$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a22d15-e4e0-49c9-b90c-be6a64ee7b7c.roa File: 66a22d15-e4e0-49c9-b90c-be6a64ee7b7c.roa (raw, json) Hash identifier: tDQkdD1RBewZu0RHDREnf6GWzMnptAvN41w2ys1Lmw0= Subject key identifier: 2F:8D:16:E1:2C:D6:B7:B6:97:1E:B3:C4:9A:E1:13:D0:3E:50:23:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A76707ABD435F03DB949811A70918506716B917 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a22d15-e4e0-49c9-b90c-be6a64ee7b7c.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:76:70:7a:bd:43:5f:03:db:94:98:11:a7:09:18:50:67:16:b9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=5d867cc2095a6811be39aea72f422ad9cd80d7222612ab6dfc9425e11163d79d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e3:cf:68:e4:7a:46:7c:60:13:ff:5c:10:08: 86:a2:b3:d2:c5:8f:ca:34:de:a1:ac:4b:65:d6:7f: 1e:80:a4:27:83:aa:01:ee:16:04:a0:75:61:17:4f: c8:da:44:d5:8f:28:66:93:3f:b8:af:a6:f6:0c:5f: 20:13:7d:c7:4d:06:dc:ca:33:fa:61:ac:6a:f7:e4: 78:7b:e5:f8:70:57:ac:33:38:c1:2d:6d:4c:e3:e6: 8a:e6:59:ae:a7:11:15:a3:46:32:fe:f2:e3:32:f6: 94:27:f5:1a:df:5d:39:fd:ed:57:b8:38:84:18:2d: 0f:37:1e:ae:3e:f8:d1:28:07:96:cc:e7:18:57:20: eb:26:08:8a:35:32:d7:5f:1b:34:00:a1:e3:b6:9d: 24:5a:88:82:0d:99:c0:b4:8c:c4:a0:82:e2:66:69: d3:f8:0a:7c:a7:55:b8:af:9b:62:71:71:5e:70:dc: 16:d1:b5:e5:65:22:ae:ed:75:e2:69:d6:1f:91:e9: 4e:85:ec:f9:6d:f9:c3:db:26:02:f2:d7:b8:0b:ca: a4:79:70:ae:52:50:f8:d7:56:9b:a7:95:98:8d:66: 2e:fa:d9:e4:84:70:25:28:e3:b2:06:22:00:3b:af: d5:9c:2a:dc:34:65:d6:76:1b:92:82:96:00:38:ce: b9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8D:16:E1:2C:D6:B7:B6:97:1E:B3:C4:9A:E1:13:D0:3E:50:23:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a22d15-e4e0-49c9-b90c-be6a64ee7b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c000::/40 Signature Algorithm: sha256WithRSAEncryption b4:24:f6:31:90:dc:27:cf:f2:96:76:60:57:a1:39:cb:6a:93: c6:41:e6:07:6f:6e:f7:3b:6e:a3:f2:cb:89:b9:79:fa:07:2c: f2:26:d1:e9:5c:d8:af:e3:cd:dd:b7:ca:6c:8d:d8:f0:ee:08: a0:10:0a:94:51:3b:1b:af:79:be:25:3a:7f:c1:7b:ca:6a:2f: d3:9f:dc:00:02:fd:fd:90:d4:c6:6d:d3:21:f5:99:bb:08:66: e7:6d:ff:0e:c5:5e:9c:8d:36:35:41:29:77:e4:b2:8e:da:16: 44:13:8c:fe:16:c2:5b:0a:13:e8:04:0c:d4:7d:1c:75:b8:d6: 36:5b:0f:d4:41:40:b1:3f:4b:84:f5:0e:f3:1b:24:9e:3b:d4: 20:e1:d1:12:f9:b9:ff:3b:3c:d1:18:f5:13:3c:a0:42:0e:d5: 38:c2:c7:6d:fa:4d:d5:9d:13:4e:a0:b7:03:68:ad:60:1b:76: 0b:f8:21:0d:a7:40:8a:d0:e2:ce:2b:c8:e5:9c:27:76:7d:71: 02:0b:72:b2:eb:c7:59:82:24:b3:a3:5c:c3:c6:da:45:2b:11: bf:29:c9:44:10:44:41:c4:80:7a:63:24:bf:7f:1a:83:84:99: 9d:ed:9a:30:4d:c3:27:02:0d:1e:b2:fa:64:d6:0f:81:74:57: 9b:56:4b:ba -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCnZwer1DXwPblJgRpwkYUGcWuRcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNANWQ4NjdjYzIwOTVhNjgxMWJlMzlh ZWE3MmY0MjJhZDljZDgwZDcyMjI2MTJhYjZkZmM5NDI1ZTExMTYzZDc5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+PPaOR6RnxgE/9cEAiGorPSxY/K NN6hrEtl1n8egKQng6oB7hYEoHVhF0/I2kTVjyhmkz+4r6b2DF8gE33HTQbcyjP6 Yaxq9+R4e+X4cFesMzjBLW1M4+aK5lmupxEVo0Yy/vLjMvaUJ/Ua3105/e1XuDiE GC0PNx6uPvjRKAeWzOcYVyDrJgiKNTLXXxs0AKHjtp0kWoiCDZnAtIzEoILiZmnT +Ap8p1W4r5ticXFecNwW0bXlZSKu7XXiadYfkelOhez5bfnD2yYC8te4C8qkeXCu UlD411abp5WYjWYu+tnkhHAlKOOyBiIAO6/VnCrcNGXWdhuSgpYAOM65BwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC+NFuEs1re2lx6zxJrhE9A+UCMvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2YTIyZDE1LWU0ZTAtNDljOS1iOTBjLWJlNmE2NGVlN2I3Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/8AwDQYJKoZIhvcNAQELBQADggEBALQk9jGQ3CfP8pZ2YFeh Octqk8ZB5gdvbvc7bqPyy4m5efoHLPIm0elc2K/jzd23ymyN2PDuCKAQCpRROxuv eb4lOn/Be8pqL9Of3AAC/f2Q1MZt0yH1mbsIZudt/w7FXpyNNjVBKXfkso7aFkQT jP4WwlsKE+gEDNR9HHW41jZbD9RBQLE/S4T1DvMbJJ471CDh0RL5uf87PNEY9RM8 oEIO1TjCx236TdWdE06gtwNorWAbdgv4IQ2nQIrQ4s4ryOWcJ3Z9cQILcrLrx1mC JLOjXMPG2kUrEb8pyUQQREHEgHpjJL9/GoOEmZ3tmjBNwycCDR6y+mTWD4F0V5tW S7o= -----END CERTIFICATE-----Generated at Thu Apr 25 01:59:40 2024 by rpki-client on console-ams.rpki-client.org