$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e9911d7-3c07-4c55-8e89-3fa929e33433.roa File: 8e9911d7-3c07-4c55-8e89-3fa929e33433.roa (raw, json) Hash identifier: SStu8SVdSwiFY6FaJhHq1r2lC6J67rwCNHvuFzN8I2Y= Subject key identifier: 7D:BE:5A:E0:7A:E3:2F:BF:2B:D3:88:78:35:52:8D:F3:BE:3B:23:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01CCAFD7BBB7B2288190CFC336E837A2107406FA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e9911d7-3c07-4c55-8e89-3fa929e33433.roa Signing time: Wed 14 Aug 2024 00:00:00 +0000 ROA not before: Wed 14 Aug 2024 00:00:00 +0000 ROA not after: Wed 18 Sep 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Sep 2024 00:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cc:af:d7:bb:b7:b2:28:81:90:cf:c3:36:e8:37:a2:10:74:06:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 14 00:00:00 2024 GMT Not After : Sep 18 23:59:59 2024 GMT Subject: serialNumber=237eb24377fc84912d76a2b16f0f1bcd428b17a6ac60e3762651c4bc2787f834, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:b8:b2:35:da:a1:ef:3c:01:cc:b3:c8:c7: b9:72:23:e2:96:16:02:ca:44:19:31:bd:22:69:6b: 3e:65:19:30:28:ac:f3:6f:13:c8:6d:7e:df:33:b7: 2c:85:4d:a7:95:ce:f7:d1:ec:a8:1d:65:a0:06:ba: 34:fd:f7:94:f0:1d:8f:4a:63:d4:c4:23:b7:42:45: f7:91:ff:30:3d:c5:15:f2:16:b6:7d:d2:8c:2e:a9: 25:dc:0e:2f:90:95:c5:42:17:68:a2:3a:b9:dd:83: af:ec:05:ab:d6:6f:02:13:cd:f0:2c:58:15:95:e2: 58:20:ee:87:3d:4a:0c:05:62:e9:c3:6a:69:7b:b9: 18:43:dd:be:be:dd:8e:42:a9:21:8f:f4:bf:f6:34: 4d:79:6d:ba:d0:2e:6e:df:cf:63:78:6b:6d:1a:38: 60:ec:9e:5d:73:e6:c1:1a:d7:01:36:45:4e:3b:65: b1:17:91:37:63:f7:78:b0:ae:7e:4e:82:4f:3e:79: a8:25:f6:10:28:1a:c7:42:75:78:7e:08:10:0a:27: be:61:0d:4b:8b:65:23:20:cb:a0:61:e7:74:6d:d9: 18:85:a2:f1:cb:d3:80:7f:72:d3:4a:08:7a:6c:df: b8:b6:52:bb:62:61:ee:47:9c:ae:00:1d:f5:56:0e: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BE:5A:E0:7A:E3:2F:BF:2B:D3:88:78:35:52:8D:F3:BE:3B:23:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e9911d7-3c07-4c55-8e89-3fa929e33433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e000::/40 Signature Algorithm: sha256WithRSAEncryption b2:3c:87:e9:7f:44:16:75:ea:f6:64:76:2d:6d:0e:9b:12:a7: 7e:d1:ea:ea:d1:b6:03:a1:b5:d5:c6:87:6a:51:3f:74:9e:e0: 62:8d:62:c1:86:14:6f:18:d2:8b:96:f3:df:4a:9d:c4:da:ea: 84:90:40:c1:12:bf:13:c2:a0:31:d2:01:30:ec:eb:38:98:f8: 51:13:24:5d:69:b5:53:f5:c3:80:a9:a5:00:42:d8:f1:0f:d5: 56:c3:7c:6a:1a:90:35:16:77:a4:d0:ff:39:7c:ab:21:11:e6: da:dc:0f:a3:5a:4d:b6:1f:7e:91:00:f7:54:53:35:b6:dd:ba: cc:4f:6a:0d:64:e6:e8:73:a7:31:2f:c1:a5:f3:d8:88:2a:41: eb:c5:f6:f0:b1:13:26:58:cf:6e:1a:d5:7e:ac:92:72:fe:48: cb:8b:7b:4f:90:bd:a8:a2:0a:50:82:65:45:68:4a:e0:44:56: 88:bc:a0:12:f3:be:96:13:99:d3:d3:d8:2d:fa:11:c0:fa:f5: ca:c0:03:00:fe:ed:c8:d5:9f:21:0d:ea:b6:01:d4:fc:0d:e8: 8f:ab:06:28:97:b3:8d:9b:2f:c7:72:cc:9d:c4:29:38:64:0c: 0f:60:b7:87:c5:f5:c4:dc:8a:56:97:19:f9:a9:4c:40:31:08: 21:36:b1:87 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAcyv17u3siiBkM/DNug3ohB0BvowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDgxNDAwMDAwMFoX DTI0MDkxODIzNTk1OVowejFJMEcGA1UEBRNAMjM3ZWIyNDM3N2ZjODQ5MTJkNzZh MmIxNmYwZjFiY2Q0MjhiMTdhNmFjNjBlMzc2MjY1MWM0YmMyNzg3ZjgzNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIC4sjXaoe88AcyzyMe5ciPilhYC ykQZMb0iaWs+ZRkwKKzzbxPIbX7fM7cshU2nlc730eyoHWWgBro0/feU8B2PSmPU xCO3QkX3kf8wPcUV8ha2fdKMLqkl3A4vkJXFQhdoojq53YOv7AWr1m8CE83wLFgV leJYIO6HPUoMBWLpw2ppe7kYQ92+vt2OQqkhj/S/9jRNeW260C5u389jeGttGjhg 7J5dc+bBGtcBNkVOO2WxF5E3Y/d4sK5+ToJPPnmoJfYQKBrHQnV4fggQCie+YQ1L i2UjIMugYed0bdkYhaLxy9OAf3LTSgh6bN+4tlK7YmHuR5yuAB31Vg4hzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH2+WuB64y+/K9OIeDVSjfO+OyNuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlOTkxMWQ3LTNjMDctNGM1NS04ZTg5LTNmYTkyOWUzMzQzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAOAwDQYJKoZIhvcNAQELBQADggEBALI8h+l/RBZ16vZkdi1t DpsSp37R6urRtgOhtdXGh2pRP3Se4GKNYsGGFG8Y0ouW899KncTa6oSQQMESvxPC oDHSATDs6ziY+FETJF1ptVP1w4CppQBC2PEP1VbDfGoakDUWd6TQ/zl8qyER5trc D6NaTbYffpEA91RTNbbdusxPag1k5uhzpzEvwaXz2IgqQevF9vCxEyZYz24a1X6s knL+SMuLe0+QvaiiClCCZUVoSuBEVoi8oBLzvpYTmdPT2C36EcD69crAAwD+7cjV nyEN6rYB1PwN6I+rBiiXs42bL8dyzJ3EKThkDA9gt4fF9cTcilaXGfmpTEAxCCE2 sYc= -----END CERTIFICATE-----Generated at Sat Sep 7 02:13:02 2024 by rpki-client on console-fra.rpki-client.org