$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/940ece58-e53e-4342-9286-6b70044bfaa2.roa File: 940ece58-e53e-4342-9286-6b70044bfaa2.roa (raw, json) Hash identifier: scUHOkhcGFBwjAkoubPV9kyMvhVTwyvJh66EIW86i5Q= Subject key identifier: 03:41:10:43:A7:93:B6:47:C1:CE:48:55:34:C6:3B:32:A6:B8:A3:76 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43AFC78F21ABD5BCB842FBE194540184884953A7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/940ece58-e53e-4342-9286-6b70044bfaa2.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:af:c7:8f:21:ab:d5:bc:b8:42:fb:e1:94:54:01:84:88:49:53:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=bf6a6d5fa19be3f9c992b618565db92e858e611c867c344c9a17cbccdbca7d56, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:36:cf:a0:d4:4a:de:78:56:02:19:89:03:70: 98:d3:c2:ba:e2:32:7f:49:a0:06:2e:f6:e7:88:92: 04:f5:c8:16:ce:14:92:e7:04:27:92:92:11:38:af: e9:ba:ed:87:e0:ed:5d:97:a9:cc:28:c6:4d:fb:a8: a6:c3:75:8a:0c:31:6c:96:5c:5e:6f:cd:a1:c0:25: 93:85:b2:84:ab:5a:e2:66:c5:3c:56:9e:67:58:bb: 16:7f:40:5b:29:4a:01:22:b1:d4:2a:0c:c1:05:96: 1d:f1:d2:25:33:5d:29:09:94:03:59:8e:f9:7c:f1: a8:0a:d0:4e:38:91:62:bc:0b:ce:a3:7f:8d:b4:fa: 08:da:75:07:69:1d:b3:5b:04:37:ec:76:c0:d0:36: 2c:13:84:14:c4:c1:21:9d:8f:f3:7f:2c:8e:0c:61: 08:03:b1:44:7f:23:4d:7d:3c:a9:d8:ac:30:b7:e7: 13:de:99:0a:05:25:1c:b9:ca:5f:02:c5:b1:41:06: a1:1f:f3:f9:cc:6a:4f:b3:bc:bd:2f:5e:75:12:51: 78:39:45:8b:10:b7:fa:b9:d1:06:82:89:dd:f7:f6: 8d:b2:61:13:f7:0a:6d:9a:f1:cf:72:f6:10:65:55: 1f:af:9d:ad:f4:0e:5b:d8:87:4e:15:78:25:b7:ff: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:41:10:43:A7:93:B6:47:C1:CE:48:55:34:C6:3B:32:A6:B8:A3:76 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/940ece58-e53e-4342-9286-6b70044bfaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f000::/40 Signature Algorithm: sha256WithRSAEncryption 78:81:9a:f9:e8:09:7f:94:26:ad:82:5a:8b:a1:5d:c1:6d:59: 27:c4:d3:a6:a0:a5:84:1f:f7:66:02:8b:59:71:04:c0:18:12: 60:42:e6:0b:c0:3f:3b:70:99:06:b5:47:3e:cc:0f:ed:45:1d: 49:a5:2f:32:e0:b8:60:92:5b:8f:16:9b:52:23:9a:97:24:83: ab:7f:78:43:09:6a:9f:c8:01:68:f3:16:eb:13:ae:6e:26:71: 96:35:12:5b:8f:75:8e:6e:6d:c9:66:59:0d:e6:4e:58:ae:e0: 53:c1:41:45:81:ce:41:eb:60:06:7e:9e:16:44:bc:b2:19:5b: 25:23:88:80:f2:ba:f5:98:34:57:d8:2b:99:a9:dd:96:b8:0e: 78:de:b8:0b:f2:cf:b9:04:68:53:5f:ff:ea:cc:57:7d:85:21: 0f:80:6b:00:71:6a:1d:9a:c0:e0:72:c4:46:b1:66:3f:16:4b: ea:cc:39:b8:a8:2a:7b:f0:84:7f:67:b3:a5:71:f6:28:bd:77: b2:57:a0:65:eb:9e:2a:f1:a4:9e:a0:20:19:89:4c:d3:0b:c4: 92:57:fa:8c:5d:1c:40:4d:cc:55:2e:cf:7e:f5:25:07:34:4c: 93:59:2c:0b:aa:cf:fb:d3:b5:3d:5c:f4:3e:b2:13:7c:52:5c: 68:d7:b8:0f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQ6/HjyGr1by4QvvhlFQBhIhJU6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAYmY2YTZkNWZhMTliZTNmOWM5OTJi NjE4NTY1ZGI5MmU4NThlNjExYzg2N2MzNDRjOWExN2NiY2NkYmNhN2Q1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDbPoNRK3nhWAhmJA3CY08K64jJ/ SaAGLvbniJIE9cgWzhSS5wQnkpIROK/puu2H4O1dl6nMKMZN+6imw3WKDDFsllxe b82hwCWThbKEq1riZsU8Vp5nWLsWf0BbKUoBIrHUKgzBBZYd8dIlM10pCZQDWY75 fPGoCtBOOJFivAvOo3+NtPoI2nUHaR2zWwQ37HbA0DYsE4QUxMEhnY/zfyyODGEI A7FEfyNNfTyp2Kwwt+cT3pkKBSUcucpfAsWxQQahH/P5zGpPs7y9L151ElF4OUWL ELf6udEGgond9/aNsmET9wptmvHPcvYQZVUfr52t9A5b2IdOFXglt//CPQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFANBEEOnk7ZHwc5IVTTGOzKmuKN2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk0MGVjZTU4LWU1M2UtNDM0Mi05Mjg2LTZiNzAwNDRiZmFhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAPAwDQYJKoZIhvcNAQELBQADggEBAHiBmvnoCX+UJq2CWouh XcFtWSfE06agpYQf92YCi1lxBMAYEmBC5gvAPztwmQa1Rz7MD+1FHUmlLzLguGCS W48Wm1Ijmpckg6t/eEMJap/IAWjzFusTrm4mcZY1EluPdY5ubclmWQ3mTliu4FPB QUWBzkHrYAZ+nhZEvLIZWyUjiIDyuvWYNFfYK5mp3Za4DnjeuAvyz7kEaFNf/+rM V32FIQ+AawBxah2awOByxEaxZj8WS+rMObioKnvwhH9ns6Vx9ii9d7JXoGXrnirx pJ6gIBmJTNMLxJJX+oxdHEBNzFUuz371JQc0TJNZLAuqz/vTtT1c9D6yE3xSXGjX uA8= -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org