$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6fc682a9-47d4-4d99-aa1c-6d6d42a5717e.roa File: 6fc682a9-47d4-4d99-aa1c-6d6d42a5717e.roa (raw, json) Hash identifier: gt4sAJI/zS6htZ6vJh47Ho4k5OH33QOaeSEeTvBJgRU= Subject key identifier: EB:BE:00:34:CE:78:C8:5F:28:D6:51:6E:A8:13:95:B3:DC:39:23:12 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F6F9EE28B4934443914F2336A2D9145B77F2C81 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6fc682a9-47d4-4d99-aa1c-6d6d42a5717e.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6f:9e:e2:8b:49:34:44:39:14:f2:33:6a:2d:91:45:b7:7f:2c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=77045c4debca49a6b4e5bdad25d2e9ce4d8047fb0593241a18cd5b86dbd54353, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:d9:82:5f:13:ee:d5:d6:ef:66:59:e1:30: 00:f1:c6:ed:8c:2f:6c:f2:0f:8a:e5:fe:3a:e3:33: d6:29:73:0d:63:09:d5:24:3b:99:11:0d:bf:89:e7: 91:0b:f8:c2:33:b9:f7:5b:36:29:1b:7c:6c:d1:eb: 72:9d:44:ef:f6:2c:2e:b7:40:87:e4:03:52:ba:59: d2:14:76:3a:94:a4:5b:ab:9e:6f:0a:40:ed:75:14: 7b:d6:45:3d:56:38:1c:6c:52:dc:b0:a2:f9:79:77: 40:d9:2c:7a:e5:eb:fb:eb:a2:35:57:d4:fa:33:a6: 66:3e:14:9d:fe:70:50:e4:33:11:2d:5c:11:05:89: 4e:be:26:04:ea:4f:f0:84:dc:ff:d2:17:48:46:81: f8:29:36:59:12:26:09:a1:9a:a6:23:97:c4:df:d3: 4b:ff:e1:7d:ad:69:b1:08:f1:08:07:57:1f:ce:ca: bb:14:37:d8:d4:4b:f2:c8:b4:5c:cf:a8:c3:12:85: 2f:e2:71:84:1d:2b:85:95:e7:d9:f9:0f:f2:30:a9: 2d:c8:5b:ca:8e:35:04:d8:7c:52:c9:e7:93:89:12: 79:71:93:54:fb:9b:df:11:51:e2:3b:0b:ed:3e:97: 0c:d0:2b:89:8f:d2:75:56:65:8e:bd:d6:cd:2f:05: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BE:00:34:CE:78:C8:5F:28:D6:51:6E:A8:13:95:B3:DC:39:23:12 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6fc682a9-47d4-4d99-aa1c-6d6d42a5717e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:8000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:df:8e:0c:11:b8:d9:84:8c:66:14:75:db:58:d0:30:aa:11: 46:72:9f:bb:a2:1d:94:b3:ab:94:f2:90:17:8f:a0:7a:1c:97: 0c:cb:61:42:95:0e:97:bf:f7:0b:58:c8:7b:7d:4c:b7:88:26: b3:d9:60:02:ce:31:e0:77:6f:90:ab:32:e2:47:1c:91:d7:44: 0c:6d:76:33:f3:e9:14:66:2e:92:31:9f:e8:d4:41:d8:d0:92: 98:09:38:36:c8:d6:83:a1:8d:96:65:79:25:c9:ed:cb:d9:f1: a1:67:2c:1b:e9:73:10:97:8b:41:86:95:55:57:f5:88:e3:83: 98:ec:3c:66:86:0f:01:ad:14:2b:56:0d:69:d1:85:51:f4:7c: 35:26:bf:42:97:f8:b6:b4:e2:3a:81:ac:07:84:e1:e1:7d:87: b2:48:e8:1c:e2:b3:b3:fa:d6:86:e9:ce:ac:eb:d4:a1:95:dd: a3:92:1b:80:ae:ca:0e:5f:73:5e:6c:b2:45:73:90:e1:a5:34: 0d:b8:15:5a:a1:97:96:de:70:bc:a2:44:c6:e2:49:21:29:2c: 36:b2:4d:9d:48:27:84:35:92:55:a6:5a:f2:02:76:e5:e7:29: ba:a0:58:a0:df:66:d9:5a:1b:0e:d7:a7:66:40:4f:d0:7f:42: e7:30:63:7a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf2+e4otJNEQ5FPIzai2RRbd/LIEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxMDAwMDAwMFoX DTI0MDUxNTIzNTk1OVowejFJMEcGA1UEBRNANzcwNDVjNGRlYmNhNDlhNmI0ZTVi ZGFkMjVkMmU5Y2U0ZDgwNDdmYjA1OTMyNDFhMThjZDViODZkYmQ1NDM1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym7Zgl8T7tXW72ZZ4TAA8cbtjC9s 8g+K5f464zPWKXMNYwnVJDuZEQ2/ieeRC/jCM7n3WzYpG3xs0etynUTv9iwut0CH 5ANSulnSFHY6lKRbq55vCkDtdRR71kU9VjgcbFLcsKL5eXdA2Sx65ev766I1V9T6 M6ZmPhSd/nBQ5DMRLVwRBYlOviYE6k/whNz/0hdIRoH4KTZZEiYJoZqmI5fE39NL /+F9rWmxCPEIB1cfzsq7FDfY1EvyyLRcz6jDEoUv4nGEHSuFlefZ+Q/yMKktyFvK jjUE2HxSyeeTiRJ5cZNU+5vfEVHiOwvtPpcM0CuJj9J1VmWOvdbNLwV3uwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOu+ADTOeMhfKNZRbqgTlbPcOSMSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZmYzY4MmE5LTQ3ZDQtNGQ5OS1hYTFjLTZkNmQ0MmE1NzE3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba94AwDQYJKoZIhvcNAQELBQADggEBADrfjgwRuNmEjGYUddtY 0DCqEUZyn7uiHZSzq5TykBePoHoclwzLYUKVDpe/9wtYyHt9TLeIJrPZYALOMeB3 b5CrMuJHHJHXRAxtdjPz6RRmLpIxn+jUQdjQkpgJODbI1oOhjZZleSXJ7cvZ8aFn LBvpcxCXi0GGlVVX9Yjjg5jsPGaGDwGtFCtWDWnRhVH0fDUmv0KX+La04jqBrAeE 4eF9h7JI6Bzis7P61obpzqzr1KGV3aOSG4Cuyg5fc15sskVzkOGlNA24FVqhl5be cLyiRMbiSSEpLDayTZ1IJ4Q1klWmWvICduXnKbqgWKDfZtlaGw7Xp2ZAT9B/Qucw Y3o= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:39 2024 by rpki-client on console-fra.rpki-client.org