$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa File: 719ab7af-df28-4130-a9de-5188082f1820.roa (raw, json) Hash identifier: rioJKhp4S5PdAfACshutfv3uS3SeUNo6VaYkXy3zHIo= Subject key identifier: 91:7E:92:A5:2B:41:DC:9B:C5:A3:55:BE:0C:77:D1:98:B9:98:26:23 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45D2EBDB2C81AED75CF8F7FB08A061868FBD5906 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d2:eb:db:2c:81:ae:d7:5c:f8:f7:fb:08:a0:61:86:8f:bd:59:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=803beb7e52b8ffaeca1664c974618321cf72b7f689d70d7f92f7aa1de7ddfd5c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a8:03:7f:9f:6e:79:d3:bf:16:f3:1e:17:dc: 67:e0:d3:85:7d:68:be:60:be:ee:ff:83:9a:3a:fa: 2f:9e:3e:7d:f5:50:57:8f:ff:72:bb:86:98:db:5c: 17:13:9d:59:a1:d4:a7:c0:0b:df:99:48:30:c3:c2: 1f:68:19:f4:a6:85:34:69:b7:bf:5a:35:ab:a4:4d: ec:c1:40:c9:56:25:15:dd:ae:2a:8a:8c:86:90:d9: 5a:76:ab:02:71:6c:66:6e:4f:36:ae:80:47:84:59: 86:ff:77:00:ed:b6:3d:08:2a:26:4a:d0:2b:07:5d: 28:ed:e6:6e:f8:55:44:af:2a:79:06:57:f7:e4:c8: 54:bf:95:da:61:f5:10:dd:1e:a6:06:68:3a:8e:ba: 1e:e9:f3:85:a2:66:4b:91:ca:2d:8e:64:91:8a:b5: 68:2a:4e:1a:33:ed:ae:33:60:3c:95:e5:e9:80:cf: 24:f3:b1:29:9d:f9:2a:e8:0f:26:40:77:2e:97:16: 9a:5e:1c:95:37:05:6b:4e:1c:bb:7d:32:62:d6:72: de:47:07:3a:ed:ea:ba:a7:a0:35:ed:4c:8c:63:c0: ae:cf:a1:ba:ad:d9:b5:67:77:54:76:d9:1b:0d:83: e1:87:59:3e:25:10:73:f2:d9:b4:cf:e2:4d:ca:76: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7E:92:A5:2B:41:DC:9B:C5:A3:55:BE:0C:77:D1:98:B9:98:26:23 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:1000::/40 Signature Algorithm: sha256WithRSAEncryption 98:86:c3:0f:80:39:11:a0:78:6c:0c:6c:d1:47:9e:ff:61:41: 63:a6:27:df:52:c2:28:ea:cd:bc:ca:5f:09:ef:cb:3c:8c:1e: 52:1a:ae:06:60:5e:14:d9:74:58:f5:f8:78:e6:bb:3d:5c:05: 06:45:76:c5:6a:99:c5:16:bd:b0:65:02:ae:19:6a:4a:98:6b: 5e:4a:8b:3e:e5:8b:bd:03:7e:34:bd:94:fd:77:d5:50:cf:52: e2:b6:ab:9f:3a:b6:75:17:2f:fb:d7:a1:c4:80:39:63:bc:88: 51:b6:16:03:3e:13:fa:a1:a1:97:9d:7b:aa:72:f5:d3:24:02: cb:11:d7:71:9a:b2:8e:e2:c6:85:a2:64:38:0c:07:df:95:40: 8a:2e:51:1c:7e:99:f4:bf:96:7f:5b:65:2e:39:0f:45:8a:37: 98:99:38:71:9d:4f:40:0b:7e:6b:46:85:30:37:da:58:1a:c8: e6:a7:98:84:1b:42:e0:f5:3c:7a:b7:dc:1c:22:4b:a5:d0:80: 74:5a:cf:ee:cf:ce:ba:f8:d1:9e:17:bd:cb:54:41:79:1f:16: ee:4d:46:54:ad:f2:58:ac:94:0d:41:06:22:d1:0d:9f:6e:8f: b0:01:c7:40:6b:af:3e:ee:7d:b8:89:2a:59:dc:87:41:2c:7d: 23:56:94:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURdLr2yyBrtdc+Pf7CKBhho+9WQYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAODAzYmViN2U1MmI4ZmZhZWNhMTY2 NGM5NzQ2MTgzMjFjZjcyYjdmNjg5ZDcwZDdmOTJmN2FhMWRlN2RkZmQ1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66gDf59uedO/FvMeF9xn4NOFfWi+ YL7u/4OaOvovnj599VBXj/9yu4aY21wXE51ZodSnwAvfmUgww8IfaBn0poU0abe/ WjWrpE3swUDJViUV3a4qioyGkNladqsCcWxmbk82roBHhFmG/3cA7bY9CComStAr B10o7eZu+FVEryp5Blf35MhUv5XaYfUQ3R6mBmg6jroe6fOFomZLkcotjmSRirVo Kk4aM+2uM2A8leXpgM8k87Epnfkq6A8mQHculxaaXhyVNwVrThy7fTJi1nLeRwc6 7eq6p6A17UyMY8Cuz6G6rdm1Z3dUdtkbDYPhh1k+JRBz8tm0z+JNynb+/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJF+kqUrQdybxaNVvgx30Zi5mCYjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxOWFiN2FmLWRmMjgtNDEzMC1hOWRlLTUxODgwODJmMTgyMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaRAwDQYJKoZIhvcNAQELBQADggEBAJiGww+AORGgeGwMbNFH nv9hQWOmJ99SwijqzbzKXwnvyzyMHlIargZgXhTZdFj1+Hjmuz1cBQZFdsVqmcUW vbBlAq4ZakqYa15Kiz7li70DfjS9lP131VDPUuK2q586tnUXL/vXocSAOWO8iFG2 FgM+E/qhoZede6py9dMkAssR13Gaso7ixoWiZDgMB9+VQIouURx+mfS/ln9bZS45 D0WKN5iZOHGdT0ALfmtGhTA32lgayOanmIQbQuD1PHq33BwiS6XQgHRaz+7Pzrr4 0Z4XvctUQXkfFu5NRlSt8lislA1BBiLRDZ9uj7ABx0Brrz7ufbiJKlnch0EsfSNW lIU= -----END CERTIFICATE-----Generated at Sun Nov 24 02:34:56 2024 by rpki-client on console-fra.rpki-client.org