$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa File: 95f6a049-7e13-46df-915e-ddab481096ad.roa (raw, json) Hash identifier: /FSKS2MX4CFpfnYxPmUb+YjnFIcDamnJ9dPWYhT9h6I= Subject key identifier: 11:C0:C2:5B:12:FE:47:15:9F:A5:28:E6:76:AB:70:81:EB:C6:88:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E40E94FD098E1FFF9B6D881BFE6C508F2E6AB8A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Apr 2024 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:40:e9:4f:d0:98:e1:ff:f9:b6:d8:81:bf:e6:c5:08:f2:e6:ab:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=fca224829210316bcbfcb21f59e3aa0270d252917b0ee6f78fe0871d37ecf361, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:28:20:69:39:00:54:ce:6e:3c:17:6c:cb: 3c:b4:5d:4a:b8:29:fb:cf:38:d2:66:f0:06:3a:bc: a7:11:5a:c6:01:21:29:3c:b4:06:8e:f1:3e:52:00: ab:d8:98:2b:32:92:1c:77:c3:45:34:fe:9a:98:50: 65:51:1a:bd:68:fe:a8:95:38:cb:29:e3:11:5a:16: f5:24:3e:fc:25:6c:e2:fa:e2:b9:5d:79:ae:a9:a7: 6a:a9:c7:04:4a:33:29:67:f0:a3:52:4f:cc:21:20: 25:a9:1f:a3:23:76:56:d6:70:c9:00:29:5d:3a:14: 79:5e:23:19:d2:25:9d:5e:29:f7:5f:ea:32:fb:1c: 77:f2:a9:37:95:62:65:c3:a7:50:32:91:17:f3:0f: 27:b6:36:6f:3f:eb:05:5c:af:9f:63:c0:2c:1d:fe: 81:f2:83:73:5b:38:78:c3:27:26:e2:17:14:02:19: f9:8c:c2:49:8f:d3:e2:d2:59:93:61:f7:3a:54:d4: d5:3f:40:00:69:aa:a0:85:dd:7e:74:cc:1b:86:a8: a4:2d:e7:9f:21:42:87:b9:11:b8:19:c4:c8:86:9e: e2:ab:29:f2:78:18:2d:ae:75:f0:14:7b:90:7c:96: 81:da:92:4a:1a:79:c9:66:f5:82:28:9f:9c:5d:51: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:C2:5B:12:FE:47:15:9F:A5:28:E6:76:AB:70:81:EB:C6:88:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:b000::/40 Signature Algorithm: sha256WithRSAEncryption 18:6e:52:6b:c1:76:0b:8a:b9:da:c1:1e:60:3b:fd:52:7a:cf: e6:41:d3:7c:03:c2:3c:c7:95:be:ea:2a:b8:cd:c6:53:5c:24: 51:77:a7:f2:df:b8:1a:6d:a2:dc:b5:f3:4d:25:0a:c9:9d:b8: d4:34:47:d0:51:6e:47:8e:16:b3:98:2e:63:e0:6e:88:b4:02: 86:ed:6d:23:03:ae:f6:00:bb:a4:d0:17:9d:73:d0:9f:92:89: fb:a2:68:1b:d7:d9:36:1c:fa:95:10:03:ca:4f:22:31:ee:78: 33:c4:9b:9a:5f:cd:e0:e2:b3:b9:c5:49:1c:7e:09:68:7a:24: 9e:6e:ff:2c:f3:00:bb:fc:3a:06:88:69:fc:b0:a5:fa:e4:32: 63:32:76:f7:44:f9:a0:bf:7f:9a:6f:38:a3:33:9a:9f:b3:44: 6c:5c:0f:c2:a2:1a:fc:bd:c0:29:15:c2:ec:8c:a8:d5:ae:cf: dd:aa:37:23:57:6f:bc:60:e6:bd:14:01:cf:7a:ec:94:21:93: 59:dd:ac:11:22:12:f5:87:07:3b:1c:a8:40:18:47:08:dc:f0: e2:b4:7d:e9:1e:f9:b9:43:f0:33:80:e1:39:8b:1d:43:c3:08: 00:83:cd:ce:a0:bc:61:43:e7:95:05:ab:42:da:f9:a0:73:ac: ff:3e:96:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbkDpT9CY4f/5ttiBv+bFCPLmq4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxMDAwMDAwMFoX DTI0MDUxNTIzNTk1OVowejFJMEcGA1UEBRNAZmNhMjI0ODI5MjEwMzE2YmNiZmNi MjFmNTllM2FhMDI3MGQyNTI5MTdiMGVlNmY3OGZlMDg3MWQzN2VjZjM2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcIoIGk5AFTObjwXbMs8tF1KuCn7 zzjSZvAGOrynEVrGASEpPLQGjvE+UgCr2JgrMpIcd8NFNP6amFBlURq9aP6olTjL KeMRWhb1JD78JWzi+uK5XXmuqadqqccESjMpZ/CjUk/MISAlqR+jI3ZW1nDJACld OhR5XiMZ0iWdXin3X+oy+xx38qk3lWJlw6dQMpEX8w8ntjZvP+sFXK+fY8AsHf6B 8oNzWzh4wycm4hcUAhn5jMJJj9Pi0lmTYfc6VNTVP0AAaaqghd1+dMwbhqikLeef IUKHuRG4GcTIhp7iqynyeBgtrnXwFHuQfJaB2pJKGnnJZvWCKJ+cXVFfNQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBHAwlsS/kcVn6Uo5narcIHrxojoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1ZjZhMDQ5LTdlMTMtNDZkZi05MTVlLWRkYWI0ODEwOTZhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba97AwDQYJKoZIhvcNAQELBQADggEBABhuUmvBdguKudrBHmA7 /VJ6z+ZB03wDwjzHlb7qKrjNxlNcJFF3p/LfuBptoty1800lCsmduNQ0R9BRbkeO FrOYLmPgboi0AobtbSMDrvYAu6TQF51z0J+SifuiaBvX2TYc+pUQA8pPIjHueDPE m5pfzeDis7nFSRx+CWh6JJ5u/yzzALv8OgaIafywpfrkMmMydvdE+aC/f5pvOKMz mp+zRGxcD8KiGvy9wCkVwuyMqNWuz92qNyNXb7xg5r0UAc967JQhk1ndrBEiEvWH BzscqEAYRwjc8OK0feke+blD8DOA4TmLHUPDCACDzc6gvGFD55UFq0La+aBzrP8+ lm0= -----END CERTIFICATE-----Generated at Sat Apr 20 01:01:16 2024 by rpki-client on console-fra.rpki-client.org