$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/771d4001-b963-4406-aac7-3fc89353fac8.roa File: 771d4001-b963-4406-aac7-3fc89353fac8.roa (raw, json) Hash identifier: F1tLFZttYWfC+KKFoxObyQb5ic//Lz4TNqJZ/O6LGTI= Subject key identifier: 33:47:4A:6C:A5:5E:D9:57:36:2A:E2:92:B7:E5:5A:02:24:31:EC:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15AFE66B6F71BADDFB27245ECD49EB632F7B0277 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/771d4001-b963-4406-aac7-3fc89353fac8.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:af:e6:6b:6f:71:ba:dd:fb:27:24:5e:cd:49:eb:63:2f:7b:02:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=d6830ef12e27e76f3d6081af4741b607bd450e2447963699752326920310d7df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:ec:0b:b8:ac:b2:4f:70:b5:b2:18:7d:5e: 1f:10:e4:2c:b1:59:94:ba:6d:05:f9:78:95:27:d7: 29:ef:f5:ea:b5:71:c4:3b:d5:85:c7:57:c1:69:ae: d9:e5:99:56:98:e0:4e:a9:1b:f3:20:ef:41:1b:2b: b3:57:b0:0b:91:a7:84:57:63:9d:2a:41:e1:2e:2d: ad:2d:0d:76:af:d0:3c:12:6e:a5:67:13:99:c7:10: 3d:f3:67:50:bb:97:b2:c3:d6:92:7b:7f:0c:e4:20: 70:23:44:89:70:73:75:7e:90:35:1e:8c:51:c0:6e: 14:ab:87:45:26:6e:72:37:e9:df:9c:bd:67:b6:19: e8:d7:62:4c:84:02:81:48:0f:e5:46:b1:93:ef:e8: a8:99:c1:b7:e7:9a:0d:19:be:c3:eb:cf:b4:40:53: 62:bc:84:0a:3a:01:cb:7e:6d:7b:3d:84:db:4e:0b: f1:8b:a0:b4:d5:ec:12:35:58:9c:9a:d0:e4:0c:0e: da:b8:70:ae:49:69:ec:c5:60:f9:c6:e1:0e:1e:eb: 08:55:72:19:05:8a:f4:5a:3d:35:d7:5f:08:1e:59: 49:b5:a1:24:58:05:6c:3b:d2:ef:0c:d3:2b:52:59: 85:72:4b:f5:8e:56:bf:a5:19:87:7f:9e:60:62:e7: e5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:47:4A:6C:A5:5E:D9:57:36:2A:E2:92:B7:E5:5A:02:24:31:EC:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/771d4001-b963-4406-aac7-3fc89353fac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:1000::/40 Signature Algorithm: sha256WithRSAEncryption 2b:7a:c9:d9:62:7b:ba:b4:04:49:db:03:8d:4d:ab:b2:b1:5a: 8f:7a:be:d3:be:91:30:12:49:33:94:ed:0a:68:b5:97:75:f9: 3e:52:68:fe:2a:74:9a:6f:b5:f1:cc:10:3f:05:1a:f0:44:10: c2:c1:48:86:20:91:86:8c:b4:d8:23:d9:c9:e8:bd:49:95:a4: 9d:21:9a:39:67:a8:33:9a:cc:d2:a5:c2:7c:d1:e9:74:e8:b9: a5:0d:35:94:05:84:ec:27:62:53:03:80:2b:6b:cf:89:62:71: d6:34:5f:e3:a0:85:54:46:58:ed:9d:77:6b:59:1d:3e:71:d4: 1d:65:27:c6:18:ef:55:d6:d9:d2:11:48:ff:23:2a:a1:98:ec: 51:dc:90:8a:71:29:b4:fe:5a:a7:c7:0a:de:fa:3e:7a:1c:7a: c0:d7:3a:f4:50:4b:6c:e9:da:5e:10:90:cd:ad:25:96:55:af: 13:a7:02:c7:31:9c:af:2c:cc:fd:47:c8:a3:a7:6d:a8:41:7a: da:83:d4:ac:f9:64:0f:ab:d5:31:54:56:66:1b:b2:42:0e:a3: 15:dd:ab:f5:0e:a8:60:d2:75:d5:9b:3f:3c:c1:db:77:da:55: b4:5d:5b:59:7b:77:fb:27:03:16:0b:87:41:d8:50:37:57:f5: ac:21:b2:8a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFa/ma29xut37JyRezUnrYy97AncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAZDY4MzBlZjEyZTI3ZTc2ZjNkNjA4 MWFmNDc0MWI2MDdiZDQ1MGUyNDQ3OTYzNjk5NzUyMzI2OTIwMzEwZDdkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBbsC7issk9wtbIYfV4fEOQssVmU um0F+XiVJ9cp7/XqtXHEO9WFx1fBaa7Z5ZlWmOBOqRvzIO9BGyuzV7ALkaeEV2Od KkHhLi2tLQ12r9A8Em6lZxOZxxA982dQu5eyw9aSe38M5CBwI0SJcHN1fpA1HoxR wG4Uq4dFJm5yN+nfnL1nthno12JMhAKBSA/lRrGT7+iomcG355oNGb7D68+0QFNi vIQKOgHLfm17PYTbTgvxi6C01ewSNVicmtDkDA7auHCuSWnsxWD5xuEOHusIVXIZ BYr0Wj01118IHllJtaEkWAVsO9LvDNMrUlmFckv1jla/pRmHf55gYuflOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDNHSmylXtlXNirikrflWgIkMeznMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3MWQ0MDAxLWI5NjMtNDQwNi1hYWM3LTNmYzg5MzUzZmFjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacBAwDQYJKoZIhvcNAQELBQADggEBACt6ydlie7q0BEnbA41N q7KxWo96vtO+kTASSTOU7QpotZd1+T5SaP4qdJpvtfHMED8FGvBEEMLBSIYgkYaM tNgj2cnovUmVpJ0hmjlnqDOazNKlwnzR6XTouaUNNZQFhOwnYlMDgCtrz4licdY0 X+OghVRGWO2dd2tZHT5x1B1lJ8YY71XW2dIRSP8jKqGY7FHckIpxKbT+WqfHCt76 PnocesDXOvRQS2zp2l4QkM2tJZZVrxOnAscxnK8szP1HyKOnbahBetqD1Kz5ZA+r 1TFUVmYbskIOoxXdq/UOqGDSddWbPzzB23faVbRdW1l7d/snAxYLh0HYUDdX9awh soo= -----END CERTIFICATE-----Generated at Fri Sep 22 00:27:51 2023 by rpki-client on console-ams.rpki-client.org