$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e32ff04-66a3-4af7-b9f2-04742320345e.roa File: 6e32ff04-66a3-4af7-b9f2-04742320345e.roa (raw, json) Hash identifier: b1FfjzWc0GVFEuK7zNyj42En7qSR524b2waw2bucWBY= Subject key identifier: 79:6F:D9:E1:25:C6:62:1D:D5:BA:B0:48:1D:79:FA:9C:6F:78:D3:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 102B27F161E032876AC199AC9B80327A5A1921E0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e32ff04-66a3-4af7-b9f2-04742320345e.roa Signing time: Tue 09 Jul 2024 00:00:00 +0000 ROA not before: Tue 09 Jul 2024 00:00:00 +0000 ROA not after: Tue 13 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:2b:27:f1:61:e0:32:87:6a:c1:99:ac:9b:80:32:7a:5a:19:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 9 00:00:00 2024 GMT Not After : Aug 13 23:59:59 2024 GMT Subject: serialNumber=c32e7f73d932ca45030a59b7023da4141a2c796626fc50dccea8778d0b842d5d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:7d:fe:68:fc:d5:2c:5b:66:c6:52:d4:6a: 14:88:50:53:d7:23:20:8c:1f:4b:01:6e:ff:ba:46: 6c:88:fa:07:31:43:10:42:08:38:e1:44:8d:75:10: ce:01:44:02:8e:75:bb:d2:19:36:f0:1d:a3:2f:93: ed:8d:55:a0:a4:0f:3e:82:cf:91:2b:8f:ae:49:6a: e2:be:51:79:55:cb:c3:4a:dd:e8:6a:9b:99:3f:27: e1:10:3c:7d:e8:ef:63:d6:2b:a6:9b:f2:54:bb:25: b0:db:0f:40:52:9a:f5:e0:cb:23:0a:7e:53:62:43: 4d:43:9b:a0:b8:9a:28:64:5b:7b:44:80:ac:9c:7c: c6:38:bc:0e:04:cc:f5:b4:7f:ff:d3:5d:70:78:16: de:c6:bf:8e:0e:e6:66:6e:ac:3f:50:e9:2d:13:22: fe:79:5d:21:a2:8d:6f:81:87:8f:bf:76:13:42:f0: 59:eb:db:c5:e9:30:27:9e:62:8b:74:8c:6c:f9:26: d0:8a:26:7d:c1:c8:e5:cf:87:1c:c3:60:76:ad:5e: 56:a5:40:16:eb:9d:11:79:f0:58:7f:e9:b6:9a:a6: be:64:68:b5:8f:8c:db:d0:8b:bf:5d:b6:dc:62:ad: a8:1b:6c:1d:ec:ac:01:55:4c:a9:d5:7a:41:56:b5: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6F:D9:E1:25:C6:62:1D:D5:BA:B0:48:1D:79:FA:9C:6F:78:D3:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e32ff04-66a3-4af7-b9f2-04742320345e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:c800::/40 Signature Algorithm: sha256WithRSAEncryption 2f:11:ff:8d:5f:85:d0:4a:48:50:db:c0:47:99:7c:4c:4f:84: 30:44:e9:23:9f:d7:1f:82:60:1e:05:63:36:2f:ab:1f:0a:a8: 2c:ad:72:c2:e4:c6:09:05:9f:9e:da:78:1e:f5:55:32:76:04: ba:ed:0b:3f:fb:33:c9:c2:71:0d:1e:5f:a9:0c:65:c2:34:1d: 8e:cc:33:8c:af:52:66:fc:54:31:bb:ef:3f:00:f9:12:b3:7d: 5e:ae:d2:fc:12:97:dd:48:05:f2:3f:4f:a8:8a:49:2d:15:18: fd:f6:3a:0e:e2:2e:87:85:69:ce:ad:ab:02:7b:3c:ca:2a:e0: 75:0b:b5:43:cd:c5:5b:fc:5b:d3:c6:3c:2f:13:f9:cc:81:b6: 16:ab:5f:f3:fe:56:49:12:4a:e4:52:82:26:7a:25:7d:5b:61: db:56:30:df:26:39:32:d6:40:b7:49:dd:4b:b2:2a:ca:46:c6: 60:00:cb:7c:ea:2e:20:50:76:09:bf:54:0a:d1:a0:79:37:44: 6f:5f:08:73:48:3b:82:af:55:08:b0:8b:b7:bc:39:d0:fe:91: b8:11:10:7c:eb:6f:1c:54:62:f4:54:f9:ce:9a:16:84:a2:50: a1:f7:b3:69:0a:ea:4b:0f:8b:af:ee:06:f6:c2:cf:52:d2:9b: f1:7c:57:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUECsn8WHgModqwZmsm4AyeloZIeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcwOTAwMDAwMFoX DTI0MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAYzMyZTdmNzNkOTMyY2E0NTAzMGE1 OWI3MDIzZGE0MTQxYTJjNzk2NjI2ZmM1MGRjY2VhODc3OGQwYjg0MmQ1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohZ9/mj81SxbZsZS1GoUiFBT1yMg jB9LAW7/ukZsiPoHMUMQQgg44USNdRDOAUQCjnW70hk28B2jL5PtjVWgpA8+gs+R K4+uSWrivlF5VcvDSt3oapuZPyfhEDx96O9j1iumm/JUuyWw2w9AUpr14MsjCn5T YkNNQ5uguJooZFt7RICsnHzGOLwOBMz1tH//011weBbexr+ODuZmbqw/UOktEyL+ eV0hoo1vgYePv3YTQvBZ69vF6TAnnmKLdIxs+SbQiiZ9wcjlz4ccw2B2rV5WpUAW 650RefBYf+m2mqa+ZGi1j4zb0Iu/XbbcYq2oG2wd7KwBVUyp1XpBVrV/mwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHlv2eElxmId1bqwSB15+pxveNOAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZlMzJmZjA0LTY2YTMtNGFmNy1iOWYyLTA0NzQyMzIwMzQ1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9sgwDQYJKoZIhvcNAQELBQADggEBAC8R/41fhdBKSFDbwEeZ fExPhDBE6SOf1x+CYB4FYzYvqx8KqCytcsLkxgkFn57aeB71VTJ2BLrtCz/7M8nC cQ0eX6kMZcI0HY7MM4yvUmb8VDG77z8A+RKzfV6u0vwSl91IBfI/T6iKSS0VGP32 Og7iLoeFac6tqwJ7PMoq4HULtUPNxVv8W9PGPC8T+cyBtharX/P+VkkSSuRSgiZ6 JX1bYdtWMN8mOTLWQLdJ3UuyKspGxmAAy3zqLiBQdgm/VArRoHk3RG9fCHNIO4Kv VQiwi7e8OdD+kbgREHzrbxxUYvRU+c6aFoSiUKH3s2kK6ksPi6/uBvbCz1LSm/F8 VxY= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:15 2024 by rpki-client on console-fra.rpki-client.org