$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66f84698-c5e4-4bb2-a80c-590b33c0f745.roa File: 66f84698-c5e4-4bb2-a80c-590b33c0f745.roa (raw, json) Hash identifier: sFjfT8vkbg4RUU5Fw9sWCGhKt5O0QZgRBCVT52dq/74= Subject key identifier: E7:22:73:19:7F:7C:53:9F:A4:0C:CD:D8:12:36:AF:D1:19:E5:EA:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 667E12D8C56712BDC4A60838362E210AF63142A3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66f84698-c5e4-4bb2-a80c-590b33c0f745.roa Signing time: Wed 17 Jul 2024 00:00:00 +0000 ROA not before: Wed 17 Jul 2024 00:00:00 +0000 ROA not after: Wed 21 Aug 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2406:da00::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7e:12:d8:c5:67:12:bd:c4:a6:08:38:36:2e:21:0a:f6:31:42:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 17 00:00:00 2024 GMT Not After : Aug 21 23:59:59 2024 GMT Subject: serialNumber=7105950e2a385cc8ed42d6fedd4d48240e3efeb845a258b1357422f82a82d848, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bb:6c:e7:20:6c:ee:ed:01:00:18:e4:1a:ce: 45:c7:29:61:66:57:48:8a:fc:f6:85:2d:b2:72:20: d1:3b:a7:8c:9e:2a:ae:c3:67:fd:31:4a:33:ef:21: 7f:9d:ca:09:f9:a2:00:14:c9:d1:f9:29:72:5d:89: f7:f6:ab:44:e5:07:72:aa:2f:23:a8:df:2a:52:10: 29:61:25:d1:c6:72:ea:b0:f8:b2:80:82:3e:d3:bc: 58:5f:a9:76:69:d7:30:90:31:00:1c:e9:f2:c8:c9: bc:a5:bc:6e:b5:3b:15:6b:64:d3:5f:18:48:8a:7c: 09:35:71:f2:3c:f9:90:c8:02:fe:ae:e8:e3:f6:b4: 0d:b6:01:6f:62:45:6e:16:fb:a9:c1:e4:e9:d7:25: 48:91:23:33:1c:d8:45:a1:ea:36:e2:14:8a:35:16: e5:c3:49:13:13:5f:f8:a7:4b:49:67:a6:0b:37:43: 88:fe:ec:6c:5d:c4:cc:8e:db:51:68:0b:c4:a8:7b: 6d:ea:4f:88:ef:be:b9:ac:ab:c7:6e:6c:ca:45:35: ef:98:1b:3b:2e:eb:49:7b:d2:73:a6:8a:fb:cc:a7: 63:be:15:3b:23:20:ab:e9:84:e1:cf:8f:04:58:bb: 70:9a:03:a6:b8:7e:58:d9:2b:b1:53:62:de:da:ba: e9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:22:73:19:7F:7C:53:9F:A4:0C:CD:D8:12:36:AF:D1:19:E5:EA:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66f84698-c5e4-4bb2-a80c-590b33c0f745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00::/24 Signature Algorithm: sha256WithRSAEncryption 93:65:57:64:b1:f0:18:f7:60:2a:43:df:c4:00:64:0d:eb:55: 2c:d4:c2:7a:2c:8b:78:a8:08:f1:8e:a8:ee:48:15:43:a8:6b: 14:14:80:c9:f5:76:40:23:b3:76:f1:16:01:92:26:b0:3a:26: cd:16:3e:bb:ae:97:ce:cb:5d:f3:ff:2e:ff:16:60:14:53:45: a6:24:66:42:e9:f9:f7:fb:e1:3f:bd:6e:87:7d:60:dd:80:7a: 5a:e8:a3:30:58:f2:9c:e7:14:9b:11:ab:a6:e6:7f:57:47:be: bd:41:8c:b5:fe:64:f5:a8:d9:02:eb:6a:32:f9:10:ce:39:db: 5c:a3:6b:4f:7e:4d:f2:24:9d:5b:46:30:80:5b:a8:a6:26:9f: 0b:ae:f8:f4:c8:42:91:91:2f:bc:9c:d3:2e:66:37:3b:5d:31: 0e:82:8a:22:28:78:73:ff:fa:b1:db:89:c8:26:b6:c0:d3:01: d3:2f:73:ca:e3:7e:ec:f0:e6:10:33:e4:61:0c:5f:e9:24:90: 3e:37:d9:f2:d8:35:5c:27:e7:d0:ac:0c:e1:14:97:b4:24:9e: 0a:f2:9d:d1:0a:54:eb:22:97:b4:19:8f:b7:b2:f4:8a:8e:e8: 94:70:34:ef:d0:59:30:fe:cb:7c:cf:29:3d:51:dd:97:ba:fc: ef:07:e6:15 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUZn4S2MVnEr3Epgg4Ni4hCvYxQqMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNzAwMDAwMFoX DTI0MDgyMTIzNTk1OVowejFJMEcGA1UEBRNANzEwNTk1MGUyYTM4NWNjOGVkNDJk NmZlZGQ0ZDQ4MjQwZTNlZmViODQ1YTI1OGIxMzU3NDIyZjgyYTgyZDg0ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07ts5yBs7u0BABjkGs5FxylhZldI ivz2hS2yciDRO6eMniquw2f9MUoz7yF/ncoJ+aIAFMnR+SlyXYn39qtE5Qdyqi8j qN8qUhApYSXRxnLqsPiygII+07xYX6l2adcwkDEAHOnyyMm8pbxutTsVa2TTXxhI inwJNXHyPPmQyAL+rujj9rQNtgFvYkVuFvupweTp1yVIkSMzHNhFoeo24hSKNRbl w0kTE1/4p0tJZ6YLN0OI/uxsXcTMjttRaAvEqHtt6k+I7765rKvHbmzKRTXvmBs7 LutJe9Jzpor7zKdjvhU7IyCr6YThz48EWLtwmgOmuH5Y2SuxU2Le2rrp1wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOcicxl/fFOfpAzN2BI2r9EZ5eqnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2Zjg0Njk4LWM1ZTQtNGJiMi1hODBjLTU5MGIzM2MwZjc0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAAjAGAwQAJAbaMA0GCSqGSIb3DQEBCwUAA4IBAQCTZVdksfAY92AqQ9/EAGQN 61Us1MJ6LIt4qAjxjqjuSBVDqGsUFIDJ9XZAI7N28RYBkiawOibNFj67rpfOy13z /y7/FmAUU0WmJGZC6fn3++E/vW6HfWDdgHpa6KMwWPKc5xSbEaum5n9XR769QYy1 /mT1qNkC62oy+RDOOdtco2tPfk3yJJ1bRjCAW6imJp8Lrvj0yEKRkS+8nNMuZjc7 XTEOgooiKHhz//qx24nIJrbA0wHTL3PK437s8OYQM+RhDF/pJJA+N9ny2DVcJ+fQ rAzhFJe0JJ4K8p3RClTrIpe0GY+3svSKjuiUcDTv0Fkw/st8zyk9Ud2XuvzvB+YV -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:40 2024 by rpki-client on console-ams.rpki-client.org