$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/70ab34fb-ad01-4d41-9091-996a24931d4c.roa File: 70ab34fb-ad01-4d41-9091-996a24931d4c.roa (raw, json) Hash identifier: UrjgY2VeuE61mk2drF1vvzYJfvP4d7NeuCxKR5nooZ8= Subject key identifier: BE:54:93:19:56:E7:4D:B5:E5:AD:EF:02:82:88:1F:ED:3A:EE:F3:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7DED44D8827B165D7CB24A151B5BBF4EE4E27198 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/70ab34fb-ad01-4d41-9091-996a24931d4c.roa Signing time: Mon 08 Jul 2024 00:00:00 +0000 ROA not before: Mon 08 Jul 2024 00:00:00 +0000 ROA not after: Mon 12 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ed:44:d8:82:7b:16:5d:7c:b2:4a:15:1b:5b:bf:4e:e4:e2:71:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 8 00:00:00 2024 GMT Not After : Aug 12 23:59:59 2024 GMT Subject: serialNumber=f3db8ad6440137fc11f7a7326364aab343f6b303b8ef19af10fff4e3709b399a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:0c:ba:d9:b8:bd:06:0b:9a:22:71:f3:4f: fd:5a:36:9c:81:0e:c5:b5:c5:4b:f4:80:6d:76:99: fe:15:1f:73:44:73:28:ad:d0:cc:f3:01:3d:ce:8b: 71:77:c4:fe:38:2b:d8:20:56:0b:31:0c:d4:ab:3e: a8:8b:d4:3a:94:a2:3d:2d:01:fe:08:b9:bd:7e:68: b0:68:99:3b:c0:24:a9:5f:8e:d4:c1:7b:04:46:e9: bd:2d:16:7c:ea:6c:c9:25:9e:a4:56:25:53:00:5d: fc:2d:7a:26:0f:0c:c2:92:2d:be:20:42:00:3f:d4: c3:2e:ce:87:86:3e:ee:9e:d9:af:af:6e:54:6c:17: 4f:36:f4:fb:da:55:53:c3:41:bb:7b:14:06:fe:0b: b9:55:52:63:19:1c:0b:cf:3e:5b:00:2b:43:3c:67: 92:85:b5:b4:0d:1b:13:be:7d:cc:5e:cb:5c:18:b5: 4a:35:c7:56:72:ac:b9:6a:91:6c:86:35:dd:10:3c: 73:10:1f:05:52:d6:fb:2c:38:71:eb:94:da:62:68: 0e:91:14:fb:f4:ca:a7:cb:af:22:ef:5d:2f:13:09: 07:3b:8e:7e:43:5c:f9:31:a6:37:3e:61:ef:6f:6f: be:cb:60:2f:42:02:57:45:2d:d0:5a:c1:84:0f:a4: a3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:54:93:19:56:E7:4D:B5:E5:AD:EF:02:82:88:1F:ED:3A:EE:F3:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/70ab34fb-ad01-4d41-9091-996a24931d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c800::/40 Signature Algorithm: sha256WithRSAEncryption 0a:3f:f6:7c:39:9c:c9:78:35:31:d0:f6:ad:92:ad:71:97:80: ab:cf:9c:6a:e1:fa:9b:66:34:49:36:37:cc:dc:eb:bb:83:3f: 8d:2a:57:04:74:77:0b:ec:ba:5b:1e:f5:35:17:5d:b6:f7:75: e6:b2:d0:54:98:0d:ec:63:10:df:3a:f0:83:5b:31:ed:06:d0: bf:05:18:7f:f8:ea:38:00:72:c3:82:d2:79:97:4f:0d:ea:79: 5a:f7:cd:d1:75:2a:62:05:52:99:ac:0d:71:77:ce:3f:5a:2d: 73:21:99:d3:c9:0f:ac:1f:8f:aa:c4:c5:3c:df:94:17:b8:82: bf:26:3c:29:92:1a:82:79:e2:bf:9e:bd:89:3b:f5:e4:b2:d2: cb:d2:19:08:05:7e:96:3e:2a:96:5a:fa:cd:e7:3a:4e:66:3e: af:aa:94:10:94:ab:8f:33:01:22:d7:e4:0f:e9:44:b3:e0:65: 9b:5d:f1:99:bb:50:62:d0:63:79:18:50:72:b7:64:38:13:b5: 1e:6a:b2:1d:aa:a8:c1:1f:ef:50:d9:b5:75:71:b7:83:3e:6f: b3:ca:30:a8:26:83:45:d3:7d:d5:8c:ea:02:e2:00:95:19:de: 5b:f6:b5:05:f8:5f:b8:b2:4c:94:2f:db:ae:10:c8:6d:66:e0: 87:65:89:9f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfe1E2IJ7Fl18skoVG1u/TuTicZgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcwODAwMDAwMFoX DTI0MDgxMjIzNTk1OVowejFJMEcGA1UEBRNAZjNkYjhhZDY0NDAxMzdmYzExZjdh NzMyNjM2NGFhYjM0M2Y2YjMwM2I4ZWYxOWFmMTBmZmY0ZTM3MDliMzk5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbEMutm4vQYLmiJx80/9WjacgQ7F tcVL9IBtdpn+FR9zRHMordDM8wE9zotxd8T+OCvYIFYLMQzUqz6oi9Q6lKI9LQH+ CLm9fmiwaJk7wCSpX47UwXsERum9LRZ86mzJJZ6kViVTAF38LXomDwzCki2+IEIA P9TDLs6Hhj7untmvr25UbBdPNvT72lVTw0G7exQG/gu5VVJjGRwLzz5bACtDPGeS hbW0DRsTvn3MXstcGLVKNcdWcqy5apFshjXdEDxzEB8FUtb7LDhx65TaYmgOkRT7 9Mqny68i710vEwkHO45+Q1z5MaY3PmHvb2++y2AvQgJXRS3QWsGED6SjrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL5UkxlW50215a3vAoKIH+067vOAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcwYWIzNGZiLWFkMDEtNGQ0MS05MDkxLTk5NmEyNDkzMWQ0Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba98gwDQYJKoZIhvcNAQELBQADggEBAAo/9nw5nMl4NTHQ9q2S rXGXgKvPnGrh+ptmNEk2N8zc67uDP40qVwR0dwvsulse9TUXXbb3deay0FSYDexj EN868INbMe0G0L8FGH/46jgAcsOC0nmXTw3qeVr3zdF1KmIFUpmsDXF3zj9aLXMh mdPJD6wfj6rExTzflBe4gr8mPCmSGoJ54r+evYk79eSy0svSGQgFfpY+KpZa+s3n Ok5mPq+qlBCUq48zASLX5A/pRLPgZZtd8Zm7UGLQY3kYUHK3ZDgTtR5qsh2qqMEf 71DZtXVxt4M+b7PKMKgmg0XTfdWM6gLiAJUZ3lv2tQX4X7iyTJQv264QyG1m4Idl iZ8= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:15 2024 by rpki-client on console-fra.rpki-client.org