$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f435723-1776-4896-9b8c-3b7b0c67a6cc.roa File: 8f435723-1776-4896-9b8c-3b7b0c67a6cc.roa (raw, json) Hash identifier: rw8KKZ3gd7YeBC+6JYRMTxFvvrevz/XUNBnmClWQoIs= Subject key identifier: FA:2E:54:9B:4C:F0:7B:A9:93:7C:08:C6:1A:7B:6E:9D:A0:E9:4D:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DDD69393BF63B0675F95991BDA4EF920F288BE6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f435723-1776-4896-9b8c-3b7b0c67a6cc.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dd:69:39:3b:f6:3b:06:75:f9:59:91:bd:a4:ef:92:0f:28:8b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=b9e50892ea79f43f90b3c1944b39d5ab9bfd10e91cfd0eda5529f2646eb7eb60, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:46:55:46:d7:0b:b6:30:f2:da:b7:a8:60: 2e:76:e2:c2:3a:35:53:bb:36:74:93:91:92:8c:46: 9d:ca:00:fb:2c:6b:5a:ca:c6:30:1a:cf:64:dc:81: 3e:e8:33:3a:55:4f:b8:05:92:ed:65:ba:d4:00:fd: 86:38:dc:ac:70:d8:a2:86:16:7a:ec:2a:5e:62:bc: 72:da:97:f5:89:01:af:aa:11:11:68:7a:71:b2:60: bf:01:e7:c2:7b:ef:84:b2:9f:d5:d0:bc:38:2a:ca: 03:82:b1:79:19:39:e6:93:ea:9f:b4:de:de:46:b4: 8a:9c:d3:0e:ec:c6:0d:fd:b5:1d:d4:fb:9d:a6:af: 85:f2:81:4c:f3:94:9e:2d:43:63:fc:a0:b8:64:9a: 99:07:d9:d1:03:b8:75:87:e0:9b:ad:86:f4:ae:b1: 84:d8:20:7d:31:e8:11:41:55:df:2d:14:0c:51:a8: a9:16:39:39:12:f0:5d:e8:bd:72:ee:74:d7:71:2f: cb:68:1e:b5:04:5b:08:ab:e1:c5:39:7b:7a:1b:d5: 96:a2:77:a6:30:1d:a8:8c:61:78:ec:c6:78:3c:d6: 6e:1d:39:54:33:2a:c3:81:77:5c:37:4a:28:e5:4a: c5:24:8e:ff:22:12:a7:dc:80:91:43:8f:bd:ae:fd: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2E:54:9B:4C:F0:7B:A9:93:7C:08:C6:1A:7B:6E:9D:A0:E9:4D:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f435723-1776-4896-9b8c-3b7b0c67a6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:2800::/40 Signature Algorithm: sha256WithRSAEncryption 61:0d:04:f0:ff:ac:d6:ad:5d:2a:0a:55:59:4f:7e:92:dc:59: cf:db:d0:f4:b2:5f:29:1a:8a:3f:90:59:42:d0:9c:31:dd:0b: 41:17:61:f7:b0:75:42:e6:c1:a6:e9:5e:b7:20:b7:14:4f:c0: df:7d:24:50:6f:06:ed:0c:98:74:9d:6d:d1:ed:55:18:98:05: c7:67:88:cb:7e:12:90:97:1d:08:6d:da:26:96:9e:6d:95:76: b7:fd:04:30:72:a4:ac:76:04:d2:80:b3:c2:e5:46:66:0f:12: 9f:07:a0:68:d1:2c:24:36:4f:22:aa:66:3a:2c:de:a8:24:39: 64:58:01:33:92:d9:2a:ec:a6:f4:3c:a5:c5:d6:f4:02:8d:2b: ba:ad:c9:47:e0:89:ae:c3:ca:83:f7:34:8a:22:09:35:9b:ee: e8:d3:cd:b2:8a:a6:77:50:69:dc:cb:e2:29:82:7a:0f:ac:5c: 80:8d:52:f3:4a:c3:1c:31:32:53:b6:b6:21:21:0f:be:93:81: b0:f8:d0:48:7c:1a:0c:36:84:b0:ff:fc:93:ed:a1:45:2a:be: 5e:58:79:1d:1f:11:c6:89:00:2c:cc:d1:e4:6a:4a:f2:7c:93: 06:3c:c7:07:94:84:bb:2c:2b:b0:a3:8a:55:b5:45:d1:25:a6: 9d:da:1c:44 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPd1pOTv2OwZ1+VmRvaTvkg8oi+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAYjllNTA4OTJlYTc5ZjQzZjkwYjNj MTk0NGIzOWQ1YWI5YmZkMTBlOTFjZmQwZWRhNTUyOWYyNjQ2ZWI3ZWI2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOdGVUbXC7Yw8tq3qGAuduLCOjVT uzZ0k5GSjEadygD7LGtaysYwGs9k3IE+6DM6VU+4BZLtZbrUAP2GONyscNiihhZ6 7CpeYrxy2pf1iQGvqhERaHpxsmC/AefCe++Esp/V0Lw4KsoDgrF5GTnmk+qftN7e RrSKnNMO7MYN/bUd1Pudpq+F8oFM85SeLUNj/KC4ZJqZB9nRA7h1h+CbrYb0rrGE 2CB9MegRQVXfLRQMUaipFjk5EvBd6L1y7nTXcS/LaB61BFsIq+HFOXt6G9WWonem MB2ojGF47MZ4PNZuHTlUMyrDgXdcN0oo5UrFJI7/IhKn3ICRQ4+9rv1WbwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPouVJtM8Hupk3wIxhp7bp2g6U0WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmNDM1NzIzLTE3NzYtNDg5Ni05YjhjLTNiN2IwYzY3YTZjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+CgwDQYJKoZIhvcNAQELBQADggEBAGENBPD/rNatXSoKVVlP fpLcWc/b0PSyXykaij+QWULQnDHdC0EXYfewdULmwabpXrcgtxRPwN99JFBvBu0M mHSdbdHtVRiYBcdniMt+EpCXHQht2iaWnm2Vdrf9BDBypKx2BNKAs8LlRmYPEp8H oGjRLCQ2TyKqZjos3qgkOWRYATOS2SrspvQ8pcXW9AKNK7qtyUfgia7DyoP3NIoi CTWb7ujTzbKKpndQadzL4imCeg+sXICNUvNKwxwxMlO2tiEhD76TgbD40Eh8Ggw2 hLD//JPtoUUqvl5YeR0fEcaJACzM0eRqSvJ8kwY8xweUhLssK7CjilW1RdElpp3a HEQ= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:39 2024 by rpki-client on console-ams.rpki-client.org