$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87773ae6-b7d4-41d4-9d54-c2603ae91d1d.roa File: 87773ae6-b7d4-41d4-9d54-c2603ae91d1d.roa (raw, json) Hash identifier: CSjwbqM8BarXyU4j9pr5Mcm44uTJIr0UvWt+cuEz148= Subject key identifier: EF:6E:BC:71:45:BC:06:87:5E:66:7F:39:B2:DF:1C:17:E0:35:14:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24465939FA13CDBAAB512C9E2E4508207C1E05FA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87773ae6-b7d4-41d4-9d54-c2603ae91d1d.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:46:59:39:fa:13:cd:ba:ab:51:2c:9e:2e:45:08:20:7c:1e:05:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=99dd11ed538d856bdc0b53099b9e871aeeb3d7c99400468b486ad00be1f5a07e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:45:11:9e:fb:16:d9:d0:2b:67:e1:8a:53: fa:b4:bd:6d:18:77:1c:88:9c:29:2f:2f:2d:da:c2: b5:1e:a7:6b:55:13:88:13:f5:09:50:da:5b:0c:de: 86:8b:30:ca:0b:6c:ee:62:57:2a:a8:7a:2e:11:a7: 76:91:ec:18:0d:7f:af:8d:20:4b:eb:5c:50:07:3a: 00:77:5b:3d:ba:25:f2:6b:b3:d2:c4:b3:d8:84:4d: f5:6e:e7:48:63:b0:78:1b:c6:a9:17:49:55:0a:00: 93:32:36:0c:12:88:e8:cb:76:34:21:06:99:d7:df: a9:df:39:b7:e0:a1:c3:fd:31:2c:f2:5f:db:44:eb: 2c:6c:aa:59:0d:92:b3:9c:33:ea:de:6e:e4:7b:08: 60:8c:17:31:b9:c5:31:d6:92:4a:50:65:00:7b:ca: 8a:4a:f0:14:d1:3c:ff:fc:e5:9b:77:0c:2b:c0:a7: 14:4e:dc:37:87:53:20:9c:82:74:d9:77:b6:7f:74: 66:77:20:52:c2:93:10:c3:79:7b:71:2b:55:14:8f: bf:ee:2d:58:2c:20:96:be:d3:71:8d:04:75:5e:86: 66:52:78:f7:57:56:52:aa:ef:f5:e3:92:95:f4:b2: 82:f8:a4:d7:1a:84:96:16:57:41:2e:74:82:01:6b: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6E:BC:71:45:BC:06:87:5E:66:7F:39:B2:DF:1C:17:E0:35:14:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87773ae6-b7d4-41d4-9d54-c2603ae91d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b000::/40 Signature Algorithm: sha256WithRSAEncryption 2c:0a:a4:af:52:34:9a:b0:70:5d:92:c6:a8:b9:b6:55:a0:f1: 76:da:49:54:40:c1:2f:e1:6b:ef:5a:f2:09:a9:e2:d3:cc:36: df:ee:80:8c:f5:51:9d:00:14:7e:11:00:79:ed:e5:04:42:b4: 18:0a:08:47:5e:ce:08:f2:a7:4f:18:a7:c1:0d:d5:3b:b5:e2: ff:a0:ef:ff:b1:04:94:e8:db:cc:23:35:c8:78:ea:d2:6a:cd: 21:d5:fb:db:89:03:da:53:d0:ed:70:8d:1a:c0:83:dc:61:b2: d4:11:7a:af:d1:bb:e7:92:f7:04:c0:a7:16:cd:c3:bb:64:d9: fd:f4:13:5e:1f:7f:d0:8a:f3:5d:d7:95:0a:f4:d4:92:13:82: 01:48:da:08:98:0b:d9:71:56:00:d9:e4:37:b8:07:e5:39:ff: 89:91:4c:40:a8:6f:04:43:88:b3:b8:8b:43:d7:98:09:02:f6: 1a:23:7d:ed:89:60:f8:d0:75:4f:8f:94:97:fb:71:ee:69:7b: a0:8b:1e:aa:8f:37:65:73:bd:e5:f9:c7:58:cb:5f:c1:54:8d: ee:f5:1e:ec:16:0e:f0:8d:0c:7f:14:88:3e:c8:5d:06:43:31: 80:6b:d8:b3:d4:a1:00:50:ac:05:49:89:6f:49:51:4e:ed:49: 88:c1:71:06 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJEZZOfoTzbqrUSyeLkUIIHweBfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAOTlkZDExZWQ1MzhkODU2YmRjMGI1 MzA5OWI5ZTg3MWFlZWIzZDdjOTk0MDA0NjhiNDg2YWQwMGJlMWY1YTA3ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjxFEZ77FtnQK2fhilP6tL1tGHcc iJwpLy8t2sK1HqdrVROIE/UJUNpbDN6GizDKC2zuYlcqqHouEad2kewYDX+vjSBL 61xQBzoAd1s9uiXya7PSxLPYhE31budIY7B4G8apF0lVCgCTMjYMEojoy3Y0IQaZ 19+p3zm34KHD/TEs8l/bROssbKpZDZKznDPq3m7kewhgjBcxucUx1pJKUGUAe8qK SvAU0Tz//OWbdwwrwKcUTtw3h1MgnIJ02Xe2f3RmdyBSwpMQw3l7cStVFI+/7i1Y LCCWvtNxjQR1XoZmUnj3V1ZSqu/145KV9LKC+KTXGoSWFldBLnSCAWvkcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO9uvHFFvAaHXmZ/ObLfHBfgNRR1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg3NzczYWU2LWI3ZDQtNDFkNC05ZDU0LWMyNjAzYWU5MWQxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBACwKpK9SNJqwcF2Sxqi5 tlWg8XbaSVRAwS/ha+9a8gmp4tPMNt/ugIz1UZ0AFH4RAHnt5QRCtBgKCEdezgjy p08Yp8EN1Tu14v+g7/+xBJTo28wjNch46tJqzSHV+9uJA9pT0O1wjRrAg9xhstQR eq/Ru+eS9wTApxbNw7tk2f30E14ff9CK813XlQr01JITggFI2giYC9lxVgDZ5De4 B+U5/4mRTECobwRDiLO4i0PXmAkC9hojfe2JYPjQdU+PlJf7ce5pe6CLHqqPN2Vz veX5x1jLX8FUje71HuwWDvCNDH8UiD7IXQZDMYBr2LPUoQBQrAVJiW9JUU7tSYjB cQY= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org