$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72d1defe-2788-45be-8c2a-5bf2a3e5a419.roa File: 72d1defe-2788-45be-8c2a-5bf2a3e5a419.roa (raw, json) Hash identifier: FqPpW+6oqki5vpztHP8fs3izqwFBjM9pz45M0mlpSW4= Subject key identifier: BD:00:E3:95:7B:44:E3:40:AE:49:68:DA:AE:81:69:1D:20:94:67:12 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 38DB79ADE33FEE3DE0ABFD3C9A4289CF4B16F534 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72d1defe-2788-45be-8c2a-5bf2a3e5a419.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:db:79:ad:e3:3f:ee:3d:e0:ab:fd:3c:9a:42:89:cf:4b:16:f5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=e6c7f27ede52d6e2ce8bf3ac74bb510804fbe05b842334c8d3fc49208a812d6c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:2d:2a:e3:bb:38:79:5d:b3:14:7d:c2:5d: 18:2a:24:fd:d4:2d:bd:25:33:5f:c9:18:7e:c7:9e: 4f:9d:10:48:a4:83:3b:12:60:53:13:43:3b:34:96: 11:9b:12:22:13:38:db:b4:2b:1f:37:e2:eb:55:ef: ee:6b:53:93:d6:b0:21:e4:75:13:6a:79:31:d9:f0: da:32:4e:04:3a:f9:03:66:54:d0:55:2d:87:24:ad: 38:c5:bb:da:06:11:74:a5:30:a3:51:0c:5b:e9:d5: 0a:21:e7:80:5e:d5:4c:4b:d1:ce:5b:ad:99:a2:c6: df:4a:ee:e1:fd:0d:d8:d0:14:ab:0d:cc:16:43:ca: a9:df:5f:70:d7:66:d5:84:b4:a6:dd:3a:f2:82:64: 34:b4:13:1a:aa:43:f3:6b:92:a3:c1:30:4f:9a:85: d7:02:95:ef:86:b9:ff:c2:5b:3e:11:09:b2:38:af: 20:7f:14:a5:92:cc:21:b4:28:e5:36:72:c9:7e:4b: 71:d7:c4:51:88:58:81:4b:71:4e:1d:0d:65:fd:f8: 7e:1c:a1:ac:a3:b7:fa:18:69:c6:58:1b:31:c8:aa: 70:c6:9d:16:b0:72:f6:7b:b7:33:ad:ee:37:83:2f: bc:67:27:fa:05:04:71:ab:3d:43:f1:72:9b:86:dc: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:E3:95:7B:44:E3:40:AE:49:68:DA:AE:81:69:1D:20:94:67:12 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72d1defe-2788-45be-8c2a-5bf2a3e5a419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:7000::/40 Signature Algorithm: sha256WithRSAEncryption bb:2f:d7:07:ca:60:cd:d9:76:89:7f:7d:c3:1e:c1:c9:14:d8: 05:ed:7e:b4:a1:ba:fb:3d:95:f6:7f:f9:cc:41:42:88:aa:be: 4e:9d:c2:7e:9f:7b:0b:35:f5:5a:9d:db:92:16:2f:6e:74:2d: 2c:bb:ff:de:89:77:1e:ef:0d:7e:30:40:f5:57:3b:7d:b1:39: 12:22:c6:ea:4a:33:bf:14:e9:3d:e9:06:33:c4:8c:81:1d:aa: ac:e7:37:a4:17:a0:1c:63:3d:ad:d1:46:e2:f8:2c:a2:76:bd: 68:7c:76:15:44:27:80:b3:6c:9c:0a:61:af:c3:b4:eb:00:89: 9b:c0:8e:12:f5:8d:49:96:89:e7:6e:fa:64:1a:55:e1:ab:e9: de:91:76:27:84:90:ec:de:60:9f:df:69:1d:6c:f8:a8:ae:79: e0:78:73:1a:91:57:b0:41:f5:be:06:74:d0:bb:d1:31:a1:6e: c2:3a:6a:2a:90:67:5f:02:e2:3d:53:c2:6a:03:7e:a4:76:f5: 3d:74:17:16:bf:bb:c3:32:74:9b:3b:c9:74:cb:28:de:fa:e7: fc:cd:8c:f1:2a:23:d0:ac:a3:c1:d5:5f:2c:f5:73:0f:25:6c: 95:a0:05:4e:c4:61:f2:84:f5:47:bd:d8:07:24:a7:ef:b4:ea: 4c:52:0e:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUONt5reM/7j3gq/08mkKJz0sW9TQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAZTZjN2YyN2VkZTUyZDZlMmNlOGJm M2FjNzRiYjUxMDgwNGZiZTA1Yjg0MjMzNGM4ZDNmYzQ5MjA4YTgxMmQ2YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslAtKuO7OHldsxR9wl0YKiT91C29 JTNfyRh+x55PnRBIpIM7EmBTE0M7NJYRmxIiEzjbtCsfN+LrVe/ua1OT1rAh5HUT ankx2fDaMk4EOvkDZlTQVS2HJK04xbvaBhF0pTCjUQxb6dUKIeeAXtVMS9HOW62Z osbfSu7h/Q3Y0BSrDcwWQ8qp319w12bVhLSm3TrygmQ0tBMaqkPza5KjwTBPmoXX ApXvhrn/wls+EQmyOK8gfxSlkswhtCjlNnLJfktx18RRiFiBS3FOHQ1l/fh+HKGs o7f6GGnGWBsxyKpwxp0WsHL2e7czre43gy+8Zyf6BQRxqz1D8XKbhtyxcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL0A45V7RONArklo2q6BaR0glGcSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcyZDFkZWZlLTI3ODgtNDViZS04YzJhLTViZjJhM2U1YTQxOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoHAwDQYJKoZIhvcNAQELBQADggEBALsv1wfKYM3Zdol/fcMe wckU2AXtfrShuvs9lfZ/+cxBQoiqvk6dwn6fews19Vqd25IWL250LSy7/96Jdx7v DX4wQPVXO32xORIixupKM78U6T3pBjPEjIEdqqznN6QXoBxjPa3RRuL4LKJ2vWh8 dhVEJ4CzbJwKYa/DtOsAiZvAjhL1jUmWiedu+mQaVeGr6d6RdieEkOzeYJ/faR1s +KiueeB4cxqRV7BB9b4GdNC70TGhbsI6aiqQZ18C4j1TwmoDfqR29T10Fxa/u8My dJs7yXTLKN765/zNjPEqI9Cso8HVXyz1cw8lbJWgBU7EYfKE9Ue92Ackp++06kxS DmQ= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:32 2024 by rpki-client on console-fra.rpki-client.org