$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa File: 7e6aad24-fc90-4e21-97ec-c3ba61440554.roa (raw, json) Hash identifier: l8yc6jQOeQ/rlEJyBHcCHbfbRMFckyM02K9QzqdBbk8= Subject key identifier: AE:23:8D:EB:91:3C:AC:2B:86:CA:C0:BC:7E:8C:B3:9F:D7:0C:B5:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E65066B772902C85D7AC20661085A61D7D1AABE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:65:06:6b:77:29:02:c8:5d:7a:c2:06:61:08:5a:61:d7:d1:aa:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=62115e867dd39700afb9806633aaa7330105f0880ac3430dab9a7f4c3cbbb39d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9a:d5:eb:ea:dc:39:f9:b0:52:24:85:d9:9a: b5:17:34:a6:74:6e:31:57:c7:7d:0b:80:28:2b:80: 34:12:6d:00:83:c4:fa:5a:36:31:c2:ca:eb:b5:76: 83:9c:9e:96:24:c2:ec:d0:61:b8:ac:41:0e:96:d8: fb:f7:56:5a:5d:a9:99:83:27:17:31:02:03:17:8f: 98:f1:e3:95:e1:f2:b7:55:52:85:25:19:63:49:b7: b2:49:3e:ac:a9:79:8f:1d:5f:b7:ad:90:35:37:2a: 2c:31:c4:7a:82:2e:4f:fd:27:21:09:7c:a9:eb:bb: 53:cb:5d:c4:33:d0:57:75:ea:b3:63:18:11:8f:49: 65:d5:28:0d:0e:51:58:13:75:bd:b7:da:b2:62:ff: ea:da:6c:41:95:36:4b:37:00:fa:c7:5f:db:10:4f: 7d:ad:e1:66:3d:31:e5:fe:a8:e5:38:1b:48:50:bd: 15:bc:a9:43:55:40:8c:98:8a:10:6e:b7:05:29:ac: c7:1f:72:22:9f:6b:b9:39:c9:f0:0c:f4:e9:3f:e3: 49:e8:5f:8e:c9:57:bc:3e:11:27:5e:2f:3a:18:31: 10:1d:d4:f8:44:09:65:0a:a8:a7:02:77:8e:ca:48: e8:fe:4b:4f:1c:81:d2:dc:26:f1:63:61:cc:fe:61: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:23:8D:EB:91:3C:AC:2B:86:CA:C0:BC:7E:8C:B3:9F:D7:0C:B5:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:2800::/40 Signature Algorithm: sha256WithRSAEncryption c4:b8:93:40:3c:b0:3f:11:3e:17:ad:a2:e7:5a:e0:e9:a3:56: 13:fd:41:1f:44:bd:eb:81:34:bc:09:e8:c6:27:f2:22:8e:59: d2:c2:3a:0c:6d:d2:ea:c2:ee:6c:cc:93:57:7c:2c:2f:f4:30: 0b:f7:f0:b0:8f:eb:8b:09:b6:21:a2:07:22:53:7c:a6:5e:71: e9:c2:f1:8e:5a:92:d0:0e:5d:14:33:8e:20:9f:39:d9:e3:b8: ec:d3:37:02:1c:ce:27:73:f2:d6:77:94:b0:14:1e:94:18:4b: 51:d9:78:eb:9f:59:c9:3c:e9:52:97:48:18:fb:23:06:ef:d1: aa:04:48:22:d1:82:74:e0:19:17:7c:9a:ea:70:60:33:6a:0f: 3b:b1:22:dd:01:5c:83:32:23:9e:4c:d0:4a:36:1f:65:94:f2: a0:08:db:17:6d:9a:b6:b6:57:e1:7b:2b:d3:30:46:94:66:e2: d2:2e:ba:76:ba:2c:d5:d1:ae:a6:c7:c4:87:66:22:59:f4:bb: 6a:70:10:77:fc:12:3b:ab:4c:d8:83:5a:ea:74:f1:08:e2:eb: be:24:9b:97:e4:6f:60:64:5e:a6:b1:f7:7a:3c:d9:10:f1:7a: a5:bc:ca:11:e1:ec:e9:7f:e7:b8:dc:4e:8c:a0:9e:1f:cf:03: fc:58:fb:d4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXmUGa3cpAshdesIGYQhaYdfRqr4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNANjIxMTVlODY3ZGQzOTcwMGFmYjk4 MDY2MzNhYWE3MzMwMTA1ZjA4ODBhYzM0MzBkYWI5YTdmNGMzY2JiYjM5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJrV6+rcOfmwUiSF2Zq1FzSmdG4x V8d9C4AoK4A0Em0Ag8T6WjYxwsrrtXaDnJ6WJMLs0GG4rEEOltj791ZaXamZgycX MQIDF4+Y8eOV4fK3VVKFJRljSbeyST6sqXmPHV+3rZA1NyosMcR6gi5P/SchCXyp 67tTy13EM9BXdeqzYxgRj0ll1SgNDlFYE3W9t9qyYv/q2mxBlTZLNwD6x1/bEE99 reFmPTHl/qjlOBtIUL0VvKlDVUCMmIoQbrcFKazHH3Iin2u5OcnwDPTpP+NJ6F+O yVe8PhEnXi86GDEQHdT4RAllCqinAneOykjo/ktPHIHS3CbxY2HM/mG9HQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK4jjeuRPKwrhsrAvH6Ms5/XDLWEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdlNmFhZDI0LWZjOTAtNGUyMS05N2VjLWMzYmE2MTQ0MDU1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/igwDQYJKoZIhvcNAQELBQADggEBAMS4k0A8sD8RPhetouda 4OmjVhP9QR9EveuBNLwJ6MYn8iKOWdLCOgxt0urC7mzMk1d8LC/0MAv38LCP64sJ tiGiByJTfKZecenC8Y5aktAOXRQzjiCfOdnjuOzTNwIczidz8tZ3lLAUHpQYS1HZ eOufWck86VKXSBj7Iwbv0aoESCLRgnTgGRd8mupwYDNqDzuxIt0BXIMyI55M0Eo2 H2WU8qAI2xdtmra2V+F7K9MwRpRm4tIuuna6LNXRrqbHxIdmIln0u2pwEHf8Ejur TNiDWup08Qji674km5fkb2BkXqax93o82RDxeqW8yhHh7Ol/57jcToygnh/PA/xY +9Q= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:33 2024 by rpki-client on console-fra.rpki-client.org