$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86677898-f2f4-412d-80cc-abdd68e6a9a3.roa File: 86677898-f2f4-412d-80cc-abdd68e6a9a3.roa (raw, json) Hash identifier: xqJQn+60YQQBDfIwXw/9GAdJjArOFa2mi2SP53Th1tE= Subject key identifier: F8:49:AC:34:D3:C7:F7:FD:FD:04:B4:CE:60:57:E4:8E:20:EA:E3:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3BEF69C36A8A6FA42A8B82815F368F08FC615F87 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86677898-f2f4-412d-80cc-abdd68e6a9a3.roa Signing time: Tue 16 Jul 2024 00:00:00 +0000 ROA not before: Tue 16 Jul 2024 00:00:00 +0000 ROA not after: Tue 20 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da30:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ef:69:c3:6a:8a:6f:a4:2a:8b:82:81:5f:36:8f:08:fc:61:5f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:00 2024 GMT Not After : Aug 20 23:59:59 2024 GMT Subject: serialNumber=fec5d096adb38d57637484abcfb82438692b7562946f07552c04fb4cbd4e09a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:d3:e0:5b:27:ec:ca:8d:e5:db:8d:09:a9: 4b:bf:2e:3c:5a:b5:fa:52:06:12:af:d8:6e:24:20: 8c:60:34:d2:5a:d6:97:dc:7f:a5:33:19:09:5f:d7: d2:bc:7d:1a:24:b5:41:ea:05:e1:b2:7d:01:e0:b4: 37:12:a8:cd:68:58:a7:63:c3:8b:a7:36:b6:4d:87: 7b:6c:ab:b0:7f:d1:26:d9:c1:91:41:03:f6:bb:5c: 1d:32:b5:5e:18:ca:f1:0a:a9:09:ab:fa:6f:0e:25: da:ee:cd:75:b9:1a:f5:13:d0:8e:83:09:26:d6:9a: 1f:58:7e:a3:92:ff:58:d8:49:6d:8e:13:88:a8:72: 75:46:9f:66:45:2f:25:22:47:55:b8:c9:65:2e:b2: 60:6a:55:67:56:42:e0:fa:13:bd:61:b8:9e:40:8f: dd:ff:02:5d:16:aa:49:d8:24:b6:7b:9a:50:29:ec: da:08:34:5b:5d:b7:35:11:d1:9e:a7:f6:aa:a3:71: 95:18:e0:cc:62:3a:8f:e2:32:7a:62:08:37:58:44: df:c4:de:19:d2:ca:15:1a:1e:1a:65:18:f6:d9:d0: b5:5f:a8:fc:b7:74:b0:7e:b0:ac:b1:73:b0:87:de: 48:b9:0d:bd:bf:73:5c:fa:73:70:c1:60:90:41:40: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:49:AC:34:D3:C7:F7:FD:FD:04:B4:CE:60:57:E4:8E:20:EA:E3:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86677898-f2f4-412d-80cc-abdd68e6a9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da30:4800::/40 Signature Algorithm: sha256WithRSAEncryption 77:f4:fa:f8:e2:b5:bc:af:d4:40:2f:8e:1f:9b:45:6b:6d:90: 16:bb:ff:79:cd:49:87:2f:ea:c0:9e:8c:d1:d3:9b:01:ac:b7: d9:19:4c:c4:9b:52:28:72:25:4a:f0:7c:29:bb:23:5b:2f:af: 24:74:3e:ec:3a:62:77:03:43:84:1a:9f:ca:c8:cd:d6:2f:81: 73:38:5f:cd:a4:06:f6:c2:24:bb:0d:c6:42:a7:f8:f4:b6:5c: 45:97:15:c4:97:72:8e:3e:8a:b7:b5:ac:b9:00:e1:36:1c:81: 35:b8:31:3c:24:35:ca:02:6b:75:98:fd:cb:69:b9:56:4c:ef: fe:5f:ca:0a:8f:44:c0:f6:dc:9d:e9:4c:ab:64:f9:ce:32:7d: 91:34:10:c4:88:79:59:6c:89:1b:60:49:bc:ec:c8:fc:72:ed: 09:d9:73:67:84:d3:0b:8f:c3:fd:7d:ba:4b:81:3b:dd:48:6a: 16:6f:7d:1c:b5:d8:51:8d:49:61:ff:0e:fb:91:ee:84:f8:d5: e7:d3:8f:dc:4c:70:ea:ee:d8:96:39:4a:fb:61:dc:f6:97:6b: 9f:18:20:15:99:91:e4:c8:03:31:bf:38:eb:5c:7f:37:ca:87: 24:8b:81:1c:f9:b0:5d:32:bf:74:d1:91:4d:66:54:e1:16:e1: 8d:30:11:15 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO+9pw2qKb6Qqi4KBXzaPCPxhX4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNjAwMDAwMFoX DTI0MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAZmVjNWQwOTZhZGIzOGQ1NzYzNzQ4 NGFiY2ZiODI0Mzg2OTJiNzU2Mjk0NmYwNzU1MmMwNGZiNGNiZDRlMDlhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+HT4Fsn7MqN5duNCalLvy48WrX6 UgYSr9huJCCMYDTSWtaX3H+lMxkJX9fSvH0aJLVB6gXhsn0B4LQ3EqjNaFinY8OL pza2TYd7bKuwf9Em2cGRQQP2u1wdMrVeGMrxCqkJq/pvDiXa7s11uRr1E9COgwkm 1pofWH6jkv9Y2EltjhOIqHJ1Rp9mRS8lIkdVuMllLrJgalVnVkLg+hO9YbieQI/d /wJdFqpJ2CS2e5pQKezaCDRbXbc1EdGep/aqo3GVGODMYjqP4jJ6Ygg3WETfxN4Z 0soVGh4aZRj22dC1X6j8t3SwfrCssXOwh95IuQ29v3Nc+nNwwWCQQUBoXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPhJrDTTx/f9/QS0zmBX5I4g6uMiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2Njc3ODk4LWYyZjQtNDEyZC04MGNjLWFiZGQ2OGU2YTlhMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMEgwDQYJKoZIhvcNAQELBQADggEBAHf0+vjitbyv1EAvjh+b RWttkBa7/3nNSYcv6sCejNHTmwGst9kZTMSbUihyJUrwfCm7I1svryR0Puw6YncD Q4Qan8rIzdYvgXM4X82kBvbCJLsNxkKn+PS2XEWXFcSXco4+ire1rLkA4TYcgTW4 MTwkNcoCa3WY/ctpuVZM7/5fygqPRMD23J3pTKtk+c4yfZE0EMSIeVlsiRtgSbzs yPxy7QnZc2eE0wuPw/19ukuBO91IahZvfRy12FGNSWH/DvuR7oT41efTj9xMcOru 2JY5Svth3PaXa58YIBWZkeTIAzG/OOtcfzfKhySLgRz5sF0yv3TRkU1mVOEW4Y0w ERU= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:16 2024 by rpki-client on console-fra.rpki-client.org