$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74fb1a11-6d0f-486f-a2f0-7e6762c82821.roa File: 74fb1a11-6d0f-486f-a2f0-7e6762c82821.roa (raw, json) Hash identifier: 0rhuRGv4iz9TuLlSFcNrl6oc6ShzYzX4LHJBrTwe2ek= Subject key identifier: 26:C0:6B:8E:9A:47:90:1B:51:F2:ED:E0:60:EC:77:BD:31:BE:1A:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25E81E85CAC38EAD0C549118F358FE1CBF1F6859 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74fb1a11-6d0f-486f-a2f0-7e6762c82821.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e8:1e:85:ca:c3:8e:ad:0c:54:91:18:f3:58:fe:1c:bf:1f:68:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=1c3c1549a0a67a36f80200cb58fcc0cb71ae3bd2d0568a8ccadd401915887266, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:56:12:08:4c:37:fc:82:cf:ea:92:00:cc: fb:f4:6f:b8:cc:91:db:3e:ec:7d:dc:e5:8e:4a:c0: 4d:1b:8a:4c:c6:29:ad:77:55:79:1b:85:5d:ab:ea: 92:20:b9:05:3a:16:12:f5:3f:f8:f7:ab:99:0c:9f: ed:9f:10:89:94:1b:4e:88:7f:24:68:28:f1:d5:0d: 9b:d9:6a:01:83:9a:0c:e1:e9:a8:ed:e7:5c:dd:8e: 21:38:94:a1:e0:0c:02:4b:79:58:d3:03:80:72:07: 3f:ec:c7:be:00:6a:0a:4f:93:bf:e1:fb:af:c5:fe: aa:64:dd:8c:7a:f9:22:d1:aa:3f:27:7d:65:38:d1: 51:e6:5b:50:83:58:7e:cf:33:c0:31:f9:11:3c:fe: 11:12:8e:e7:c1:64:5e:4e:08:e5:cd:6f:ba:fe:ee: 9d:36:b9:21:e3:05:24:de:33:62:87:7b:b2:9b:0d: 3b:e5:3a:72:0e:48:05:8d:96:14:f4:c1:b1:32:82: ab:c5:43:de:fe:49:7f:ff:b2:6b:ec:b2:cf:18:f2: 3d:cd:30:47:ff:4d:62:b1:56:5f:03:2e:48:31:bf: 96:fe:7c:97:06:05:90:c4:dc:45:3f:35:8e:97:90: 8d:b0:0b:95:b9:2c:d5:88:4b:da:44:1d:46:cd:30: e9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C0:6B:8E:9A:47:90:1B:51:F2:ED:E0:60:EC:77:BD:31:BE:1A:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74fb1a11-6d0f-486f-a2f0-7e6762c82821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:c800::/40 Signature Algorithm: sha256WithRSAEncryption 29:35:e8:37:13:57:ad:17:21:48:3f:a4:76:08:72:d5:88:e2: 40:f7:26:c4:7d:1c:be:e4:e7:f7:a8:73:d9:92:9f:0a:f7:dd: 51:42:fc:aa:b0:fb:3f:4c:19:bf:a6:58:1f:b1:e0:7b:20:59: ff:16:fa:b4:9c:8c:e9:0f:cc:09:f7:95:23:b8:e8:07:77:f9: dd:35:fd:0c:1b:06:13:cf:44:1c:b6:39:d0:f5:96:2f:e1:8f: d1:13:f0:ec:1d:74:b2:6d:d0:7c:09:33:c0:f8:07:d4:11:70: 36:b6:91:cf:49:02:95:70:17:dd:2a:ee:70:92:2f:b0:f4:7a: 8a:8d:50:45:7f:67:7d:fd:2a:e3:fe:2d:de:7d:49:94:f4:43: b4:05:ef:05:fa:6b:a2:1a:0a:dc:7e:73:bb:64:e4:cb:7c:82: 18:a1:39:97:a3:94:8f:51:66:b5:2e:cb:14:85:1f:e4:f9:0c: aa:fb:cd:ff:d9:90:07:4f:c4:ef:d0:3b:92:ad:43:db:11:0c: 2f:7f:fc:13:3a:fd:30:a3:25:49:31:2a:3d:cd:fa:4f:52:54: 43:bc:b4:a7:34:04:b8:03:a3:c3:73:77:f6:1f:1f:11:d4:e7: a3:61:fc:a4:51:80:be:57:d8:47:c3:b1:da:d2:bb:f5:93:3b: 65:b5:a5:f0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJegehcrDjq0MVJEY81j+HL8faFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExMTAwMDAwMFoX DTI0MTIxNjIzNTk1OVowejFJMEcGA1UEBRNAMWMzYzE1NDlhMGE2N2EzNmY4MDIw MGNiNThmY2MwY2I3MWFlM2JkMmQwNTY4YThjY2FkZDQwMTkxNTg4NzI2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8lWEghMN/yCz+qSAMz79G+4zJHb Pux93OWOSsBNG4pMximtd1V5G4Vdq+qSILkFOhYS9T/496uZDJ/tnxCJlBtOiH8k aCjx1Q2b2WoBg5oM4emo7edc3Y4hOJSh4AwCS3lY0wOAcgc/7Me+AGoKT5O/4fuv xf6qZN2Mevki0ao/J31lONFR5ltQg1h+zzPAMfkRPP4REo7nwWReTgjlzW+6/u6d Nrkh4wUk3jNih3uymw075TpyDkgFjZYU9MGxMoKrxUPe/kl//7Jr7LLPGPI9zTBH /01isVZfAy5IMb+W/nyXBgWQxNxFPzWOl5CNsAuVuSzViEvaRB1GzTDplQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCbAa46aR5AbUfLt4GDsd70xvhoRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc0ZmIxYTExLTZkMGYtNDg2Zi1hMmYwLTdlNjc2MmM4MjgyMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacMgwDQYJKoZIhvcNAQELBQADggEBACk16DcTV60XIUg/pHYI ctWI4kD3JsR9HL7k5/eoc9mSnwr33VFC/Kqw+z9MGb+mWB+x4HsgWf8W+rScjOkP zAn3lSO46Ad3+d01/QwbBhPPRBy2OdD1li/hj9ET8OwddLJt0HwJM8D4B9QRcDa2 kc9JApVwF90q7nCSL7D0eoqNUEV/Z339KuP+Ld59SZT0Q7QF7wX6a6IaCtx+c7tk 5Mt8ghihOZejlI9RZrUuyxSFH+T5DKr7zf/ZkAdPxO/QO5KtQ9sRDC9//BM6/TCj JUkxKj3N+k9SVEO8tKc0BLgDo8Nzd/YfHxHU56Nh/KRRgL5X2EfDsdrSu/WTO2W1 pfA= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:35 2024 by rpki-client on console-fra.rpki-client.org