$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa File: 61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa (raw, json) Hash identifier: 0VjLspwmYk/YY0aWmwwgOgahzCqCcVGO4YZip/izKTs= Subject key identifier: EB:C9:13:F7:6B:E6:E0:02:A3:E3:E9:53:25:51:81:E5:01:75:DC:E3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48D641AB2A7A6454B6CFCCC50E88E7A408644034 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d6:41:ab:2a:7a:64:54:b6:cf:cc:c5:0e:88:e7:a4:08:64:40:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=b27e523a329dd469a1fc677a7fb1da1d6f8827a8bc9b438005ce3790f66c00a3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:f8:ad:41:08:e8:e5:75:a9:d1:4e:ef:02: 1f:a6:fd:7f:d9:39:b3:4a:d5:03:a4:42:14:08:08: 17:c7:87:32:eb:22:bc:27:a4:3b:be:31:1b:a1:98: d9:b6:89:4f:96:55:a2:6f:23:59:e6:1c:be:8c:85: 63:ae:23:3a:6f:38:b7:bb:7a:3a:d4:ec:8f:5c:5a: 21:a0:b8:58:94:c7:a5:0b:b4:43:66:f8:25:1a:f2: da:4d:39:7c:c2:f6:3f:73:48:06:50:aa:5e:0b:c4: 68:16:41:1f:8c:ac:07:07:a2:32:b1:36:c3:0c:a9: 04:c3:d7:2a:5c:05:c6:10:68:61:5d:46:83:2c:eb: 8c:86:8c:a7:c4:13:5d:91:0b:1e:61:84:b8:b7:f9: a3:19:a1:92:23:a5:57:b7:e9:ca:f2:12:be:a7:e2: e3:10:30:76:2c:af:94:33:bd:34:25:f7:95:38:a8: d2:7b:a0:b2:2a:76:dd:92:f0:35:b8:ec:25:d8:b6: 15:74:43:7d:b8:9a:11:8e:22:d8:b8:11:f4:0d:31: b4:ec:40:bc:70:20:93:f5:94:9c:78:23:df:a3:6d: 89:5f:16:34:ee:27:4c:c6:9c:dc:76:8e:4c:f1:69: fa:1a:a5:0e:0a:c9:0f:b9:cf:ac:20:f0:1a:b0:82: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C9:13:F7:6B:E6:E0:02:A3:E3:E9:53:25:51:81:E5:01:75:DC:E3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 63:6d:00:47:5d:cc:3b:10:63:16:cb:d6:08:94:2e:ee:db:24: f3:5f:4b:47:5d:de:39:50:cf:a2:0e:63:e2:76:60:55:99:64: bc:d8:f2:c9:85:92:4d:f9:f2:18:83:51:0d:d6:af:1d:4e:26: bb:1e:4b:ab:eb:a3:c2:74:e4:0e:53:e1:91:25:52:b4:f8:dd: 8a:22:92:e5:e1:07:ba:a7:0e:7e:70:4b:f9:c5:b1:ba:37:6c: 64:07:41:f1:6c:2d:98:39:32:41:76:13:b2:46:ee:3c:ec:1b: dd:de:4e:f6:ca:4f:7a:90:f0:8c:34:c4:3f:bc:e4:7b:ab:85: ea:9c:11:77:c6:cf:e6:3e:50:d7:60:5b:2b:d5:f0:77:e4:fc: 96:f2:b0:14:08:a3:c2:33:15:3f:45:75:6e:ae:66:65:bc:e3: b6:e0:d6:b9:3b:4c:ba:66:1d:87:b4:8d:f2:66:36:7b:fd:b1: 28:a8:c3:01:6e:fc:9e:04:6d:8d:04:a1:70:54:85:a0:47:51: 85:4a:64:ee:42:32:d9:7c:e1:6a:c7:cb:e8:57:0b:9b:a6:86: 0d:b8:5e:ce:ea:a4:2e:98:f8:e7:00:5a:97:cb:fe:d9:03:11: be:7d:ab:83:7e:05:04:7d:79:d6:fa:a0:dd:46:d5:e7:65:4f: 23:e8:d6:95 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSNZBqyp6ZFS2z8zFDojnpAhkQDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAYjI3ZTUyM2EzMjlkZDQ2OWExZmM2 NzdhN2ZiMWRhMWQ2Zjg4MjdhOGJjOWI0MzgwMDVjZTM3OTBmNjZjMDBhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aT4rUEI6OV1qdFO7wIfpv1/2Tmz StUDpEIUCAgXx4cy6yK8J6Q7vjEboZjZtolPllWibyNZ5hy+jIVjriM6bzi3u3o6 1OyPXFohoLhYlMelC7RDZvglGvLaTTl8wvY/c0gGUKpeC8RoFkEfjKwHB6IysTbD DKkEw9cqXAXGEGhhXUaDLOuMhoynxBNdkQseYYS4t/mjGaGSI6VXt+nK8hK+p+Lj EDB2LK+UM700JfeVOKjSe6CyKnbdkvA1uOwl2LYVdEN9uJoRjiLYuBH0DTG07EC8 cCCT9ZSceCPfo22JXxY07idMxpzcdo5M8Wn6GqUOCskPuc+sIPAasII23QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOvJE/dr5uACo+PpUyVRgeUBddzjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxYjlmZGMwLTE4MzYtNGI2My05NDliLTRhMGUyYjk1NTE2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoMAwDQYJKoZIhvcNAQELBQADggEBAGNtAEddzDsQYxbL1giU Lu7bJPNfS0dd3jlQz6IOY+J2YFWZZLzY8smFkk358hiDUQ3Wrx1OJrseS6vro8J0 5A5T4ZElUrT43YoikuXhB7qnDn5wS/nFsbo3bGQHQfFsLZg5MkF2E7JG7jzsG93e TvbKT3qQ8Iw0xD+85HurheqcEXfGz+Y+UNdgWyvV8Hfk/JbysBQIo8IzFT9FdW6u ZmW847bg1rk7TLpmHYe0jfJmNnv9sSiowwFu/J4EbY0EoXBUhaBHUYVKZO5CMtl8 4WrHy+hXC5umhg24Xs7qpC6Y+OcAWpfL/tkDEb59q4N+BQR9edb6oN1G1edlTyPo 1pU= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:25 2024 by rpki-client on console-ams.rpki-client.org