$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa File: 7e6aad24-fc90-4e21-97ec-c3ba61440554.roa (raw, json) Hash identifier: gKjUz5U6IWBbvKlVukzlSGsIp3VG5c7votWd1mCGGLk= Subject key identifier: D6:F0:4A:2D:0D:F2:A0:06:A6:6F:A1:45:6F:80:8F:CD:E2:A5:EF:50 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 088458F080DF0C30F5BD14DE5A3EB6BA4929139C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 00:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:84:58:f0:80:df:0c:30:f5:bd:14:de:5a:3e:b6:ba:49:29:13:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=0b0c01fd7bbb6eceabf9b61dc80179871c44c522d5a2ff3bc5305b724242c8b9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:10:7b:1d:f9:0d:55:31:ed:35:6c:4c:c6: d3:94:a4:18:df:ee:1c:fe:2e:0c:2b:c8:31:f2:1f: 97:af:55:ca:a1:71:52:45:ac:cf:ac:d0:42:0a:c4: 76:8c:c5:38:91:b1:5e:ec:e8:46:57:11:4f:6e:96: 26:f7:0f:df:e5:fd:c9:37:5e:8e:1e:be:ed:0f:e1: 47:a3:a3:00:38:3a:6f:4b:2f:d1:01:db:80:dd:b9: d3:d0:0a:e0:18:b5:36:cd:f3:d8:56:b3:9e:05:f5: d9:d0:1c:67:8a:16:46:98:b4:2d:01:e7:9d:80:59: 81:ad:09:7c:76:d8:1e:51:bc:ec:5e:8c:30:fc:e8: 78:34:b4:99:c8:1a:77:9f:b1:6e:9b:42:70:ba:66: 97:2a:c0:bb:48:65:51:48:f9:d7:4d:8e:3f:9a:27: be:f6:1e:6c:ae:0b:5f:0b:7e:57:77:bb:34:0d:4f: 24:fa:9f:49:22:49:42:bc:86:9d:07:39:e9:77:ff: 17:ca:db:d6:59:a0:47:f0:8f:ac:f4:9d:21:b9:8a: 46:4e:1e:c7:62:dd:50:b3:0f:f9:ed:20:ab:8b:9d: 41:c6:76:c8:f7:34:3b:66:2f:f8:ff:1d:9e:1e:41: 6f:5a:a0:5a:07:ba:92:0d:7e:b1:01:3f:d6:43:2d: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F0:4A:2D:0D:F2:A0:06:A6:6F:A1:45:6F:80:8F:CD:E2:A5:EF:50 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:2800::/40 Signature Algorithm: sha256WithRSAEncryption a9:d7:aa:1c:9a:91:f4:25:f9:dd:c4:81:9d:a0:86:b5:2c:6e: 40:29:a4:d7:31:5d:1d:a0:d0:c3:45:7a:e6:fc:2a:80:48:76: 59:61:aa:c2:44:10:4e:3c:8a:6f:08:9f:95:57:34:3c:b8:83: 75:ce:40:5b:37:e9:85:66:61:a1:7f:59:20:bc:7f:56:e3:ff: af:0b:bb:ff:72:d9:a6:68:15:49:92:41:ff:92:00:bf:e9:14: 04:c1:43:9f:3f:da:75:a3:7c:8e:1f:52:ac:87:07:c9:03:01: 99:6e:45:81:df:64:d0:7c:c1:7e:54:5f:54:ac:5c:92:95:d2: ba:3c:2d:66:38:90:16:dd:d2:5f:e7:3b:28:b7:52:40:8f:42: 30:2d:68:23:e4:ff:5e:5c:e5:8a:2d:8c:15:b0:7f:8a:ec:e5: dd:04:6e:db:59:04:a5:99:a3:8a:e4:f4:e8:8e:0e:4d:12:36: 71:60:b9:51:57:24:4a:7a:66:3f:68:30:30:96:ab:d9:7c:d3: 16:04:98:a9:46:ac:33:d7:1c:c5:28:88:b3:a9:54:20:0a:c5: 10:d7:98:ec:c1:df:e9:8a:e7:eb:0f:e2:03:12:e3:48:00:f2: de:df:30:8a:bc:94:f0:97:e9:45:cb:5b:00:15:06:a7:95:d1: 80:33:87:a3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCIRY8IDfDDD1vRTeWj62ukkpE5wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAMGIwYzAxZmQ3YmJiNmVjZWFiZjli NjFkYzgwMTc5ODcxYzQ0YzUyMmQ1YTJmZjNiYzUzMDViNzI0MjQyYzhiOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn8Qex35DVUx7TVsTMbTlKQY3+4c /i4MK8gx8h+Xr1XKoXFSRazPrNBCCsR2jMU4kbFe7OhGVxFPbpYm9w/f5f3JN16O Hr7tD+FHo6MAODpvSy/RAduA3bnT0ArgGLU2zfPYVrOeBfXZ0BxnihZGmLQtAeed gFmBrQl8dtgeUbzsXoww/Oh4NLSZyBp3n7Fum0JwumaXKsC7SGVRSPnXTY4/mie+ 9h5srgtfC35Xd7s0DU8k+p9JIklCvIadBznpd/8XytvWWaBH8I+s9J0huYpGTh7H Yt1Qsw/57SCri51BxnbI9zQ7Zi/4/x2eHkFvWqBaB7qSDX6xAT/WQy29JQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNbwSi0N8qAGpm+hRW+Aj83ipe9QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdlNmFhZDI0LWZjOTAtNGUyMS05N2VjLWMzYmE2MTQ0MDU1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/igwDQYJKoZIhvcNAQELBQADggEBAKnXqhyakfQl+d3EgZ2g hrUsbkAppNcxXR2g0MNFeub8KoBIdllhqsJEEE48im8In5VXNDy4g3XOQFs36YVm YaF/WSC8f1bj/68Lu/9y2aZoFUmSQf+SAL/pFATBQ58/2nWjfI4fUqyHB8kDAZlu RYHfZNB8wX5UX1SsXJKV0ro8LWY4kBbd0l/nOyi3UkCPQjAtaCPk/15c5YotjBWw f4rs5d0EbttZBKWZo4rk9OiODk0SNnFguVFXJEp6Zj9oMDCWq9l80xYEmKlGrDPX HMUoiLOpVCAKxRDXmOzB3+mK5+sP4gMS40gA8t7fMIq8lPCX6UXLWwAVBqeV0YAz h6M= -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:15 2024 by rpki-client on console-fra.rpki-client.org