$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91f8dc78-cb46-41e0-aedf-7aa50976b2cc.roa File: 91f8dc78-cb46-41e0-aedf-7aa50976b2cc.roa (raw, json) Hash identifier: p39+tJCSKD1ZYldsWyowiEBDzyV+d2ePP+wwFS8IOX8= Subject key identifier: 4D:0C:19:78:A1:CD:DF:11:AE:DC:B8:58:34:41:67:86:7A:14:D4:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 516567588FF811B5FC28905451A38689B94B0330 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91f8dc78-cb46-41e0-aedf-7aa50976b2cc.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:65:67:58:8f:f8:11:b5:fc:28:90:54:51:a3:86:89:b9:4b:03:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=392e25bc75ebb800d210142acdb6f8d329aefb1c0ba1f8264e142293567f6c14, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:c6:bd:ca:5f:8e:5c:8a:d0:b4:5d:33:6f: 7c:9e:e1:b2:de:93:57:68:69:61:76:f7:d1:4b:b2: d8:a9:42:f9:e4:12:57:c0:0e:a9:14:56:cc:10:c5: d3:14:44:24:b2:4f:ab:d7:70:3f:a8:cf:5e:c1:5e: 06:eb:cb:81:8d:db:84:9b:35:87:7c:28:5d:70:4d: cf:dc:f3:30:60:d4:f7:5a:f4:43:43:a1:d6:56:d2: 19:60:7c:e1:46:7f:37:fb:f9:3f:e4:72:7a:36:d8: ef:da:4b:7d:a3:e5:2c:ec:b9:0c:07:11:fc:7c:73: 27:39:76:3b:92:d0:ec:d4:4b:97:e5:02:4c:e7:ef: 84:1e:8e:1a:28:e8:a3:82:7e:ef:fa:85:28:2a:11: 14:b8:f9:94:c4:a9:75:58:36:cc:2c:c6:7e:e4:9f: 28:9e:c0:26:c4:3f:4b:5a:08:e2:d1:80:96:0c:c4: 7b:05:4b:5b:2f:ae:aa:b8:b8:30:81:aa:b5:74:b7: e4:0e:c0:29:02:68:4d:a9:0f:de:8e:ab:ce:2f:18: 9a:dd:60:34:67:1a:f3:ca:0c:6e:15:a1:20:39:37: d2:bc:b1:8c:88:b2:8a:c7:88:0e:51:77:39:84:a9: 7e:69:43:58:33:2a:85:b1:1c:3e:35:be:fd:5a:e0: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0C:19:78:A1:CD:DF:11:AE:DC:B8:58:34:41:67:86:7A:14:D4:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91f8dc78-cb46-41e0-aedf-7aa50976b2cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:c000::/40 Signature Algorithm: sha256WithRSAEncryption 94:61:90:fc:39:23:a0:be:38:a6:2c:74:72:b5:ad:a7:e7:a4: 0b:64:7e:f7:d0:79:b0:92:3b:2a:1d:f7:1d:26:f8:6b:76:9e: 38:84:94:92:89:52:fc:20:92:2b:52:2d:e7:0a:d9:bc:b3:f0: bd:f9:2f:14:66:5d:e9:3c:a7:3c:e8:f5:52:10:51:e0:46:10: 9a:fd:1e:4d:cd:29:38:dc:a3:b6:1d:79:cf:7a:99:b2:da:b2: 0b:64:cb:c6:aa:e5:46:32:94:30:c4:42:73:db:c9:41:ae:23: 94:34:99:3b:ff:e6:c2:88:40:5e:4d:b8:87:f0:59:3e:4a:ac: 20:24:27:93:43:b0:e6:e0:14:c1:33:f0:03:cc:78:dd:3b:f1: 54:bd:f4:8b:d1:08:0a:5c:56:a7:76:d7:73:4e:37:dc:db:56: ae:8c:3b:bc:01:05:91:3d:c9:11:a2:50:ff:f0:b9:92:e6:80: 0f:9b:80:f2:22:d0:34:1c:e0:7f:c6:0a:29:3b:20:d4:17:1c: e1:d7:08:42:35:91:ba:24:2e:fe:ef:d3:eb:64:c2:8c:13:5f: 53:2e:f9:4b:ed:f4:1e:1f:6e:08:9a:41:15:51:b5:21:03:32: bf:ba:9e:49:b3:1e:20:bf:45:3b:5b:44:ef:e4:9c:71:24:f2: b9:6e:07:1c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUWVnWI/4EbX8KJBUUaOGiblLAzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMzkyZTI1YmM3NWViYjgwMGQyMTAx NDJhY2RiNmY4ZDMyOWFlZmIxYzBiYTFmODI2NGUxNDIyOTM1NjdmNmMxNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFTGvcpfjlyK0LRdM298nuGy3pNX aGlhdvfRS7LYqUL55BJXwA6pFFbMEMXTFEQksk+r13A/qM9ewV4G68uBjduEmzWH fChdcE3P3PMwYNT3WvRDQ6HWVtIZYHzhRn83+/k/5HJ6Ntjv2kt9o+Us7LkMBxH8 fHMnOXY7ktDs1EuX5QJM5++EHo4aKOijgn7v+oUoKhEUuPmUxKl1WDbMLMZ+5J8o nsAmxD9LWgji0YCWDMR7BUtbL66quLgwgaq1dLfkDsApAmhNqQ/ejqvOLxia3WA0 ZxrzygxuFaEgOTfSvLGMiLKKx4gOUXc5hKl+aUNYMyqFsRw+Nb79WuCWmwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE0MGXihzd8Rrty4WDRBZ4Z6FNSwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkxZjhkYzc4LWNiNDYtNDFlMC1hZWRmLTdhYTUwOTc2YjJjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8cAwDQYJKoZIhvcNAQELBQADggEBAJRhkPw5I6C+OKYsdHK1 rafnpAtkfvfQebCSOyod9x0m+Gt2njiElJKJUvwgkitSLecK2byz8L35LxRmXek8 pzzo9VIQUeBGEJr9Hk3NKTjco7Ydec96mbLasgtky8aq5UYylDDEQnPbyUGuI5Q0 mTv/5sKIQF5NuIfwWT5KrCAkJ5NDsObgFMEz8APMeN078VS99IvRCApcVqd213NO N9zbVq6MO7wBBZE9yRGiUP/wuZLmgA+bgPIi0DQc4H/GCik7INQXHOHXCEI1kbok Lv7v0+tkwowTX1Mu+Uvt9B4fbgiaQRVRtSEDMr+6nkmzHiC/RTtbRO/knHEk8rlu Bxw= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org