$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87773ae6-b7d4-41d4-9d54-c2603ae91d1d.roa File: 87773ae6-b7d4-41d4-9d54-c2603ae91d1d.roa (raw, json) Hash identifier: 4J0ZV/Xczd3NxzRa8ixJI6/Nc+5PIRT7qOz5P3mYWQs= Subject key identifier: 30:4C:B1:E2:71:D9:97:CB:7F:FE:58:05:40:B8:64:34:E8:CB:E5:25 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4ABA6ACD233A6A5174B68C4A7415229C426B53D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87773ae6-b7d4-41d4-9d54-c2603ae91d1d.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ba:6a:cd:23:3a:6a:51:74:b6:8c:4a:74:15:22:9c:42:6b:53:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=848662df9beb453b89cdbb94e8aa47544b50b3334224ade84883c50f2ee228d4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:82:97:f9:d1:1e:76:09:7e:dc:d3:e1:f8: 7a:16:e4:53:eb:ec:a9:d1:fc:48:76:95:d5:12:28: b8:eb:00:50:d3:aa:c0:ab:8c:2c:ab:34:48:e5:83: ad:f3:89:d7:09:ea:7e:e4:3d:08:c7:8f:97:56:04: f0:15:73:a7:23:7b:9a:66:48:65:2f:f4:c3:c9:9e: b8:72:0b:22:f1:6d:12:43:d4:96:ae:fa:97:44:63: bb:27:39:bd:a6:59:42:4a:78:8b:d4:86:bc:ca:2c: eb:68:36:90:98:40:7c:c7:3a:94:88:b4:58:59:34: 14:af:bb:1b:f1:77:88:31:3d:a9:83:76:7e:e1:2d: 8b:38:b3:73:4e:0c:c3:36:80:50:75:25:8f:3a:a7: 8e:19:6a:b3:73:5c:7c:c2:e1:83:1e:eb:2c:4c:ec: 9b:00:8f:2d:6c:6f:4a:b9:8c:20:2b:46:59:d9:6f: 00:0c:aa:dd:d8:b7:1d:e3:3b:d5:cd:f5:0a:2b:eb: 7f:88:8b:e0:3b:1e:70:0d:84:47:a6:7a:47:9e:f0: 97:37:4a:00:f0:06:b9:a7:ed:b0:dc:b8:b5:23:c2: d1:cd:49:66:82:df:3b:14:87:9b:d2:c2:11:0a:40: 65:2d:24:19:7a:4e:8e:bf:d1:58:8a:c4:d9:f5:67: da:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4C:B1:E2:71:D9:97:CB:7F:FE:58:05:40:B8:64:34:E8:CB:E5:25 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87773ae6-b7d4-41d4-9d54-c2603ae91d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b000::/40 Signature Algorithm: sha256WithRSAEncryption b0:74:82:9d:f7:08:63:8b:84:ec:e2:da:f9:e6:ae:23:fa:19: c9:d9:e8:b5:59:f0:ec:1f:15:80:a9:7c:49:a1:f1:ad:bb:81: 5f:7b:8f:61:79:b0:9f:bf:91:d9:d8:e5:e5:59:0c:77:16:be: e3:a3:66:5f:1a:38:50:d3:a6:87:6b:fc:51:9d:5b:f2:c8:87: f4:20:32:57:66:15:5b:6c:b5:73:52:e8:a3:87:08:fc:0a:e4: a3:66:9b:ed:10:4f:ce:10:75:d0:14:be:28:9b:19:7e:cc:05: 9b:5b:60:08:67:4d:bb:93:f6:1a:c1:eb:b5:44:e6:5a:57:52: 3c:eb:09:52:9e:cd:60:0e:93:a3:ee:3f:1a:75:f9:d5:4c:9a: 67:0e:dd:0f:d3:4e:58:ad:48:d7:fd:26:d3:57:d6:fd:02:51: 7c:c9:8d:e4:bf:fe:44:f2:b2:da:67:0a:ea:4d:37:17:e6:b9: b7:85:88:1c:8b:8a:dd:df:f6:03:15:bf:33:71:d7:1b:c7:84: 2c:2e:32:21:70:42:94:1e:bd:d1:94:c0:41:20:59:cb:8d:44: d0:9b:8e:bb:4c:e1:e1:ec:81:b7:86:cd:42:b1:15:de:d9:59: 01:a7:68:d5:fd:24:c6:b2:dd:e1:9e:0e:3c:40:04:a0:13:23: 93:02:91:d3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSrpqzSM6alF0toxKdBUinEJrU9UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAODQ4NjYyZGY5YmViNDUzYjg5Y2Ri Yjk0ZThhYTQ3NTQ0YjUwYjMzMzQyMjRhZGU4NDg4M2M1MGYyZWUyMjhkNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHWCl/nRHnYJftzT4fh6FuRT6+yp 0fxIdpXVEii46wBQ06rAq4wsqzRI5YOt84nXCep+5D0Ix4+XVgTwFXOnI3uaZkhl L/TDyZ64cgsi8W0SQ9SWrvqXRGO7Jzm9pllCSniL1Ia8yizraDaQmEB8xzqUiLRY WTQUr7sb8XeIMT2pg3Z+4S2LOLNzTgzDNoBQdSWPOqeOGWqzc1x8wuGDHussTOyb AI8tbG9KuYwgK0ZZ2W8ADKrd2Lcd4zvVzfUKK+t/iIvgOx5wDYRHpnpHnvCXN0oA 8Aa5p+2w3Li1I8LRzUlmgt87FIeb0sIRCkBlLSQZek6Ov9FYisTZ9WfatQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDBMseJx2ZfLf/5YBUC4ZDToy+UlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg3NzczYWU2LWI3ZDQtNDFkNC05ZDU0LWMyNjAzYWU5MWQxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBALB0gp33CGOLhOzi2vnm riP6GcnZ6LVZ8OwfFYCpfEmh8a27gV97j2F5sJ+/kdnY5eVZDHcWvuOjZl8aOFDT podr/FGdW/LIh/QgMldmFVtstXNS6KOHCPwK5KNmm+0QT84QddAUviibGX7MBZtb YAhnTbuT9hrB67VE5lpXUjzrCVKezWAOk6PuPxp1+dVMmmcO3Q/TTlitSNf9JtNX 1v0CUXzJjeS//kTystpnCupNNxfmubeFiByLit3f9gMVvzNx1xvHhCwuMiFwQpQe vdGUwEEgWcuNRNCbjrtM4eHsgbeGzUKxFd7ZWQGnaNX9JMay3eGeDjxABKATI5MC kdM= -----END CERTIFICATE-----Generated at Thu Apr 25 01:59:40 2024 by rpki-client on console-ams.rpki-client.org