$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75bbbb98-6cd7-4ba1-ad79-bb09021a8497.roa File: 75bbbb98-6cd7-4ba1-ad79-bb09021a8497.roa (raw, json) Hash identifier: zou8WWN4Sw1t/kk7w9L0qgsk/wQp0+568ZjsCMsy/84= Subject key identifier: 23:12:FA:0F:BA:FA:67:7D:33:A4:14:B1:1B:70:A2:B8:FD:6F:39:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1841A0AFB7EBB5F788BC2E532576C6EEB2D99107 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75bbbb98-6cd7-4ba1-ad79-bb09021a8497.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 00:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:41:a0:af:b7:eb:b5:f7:88:bc:2e:53:25:76:c6:ee:b2:d9:91:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=2322417224f420cced1f2e160bab53191832199d81e37935ab24d0a1606e7dbc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:41:df:08:61:90:b9:6a:c9:f8:51:2e:72:ed: 59:23:0a:cc:d4:4a:ac:c1:2f:06:11:76:5f:15:c8: 19:11:2b:00:95:52:2c:f0:e6:79:ff:a5:5b:4c:40: d5:2a:9d:9a:20:bb:f7:b9:6c:18:71:e8:d3:62:77: da:d4:48:79:e7:15:c0:27:d7:8c:a0:df:68:a4:71: bd:63:eb:f9:d5:14:fc:1f:38:54:02:d2:cc:ed:0d: 4d:62:9b:53:35:4a:46:38:e1:29:eb:52:27:0f:55: 30:de:87:aa:8b:0c:77:a3:11:f6:5a:c6:e1:57:fb: 8a:4b:3a:7c:dc:98:2b:51:e2:07:7f:a1:e0:30:9c: 18:e0:fc:14:ac:71:d7:7b:93:61:7e:f4:54:69:5c: e1:41:62:71:b3:d5:a8:ea:2f:9d:88:a4:9c:40:5d: e5:d7:b4:6a:00:68:5d:8f:8a:1e:88:eb:c4:e8:c0: cf:60:96:18:8f:65:b2:fa:c6:fd:b1:e9:e4:6a:e8: a8:48:da:c4:ad:07:05:9d:5c:16:6a:51:72:74:da: 2e:78:0a:e3:70:20:e8:7b:25:4c:d4:a2:b7:1d:a1: c5:8e:bb:a3:58:ca:24:8f:73:f1:f7:80:5e:a0:91: 13:46:3c:5c:bc:be:43:3e:5c:a0:4d:3f:cb:83:b7: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:12:FA:0F:BA:FA:67:7D:33:A4:14:B1:1B:70:A2:B8:FD:6F:39:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75bbbb98-6cd7-4ba1-ad79-bb09021a8497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c800::/40 Signature Algorithm: sha256WithRSAEncryption 38:bf:d3:31:66:c9:b9:f2:85:67:a3:64:be:f1:68:ec:bc:e2: a9:ff:a3:e1:97:50:e5:c6:2f:5b:50:80:04:3a:55:ee:97:a1: 77:84:0f:dc:0a:9e:61:c0:4f:9b:8a:74:e1:05:2b:87:64:1c: a1:3d:53:9f:6b:2b:18:9b:5b:4d:c0:2f:78:84:ca:dc:ff:d1: 89:b3:74:e1:23:c1:b1:e8:dc:5d:78:ee:09:a0:85:5e:16:a5: 17:bf:2f:83:70:9a:f1:52:87:8e:12:9c:42:0c:f2:9a:e5:b8: 22:ad:58:ef:18:44:9c:a4:10:74:da:83:ff:16:74:3b:7a:0a: ce:18:4d:93:e7:33:24:14:1d:78:bf:79:a8:31:e6:59:15:03: 67:0a:5e:08:98:e9:13:8b:5d:4c:1b:9a:0d:cc:3a:92:20:5e: 5a:05:2d:7e:a8:53:3d:35:2b:fd:03:f8:0a:1a:86:d1:85:ce: 7d:01:73:bd:e8:72:de:c2:02:fb:74:48:76:4d:34:e0:84:06: 6c:26:33:66:f8:0a:fa:2c:e7:b0:8a:84:6d:b5:fa:fc:0c:80: 69:99:42:40:4e:29:96:fc:8d:08:3d:b7:cd:80:5d:43:11:4f: ac:3b:1e:ac:ee:37:9f:a0:75:4e:a3:3e:50:60:57:e7:c2:4d: 49:a7:bc:df -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGEGgr7frtfeIvC5TJXbG7rLZkQcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQyMzAwMDAwMFoX DTI0MDUyODIzNTk1OVowejFJMEcGA1UEBRNAMjMyMjQxNzIyNGY0MjBjY2VkMWYy ZTE2MGJhYjUzMTkxODMyMTk5ZDgxZTM3OTM1YWIyNGQwYTE2MDZlN2RiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kHfCGGQuWrJ+FEucu1ZIwrM1Eqs wS8GEXZfFcgZESsAlVIs8OZ5/6VbTEDVKp2aILv3uWwYcejTYnfa1Eh55xXAJ9eM oN9opHG9Y+v51RT8HzhUAtLM7Q1NYptTNUpGOOEp61InD1Uw3oeqiwx3oxH2Wsbh V/uKSzp83JgrUeIHf6HgMJwY4PwUrHHXe5NhfvRUaVzhQWJxs9Wo6i+diKScQF3l 17RqAGhdj4oeiOvE6MDPYJYYj2Wy+sb9senkauioSNrErQcFnVwWalFydNoueArj cCDoeyVM1KK3HaHFjrujWMokj3Px94BeoJETRjxcvL5DPlygTT/Lg7euCwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCMS+g+6+md9M6QUsRtworj9bznOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1YmJiYjk4LTZjZDctNGJhMS1hZDc5LWJiMDkwMjFhODQ5Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAMgwDQYJKoZIhvcNAQELBQADggEBADi/0zFmybnyhWejZL7x aOy84qn/o+GXUOXGL1tQgAQ6Ve6XoXeED9wKnmHAT5uKdOEFK4dkHKE9U59rKxib W03AL3iEytz/0YmzdOEjwbHo3F147gmghV4WpRe/L4NwmvFSh44SnEIM8prluCKt WO8YRJykEHTag/8WdDt6Cs4YTZPnMyQUHXi/eagx5lkVA2cKXgiY6ROLXUwbmg3M OpIgXloFLX6oUz01K/0D+AoahtGFzn0Bc73oct7CAvt0SHZNNOCEBmwmM2b4Cvos 57CKhG21+vwMgGmZQkBOKZb8jQg9t82AXUMRT6w7HqzuN5+gdU6jPlBgV+fCTUmn vN8= -----END CERTIFICATE-----Generated at Sun May 5 01:20:21 2024 by rpki-client on console-fra.rpki-client.org