$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72d1defe-2788-45be-8c2a-5bf2a3e5a419.roa File: 72d1defe-2788-45be-8c2a-5bf2a3e5a419.roa (raw, json) Hash identifier: CKjJCaHEBQRQGTwPpghdaDwS36s4opAx/Q8Ikz4JCBs= Subject key identifier: E4:64:60:42:A4:AA:AC:C6:AB:44:07:91:20:27:A8:E9:8D:D6:0E:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3423C5E4255EB4E8999B3006296C1274A6DE3F47 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72d1defe-2788-45be-8c2a-5bf2a3e5a419.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:23:c5:e4:25:5e:b4:e8:99:9b:30:06:29:6c:12:74:a6:de:3f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=53830d958bb1d93a9591de090bdfa819fb472830f121f8bf87bd45498eb53f5d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:4b:16:be:98:38:ba:11:90:09:c7:a6:6f: 08:e0:4e:77:01:0f:44:ea:3e:fa:e8:db:92:dc:dc: 37:e2:f4:9a:79:d6:11:c7:f8:8c:1a:3f:1b:1d:c3: 80:2e:50:0b:65:52:7a:59:c3:94:0d:29:23:da:07: d3:dd:7f:cf:9a:4d:f3:8f:fb:de:d2:ac:dd:63:55: 2c:45:b0:b0:6a:e7:87:51:ba:49:25:0f:41:8b:0f: ee:f6:50:be:9c:fa:0f:f0:26:95:09:90:f2:c1:69: 78:2b:f9:9b:60:0d:86:24:b1:e6:0d:5e:37:d7:0f: 3b:77:3f:69:95:76:23:77:6d:35:30:7b:0f:f3:8f: 4d:43:5f:ff:d4:66:69:13:5c:71:6e:71:9f:44:8f: 39:4f:da:38:b0:d5:b8:4a:da:20:61:10:9d:da:4f: 74:eb:56:fc:40:40:12:b4:c3:8e:a3:72:36:f7:25: 74:a3:eb:be:3c:b1:c0:8e:2a:87:dc:c9:93:16:1d: 01:f9:fb:ab:5d:30:c9:8f:bb:73:e1:cb:ce:8a:ab: d9:ee:1c:34:a4:08:17:b1:e0:87:57:31:99:5e:28: 48:34:fd:76:fb:65:24:62:e9:56:5c:10:bf:e4:a3: 2d:2f:bc:1c:b6:59:32:0d:ed:ba:26:f1:80:49:5e: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:64:60:42:A4:AA:AC:C6:AB:44:07:91:20:27:A8:E9:8D:D6:0E:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72d1defe-2788-45be-8c2a-5bf2a3e5a419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:7000::/40 Signature Algorithm: sha256WithRSAEncryption 47:c3:cb:40:99:49:ac:2f:a7:58:a3:d3:9e:ef:fe:f5:5b:a3: f9:38:35:00:11:c8:5b:29:ed:44:55:bc:a3:02:97:43:70:03: 49:34:c3:c0:f6:f4:0f:ed:9a:2e:c9:d0:bf:b2:6c:74:2b:99: 4e:c1:b9:a8:05:da:32:40:90:5a:3b:87:e3:89:6b:21:65:14: 1d:da:82:dd:0f:20:ed:7f:d4:4f:a6:11:c7:38:5e:32:b8:2f: 18:17:1b:76:66:bf:44:4e:76:b0:e7:d2:44:22:58:c1:61:07: 60:b4:3f:90:07:1e:1f:82:af:b1:6d:54:2f:c7:b6:69:01:b8: b9:09:f3:31:ed:18:29:cc:15:43:c9:48:b5:a6:ea:16:b5:15: b0:fe:47:1c:71:63:50:f1:ad:a9:e5:20:b7:68:17:d4:dc:45: 52:8f:41:3f:39:de:d4:00:b6:67:25:f0:5e:5b:29:ba:eb:97: a1:5b:f2:9b:50:bd:c9:5b:19:66:b6:b6:e6:e8:36:58:dc:6f: 7e:57:ed:c1:2d:fc:f0:f4:06:71:df:b5:31:45:10:72:fb:42: 15:a4:de:be:40:98:dd:8b:06:bc:5b:dd:53:b4:b5:86:fc:14: ad:32:78:b5:49:70:b1:77:0b:b7:31:75:82:57:85:ad:35:da: ef:8e:d1:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNCPF5CVetOiZmzAGKWwSdKbeP0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNANTM4MzBkOTU4YmIxZDkzYTk1OTFk ZTA5MGJkZmE4MTlmYjQ3MjgzMGYxMjFmOGJmODdiZDQ1NDk4ZWI1M2Y1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4lLFr6YOLoRkAnHpm8I4E53AQ9E 6j766NuS3Nw34vSaedYRx/iMGj8bHcOALlALZVJ6WcOUDSkj2gfT3X/Pmk3zj/ve 0qzdY1UsRbCwaueHUbpJJQ9Biw/u9lC+nPoP8CaVCZDywWl4K/mbYA2GJLHmDV43 1w87dz9plXYjd201MHsP849NQ1//1GZpE1xxbnGfRI85T9o4sNW4StogYRCd2k90 61b8QEAStMOOo3I29yV0o+u+PLHAjiqH3MmTFh0B+furXTDJj7tz4cvOiqvZ7hw0 pAgXseCHVzGZXihINP12+2UkYulWXBC/5KMtL7wctlkyDe26JvGASV5cKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFORkYEKkqqzGq0QHkSAnqOmN1g4WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcyZDFkZWZlLTI3ODgtNDViZS04YzJhLTViZjJhM2U1YTQxOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoHAwDQYJKoZIhvcNAQELBQADggEBAEfDy0CZSawvp1ij057v /vVbo/k4NQARyFsp7URVvKMCl0NwA0k0w8D29A/tmi7J0L+ybHQrmU7BuagF2jJA kFo7h+OJayFlFB3agt0PIO1/1E+mEcc4XjK4LxgXG3Zmv0ROdrDn0kQiWMFhB2C0 P5AHHh+Cr7FtVC/HtmkBuLkJ8zHtGCnMFUPJSLWm6ha1FbD+RxxxY1DxranlILdo F9TcRVKPQT853tQAtmcl8F5bKbrrl6Fb8ptQvclbGWa2tuboNljcb35X7cEt/PD0 BnHftTFFEHL7QhWk3r5AmN2LBrxb3VO0tYb8FK0yeLVJcLF3C7cxdYJXha012u+O 0d4= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:39 2024 by rpki-client on console-fra.rpki-client.org