$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6006851a-d02a-425f-b2fd-568f4160a060.roa File: 6006851a-d02a-425f-b2fd-568f4160a060.roa (raw, json) Hash identifier: XQmFAB6Wd74Uq/ek0uQj6sQ8YI5RjWfIhr8438U+epM= Subject key identifier: E7:4A:DC:EA:2D:12:FA:0C:9C:F7:C4:A6:DE:E4:70:B3:B8:0A:59:82 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28E162D2CAAE4B77ABF1E3D6DFB7B27BF125F8F0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6006851a-d02a-425f-b2fd-568f4160a060.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e1:62:d2:ca:ae:4b:77:ab:f1:e3:d6:df:b7:b2:7b:f1:25:f8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=d3a02739f1b159955db9c874b67e707396fb738b8be33a5592bb5444da5b9068, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:d8:25:d5:cb:5a:9b:98:73:a2:91:43:c3: 94:b6:02:b8:e1:da:ef:26:a0:62:45:3d:87:62:0e: 25:3f:1a:f1:ce:11:c8:73:90:1b:df:39:03:dd:9f: 3e:7e:f6:57:3e:08:78:44:5c:fa:f8:b1:63:ea:49: bd:3d:13:ee:cc:ec:be:78:44:3a:d4:78:4e:d9:83: 82:2b:86:fc:6a:86:51:2d:be:9b:72:a4:6b:fb:62: 16:ad:7c:d4:b6:67:ab:d9:29:79:db:42:07:5e:13: 0b:05:f1:88:ef:9f:11:b0:c0:f9:48:7b:6e:6b:01: 06:8d:8d:f0:19:e9:51:1d:48:b7:65:57:1e:12:52: d0:a5:38:9f:bd:65:5c:aa:1b:b2:7b:75:71:ad:c0: 4a:74:7b:a7:15:08:8f:a1:b1:8a:74:6f:cb:15:ac: 12:9a:a4:a0:e0:5b:3b:a6:9c:f0:d0:b3:5f:a9:99: e2:79:24:2a:4a:c3:e5:ac:27:d1:2c:d8:52:c3:fc: 20:ac:60:f3:ce:6d:9e:3f:b7:85:5a:eb:cd:f4:d3: f4:7b:68:a5:ba:d6:cd:b8:a2:98:5e:1f:a5:f5:35: 66:db:cf:e6:f5:d2:dc:3f:7e:5e:0f:ac:40:79:81: 67:78:e4:1d:c2:15:1b:b8:50:ac:5c:1a:61:13:6a: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4A:DC:EA:2D:12:FA:0C:9C:F7:C4:A6:DE:E4:70:B3:B8:0A:59:82 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6006851a-d02a-425f-b2fd-568f4160a060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:6000::/40 Signature Algorithm: sha256WithRSAEncryption 15:13:1b:f8:0f:aa:e0:e8:98:9a:47:29:f3:1f:97:b8:7c:c0: 48:e2:63:d8:0e:01:e5:ea:73:5d:bb:99:9f:6c:77:cc:b8:50: 21:8e:ea:6f:62:9e:a3:8e:87:c7:4c:cf:40:c1:9d:e1:fc:10: 39:b9:53:49:8a:8b:76:1d:9b:e6:2a:82:83:fd:0d:ef:e0:9a: c5:fa:77:b9:f9:04:31:08:fd:12:72:2d:5d:a0:82:74:60:76: dd:c7:04:d1:99:5d:44:c2:ca:5b:02:08:75:de:1a:d7:c6:21: 30:d0:6e:1e:e6:5a:e3:c5:25:a3:2d:6f:77:e1:e8:8a:33:3e: 79:d7:d9:d8:fe:8f:d5:e7:0e:8f:f8:98:de:9a:95:3d:f9:d9: 73:a0:fe:6e:10:c1:75:6d:54:3d:c5:52:33:4c:91:97:24:e4: ed:93:8a:f5:3e:43:5e:8a:45:de:09:82:83:ee:a9:f6:b4:8e: f6:f2:7e:86:00:6b:76:78:7c:b5:4c:80:77:9c:f2:40:24:ab: 61:8e:03:0c:e9:15:20:46:51:b5:c9:06:13:04:22:f8:cb:3f: ee:2b:95:22:b5:cd:81:e0:6c:ab:5c:0f:26:95:dd:94:e7:a7: f4:e5:16:9a:62:d0:45:61:8f:b2:57:2c:ae:9e:21:f8:76:9e: 92:b1:f0:3b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKOFi0squS3er8ePW37eye/El+PAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAZDNhMDI3MzlmMWIxNTk5NTVkYjlj ODc0YjY3ZTcwNzM5NmZiNzM4YjhiZTMzYTU1OTJiYjU0NDRkYTViOTA2ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T3YJdXLWpuYc6KRQ8OUtgK44drv JqBiRT2HYg4lPxrxzhHIc5Ab3zkD3Z8+fvZXPgh4RFz6+LFj6km9PRPuzOy+eEQ6 1HhO2YOCK4b8aoZRLb6bcqRr+2IWrXzUtmer2Sl520IHXhMLBfGI758RsMD5SHtu awEGjY3wGelRHUi3ZVceElLQpTifvWVcqhuye3VxrcBKdHunFQiPobGKdG/LFawS mqSg4Fs7ppzw0LNfqZnieSQqSsPlrCfRLNhSw/wgrGDzzm2eP7eFWuvN9NP0e2il utbNuKKYXh+l9TVm28/m9dLcP35eD6xAeYFneOQdwhUbuFCsXBphE2oCFwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOdK3OotEvoMnPfEpt7kcLO4ClmCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYwMDY4NTFhLWQwMmEtNDI1Zi1iMmZkLTU2OGY0MTYwYTA2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacGAwDQYJKoZIhvcNAQELBQADggEBABUTG/gPquDomJpHKfMf l7h8wEjiY9gOAeXqc127mZ9sd8y4UCGO6m9inqOOh8dMz0DBneH8EDm5U0mKi3Yd m+YqgoP9De/gmsX6d7n5BDEI/RJyLV2ggnRgdt3HBNGZXUTCylsCCHXeGtfGITDQ bh7mWuPFJaMtb3fh6IozPnnX2dj+j9XnDo/4mN6alT352XOg/m4QwXVtVD3FUjNM kZck5O2TivU+Q16KRd4JgoPuqfa0jvbyfoYAa3Z4fLVMgHec8kAkq2GOAwzpFSBG UbXJBhMEIvjLP+4rlSK1zYHgbKtcDyaV3ZTnp/TlFppi0EVhj7JXLK6eIfh2npKx 8Ds= -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org