$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d1995c7-5b79-4cae-ba0b-a042d91360e7.roa File: 6d1995c7-5b79-4cae-ba0b-a042d91360e7.roa (raw, json) Hash identifier: GrK3TR9qAIm+pPJzYcVEoL04y8A2O556f2NYwHdQZ7I= Subject key identifier: 46:93:8A:39:7E:51:78:36:CE:47:E7:41:57:A9:E4:46:9E:57:19:43 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A746CAA503BE99BD236F5518FA42597FCB1825B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d1995c7-5b79-4cae-ba0b-a042d91360e7.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:74:6c:aa:50:3b:e9:9b:d2:36:f5:51:8f:a4:25:97:fc:b1:82:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=70aa6c2f35576b3ef751c0ad2f5e33a1568ca20974254df976a0fad38ad3f4c0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:78:27:ae:23:28:4d:34:a3:fe:7f:cb:fc: e8:65:8b:9c:fd:68:fa:d1:53:6f:b2:99:6f:c4:ef: d7:23:66:7a:78:b9:8e:73:a1:81:8b:93:20:9f:c9: 6e:60:a0:60:15:cc:36:f2:d0:b5:f8:e0:eb:e9:40: 61:1e:c7:5a:00:77:0f:55:ba:d4:02:e3:4e:57:16: c8:0f:ca:43:27:b0:13:5b:41:10:9f:c6:b1:d2:24: f1:24:0b:24:10:30:95:54:ed:63:c7:b3:2c:3e:54: e6:22:98:04:41:7b:8e:05:a0:aa:8b:ed:a8:19:26: fc:e7:10:6e:14:36:06:6b:6a:27:06:29:ae:e8:db: b9:0b:4a:c3:d4:c6:43:4b:36:a5:22:4e:0b:b6:23: 5f:7b:c6:80:a5:00:8c:8b:6f:5d:f9:41:94:de:ee: a7:fe:86:73:65:b3:51:b5:27:d8:92:08:46:f9:6f: 87:b8:36:68:9d:e8:05:3d:8e:71:c1:23:32:82:73: 22:0c:75:38:99:2f:7f:28:a0:36:83:f9:b5:09:3a: 22:02:3a:31:71:b4:66:f8:fc:e8:ab:c9:4a:b1:9b: 88:df:1d:52:91:2f:37:fd:4f:e9:f2:75:7d:98:b0: 65:19:89:48:59:49:47:37:31:73:5c:61:a4:0f:f2: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:93:8A:39:7E:51:78:36:CE:47:E7:41:57:A9:E4:46:9E:57:19:43 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6d1995c7-5b79-4cae-ba0b-a042d91360e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:a000::/40 Signature Algorithm: sha256WithRSAEncryption ac:1b:e6:9a:4b:ff:93:1b:0e:d5:26:db:f0:48:01:e7:00:6b: 09:dc:37:31:69:53:21:1f:52:7b:67:7d:c3:e0:e6:be:f6:de: 1b:86:1f:ef:4c:53:d8:a5:77:db:06:26:fc:3e:47:20:e5:d0: 3b:ce:1e:7a:8f:72:91:33:71:75:6f:34:83:e1:c6:e4:8c:15: 37:91:f7:6d:59:08:83:69:f9:c5:50:37:86:91:a4:69:c6:04: 1c:f7:12:07:d3:c6:93:4f:00:a7:f2:46:dd:9d:fa:6e:5f:dc: 47:e3:ac:71:00:a1:51:9e:4b:86:ae:04:a7:c4:a7:f4:3c:46: 89:d6:74:a0:a7:81:f0:57:e3:87:eb:dd:19:f4:90:b2:5c:04: c6:58:8f:19:6c:de:97:8d:47:0a:08:c9:96:dc:24:f8:82:30: 53:75:17:b4:e9:92:e0:53:fc:67:ea:5f:9d:45:e2:1a:3c:68: 32:5f:37:41:82:5b:1a:d8:7f:57:44:eb:47:ca:95:02:3e:bb: bc:3e:61:e3:30:03:e7:7c:dd:c7:59:bc:f2:7f:c6:7c:02:b0: a4:9b:9f:87:1a:a1:44:f6:c8:36:8d:31:47:49:41:9a:7c:86: 62:1c:f8:85:50:03:7f:0d:c3:61:a1:72:e1:8b:41:28:34:77: ba:4f:cb:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWnRsqlA76ZvSNvVRj6Qll/yxglswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNANzBhYTZjMmYzNTU3NmIzZWY3NTFj MGFkMmY1ZTMzYTE1NjhjYTIwOTc0MjU0ZGY5NzZhMGZhZDM4YWQzZjRjMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIB4J64jKE00o/5/y/zoZYuc/Wj6 0VNvsplvxO/XI2Z6eLmOc6GBi5Mgn8luYKBgFcw28tC1+ODr6UBhHsdaAHcPVbrU AuNOVxbID8pDJ7ATW0EQn8ax0iTxJAskEDCVVO1jx7MsPlTmIpgEQXuOBaCqi+2o GSb85xBuFDYGa2onBimu6Nu5C0rD1MZDSzalIk4LtiNfe8aApQCMi29d+UGU3u6n /oZzZbNRtSfYkghG+W+HuDZonegFPY5xwSMygnMiDHU4mS9/KKA2g/m1CToiAjox cbRm+Pzoq8lKsZuI3x1SkS83/U/p8nV9mLBlGYlIWUlHNzFzXGGkD/LBvwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEaTijl+UXg2zkfnQVep5EaeVxlDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZkMTk5NWM3LTViNzktNGNhZS1iYTBiLWEwNDJkOTEzNjBlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYaAwDQYJKoZIhvcNAQELBQADggEBAKwb5ppL/5MbDtUm2/BI AecAawncNzFpUyEfUntnfcPg5r723huGH+9MU9ild9sGJvw+RyDl0DvOHnqPcpEz cXVvNIPhxuSMFTeR921ZCINp+cVQN4aRpGnGBBz3EgfTxpNPAKfyRt2d+m5f3Efj rHEAoVGeS4auBKfEp/Q8RonWdKCngfBX44fr3Rn0kLJcBMZYjxls3peNRwoIyZbc JPiCMFN1F7TpkuBT/GfqX51F4ho8aDJfN0GCWxrYf1dE60fKlQI+u7w+YeMwA+d8 3cdZvPJ/xnwCsKSbn4caoUT2yDaNMUdJQZp8hmIc+IVQA38Nw2GhcuGLQSg0d7pP yzA= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org