$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7077df52-66e9-43b0-9179-464c7c4e1603.roa File: 7077df52-66e9-43b0-9179-464c7c4e1603.roa (raw, json) Hash identifier: 4wQK2G5n3fW2fckAiSf0/KsgG3qQWkvWp+//9AEMOCQ= Subject key identifier: C1:2F:8A:74:68:5F:ED:7D:02:93:48:3E:D6:2B:50:AD:03:B2:0F:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31AB677C095A43E1B02169D8E86CB93E54CD2265 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7077df52-66e9-43b0-9179-464c7c4e1603.roa Signing time: Mon 15 Jul 2024 00:00:00 +0000 ROA not before: Mon 15 Jul 2024 00:00:00 +0000 ROA not after: Mon 19 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ab:67:7c:09:5a:43:e1:b0:21:69:d8:e8:6c:b9:3e:54:cd:22:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 15 00:00:00 2024 GMT Not After : Aug 19 23:59:59 2024 GMT Subject: serialNumber=aca9cac5e71c12525a503f752b2dbfa0b63dbc45bdb869521ef43fcdcabf0da4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:8d:66:79:16:89:0a:13:3c:bc:c7:6a:26: 6b:b9:5a:e4:c9:80:2d:54:a2:9c:0b:ed:76:a8:96: 2a:58:5b:b3:c4:66:d4:21:88:c7:5e:2b:03:e9:7a: d0:66:ca:01:26:44:7f:42:22:29:1b:f5:54:cf:67: 22:d4:40:63:7d:09:99:b9:68:42:7f:b5:dc:01:50: 48:c0:08:58:ab:94:1c:e9:19:b0:ff:26:ca:7b:aa: 2e:99:8f:ef:5c:80:ca:2a:6c:cd:eb:2f:00:6a:22: 00:15:54:08:86:cb:83:3e:e2:27:3e:e2:4d:c2:b4: 18:e2:4b:54:19:50:33:86:42:b4:40:12:6a:6e:f3: fc:66:8e:c2:c1:9b:20:e8:19:cd:c1:19:a2:32:cc: a8:1b:6b:83:d4:35:db:d5:55:2a:2d:5a:f1:41:cf: 94:4e:76:d9:ef:6c:48:dd:b4:10:19:b2:e5:75:ca: 59:f3:e6:15:df:76:43:30:9c:fd:07:1f:75:5d:b4: 7b:97:96:f1:0f:79:d4:19:39:bc:eb:0c:e2:e0:fa: 1f:b3:aa:6a:8e:90:b5:50:b5:a9:e0:6f:4d:b0:92: 04:65:45:3f:b8:23:ae:be:ff:40:20:09:fd:87:70: f2:f5:6b:60:9c:f6:a2:b4:ab:bf:7c:fe:c5:00:fa: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:8A:74:68:5F:ED:7D:02:93:48:3E:D6:2B:50:AD:03:B2:0F:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7077df52-66e9-43b0-9179-464c7c4e1603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:4800::/40 Signature Algorithm: sha256WithRSAEncryption 85:94:06:d7:83:7e:60:69:ad:6a:e8:ec:7b:74:8a:77:f1:76: ef:a4:25:06:27:8f:3f:e1:83:d3:3a:0a:03:b6:df:02:79:46: 6b:29:74:8e:38:5b:9b:d0:05:3a:bc:c8:0f:a1:38:66:31:17: 01:a1:fa:da:d5:92:da:e1:6c:ab:1a:1a:72:61:e6:d0:30:c1: 01:b2:ee:bc:f6:dc:5e:79:cd:05:c9:18:b0:8d:7a:69:c6:a2: 49:61:d4:89:c2:38:c4:75:0c:48:f4:d5:5e:f0:7e:e7:1c:a0: 53:b5:2d:b3:de:0c:b0:77:ca:4a:a3:4b:9a:0b:aa:92:a8:67: e6:91:39:fe:80:31:f9:1e:bc:9b:f8:ba:db:4c:84:47:21:83: 53:32:b8:90:13:4c:28:25:86:4c:4a:bd:d1:f0:d9:06:53:67: f9:41:22:28:a4:68:dc:13:5f:ff:99:e4:6f:81:19:86:20:e6: cc:98:c3:96:59:7b:66:7c:12:44:fb:ea:bb:ab:c0:9b:0a:25: 81:f5:8b:05:32:68:e9:74:99:52:eb:3d:f9:0f:4b:08:57:09: 2d:b9:59:f2:33:3c:d2:e3:ba:f8:4d:ca:1c:ca:89:7b:7d:a3: 2c:09:15:29:43:14:2f:3d:15:46:de:f5:de:c4:8d:e3:e5:ce: 85:fc:3f:c6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMatnfAlaQ+GwIWnY6Gy5PlTNImUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNTAwMDAwMFoX DTI0MDgxOTIzNTk1OVowejFJMEcGA1UEBRNAYWNhOWNhYzVlNzFjMTI1MjVhNTAz Zjc1MmIyZGJmYTBiNjNkYmM0NWJkYjg2OTUyMWVmNDNmY2RjYWJmMGRhNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfaNZnkWiQoTPLzHaiZruVrkyYAt VKKcC+12qJYqWFuzxGbUIYjHXisD6XrQZsoBJkR/QiIpG/VUz2ci1EBjfQmZuWhC f7XcAVBIwAhYq5Qc6Rmw/ybKe6oumY/vXIDKKmzN6y8AaiIAFVQIhsuDPuInPuJN wrQY4ktUGVAzhkK0QBJqbvP8Zo7CwZsg6BnNwRmiMsyoG2uD1DXb1VUqLVrxQc+U TnbZ72xI3bQQGbLldcpZ8+YV33ZDMJz9Bx91XbR7l5bxD3nUGTm86wzi4Pofs6pq jpC1ULWp4G9NsJIEZUU/uCOuvv9AIAn9h3Dy9WtgnPaitKu/fP7FAPprRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMEvinRoX+19ApNIPtYrUK0Dsg8KMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcwNzdkZjUyLTY2ZTktNDNiMC05MTc5LTQ2NGM3YzRlMTYwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYUgwDQYJKoZIhvcNAQELBQADggEBAIWUBteDfmBprWro7Ht0 infxdu+kJQYnjz/hg9M6CgO23wJ5RmspdI44W5vQBTq8yA+hOGYxFwGh+trVktrh bKsaGnJh5tAwwQGy7rz23F55zQXJGLCNemnGoklh1InCOMR1DEj01V7wfuccoFO1 LbPeDLB3ykqjS5oLqpKoZ+aROf6AMfkevJv4uttMhEchg1MyuJATTCglhkxKvdHw 2QZTZ/lBIiikaNwTX/+Z5G+BGYYg5syYw5ZZe2Z8EkT76rurwJsKJYH1iwUyaOl0 mVLrPfkPSwhXCS25WfIzPNLjuvhNyhzKiXt9oywJFSlDFC89FUbe9d7EjePlzoX8 P8Y= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:15 2024 by rpki-client on console-fra.rpki-client.org