$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/772a4095-17a4-4c23-b826-dffbeff0304b.roa File: 772a4095-17a4-4c23-b826-dffbeff0304b.roa (raw, json) Hash identifier: aCEGQXGv4iev6vGPQjixQHxo6G4oxXXTTA3uTQfEnP8= Subject key identifier: 5A:9A:1E:36:70:D0:73:8B:B6:6B:68:82:2A:EC:0E:69:7C:A1:AA:79 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 131F6877D16931DB47FF340C9E1820CADF70620A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/772a4095-17a4-4c23-b826-dffbeff0304b.roa Signing time: Sat 23 Nov 2024 00:00:00 +0000 ROA not before: Sat 23 Nov 2024 00:00:00 +0000 ROA not after: Sat 28 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1f:68:77:d1:69:31:db:47:ff:34:0c:9e:18:20:ca:df:70:62:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:00 2024 GMT Not After : Dec 28 23:59:59 2024 GMT Subject: serialNumber=f0f9a4ea3c15f03b4b795d0476258af7083dfecc076b933c96950463131d8aaa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:98:a0:0c:de:9d:a9:21:c8:9d:bc:02:4a: f9:e7:e2:71:87:3f:89:e1:68:46:78:ca:d8:d4:aa: c1:75:71:ce:62:15:5d:e2:29:1c:82:cb:3d:c4:c9: 43:63:14:aa:c0:6c:24:0a:c6:52:c7:5e:a8:0f:52: 4b:fc:1e:be:dd:ec:1e:22:e7:8d:50:b3:13:60:ab: 29:89:0a:db:b4:eb:7a:e4:8a:3b:f9:63:8d:60:2d: 55:d5:c1:04:21:e4:ee:13:cf:c7:32:c1:c3:67:09: 0b:d9:a7:65:4a:4a:46:2c:5c:0e:b7:a5:a3:9d:8a: 63:f4:6d:24:e7:0f:fb:8a:fc:ce:0e:b7:fb:83:a2: dd:91:77:62:55:fa:8b:12:4c:65:1f:27:60:1a:b1: 12:24:32:2f:4b:2b:28:c2:f8:5c:9b:fb:8b:7e:91: a5:33:92:c4:5a:28:00:30:2e:96:93:fc:56:6b:12: 4b:97:8a:ce:13:df:8b:de:bf:0c:3b:31:9b:aa:24: bb:fe:d8:ad:c7:54:48:c1:43:02:bc:eb:bc:33:d0: 0e:26:a9:24:cd:87:71:c3:54:d9:ee:4f:76:31:72: 55:31:af:b1:37:a7:4f:49:1e:36:03:84:e1:26:ac: 22:35:8c:8f:18:8d:22:a0:39:8d:58:38:7c:35:0a: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9A:1E:36:70:D0:73:8B:B6:6B:68:82:2A:EC:0E:69:7C:A1:AA:79 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/772a4095-17a4-4c23-b826-dffbeff0304b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e000::/40 Signature Algorithm: sha256WithRSAEncryption 76:d9:54:45:0d:9d:08:87:53:ed:1b:1a:de:95:cb:96:fd:a6: bc:2c:43:84:ea:73:5e:61:82:41:8a:7c:ee:e4:af:db:b9:fd: bd:98:08:a8:da:31:c5:b0:6a:61:ee:97:b3:e5:7c:2c:e0:18: f6:10:b6:12:96:cc:7b:c6:9d:de:d5:2c:7b:3d:f6:43:36:ff: 93:97:31:db:16:2c:21:53:be:c7:3a:2b:3d:c4:0a:ed:d7:a1: 6e:d9:1a:ea:17:4d:de:93:a7:6b:76:4d:69:a7:7a:a1:94:fa: 5e:ce:aa:4d:21:28:4a:82:0d:65:b5:9f:22:2e:4d:2c:7f:bc: 61:c5:52:77:bd:50:c8:fb:86:76:67:02:c6:b8:22:c9:76:32: 4e:99:c4:b1:60:9f:6a:ca:fc:3c:a0:a4:00:8f:53:77:f6:a2: e5:91:44:55:6c:8b:d3:24:91:88:e4:8b:dc:96:29:3e:81:7c: d8:02:93:29:4d:ac:fa:70:4e:9d:c8:57:be:39:ba:df:a7:11: 57:18:65:7c:33:d3:5c:43:2f:df:73:d1:86:47:b6:5c:67:70: 48:66:f6:72:04:a1:a3:06:0e:3c:a1:44:08:fa:90:09:6a:69: 34:aa:b5:62:68:06:84:78:23:48:bb:56:6e:f5:91:eb:de:01: 9a:d4:6f:92 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEx9od9FpMdtH/zQMnhggyt9wYgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMzAwMDAwMFoX DTI0MTIyODIzNTk1OVowejFJMEcGA1UEBRNAZjBmOWE0ZWEzYzE1ZjAzYjRiNzk1 ZDA0NzYyNThhZjcwODNkZmVjYzA3NmI5MzNjOTY5NTA0NjMxMzFkOGFhYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSKYoAzenakhyJ28Akr55+Jxhz+J 4WhGeMrY1KrBdXHOYhVd4ikcgss9xMlDYxSqwGwkCsZSx16oD1JL/B6+3eweIueN ULMTYKspiQrbtOt65Io7+WONYC1V1cEEIeTuE8/HMsHDZwkL2adlSkpGLFwOt6Wj nYpj9G0k5w/7ivzODrf7g6LdkXdiVfqLEkxlHydgGrESJDIvSysowvhcm/uLfpGl M5LEWigAMC6Wk/xWaxJLl4rOE9+L3r8MOzGbqiS7/titx1RIwUMCvOu8M9AOJqkk zYdxw1TZ7k92MXJVMa+xN6dPSR42A4ThJqwiNYyPGI0ioDmNWDh8NQpC5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFqaHjZw0HOLtmtogirsDml8oap5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3MmE0MDk1LTE3YTQtNGMyMy1iODI2LWRmZmJlZmYwMzA0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8uAwDQYJKoZIhvcNAQELBQADggEBAHbZVEUNnQiHU+0bGt6V y5b9prwsQ4Tqc15hgkGKfO7kr9u5/b2YCKjaMcWwamHul7PlfCzgGPYQthKWzHvG nd7VLHs99kM2/5OXMdsWLCFTvsc6Kz3ECu3XoW7ZGuoXTd6Tp2t2TWmneqGU+l7O qk0hKEqCDWW1nyIuTSx/vGHFUne9UMj7hnZnAsa4Isl2Mk6ZxLFgn2rK/DygpACP U3f2ouWRRFVsi9MkkYjki9yWKT6BfNgCkylNrPpwTp3IV745ut+nEVcYZXwz01xD L99z0YZHtlxncEhm9nIEoaMGDjyhRAj6kAlqaTSqtWJoBoR4I0i7Vm71keveAZrU b5I= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:13 2024 by rpki-client on console-ams.rpki-client.org