$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82351471-2c95-4d04-beb9-c56794852ea9.roa File: 82351471-2c95-4d04-beb9-c56794852ea9.roa (raw, json) Hash identifier: /N/IzFdjw7xW1ImuHdUY8uADuvXkMlMqbaSBYQp2jDA= Subject key identifier: 15:8D:6D:1F:63:EC:90:78:48:75:8E:F5:B4:24:55:C2:06:58:C6:AE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1B380FD4278485C0EE10CC41CD2CCA5EA59B0CB9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82351471-2c95-4d04-beb9-c56794852ea9.roa Signing time: Tue 09 Apr 2024 00:00:00 +0000 ROA not before: Tue 09 Apr 2024 00:00:00 +0000 ROA not after: Tue 14 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:38:0f:d4:27:84:85:c0:ee:10:cc:41:cd:2c:ca:5e:a5:9b:0c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 9 00:00:00 2024 GMT Not After : May 14 23:59:59 2024 GMT Subject: serialNumber=da7f4e8f463a3fcb5de0bb0f58162ba95f850fc376d0a43d3b287cc9ca514a6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:32:18:7b:e7:24:77:6c:31:d6:98:c5:20:54: 01:b1:94:25:25:92:8c:65:39:93:67:ee:c2:88:7b: 23:9d:f2:91:fe:11:cb:cd:79:89:41:9e:7b:73:c8: 98:d5:c4:7d:83:91:02:88:6c:98:5c:6f:50:55:a6: 20:24:ba:eb:39:58:4e:35:24:27:8a:90:a1:c5:69: 60:44:0a:55:64:2f:e2:81:28:38:a6:80:85:73:64: 4a:a5:0b:3b:40:1e:7b:e4:f5:c3:0f:56:46:59:c3: 6e:e4:3e:6e:e0:ea:aa:7d:77:42:8d:3a:2f:cb:85: 34:bd:b0:28:fa:4f:a8:f6:23:86:3f:cc:32:14:33: 24:da:df:74:c6:66:bd:5d:ed:79:07:4e:6f:de:d5: 02:14:9b:57:84:51:39:3b:8f:f2:5d:02:ff:f0:01: 4c:fc:2b:10:9f:3b:dc:99:db:6c:53:81:82:91:2b: 2a:ea:5d:7d:c6:b4:a0:b8:a7:ae:a2:71:ee:70:f6: c7:f0:c9:cf:7d:f1:69:5c:15:4f:b1:cd:16:59:40: 07:e5:34:2a:09:cd:db:ba:24:ab:ff:ab:cb:30:69: 86:b7:4a:c3:dc:f4:0a:6d:4e:61:cd:c1:55:fa:1a: 28:5f:a4:4b:fd:e7:e8:e2:b9:3a:e2:9e:cd:b8:4e: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8D:6D:1F:63:EC:90:78:48:75:8E:F5:B4:24:55:C2:06:58:C6:AE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82351471-2c95-4d04-beb9-c56794852ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:800::/40 Signature Algorithm: sha256WithRSAEncryption 6d:2c:02:71:59:e6:a6:fe:59:e0:bd:81:00:b6:d4:ba:f5:9d: af:22:db:c0:6d:18:99:8a:63:e2:d0:99:6b:18:f1:6a:7e:33: a5:1f:c6:33:23:18:99:7d:ac:3b:6f:c8:8d:e0:fb:2e:8b:b3: 1c:96:86:c4:12:68:4e:03:6f:2e:8f:81:0e:36:28:f9:65:8c: d8:76:9f:66:b8:a1:84:5f:39:78:63:f5:d4:e0:51:c0:0c:23: 1a:31:d6:91:dd:f4:7c:8a:fa:cb:91:9b:10:6c:c8:8d:e1:ad: cd:36:36:ae:fe:66:6a:84:64:c3:10:6a:31:5a:14:f9:5c:59: b2:01:99:63:ce:d1:b0:6b:6e:82:50:84:0c:3a:39:66:f6:0e: a5:f3:9a:ba:a3:70:6e:20:1f:46:73:6a:73:ac:c4:2f:07:a6: b7:0f:eb:d4:06:bd:de:04:59:7f:cb:35:e6:41:91:cf:5a:a2: 8f:9e:80:fc:e6:e2:c9:b2:29:dc:03:35:3f:63:c8:1e:0c:de: ff:9d:aa:1b:d7:85:48:58:4b:b8:b7:7b:e5:88:bf:92:5a:88: dd:4e:c1:be:7b:2a:43:46:67:ba:55:d3:05:fc:54:12:3c:e8: c6:9c:48:8e:d8:97:86:70:ae:3b:09:a1:fc:6f:5d:a2:b1:ef: 6b:89:2e:7d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGzgP1CeEhcDuEMxBzSzKXqWbDLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwOTAwMDAwMFoX DTI0MDUxNDIzNTk1OVowejFJMEcGA1UEBRNAZGE3ZjRlOGY0NjNhM2ZjYjVkZTBi YjBmNTgxNjJiYTk1Zjg1MGZjMzc2ZDBhNDNkM2IyODdjYzljYTUxNGE2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjIYe+ckd2wx1pjFIFQBsZQlJZKM ZTmTZ+7CiHsjnfKR/hHLzXmJQZ57c8iY1cR9g5ECiGyYXG9QVaYgJLrrOVhONSQn ipChxWlgRApVZC/igSg4poCFc2RKpQs7QB575PXDD1ZGWcNu5D5u4OqqfXdCjTov y4U0vbAo+k+o9iOGP8wyFDMk2t90xma9Xe15B05v3tUCFJtXhFE5O4/yXQL/8AFM /CsQnzvcmdtsU4GCkSsq6l19xrSguKeuonHucPbH8MnPffFpXBVPsc0WWUAH5TQq Cc3buiSr/6vLMGmGt0rD3PQKbU5hzcFV+hooX6RL/efo4rk64p7NuE73HwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBWNbR9j7JB4SHWO9bQkVcIGWMauMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyMzUxNDcxLTJjOTUtNGQwNC1iZWI5LWM1Njc5NDg1MmVhOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYQgwDQYJKoZIhvcNAQELBQADggEBAG0sAnFZ5qb+WeC9gQC2 1Lr1na8i28BtGJmKY+LQmWsY8Wp+M6UfxjMjGJl9rDtvyI3g+y6LsxyWhsQSaE4D by6PgQ42KPlljNh2n2a4oYRfOXhj9dTgUcAMIxox1pHd9HyK+suRmxBsyI3hrc02 Nq7+ZmqEZMMQajFaFPlcWbIBmWPO0bBrboJQhAw6OWb2DqXzmrqjcG4gH0ZzanOs xC8HprcP69QGvd4EWX/LNeZBkc9aoo+egPzm4smyKdwDNT9jyB4M3v+dqhvXhUhY S7i3e+WIv5JaiN1Owb57KkNGZ7pV0wX8VBI86MacSI7Yl4ZwrjsJofxvXaKx72uJ Ln0= -----END CERTIFICATE-----Generated at Thu May 2 14:32:52 2024 by rpki-client on console-fra.rpki-client.org