$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa File: 95f6a049-7e13-46df-915e-ddab481096ad.roa (raw, json) Hash identifier: oX8LmeZmJuYY9DVTbs03S6sTLthHhP7xTJbBnuWwx5k= Subject key identifier: 7D:5F:C2:21:6A:77:B6:C6:89:43:F0:E6:15:9D:29:1A:71:EE:E0:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 65702068B6EBD9AD7296F6D9DFB7524C76E6F085 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:70:20:68:b6:eb:d9:ad:72:96:f6:d9:df:b7:52:4c:76:e6:f0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=c41251b2a9865d5e334118173a5524767df3cef1de6e399084b98dc0227ab0a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:12:28:0c:c6:5a:58:8e:f6:5e:1e:3b:db:20: 5a:0f:65:64:6f:89:bd:c7:c5:c6:f3:5f:17:3c:33: b1:01:19:5f:66:85:88:45:df:50:0f:31:7c:02:af: 74:29:0d:2a:e3:11:93:db:0a:9e:4b:af:b4:c2:f5: 86:b3:54:d6:27:b1:0b:0b:15:38:23:93:ed:cd:ae: dc:3d:99:68:e2:6d:be:2a:fb:aa:06:50:0c:5a:a1: fa:18:3a:25:0a:42:05:c0:c2:f7:6a:eb:27:ab:5d: f8:08:8b:ac:ca:05:b9:eb:49:88:f6:2e:d5:5d:03: 60:6c:6c:4e:ed:a8:4e:25:38:2a:2d:14:0c:ff:52: 25:cd:ae:a1:9d:f1:28:85:fc:6e:b5:f7:8d:20:d5: 17:ef:cf:b1:80:98:39:a1:71:fe:e6:ff:04:43:df: cd:a8:62:5b:5c:dd:4e:c6:58:58:3e:c3:3b:44:e3: 63:ed:3d:4b:45:9a:77:41:2f:06:23:07:8d:2b:1e: 3e:1c:bd:c3:47:f7:ee:32:10:6c:e6:53:38:95:36: 28:22:38:32:c6:bc:32:f9:f2:49:cf:f2:08:db:b8: 81:92:fa:db:1a:c5:1c:39:6d:dc:b2:e5:5e:df:63: 47:0c:f1:7a:70:45:4b:1b:be:1e:56:d1:2c:3d:81: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5F:C2:21:6A:77:B6:C6:89:43:F0:E6:15:9D:29:1A:71:EE:E0:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:b000::/40 Signature Algorithm: sha256WithRSAEncryption 30:e8:d6:e1:36:7b:d6:f5:6f:cc:df:a2:d1:0c:f6:83:52:4d: 7e:8b:03:93:dd:cd:02:10:d7:04:17:d3:b1:23:40:65:75:9d: a4:ab:72:31:8a:76:dc:ef:29:10:32:e3:f5:52:e7:b7:23:d5: 16:b5:9c:92:47:a8:0a:03:b1:21:a8:ff:3c:ef:95:2c:7e:e5: 31:70:ae:70:17:e3:52:79:bc:3f:73:39:54:70:44:a8:00:d3: 3d:a0:eb:9d:60:bc:86:28:40:d3:d3:7b:22:90:8b:2a:53:ff: 04:14:c6:5d:00:5a:0c:20:00:4d:ac:c3:b0:a3:51:70:b4:9c: 35:23:52:d3:88:a7:6e:ac:2f:39:1b:9f:2b:d9:50:41:5b:81: b2:42:35:8e:c0:45:c2:f9:8a:b6:a2:8a:7f:38:33:41:b5:31: 96:71:fa:b5:ff:96:36:32:01:fe:6c:29:f9:95:94:95:6c:50: 8e:0b:73:6b:fb:1c:89:4e:f8:5e:95:55:c4:dd:bf:ed:3d:22: c1:44:d9:33:91:d2:ee:96:65:a6:23:69:c0:2a:5d:6a:d5:63: 55:3d:c8:1c:9f:92:28:1f:a7:85:c0:a4:ce:b3:60:4b:2a:7e: 82:58:7a:1a:8c:3f:4c:2e:5c:50:f0:de:0c:59:6c:2c:ff:69: 6c:f3:ba:d7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZXAgaLbr2a1ylvbZ37dSTHbm8IUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAYzQxMjUxYjJhOTg2NWQ1ZTMzNDEx ODE3M2E1NTI0NzY3ZGYzY2VmMWRlNmUzOTkwODRiOThkYzAyMjdhYjBhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRIoDMZaWI72Xh472yBaD2Vkb4m9 x8XG818XPDOxARlfZoWIRd9QDzF8Aq90KQ0q4xGT2wqeS6+0wvWGs1TWJ7ELCxU4 I5Ptza7cPZlo4m2+KvuqBlAMWqH6GDolCkIFwML3ausnq134CIusygW560mI9i7V XQNgbGxO7ahOJTgqLRQM/1Ilza6hnfEohfxutfeNINUX78+xgJg5oXH+5v8EQ9/N qGJbXN1OxlhYPsM7RONj7T1LRZp3QS8GIweNKx4+HL3DR/fuMhBs5lM4lTYoIjgy xrwy+fJJz/II27iBkvrbGsUcOW3csuVe32NHDPF6cEVLG74eVtEsPYGfjQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH1fwiFqd7bGiUPw5hWdKRpx7uCfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1ZjZhMDQ5LTdlMTMtNDZkZi05MTVlLWRkYWI0ODEwOTZhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba97AwDQYJKoZIhvcNAQELBQADggEBADDo1uE2e9b1b8zfotEM 9oNSTX6LA5PdzQIQ1wQX07EjQGV1naSrcjGKdtzvKRAy4/VS57cj1Ra1nJJHqAoD sSGo/zzvlSx+5TFwrnAX41J5vD9zOVRwRKgA0z2g651gvIYoQNPTeyKQiypT/wQU xl0AWgwgAE2sw7CjUXC0nDUjUtOIp26sLzkbnyvZUEFbgbJCNY7ARcL5iraiin84 M0G1MZZx+rX/ljYyAf5sKfmVlJVsUI4Lc2v7HIlO+F6VVcTdv+09IsFE2TOR0u6W ZaYjacAqXWrVY1U9yByfkigfp4XApM6zYEsqfoJYehqMP0wuXFDw3gxZbCz/aWzz utc= -----END CERTIFICATE-----Generated at Fri Sep 22 00:27:51 2023 by rpki-client on console-ams.rpki-client.org