$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/704de810-db59-4d07-8173-227510fa6dcf.roa File: 704de810-db59-4d07-8173-227510fa6dcf.roa (raw, json) Hash identifier: k7m5/x/zANU754vakBjstx5yvbkbe1rHPR40gsAzLk0= Subject key identifier: 25:71:E5:72:FA:16:79:AB:22:D7:95:FD:55:E2:F6:71:53:3D:50:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D2BEE2F6493015977144468C0F15645E3E6CD49 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/704de810-db59-4d07-8173-227510fa6dcf.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2b:ee:2f:64:93:01:59:77:14:44:68:c0:f1:56:45:e3:e6:cd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=1f4ddd122c163f41b8a2a1e290566aab2231103c924fe3e5d98287f00b187486, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:39:49:24:0e:54:98:f7:a0:e5:7b:0a:95: 6e:86:1a:2f:f9:bf:03:a7:ff:e3:77:f0:c7:73:91: 7e:db:f2:a2:09:99:fa:8a:a1:56:77:61:07:c9:f8: ff:91:2f:95:77:37:45:1a:a6:9d:c4:77:23:07:4d: a6:5e:92:3d:29:99:88:a5:5e:3a:77:14:4b:5e:73: 6b:f4:44:b5:12:45:18:46:0c:b1:ff:c4:90:d6:0c: 04:a7:ea:03:c1:c3:f6:38:87:f2:17:4e:23:51:e4: 2e:6b:59:a3:87:d5:b7:c7:27:e3:26:ff:cb:13:04: d1:30:6c:13:4b:4c:bf:4f:5e:ac:ae:bf:f3:8d:64: 61:59:33:55:a1:48:98:f4:1e:30:9e:fa:ef:d1:8a: 02:ff:7c:74:a5:59:31:62:29:79:18:97:50:95:a2: 1b:f1:03:ad:7b:f2:b8:43:63:07:51:f6:c1:43:2a: 0a:81:bf:bf:63:42:d1:2a:bc:b7:55:ca:31:77:bd: 59:94:ed:10:d0:84:78:da:25:0a:fb:a4:86:7f:77: 2b:e8:a1:f3:49:b1:dc:34:ef:fb:10:0f:18:30:20: a9:80:60:ad:ef:5b:87:1b:a1:d1:65:5f:92:de:d1: 68:1f:da:e9:b9:e6:0c:3c:12:7d:4a:5b:a3:e4:13: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:71:E5:72:FA:16:79:AB:22:D7:95:FD:55:E2:F6:71:53:3D:50:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/704de810-db59-4d07-8173-227510fa6dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:8800::/40 Signature Algorithm: sha256WithRSAEncryption 3b:50:aa:29:f9:ca:fe:03:54:97:78:79:a7:14:b1:33:00:c0: 54:7a:32:5e:f9:e7:a6:dc:e6:ce:f7:ce:b7:62:25:84:7c:cd: 2d:6b:34:e9:52:86:ea:07:82:dd:8c:17:32:83:f5:20:3a:54: c9:b4:6a:78:25:a6:c7:71:09:0f:f2:35:d0:45:a7:a9:9c:7a: 1f:84:7b:91:33:b8:5a:47:ec:7d:fb:01:63:19:3e:01:47:f2: 79:a4:00:6a:f9:cd:2e:d8:cb:f3:cc:e2:74:da:be:eb:ff:cc: 53:70:19:73:55:62:d9:f2:98:e9:c1:07:81:cc:30:e2:60:d6: d0:f9:cb:ab:af:93:c2:23:f1:e4:ba:19:ea:73:3c:97:95:98: 8c:61:a0:ec:dc:4c:03:fe:42:6e:c4:7d:a5:7f:c5:e8:99:0d: 43:07:4c:4e:b8:74:a3:b4:6e:97:f8:c5:69:48:30:e4:d8:3f: 89:0d:4a:28:39:00:ba:98:af:52:8f:40:dd:64:87:1d:ed:00: bb:61:0e:0c:11:e6:8d:d2:89:4c:08:3c:1f:8c:f6:a3:b1:8c: 41:22:17:99:cb:14:0c:b9:da:eb:21:7e:bb:db:6a:b1:6e:f8: a2:49:b4:d6:88:bd:42:a8:14:57:d5:fd:ce:11:4e:64:b8:51: 98:e1:9c:d7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXSvuL2STAVl3FERowPFWRePmzUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxODAwMDAwMFoX DTI0MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMWY0ZGRkMTIyYzE2M2Y0MWI4YTJh MWUyOTA1NjZhYWIyMjMxMTAzYzkyNGZlM2U1ZDk4Mjg3ZjAwYjE4NzQ4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3w5SSQOVJj3oOV7CpVuhhov+b8D p//jd/DHc5F+2/KiCZn6iqFWd2EHyfj/kS+VdzdFGqadxHcjB02mXpI9KZmIpV46 dxRLXnNr9ES1EkUYRgyx/8SQ1gwEp+oDwcP2OIfyF04jUeQua1mjh9W3xyfjJv/L EwTRMGwTS0y/T16srr/zjWRhWTNVoUiY9B4wnvrv0YoC/3x0pVkxYil5GJdQlaIb 8QOte/K4Q2MHUfbBQyoKgb+/Y0LRKry3Vcoxd71ZlO0Q0IR42iUK+6SGf3cr6KHz SbHcNO/7EA8YMCCpgGCt71uHG6HRZV+S3tFoH9rpueYMPBJ9Sluj5BNaNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCVx5XL6FnmrIteV/VXi9nFTPVBBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcwNGRlODEwLWRiNTktNGQwNy04MTczLTIyNzUxMGZhNmRjZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ogwDQYJKoZIhvcNAQELBQADggEBADtQqin5yv4DVJd4eacU sTMAwFR6Ml7556bc5s73zrdiJYR8zS1rNOlShuoHgt2MFzKD9SA6VMm0anglpsdx CQ/yNdBFp6mceh+Ee5EzuFpH7H37AWMZPgFH8nmkAGr5zS7Yy/PM4nTavuv/zFNw GXNVYtnymOnBB4HMMOJg1tD5y6uvk8Ij8eS6GepzPJeVmIxhoOzcTAP+Qm7EfaV/ xeiZDUMHTE64dKO0bpf4xWlIMOTYP4kNSig5ALqYr1KPQN1khx3tALthDgwR5o3S iUwIPB+M9qOxjEEiF5nLFAy52ushfrvbarFu+KJJtNaIvUKoFFfV/c4RTmS4UZjh nNc= -----END CERTIFICATE-----Generated at Thu May 2 10:17:29 2024 by rpki-client on console-ams.rpki-client.org