$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa File: 8eab24e3-cddd-4314-ba19-97484d66d2ff.roa (raw, json) Hash identifier: 0rhPWJeFUrUA3cA5hhWmtk/9YmduqoIO6hvnRCkfKGA= Subject key identifier: 44:DE:AF:29:91:DE:C1:D5:9C:6B:18:52:E0:AF:6A:6D:A8:B5:88:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 22A1E4C6756C415AD440D3A051323C2519958B7B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa Signing time: Tue 30 Apr 2024 00:00:00 +0000 ROA not before: Tue 30 Apr 2024 00:00:00 +0000 ROA not after: Tue 04 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a1:e4:c6:75:6c:41:5a:d4:40:d3:a0:51:32:3c:25:19:95:8b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 30 00:00:00 2024 GMT Not After : Jun 4 23:59:59 2024 GMT Subject: serialNumber=38e426cf77277f6ac65dfb667207552e89e3d8d4bddd092059aaf032cbe120fb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:5e:6e:7e:01:87:42:87:4e:1e:d7:a2:79: 95:47:eb:8d:57:0c:42:3b:67:82:05:a2:21:09:64: 39:ff:36:1f:fe:1f:4b:cb:b0:fe:1c:48:dd:1b:c6: 87:c9:0e:6c:0c:1e:b3:5f:5b:df:82:c3:c7:e9:6a: 62:eb:83:f4:db:a3:5c:a2:67:6c:50:5b:f9:5d:1a: ca:e9:88:44:a2:68:65:c3:d9:c2:01:c2:4d:79:00: 2b:bd:03:99:e4:f5:0d:eb:16:7d:57:1e:a8:8b:d3: d6:9c:95:b4:39:33:6e:4f:ae:dd:de:60:21:89:84: 15:38:aa:3b:6f:92:0f:81:48:80:dd:4d:4c:ce:3f: d0:96:12:33:5b:c6:40:0a:df:27:b4:2b:e5:13:e2: e9:2f:f1:5b:1e:d5:09:41:fd:86:0a:4c:ad:22:85: a8:d0:e2:d9:e3:fd:11:ac:01:ca:71:b5:38:ff:d4: 37:63:bd:4b:3f:0a:ec:6c:98:dc:fb:0a:dc:46:11: fc:ea:f0:c6:8d:c8:9f:84:81:e6:f4:b0:7a:2c:f7: 47:e4:f0:f9:f5:9c:63:6d:29:d9:db:a6:81:68:e2: f1:fe:fe:20:55:ad:c8:d2:6c:74:61:6a:dc:da:ec: 9b:8d:9a:38:81:7d:31:38:8c:24:e1:0a:4b:a9:4a: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DE:AF:29:91:DE:C1:D5:9C:6B:18:52:E0:AF:6A:6D:A8:B5:88:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:4800::/40 Signature Algorithm: sha256WithRSAEncryption ac:cc:33:6b:53:79:58:25:eb:18:06:d0:38:0f:be:e5:66:67: 97:c3:12:bf:94:c3:4a:aa:63:96:42:f5:01:87:35:2b:a3:ce: 51:3c:f4:51:1f:a1:6d:c9:d0:c9:f0:bc:a5:94:58:c3:e7:6c: e9:98:00:54:09:cd:34:b1:82:c4:ba:ae:f6:c4:cd:5a:1f:17: 7d:df:0d:ba:49:68:e5:1a:56:32:c0:e0:c2:07:63:33:c0:8c: c9:94:54:6a:32:b3:68:0f:cc:09:1b:5b:62:3d:07:55:54:70: 94:28:a8:7f:a2:87:6b:2d:b1:e7:bc:4d:c5:3c:a3:5a:1b:92: de:b9:67:01:55:d1:c3:2e:14:85:aa:68:cb:39:3c:2b:a7:1e: 95:2c:d7:c1:64:2b:5c:42:66:fd:3f:a6:b9:42:a2:55:ac:d3: f8:25:0e:fd:60:bf:74:43:19:bf:8c:c8:4d:09:20:a5:cb:b3: 63:8f:67:08:7b:53:39:2e:9b:dd:2a:e9:fa:7a:76:6b:8f:74: 75:26:ca:d5:13:fb:0b:08:95:cc:c4:05:9d:1b:a8:ab:69:e0: 62:4b:53:a9:9d:b1:f8:ae:a0:18:90:24:90:b1:6d:6d:96:f6: f5:93:66:d9:ec:e3:c4:62:33:27:fc:bc:41:42:ea:e5:ae:71: 6b:de:2e:ee -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIqHkxnVsQVrUQNOgUTI8JRmVi3swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQzMDAwMDAwMFoX DTI0MDYwNDIzNTk1OVowejFJMEcGA1UEBRNAMzhlNDI2Y2Y3NzI3N2Y2YWM2NWRm YjY2NzIwNzU1MmU4OWUzZDhkNGJkZGQwOTIwNTlhYWYwMzJjYmUxMjBmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsBebn4Bh0KHTh7XonmVR+uNVwxC O2eCBaIhCWQ5/zYf/h9Ly7D+HEjdG8aHyQ5sDB6zX1vfgsPH6Wpi64P026Ncomds UFv5XRrK6YhEomhlw9nCAcJNeQArvQOZ5PUN6xZ9Vx6oi9PWnJW0OTNuT67d3mAh iYQVOKo7b5IPgUiA3U1Mzj/QlhIzW8ZACt8ntCvlE+LpL/FbHtUJQf2GCkytIoWo 0OLZ4/0RrAHKcbU4/9Q3Y71LPwrsbJjc+wrcRhH86vDGjcifhIHm9LB6LPdH5PD5 9ZxjbSnZ26aBaOLx/v4gVa3I0mx0YWrc2uybjZo4gX0xOIwk4QpLqUrPiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFETerymR3sHVnGsYUuCvam2otYjsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlYWIyNGUzLWNkZGQtNDMxNC1iYTE5LTk3NDg0ZDY2ZDJmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoEgwDQYJKoZIhvcNAQELBQADggEBAKzMM2tTeVgl6xgG0DgP vuVmZ5fDEr+Uw0qqY5ZC9QGHNSujzlE89FEfoW3J0MnwvKWUWMPnbOmYAFQJzTSx gsS6rvbEzVofF33fDbpJaOUaVjLA4MIHYzPAjMmUVGoys2gPzAkbW2I9B1VUcJQo qH+ih2stsee8TcU8o1obkt65ZwFV0cMuFIWqaMs5PCunHpUs18FkK1xCZv0/prlC olWs0/glDv1gv3RDGb+MyE0JIKXLs2OPZwh7Uzkum90q6fp6dmuPdHUmytUT+wsI lczEBZ0bqKtp4GJLU6mdsfiuoBiQJJCxbW2W9vWTZtns48RiMyf8vEFC6uWucWve Lu4= -----END CERTIFICATE-----Generated at Thu May 2 23:47:52 2024 by rpki-client on console-fra.rpki-client.org