$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/687cf23c-4040-47c9-ac8d-20378f6ca882.roa File: 687cf23c-4040-47c9-ac8d-20378f6ca882.roa (raw, json) Hash identifier: dhzQDjneiwZQL6Zye0QmYf8EdGXK+SpcPbJkOGy6pW0= Subject key identifier: E2:34:B2:8F:B3:0F:B1:E4:0C:3B:BB:98:06:AB:A2:1F:4B:D0:6A:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 161CDF0AB5C392CA02526A674A9BD494EBC25B2E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/687cf23c-4040-47c9-ac8d-20378f6ca882.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1c:df:0a:b5:c3:92:ca:02:52:6a:67:4a:9b:d4:94:eb:c2:5b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=3aa4835feb3aa5f7b5897c142ac2dcd9cda49c4697645a094a89be70ea29892d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:ca:e0:5f:14:61:33:96:d7:85:bf:e3:7e: 9e:e0:05:12:6f:84:5b:c5:a7:35:c8:fa:d0:82:a6: 45:a6:c1:95:1f:d7:cf:05:24:b8:7a:87:df:82:bb: 16:51:6c:d2:8f:e1:49:52:fe:a9:d6:00:36:2f:69: 3b:8b:e5:8d:b4:b5:9a:18:1e:43:ae:6e:4a:33:00: 62:ac:15:56:ca:bd:bd:68:e1:a8:41:27:33:96:95: a5:30:e1:46:31:f4:0b:8e:7c:ad:6a:0c:87:7e:c3: db:45:bc:37:71:d4:6e:50:ec:66:c0:9c:f3:62:b6: 8b:36:8c:54:00:0a:38:44:79:7b:ec:88:b7:1c:04: 72:bf:ca:7f:c9:81:0f:3e:86:46:90:ae:19:14:87: eb:a5:6b:da:b7:32:67:16:b0:e5:f8:d6:18:66:32: 04:6f:7b:b2:cd:b1:0e:3e:48:36:d1:a6:67:ae:07: b9:2a:1f:7b:d3:49:ab:87:c7:6b:69:ee:d3:3f:be: e1:7e:19:af:dc:2e:10:9a:dc:0d:e7:23:f4:29:ee: 27:73:4c:28:b0:86:7d:c5:89:2b:05:0f:3a:e7:a6: 12:f3:d0:2d:dd:b0:f0:38:01:46:8d:c1:b6:fd:d0: 81:ed:e6:d4:14:52:62:64:a3:10:0b:3a:7c:74:f2: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:34:B2:8F:B3:0F:B1:E4:0C:3B:BB:98:06:AB:A2:1F:4B:D0:6A:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/687cf23c-4040-47c9-ac8d-20378f6ca882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c000::/40 Signature Algorithm: sha256WithRSAEncryption 57:33:bb:01:57:36:c0:f7:3a:d6:2e:af:76:8a:16:8c:4c:12: d0:aa:0a:a4:44:30:b4:5f:9b:ad:eb:a0:0c:ab:9d:09:fb:37: fb:41:b1:97:68:6b:64:29:25:3c:7f:4c:64:ab:2c:f9:4a:76: 21:f4:da:25:d6:cd:79:fe:4a:91:24:f0:10:f3:40:9d:b6:8c: ef:a2:aa:01:43:e3:e2:da:58:c4:1c:90:a1:58:13:0b:b2:b0: f3:db:35:bc:77:f0:ee:e8:fc:4a:4d:8a:0e:65:3d:d1:da:02: 54:d3:e8:29:22:3a:f0:32:f2:7a:29:19:de:49:7b:ed:33:88: ed:58:99:77:63:c8:25:f7:0a:6d:9a:b1:aa:6f:36:02:52:e8: e1:1f:ed:c6:13:f9:79:4b:30:bc:90:54:ef:f6:0f:d4:0e:af: 73:76:05:f0:a2:3d:ea:25:4d:ac:cd:e7:94:cd:13:de:72:37: c7:90:86:a9:02:97:e8:96:f9:ed:ba:92:24:07:f8:17:d9:bc: 01:f8:11:42:0a:56:d5:e7:4a:ed:ad:b1:ff:6b:a7:f2:dc:f0: 34:ab:59:12:72:f4:0e:13:4d:32:a1:bf:52:6e:cb:0b:43:c6: d0:ff:23:f9:b4:64:48:08:7d:c6:99:57:f5:f7:87:f0:75:17: 64:d0:84:b1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFhzfCrXDksoCUmpnSpvUlOvCWy4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAM2FhNDgzNWZlYjNhYTVmN2I1ODk3 YzE0MmFjMmRjZDljZGE0OWM0Njk3NjQ1YTA5NGE4OWJlNzBlYTI5ODkyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lLK4F8UYTOW14W/436e4AUSb4Rb xac1yPrQgqZFpsGVH9fPBSS4eoffgrsWUWzSj+FJUv6p1gA2L2k7i+WNtLWaGB5D rm5KMwBirBVWyr29aOGoQSczlpWlMOFGMfQLjnytagyHfsPbRbw3cdRuUOxmwJzz YraLNoxUAAo4RHl77Ii3HARyv8p/yYEPPoZGkK4ZFIfrpWvatzJnFrDl+NYYZjIE b3uyzbEOPkg20aZnrge5Kh9700mrh8drae7TP77hfhmv3C4QmtwN5yP0Ke4nc0wo sIZ9xYkrBQ8656YS89At3bDwOAFGjcG2/dCB7ebUFFJiZKMQCzp8dPId+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOI0so+zD7HkDDu7mAaroh9L0Gr0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4N2NmMjNjLTQwNDAtNDdjOS1hYzhkLTIwMzc4ZjZjYTg4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8sAwDQYJKoZIhvcNAQELBQADggEBAFczuwFXNsD3OtYur3aK FoxMEtCqCqREMLRfm63roAyrnQn7N/tBsZdoa2QpJTx/TGSrLPlKdiH02iXWzXn+ SpEk8BDzQJ22jO+iqgFD4+LaWMQckKFYEwuysPPbNbx38O7o/EpNig5lPdHaAlTT 6CkiOvAy8nopGd5Je+0ziO1YmXdjyCX3Cm2asapvNgJS6OEf7cYT+XlLMLyQVO/2 D9QOr3N2BfCiPeolTazN55TNE95yN8eQhqkCl+iW+e26kiQH+BfZvAH4EUIKVtXn Su2tsf9rp/Lc8DSrWRJy9A4TTTKhv1JuywtDxtD/I/m0ZEgIfcaZV/X3h/B1F2TQ hLE= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:39 2024 by rpki-client on console-fra.rpki-client.org