$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa File: 60e53e5a-ad89-4a5d-961c-e386188decb0.roa (raw, json) Hash identifier: 6+wk5funmwFI9TmqumjZOyesb0997lFK0nSnIYae1nk= Subject key identifier: 6B:2A:2B:EA:18:32:63:24:12:95:8F:50:C5:EA:24:40:F7:D9:C6:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 386B61DEC5056D04B06569E89BEB4B8FFFBBEF75 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf9:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6b:61:de:c5:05:6d:04:b0:65:69:e8:9b:eb:4b:8f:ff:bb:ef:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=fe21d75fd7202dc3203c00741408dca871cd502b88a6f986410736aca0717ffa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:4a:44:c0:17:c0:2f:36:37:a4:15:59:51: 31:d7:60:09:d3:09:21:df:16:20:5e:63:98:54:95: 06:7c:fa:46:c9:e4:93:0d:81:06:b4:6d:c6:40:23: 70:22:0b:f7:52:65:c4:22:6b:43:8f:09:e9:c6:0d: ad:3c:a9:42:87:0c:8d:2c:0d:bb:79:4c:6a:ea:e4: bf:3a:62:12:02:15:a2:03:c7:af:34:85:10:a0:1c: 27:81:d9:58:e2:70:d8:73:84:40:b3:56:83:60:4f: a2:24:e5:e5:ce:29:e8:8d:05:5f:6b:10:0a:2a:77: 30:fa:3d:ac:a3:21:75:46:10:a7:6d:47:07:53:06: 70:81:65:a1:12:ce:1c:18:6b:c5:de:10:4e:40:e5: de:66:98:0f:11:d2:b5:a3:89:77:71:ea:08:51:b9: 07:fc:95:3b:6a:73:e5:ea:a1:c6:d9:61:3c:b1:d7: 92:1c:d3:27:49:27:e7:da:41:33:d4:49:bb:12:f7: 49:22:29:b8:83:3c:51:d6:d1:5e:84:ad:f4:ef:47: 90:63:73:ea:72:0d:fd:b5:ba:22:a2:0a:71:b4:5b: e9:8f:22:91:b1:59:06:98:a0:82:c0:c5:b0:3c:31: af:dd:ef:4e:79:b0:55:ef:99:01:63:8e:5f:aa:b8: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2A:2B:EA:18:32:63:24:12:95:8F:50:C5:EA:24:40:F7:D9:C6:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf9:6000::/40 Signature Algorithm: sha256WithRSAEncryption 81:5f:b1:17:82:07:3a:e8:4d:68:da:83:c6:57:ac:e9:2e:e5: 39:5e:48:d3:1f:0e:47:03:c7:52:32:a6:f4:1c:58:2f:58:50: b4:50:15:9b:57:49:90:9b:0a:4c:79:70:c5:8e:13:83:ec:70: 65:16:98:bb:57:57:41:c6:6f:57:f6:40:83:7a:e5:82:62:87: cb:50:e8:37:c4:ca:d9:bc:42:40:d7:8b:4f:1b:3e:a6:15:c3: de:88:4d:d4:b1:2e:00:32:49:02:51:8b:12:4b:8b:bb:97:02: f4:d1:a7:4f:31:f2:20:cf:54:d6:23:d7:f9:69:54:ec:03:18: 9c:2d:39:7a:97:22:19:ad:12:ad:d1:80:b2:1b:5d:bf:e7:56: 39:32:67:20:07:31:1e:7d:e2:74:ee:cc:2a:5b:8a:6c:a1:41: 56:d4:91:8d:25:b5:af:cd:f9:42:1f:28:1b:7f:47:ba:9a:ed: c1:55:ed:20:d9:c8:92:c6:39:e2:cf:41:7c:d7:13:a7:33:24: 8a:9a:b9:ab:02:a3:c2:fb:39:fb:f2:0e:e0:30:e7:63:b4:7a: 25:fb:2e:d3:86:fa:61:c6:93:d5:9e:b8:7b:e3:51:dc:a3:39: 6f:b8:7b:68:0d:48:1b:d4:f5:9e:69:77:2e:90:78:b9:db:48: 22:87:ea:10 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOGth3sUFbQSwZWnom+tLj/+773UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAZmUyMWQ3NWZkNzIwMmRjMzIwM2Mw MDc0MTQwOGRjYTg3MWNkNTAyYjg4YTZmOTg2NDEwNzM2YWNhMDcxN2ZmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf5KRMAXwC82N6QVWVEx12AJ0wkh 3xYgXmOYVJUGfPpGyeSTDYEGtG3GQCNwIgv3UmXEImtDjwnpxg2tPKlChwyNLA27 eUxq6uS/OmISAhWiA8evNIUQoBwngdlY4nDYc4RAs1aDYE+iJOXlzinojQVfaxAK Kncw+j2soyF1RhCnbUcHUwZwgWWhEs4cGGvF3hBOQOXeZpgPEdK1o4l3ceoIUbkH /JU7anPl6qHG2WE8sdeSHNMnSSfn2kEz1Em7EvdJIim4gzxR1tFehK3070eQY3Pq cg39tboiogpxtFvpjyKRsVkGmKCCwMWwPDGv3e9OebBV75kBY45fqrgwXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGsqK+oYMmMkEpWPUMXqJED32cZbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYwZTUzZTVhLWFkODktNGE1ZC05NjFjLWUzODYxODhkZWNiMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+WAwDQYJKoZIhvcNAQELBQADggEBAIFfsReCBzroTWjag8ZX rOku5TleSNMfDkcDx1IypvQcWC9YULRQFZtXSZCbCkx5cMWOE4PscGUWmLtXV0HG b1f2QIN65YJih8tQ6DfEytm8QkDXi08bPqYVw96ITdSxLgAySQJRixJLi7uXAvTR p08x8iDPVNYj1/lpVOwDGJwtOXqXIhmtEq3RgLIbXb/nVjkyZyAHMR594nTuzCpb imyhQVbUkY0lta/N+UIfKBt/R7qa7cFV7SDZyJLGOeLPQXzXE6czJIqauasCo8L7 OfvyDuAw52O0eiX7LtOG+mHGk9WeuHvjUdyjOW+4e2gNSBvU9Z5pdy6QeLnbSCKH 6hA= -----END CERTIFICATE-----Generated at Wed Apr 24 05:35:18 2024 by rpki-client on console-ams.rpki-client.org