$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/635b223e-f641-496e-be0c-3d916b763149.roa File: 635b223e-f641-496e-be0c-3d916b763149.roa (raw, json) Hash identifier: JdMbeZHawUxc7T0HhOYhJdUR3L3ljly2Oi6f3GSseCY= Subject key identifier: 59:7A:D1:81:0B:4F:D7:37:60:C0:1C:F2:CF:C9:16:8E:03:1E:15:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6435BF6B876DB8972ABBEA529869CE6E156DC930 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/635b223e-f641-496e-be0c-3d916b763149.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da29::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:35:bf:6b:87:6d:b8:97:2a:bb:ea:52:98:69:ce:6e:15:6d:c9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=13e7d0bd94edd8331394455ccdeb883a848a272975e09decd1c9e26e1edb409b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:da:5f:34:a4:a2:6e:c5:ec:c8:ad:7f:84:3a: 2b:90:14:92:a7:b3:19:71:2b:38:c7:01:8c:39:c6: 9f:a5:bf:6e:43:a7:8f:3d:dc:4d:6c:26:a2:aa:16: cc:1c:19:39:e2:01:cf:9f:c7:f9:f2:cb:51:03:b4: 26:14:7d:4c:df:2f:f0:58:40:71:e8:77:d1:83:26: b9:22:85:76:11:4c:b9:b2:7a:cc:0f:dc:e8:fe:35: ee:48:2d:4a:3b:ea:1a:3d:a4:de:39:6b:00:2c:d9: 0a:28:91:8a:86:c6:ec:88:97:6f:ce:4b:46:04:4b: 7a:9a:85:ea:41:f6:93:fd:bd:7d:58:44:39:88:8f: 04:0d:22:81:c8:91:bc:51:ca:97:30:ff:2a:08:07: 9c:84:c5:3d:7b:ba:e6:cd:69:fa:71:9c:93:7b:5a: f7:ff:f6:0e:91:c4:79:a7:19:be:99:15:4d:e7:51: 0e:ec:b7:6b:9d:95:50:86:0e:2d:85:30:1d:7e:02: 1e:83:b2:15:1f:14:72:94:c7:dd:b1:50:16:77:4f: 95:bf:5e:4a:77:07:00:53:96:69:7a:b2:6b:c3:15: 95:93:d9:ba:6b:58:76:fd:72:49:1b:f7:f3:0c:04: b9:e4:a9:b8:13:67:f4:60:64:67:27:e5:ef:00:d3: fe:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7A:D1:81:0B:4F:D7:37:60:C0:1C:F2:CF:C9:16:8E:03:1E:15:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/635b223e-f641-496e-be0c-3d916b763149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da29::/36 Signature Algorithm: sha256WithRSAEncryption 04:e7:fb:90:18:42:f6:2c:84:22:6f:68:39:11:7e:82:35:32: 2c:99:f6:84:f9:12:62:f3:c5:9d:b8:86:d7:3e:0e:a1:79:f6: 3e:e5:88:14:f0:78:7f:80:88:69:dd:17:f0:83:5d:16:1d:d8: 33:bf:87:86:93:9d:32:47:e5:65:f6:fb:09:0c:03:01:26:df: 85:0c:46:82:cc:ca:d3:3f:8d:6f:69:da:9a:d0:46:ec:41:7f: 1b:5a:c0:a8:cd:e5:7f:b6:36:1f:02:c8:6a:58:06:da:d9:de: 5e:7a:38:65:66:32:36:10:25:e9:4b:b5:7a:32:d9:09:50:c4: 8f:4c:86:0f:6c:18:06:1b:b4:ec:70:bc:72:00:e4:92:96:4e: 27:a6:a9:4a:3d:f4:08:fb:14:40:4d:69:96:6c:d9:4d:85:ee: 59:2b:96:6c:07:20:06:5c:88:16:db:5a:fb:c2:38:f2:1b:85: 52:5b:19:f6:4f:72:67:e1:94:e3:62:a2:1d:d8:5e:10:78:8a: c2:06:3c:b3:24:76:36:b5:9d:a6:05:23:73:ad:8d:f7:17:18: 0c:bb:cd:92:69:d4:43:a7:6d:0b:55:6e:7b:ae:ee:ed:1b:ad: 87:04:95:b6:a6:9a:12:a1:6b:e9:99:f1:c2:d6:e8:7b:e8:53: 4a:0f:f1:f7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZDW/a4dtuJcqu+pSmGnObhVtyTAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExMjAwMDAwMFoX DTI0MTIxNzIzNTk1OVowejFJMEcGA1UEBRNAMTNlN2QwYmQ5NGVkZDgzMzEzOTQ0 NTVjY2RlYjg4M2E4NDhhMjcyOTc1ZTA5ZGVjZDFjOWUyNmUxZWRiNDA5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NpfNKSibsXsyK1/hDorkBSSp7MZ cSs4xwGMOcafpb9uQ6ePPdxNbCaiqhbMHBk54gHPn8f58stRA7QmFH1M3y/wWEBx 6HfRgya5IoV2EUy5snrMD9zo/jXuSC1KO+oaPaTeOWsALNkKKJGKhsbsiJdvzktG BEt6moXqQfaT/b19WEQ5iI8EDSKByJG8UcqXMP8qCAechMU9e7rmzWn6cZyTe1r3 //YOkcR5pxm+mRVN51EO7LdrnZVQhg4thTAdfgIeg7IVHxRylMfdsVAWd0+Vv15K dwcAU5ZperJrwxWVk9m6a1h2/XJJG/fzDAS55Km4E2f0YGRnJ+XvANP+xwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFl60YELT9c3YMAc8s/JFo4DHhUzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYzNWIyMjNlLWY2NDEtNDk2ZS1iZTBjLTNkOTE2Yjc2MzE0OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKQAwDQYJKoZIhvcNAQELBQADggEBAATn+5AYQvYshCJvaDkR foI1MiyZ9oT5EmLzxZ24htc+DqF59j7liBTweH+AiGndF/CDXRYd2DO/h4aTnTJH 5WX2+wkMAwEm34UMRoLMytM/jW9p2prQRuxBfxtawKjN5X+2Nh8CyGpYBtrZ3l56 OGVmMjYQJelLtXoy2QlQxI9Mhg9sGAYbtOxwvHIA5JKWTiemqUo99Aj7FEBNaZZs 2U2F7lkrlmwHIAZciBbbWvvCOPIbhVJbGfZPcmfhlONioh3YXhB4isIGPLMkdja1 naYFI3OtjfcXGAy7zZJp1EOnbQtVbnuu7u0brYcElbammhKha+mZ8cLW6HvoU0oP 8fc= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:13 2024 by rpki-client on console-ams.rpki-client.org