$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e9911d7-3c07-4c55-8e89-3fa929e33433.roa File: 8e9911d7-3c07-4c55-8e89-3fa929e33433.roa (raw, json) Hash identifier: PYb3fIETDBYxtBGZ0RemorRfG96JVOFJ2n0uJZqanc8= Subject key identifier: 09:74:FE:28:68:B3:40:F1:9D:06:6A:14:B9:99:69:84:62:94:75:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3794469A6DADA545A9988F3D20127EDD2BFA48FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e9911d7-3c07-4c55-8e89-3fa929e33433.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:94:46:9a:6d:ad:a5:45:a9:98:8f:3d:20:12:7e:dd:2b:fa:48:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=fc9d04c28d7cba11525a42af928ee68be52d8efb99bc841e57ae102d2c46bf90, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:91:fd:fe:d9:a7:53:53:5f:2c:a3:71:40: 0d:af:61:27:6c:9e:a9:f7:3c:0b:e4:fb:29:43:81: 23:b1:a2:f4:a4:63:43:d4:e4:86:68:69:7e:97:55: 28:39:41:2e:58:0e:1d:fb:af:81:fa:6d:e6:27:97: 58:da:f2:95:6f:37:18:c8:74:74:af:b2:c0:e4:c9: 1f:08:d9:e7:83:6d:9f:7f:c0:1a:c8:a5:94:27:3f: b3:fc:ca:52:bc:47:0a:b2:72:70:bc:55:5c:e6:2a: d0:49:6f:37:14:23:83:3a:17:16:ea:36:65:86:a4: eb:82:a3:bb:d7:cb:56:9d:cd:0d:bf:a1:71:40:68: 1c:30:78:c1:99:6f:f5:03:a8:c3:fb:93:8f:38:a7: 66:8e:ec:fb:f9:74:5b:46:f8:58:8a:0d:a8:9e:54: 2f:5c:f2:f2:c2:d8:f3:51:8a:29:5f:21:db:d5:64: 22:24:0d:c5:1c:47:32:d2:d8:7f:1a:54:41:58:2d: df:58:96:a9:f6:a0:d5:02:14:88:7a:f5:ed:e1:e4: 36:e5:cc:dc:51:74:2b:22:e1:ca:c5:24:28:67:2b: 15:5d:12:db:ec:7d:7a:a4:35:85:a9:5a:28:35:dc: 56:a6:7d:49:d8:19:67:cc:ad:67:20:ef:9e:d1:38: 6c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:74:FE:28:68:B3:40:F1:9D:06:6A:14:B9:99:69:84:62:94:75:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e9911d7-3c07-4c55-8e89-3fa929e33433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e000::/40 Signature Algorithm: sha256WithRSAEncryption bd:55:e0:ee:48:63:9a:8c:a8:cd:65:2b:74:b9:5d:38:fd:04: 9a:35:0f:92:6f:61:a8:42:51:ab:d1:dc:c5:e6:a8:8c:05:87: 4b:13:8e:43:a3:e3:1e:5e:ff:2a:80:03:16:9e:34:2a:84:4d: d2:8d:cd:13:28:ae:04:ff:47:a7:61:e4:d1:40:b0:9b:fa:56: 15:fd:16:2e:2f:f2:e7:98:a4:6f:1b:54:9d:9e:4d:6c:9a:80: a7:02:9f:c0:06:fd:62:04:86:13:81:5c:d1:50:41:f1:ee:b6: e0:04:49:f9:67:53:36:39:4d:19:5e:f3:83:ac:ea:1e:17:7d: 6e:44:c5:6a:e7:ae:f6:aa:54:2f:a0:d8:12:ee:b2:91:7d:3e: f9:84:2b:52:5b:d7:49:63:4d:93:84:36:29:70:22:fc:41:84: 2b:1b:73:51:b8:01:48:83:80:5d:91:1b:b0:a6:6b:f4:74:35: c3:75:49:c4:69:d9:b4:10:01:d0:ec:26:dc:57:62:59:e2:cc: 10:df:2f:2f:25:24:7f:21:11:73:25:3c:9b:96:c0:a4:0e:38: 60:1d:1d:20:98:13:dd:f3:6d:97:f8:b8:f2:fd:9b:d1:76:bb: 31:3b:58:34:16:99:50:7a:05:05:f4:f6:42:07:52:83:d3:6d: f4:e9:f6:17 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN5RGmm2tpUWpmI89IBJ+3Sv6SP8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyOTAwMDAwMFoX DTI0MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAZmM5ZDA0YzI4ZDdjYmExMTUyNWE0 MmFmOTI4ZWU2OGJlNTJkOGVmYjk5YmM4NDFlNTdhZTEwMmQyYzQ2YmY5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlByR/f7Zp1NTXyyjcUANr2EnbJ6p 9zwL5PspQ4EjsaL0pGND1OSGaGl+l1UoOUEuWA4d+6+B+m3mJ5dY2vKVbzcYyHR0 r7LA5MkfCNnng22ff8AayKWUJz+z/MpSvEcKsnJwvFVc5irQSW83FCODOhcW6jZl hqTrgqO718tWnc0Nv6FxQGgcMHjBmW/1A6jD+5OPOKdmjuz7+XRbRvhYig2onlQv XPLywtjzUYopXyHb1WQiJA3FHEcy0th/GlRBWC3fWJap9qDVAhSIevXt4eQ25czc UXQrIuHKxSQoZysVXRLb7H16pDWFqVooNdxWpn1J2BlnzK1nIO+e0ThsgwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAl0/ihos0DxnQZqFLmZaYRilHWnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlOTkxMWQ3LTNjMDctNGM1NS04ZTg5LTNmYTkyOWUzMzQzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAOAwDQYJKoZIhvcNAQELBQADggEBAL1V4O5IY5qMqM1lK3S5 XTj9BJo1D5JvYahCUavR3MXmqIwFh0sTjkOj4x5e/yqAAxaeNCqETdKNzRMorgT/ R6dh5NFAsJv6VhX9Fi4v8ueYpG8bVJ2eTWyagKcCn8AG/WIEhhOBXNFQQfHutuAE SflnUzY5TRle84Os6h4XfW5ExWrnrvaqVC+g2BLuspF9PvmEK1Jb10ljTZOENilw IvxBhCsbc1G4AUiDgF2RG7Cma/R0NcN1ScRp2bQQAdDsJtxXYlnizBDfLy8lJH8h EXMlPJuWwKQOOGAdHSCYE93zbZf4uPL9m9F2uzE7WDQWmVB6BQX09kIHUoPTbfTp 9hc= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:39 2024 by rpki-client on console-ams.rpki-client.org