$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/883173fa-76c4-47c3-b40b-95488bac558f.roa File: 883173fa-76c4-47c3-b40b-95488bac558f.roa (raw, json) Hash identifier: W7KLwkVQOca2kxT+uC6zfO1OQeXUwjeu5g46GxjjHnA= Subject key identifier: D7:AF:76:23:28:24:40:95:0D:10:9A:D4:2D:E0:21:2D:ED:8D:06:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1B815EE3DC6A155F57D84A927C789274602BCAB1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/883173fa-76c4-47c3-b40b-95488bac558f.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 43.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:81:5e:e3:dc:6a:15:5f:57:d8:4a:92:7c:78:92:74:60:2b:ca:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=1a3535bbb317a14cfe8b661bae7c09768f4de2327d63fa90aba535bf4f4b0adf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:d3:d3:3f:e2:ee:37:9e:eb:3d:44:3d:10: f3:f7:cf:91:fa:89:24:19:06:65:99:52:62:a2:9e: a2:fb:33:7a:19:e0:93:a2:58:e9:48:02:7f:e4:b6: 25:90:bb:35:4c:9f:89:d0:33:06:90:03:a0:4b:62: 4e:76:98:f8:01:ce:d5:b3:73:2e:6f:de:f7:6c:2a: b1:94:a0:87:d7:b0:03:31:e6:70:e1:4b:0e:a5:d3: 76:c4:2d:0b:ab:f7:ab:ed:f6:85:68:96:3e:ac:30: 3c:b7:61:d9:00:f3:18:8b:f8:d2:87:8d:87:c0:74: b5:77:36:b4:ed:12:f4:4d:7e:1a:1e:6c:2e:0f:ec: d5:80:9a:95:02:d2:7f:cf:5b:cd:dd:18:b9:c5:7d: d8:19:d9:0a:7b:3a:75:bb:a6:e9:1b:45:a9:0d:83: 31:85:27:22:37:c8:95:36:50:f9:50:0c:e4:f3:e0: a2:46:d4:0a:62:52:c7:2d:46:4e:38:59:d0:1b:db: 15:59:92:d4:78:ff:3a:6b:ff:2a:7a:96:b1:27:aa: 44:c3:3e:7d:f8:f6:73:76:84:b4:f4:75:6b:ef:19: 92:a6:71:a1:35:4e:b3:e6:cf:02:f0:0a:10:b6:87: a2:e0:a9:90:b3:90:8d:44:85:35:da:2c:08:9b:d0: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:76:23:28:24:40:95:0D:10:9A:D4:2D:E0:21:2D:ED:8D:06:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/883173fa-76c4-47c3-b40b-95488bac558f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:e2:e8:59:2b:12:11:4a:40:46:3e:2c:6e:d6:84:0b:d6:ba: 41:f3:df:f6:bb:2c:b3:12:bc:fb:1e:6b:97:18:08:d1:13:c7: d5:1b:e1:73:03:87:2a:f9:c1:bf:65:50:15:ba:ba:b9:bf:9d: 6c:d3:c4:0f:c0:f2:7c:71:5f:9b:ce:bc:77:c4:21:e9:7d:77: d2:fe:12:10:5c:c6:63:01:33:16:c5:a3:cf:94:a9:fc:20:6b: ff:12:ed:67:bd:3a:49:eb:cf:e6:0f:03:e4:09:e5:4e:e5:20: b6:8f:f5:4f:91:f0:61:b3:3b:fa:3f:02:c1:20:18:73:d8:6a: dd:73:18:25:4b:4e:2e:47:6f:67:ff:66:7b:24:83:44:f0:85: f4:2f:44:90:ac:e1:2b:3a:7b:15:9c:d0:dd:51:2c:52:0d:d3: 3f:f8:71:a1:94:a3:7f:7a:5a:35:db:12:ae:89:be:e6:e2:a5: 95:06:ed:b3:85:a6:a5:71:2e:40:86:56:3f:39:45:d2:6f:f3: 96:59:7f:f7:7f:dc:e9:b0:18:de:d7:53:9c:e0:e9:32:3a:9d: e4:7b:e1:3a:44:ea:f8:c9:f1:88:10:09:9e:c4:fe:b5:9b:dc: b3:66:5f:23:80:4c:f1:67:3e:31:6a:30:e9:00:cd:17:38:ad: 00:2e:19:70 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUG4Fe49xqFV9X2EqSfHiSdGAryrEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAMWEzNTM1YmJiMzE3YTE0Y2ZlOGI2 NjFiYWU3YzA5NzY4ZjRkZTIzMjdkNjNmYTkwYWJhNTM1YmY0ZjRiMGFkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRPT0z/i7jee6z1EPRDz98+R+okk GQZlmVJiop6i+zN6GeCToljpSAJ/5LYlkLs1TJ+J0DMGkAOgS2JOdpj4Ac7Vs3Mu b973bCqxlKCH17ADMeZw4UsOpdN2xC0Lq/er7faFaJY+rDA8t2HZAPMYi/jSh42H wHS1dza07RL0TX4aHmwuD+zVgJqVAtJ/z1vN3Ri5xX3YGdkKezp1u6bpG0WpDYMx hSciN8iVNlD5UAzk8+CiRtQKYlLHLUZOOFnQG9sVWZLUeP86a/8qepaxJ6pEwz59 +PZzdoS09HVr7xmSpnGhNU6z5s8C8AoQtoei4KmQs5CNRIU12iwIm9CELQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFNevdiMoJECVDRCa1C3gIS3tjQYfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg4MzE3M2ZhLTc2YzQtNDdjMy1iNDBiLTk1NDg4YmFjNTU4Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9swDQYJKoZIhvcNAQELBQADggEBAA/i6FkrEhFKQEY+LG7WhAvW ukHz3/a7LLMSvPsea5cYCNETx9Ub4XMDhyr5wb9lUBW6urm/nWzTxA/A8nxxX5vO vHfEIel9d9L+EhBcxmMBMxbFo8+Uqfwga/8S7We9Oknrz+YPA+QJ5U7lILaP9U+R 8GGzO/o/AsEgGHPYat1zGCVLTi5Hb2f/Znskg0TwhfQvRJCs4Ss6exWc0N1RLFIN 0z/4caGUo396WjXbEq6JvubipZUG7bOFpqVxLkCGVj85RdJv85ZZf/d/3OmwGN7X U5zg6TI6neR74TpE6vjJ8YgQCZ7E/rWb3LNmXyOATPFnPjFqMOkAzRc4rQAuGXA= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:35 2024 by rpki-client on console-fra.rpki-client.org