/tr5QlwbpM4NZ23CKSKLeMPg X5xwvhTH6ymvR/tMZN22i4aVZ01jDssUacX0ldGh9tLaiVcHPkANm1BxOpIvZ6xP mbdxeOBFJjfgMarj0LHtAr2ipYu76jX6zevXCFXwtb4YtNER8s69y81BtwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOJrgZDrg0WDWygkjudrgJUtZXFWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNDczNDY5LTE5NTAtNGMzNy04NzFiLTUwMDgyMWFlMjk1MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9iAwDQYJKoZIhvcNAQELBQADggEBAJjEoIuo20ADbQU9ii6F LrXdG/0C17dcct189+ffIWcazaFSyv9pmtm8KpOqmjhgzSH8pZ+cNUnMi/yvHwr4 Ynw9mbZSurVAE6pv2t8Nfpgg65tH5dOsj6X1y8NpXZUFbxE5vJkmPKlBywOHkBoE I5bjDxbcqGAeI8B/Zc9fCJFg+JOy1wA/9d4Ypj5J96cdU/zmcJ/r8le6SR49QlHT W1tpkC+Qav5nglUENJL1mLOOPMcz5Kx3+p5fJ5Y1MhcDJ2ss7kzjoU1hGhedh5wH LhoDx6CF1WoJ7e5GW1j0HJYhXJNOApquQH1iv69+iinFvwE9fVtS5ezcAM5NyBng QmQ= -----END CERTIFICATE-----Generated at Thu May 2 23:18:29 2024 by rpki-client on console-ams.rpki-client.org