$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82351471-2c95-4d04-beb9-c56794852ea9.roa File: 82351471-2c95-4d04-beb9-c56794852ea9.roa (raw, json) Hash identifier: d5uQtwdFQIskNvL8UWMQwlCH1i0tpkxQ4vfjM69paeU= Subject key identifier: FF:B6:C1:AE:7C:CC:27:EF:8E:73:B2:03:D5:DE:B5:69:EA:C3:1B:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37B1F2E1F84719E4AE9EA2896B1D812D4A01D4C1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82351471-2c95-4d04-beb9-c56794852ea9.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b1:f2:e1:f8:47:19:e4:ae:9e:a2:89:6b:1d:81:2d:4a:01:d4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=1a59f0dc1a4fb4683ae5d7b617e4d41df5b080d932546c55f3335552f4ca8b99, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:de:b6:a2:c0:e8:79:aa:40:7d:77:0f:51:00: 8e:6c:02:19:55:84:a9:57:8b:e8:ed:4b:dc:c8:4a: 5f:ad:29:e2:04:68:28:b4:56:4c:1d:27:63:65:9f: 78:92:89:bc:5d:71:d8:ca:f3:91:a7:0b:a7:3e:3a: 87:28:ce:f8:db:56:5d:71:4c:35:7a:40:fe:41:09: d2:b1:b3:4b:09:86:d0:98:2d:75:c9:3c:71:96:c4: c9:c5:0c:75:7b:99:e8:29:66:2f:4d:f3:76:58:91: 4c:da:23:a2:49:12:61:d0:89:18:78:39:9b:79:83: 55:a1:85:86:29:de:6b:7c:70:c0:0f:41:f1:94:95: c0:b1:9e:a9:ee:60:51:3a:cb:35:bf:e0:70:98:94: 0d:80:97:45:d0:70:d7:15:b8:02:96:75:b3:33:5b: 7b:a2:1a:c7:77:7c:71:8d:7c:52:d7:8e:76:49:e6: 3e:94:30:1d:42:2a:c1:1a:1b:5a:8b:46:b9:53:cc: 5d:6d:40:7b:9d:2a:30:69:bb:61:79:07:a7:5c:fa: 1c:ff:6c:99:3f:75:d3:34:a0:52:b4:90:ed:f9:01: 4b:18:1f:7b:bc:07:b2:bb:56:82:9a:9f:32:e0:07: e3:c5:0f:87:b6:39:b4:6f:e2:89:8b:64:dd:71:a0: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B6:C1:AE:7C:CC:27:EF:8E:73:B2:03:D5:DE:B5:69:EA:C3:1B:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82351471-2c95-4d04-beb9-c56794852ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:800::/40 Signature Algorithm: sha256WithRSAEncryption b8:06:b7:15:89:1a:ce:b9:73:e3:18:77:40:9f:7e:a8:8c:65: c4:d0:07:a8:c6:fd:89:cd:3b:11:8c:82:af:44:88:c4:34:e7: fa:e1:ab:5f:22:d4:fa:bf:82:58:24:aa:b2:e5:c3:34:16:fd: e1:8b:f2:a8:38:09:e4:94:6d:4b:6f:8d:b7:7c:96:3a:ce:66: fe:e4:49:fd:df:61:58:83:f6:b9:47:8e:83:7c:be:c3:c3:05: 28:59:21:65:9b:4b:8f:22:75:ff:55:17:37:7a:9b:63:b9:5f: 2e:8b:5a:18:3b:22:60:97:9c:79:a3:2f:3d:40:af:60:23:94: 0a:c2:1b:ee:ab:55:2b:20:12:a5:29:a8:62:5b:ba:91:61:5c: 27:6a:98:61:af:99:66:4f:f2:de:d7:7f:40:42:7d:ab:b5:3b: 21:6e:66:97:d8:55:c3:f9:65:e0:16:44:ad:62:a8:8a:58:13: 27:72:ed:62:ea:c3:86:63:96:18:6a:e5:87:bf:67:ab:05:44: f7:7e:dd:b5:3b:a8:05:fd:b3:14:b7:6c:9d:8d:e0:27:dc:0c: a9:b1:48:29:7e:0c:8a:ee:1d:01:5f:91:b4:63:36:d3:5a:5c: 85:d4:d0:86:19:56:c7:d5:26:6b:ee:ec:2c:1c:39:5c:ef:42: 6f:b0:77:fd -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN7Hy4fhHGeSunqKJax2BLUoB1MEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMjAwMDAwMFoX DTI0MTIyNzIzNTk1OVowejFJMEcGA1UEBRNAMWE1OWYwZGMxYTRmYjQ2ODNhZTVk N2I2MTdlNGQ0MWRmNWIwODBkOTMyNTQ2YzU1ZjMzMzU1NTJmNGNhOGI5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN62osDoeapAfXcPUQCObAIZVYSp V4vo7UvcyEpfrSniBGgotFZMHSdjZZ94kom8XXHYyvORpwunPjqHKM7421ZdcUw1 ekD+QQnSsbNLCYbQmC11yTxxlsTJxQx1e5noKWYvTfN2WJFM2iOiSRJh0IkYeDmb eYNVoYWGKd5rfHDAD0HxlJXAsZ6p7mBROss1v+BwmJQNgJdF0HDXFbgClnWzM1t7 ohrHd3xxjXxS1452SeY+lDAdQirBGhtai0a5U8xdbUB7nSowabtheQenXPoc/2yZ P3XTNKBStJDt+QFLGB97vAeyu1aCmp8y4AfjxQ+Htjm0b+KJi2TdcaAQUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP+2wa58zCfvjnOyA9XetWnqwxv2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyMzUxNDcxLTJjOTUtNGQwNC1iZWI5LWM1Njc5NDg1MmVhOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYQgwDQYJKoZIhvcNAQELBQADggEBALgGtxWJGs65c+MYd0Cf fqiMZcTQB6jG/YnNOxGMgq9EiMQ05/rhq18i1Pq/glgkqrLlwzQW/eGL8qg4CeSU bUtvjbd8ljrOZv7kSf3fYViD9rlHjoN8vsPDBShZIWWbS48idf9VFzd6m2O5Xy6L Whg7ImCXnHmjLz1Ar2AjlArCG+6rVSsgEqUpqGJbupFhXCdqmGGvmWZP8t7Xf0BC fau1OyFuZpfYVcP5ZeAWRK1iqIpYEydy7WLqw4Zjlhhq5Ye/Z6sFRPd+3bU7qAX9 sxS3bJ2N4CfcDKmxSCl+DIruHQFfkbRjNtNaXIXU0IYZVsfVJmvu7CwcOVzvQm+w d/0= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:14 2024 by rpki-client on console-ams.rpki-client.org