$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/772a4095-17a4-4c23-b826-dffbeff0304b.roa File: 772a4095-17a4-4c23-b826-dffbeff0304b.roa (raw, json) Hash identifier: 8N8FI9rA/3XWnmvi8wGuckr6SN9KTKm0YLv+3IW+GcU= Subject key identifier: 5B:94:10:1F:18:6A:E2:D0:78:0C:3B:5A:EB:38:BA:C6:9D:6A:57:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C244261DAD04513C0107B8CC59A43DB06E1A674 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/772a4095-17a4-4c23-b826-dffbeff0304b.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:24:42:61:da:d0:45:13:c0:10:7b:8c:c5:9a:43:db:06:e1:a6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=ee11ebe67051f637c6e5b53c50a073c4165f3416171668307e20068023ff3e43, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:50:14:7e:29:58:8e:5f:c2:79:9a:16:89: 9d:16:fb:48:c7:af:65:98:fa:2d:45:9f:91:d3:83: 6a:5f:5a:7c:69:4f:fb:87:43:5d:0d:9d:8a:b9:ee: de:4f:c7:22:67:d7:e7:2f:47:ef:ab:9f:e3:cf:01: df:84:16:fe:e2:f9:b6:64:b0:d1:ef:8a:22:5c:4c: 46:c8:86:15:77:c6:88:2f:30:e7:2f:59:95:40:24: 4e:64:99:38:4c:cc:fe:ea:4f:14:be:9e:82:b5:2c: fa:75:c5:ca:42:fe:50:84:18:51:e5:f1:3f:b7:33: 10:20:46:db:2d:35:04:4c:da:b2:a3:08:a7:11:f5: a4:1a:8a:25:af:49:e2:ed:d1:7c:7d:75:76:0f:e5: 2f:e1:80:d6:3d:2f:58:19:95:15:d2:e3:a0:63:97: 7a:60:51:6f:75:4f:9a:5f:e1:90:08:87:ba:74:7d: 1a:34:82:5a:04:3a:24:5e:51:ae:60:29:16:53:e4: 20:63:04:25:2f:10:f2:1e:eb:0b:71:36:15:27:ac: f1:0d:a6:1e:4d:4a:47:bb:da:f3:80:c8:ac:09:fb: 3b:7f:73:38:80:ff:61:79:2d:b7:90:5e:dc:99:e0: db:42:fb:1c:aa:ae:8a:a6:0d:80:1b:f4:69:12:f0: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:10:1F:18:6A:E2:D0:78:0C:3B:5A:EB:38:BA:C6:9D:6A:57:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/772a4095-17a4-4c23-b826-dffbeff0304b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:bd:32:4d:17:e0:f4:0e:ef:2e:2e:7f:a2:93:d6:12:1d:a7: 35:96:28:6d:ab:f9:d9:90:8d:79:31:e3:f2:f4:d9:22:95:c8: f4:f7:d5:29:c2:c3:88:d4:6f:9f:fb:b3:f5:7f:60:af:d6:cc: f0:93:34:80:d8:6b:ff:22:2a:ed:4b:a9:22:18:e3:d1:d2:97: 39:e5:fd:7b:1b:a2:db:22:7b:df:f1:eb:89:84:65:5c:0d:fe: ba:6c:d3:1a:69:ad:b4:a9:24:87:6c:1f:df:ad:b1:f4:5c:d2: 97:f4:a5:3f:6c:9a:fb:56:78:9e:1a:35:ad:27:64:e0:09:df: d1:98:bd:76:e0:54:9b:2e:ac:6c:d1:48:21:9e:1e:b2:34:01: 7b:8f:d9:31:f2:dc:30:be:ef:3b:c3:88:96:05:fc:1e:95:48: 74:77:55:3c:89:79:92:08:eb:ce:27:84:2f:aa:81:cf:1c:18: 76:9a:d7:6e:43:28:84:98:6c:10:c6:1f:95:60:48:ba:96:46: fe:83:42:cf:a1:90:d9:86:7b:ef:0f:ae:b5:d7:6f:27:4e:a9: b5:f1:ea:40:d8:13:a3:86:33:e0:9b:03:67:c8:8a:51:b4:00: 4f:b1:04:1c:bd:57:a1:8f:f7:76:0b:d7:84:41:d0:1e:90:f6: d2:97:24:ec -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXCRCYdrQRRPAEHuMxZpD2wbhpnQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxMDAwMDAwMFoX DTI0MDUxNTIzNTk1OVowejFJMEcGA1UEBRNAZWUxMWViZTY3MDUxZjYzN2M2ZTVi NTNjNTBhMDczYzQxNjVmMzQxNjE3MTY2ODMwN2UyMDA2ODAyM2ZmM2U0MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJVQFH4pWI5fwnmaFomdFvtIx69l mPotRZ+R04NqX1p8aU/7h0NdDZ2Kue7eT8ciZ9fnL0fvq5/jzwHfhBb+4vm2ZLDR 74oiXExGyIYVd8aILzDnL1mVQCROZJk4TMz+6k8Uvp6CtSz6dcXKQv5QhBhR5fE/ tzMQIEbbLTUETNqyowinEfWkGoolr0ni7dF8fXV2D+Uv4YDWPS9YGZUV0uOgY5d6 YFFvdU+aX+GQCIe6dH0aNIJaBDokXlGuYCkWU+QgYwQlLxDyHusLcTYVJ6zxDaYe TUpHu9rzgMisCfs7f3M4gP9heS23kF7cmeDbQvscqq6Kpg2AG/RpEvBtMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFuUEB8YauLQeAw7Wus4usadalefMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3MmE0MDk1LTE3YTQtNGMyMy1iODI2LWRmZmJlZmYwMzA0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8uAwDQYJKoZIhvcNAQELBQADggEBADq9Mk0X4PQO7y4uf6KT 1hIdpzWWKG2r+dmQjXkx4/L02SKVyPT31SnCw4jUb5/7s/V/YK/WzPCTNIDYa/8i Ku1LqSIY49HSlznl/Xsbotsie9/x64mEZVwN/rps0xpprbSpJIdsH9+tsfRc0pf0 pT9smvtWeJ4aNa0nZOAJ39GYvXbgVJsurGzRSCGeHrI0AXuP2THy3DC+7zvDiJYF /B6VSHR3VTyJeZII684nhC+qgc8cGHaa125DKISYbBDGH5VgSLqWRv6DQs+hkNmG e+8PrrXXbydOqbXx6kDYE6OGM+CbA2fIilG0AE+xBBy9V6GP93YL14RB0B6Q9tKX JOw= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:39 2024 by rpki-client on console-fra.rpki-client.org