$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa File: 98bbbcef-0217-4c51-a717-7af30c63be28.roa (raw, json) Hash identifier: 4dv8Gn+SBynIjft8HktkT6j2FE2T9SzbRI5lsu4XdmQ= Subject key identifier: 62:34:0B:79:56:01:D0:1C:9E:11:A3:8D:91:47:64:F2:D5:B9:7D:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 66A7876CD43CCBB7576037CB776ADB23945D3FDE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a7:87:6c:d4:3c:cb:b7:57:60:37:cb:77:6a:db:23:94:5d:3f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=81a2efb3b84ddaed24ad5f809e2ebd8e572c0ad44c712e5ed66ee0ced03f75f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:5f:d1:e6:d6:09:75:28:2c:98:67:b5:3c: 96:67:3b:ae:02:bb:f8:f4:05:3a:40:07:db:4c:22: 85:0e:f3:72:d4:04:2d:f4:0e:22:51:e6:44:4d:8b: 2f:ed:1d:ee:57:34:b9:b6:a0:9e:28:71:2b:77:25: de:bf:ac:7b:60:21:7d:80:46:05:f6:7d:31:2d:82: 84:0b:47:b5:6d:93:4c:0a:a8:ed:1a:de:ee:10:3c: 1f:da:8f:78:d7:e0:a6:99:19:e7:74:e4:3b:75:9b: b1:42:2a:09:36:7d:58:ae:c0:6c:21:b8:ab:2c:ce: 40:2a:79:db:5f:c8:8d:e8:c9:0b:d3:d4:9b:fa:17: 2d:e5:42:b3:10:a5:41:79:94:28:36:cf:df:55:cf: 7e:15:e9:17:24:2b:1d:6f:03:13:ac:17:b7:cb:8e: 81:5c:d8:ca:11:eb:7a:50:44:87:38:de:94:f6:b9: bf:b4:f0:ff:ad:5f:dc:82:ae:2f:ea:ac:e1:dc:d1: b9:f3:d8:a3:99:86:a3:07:18:79:05:23:cf:ec:de: b4:67:08:0f:70:b5:64:6e:37:d5:fb:22:07:fa:20: b4:b0:26:eb:71:61:60:8d:52:45:f4:e8:5e:66:fd: cf:5f:cb:f4:7e:85:e1:4b:13:16:21:06:14:bc:95: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:34:0B:79:56:01:D0:1C:9E:11:A3:8D:91:47:64:F2:D5:B9:7D:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:8800::/40 Signature Algorithm: sha256WithRSAEncryption 38:42:53:92:55:ad:18:d9:fc:1f:3e:7e:05:50:e1:b4:67:ec: 98:a3:13:d1:d4:32:9d:8b:a0:10:df:ae:a6:18:44:30:a4:1a: 1c:33:ae:ed:16:9a:ac:30:19:85:b5:d9:70:96:cb:53:69:13: ae:d8:6b:ef:8d:22:5f:19:d0:07:1e:05:a9:f3:d2:72:67:33: f7:17:e2:ee:37:e5:6d:22:13:32:21:f8:d8:f4:c3:ce:11:80: e5:dd:24:ad:69:0d:ac:ca:05:56:98:43:98:b2:ca:f8:bc:15: 23:99:de:d8:94:f9:29:f6:44:18:21:03:c5:06:da:d3:77:af: 05:e7:fa:08:45:ed:c9:f6:34:3e:93:e8:35:2a:69:1f:5e:ae: 00:3e:15:fa:8b:2f:ad:83:28:07:36:6e:9b:a7:60:32:b4:f2: da:23:f5:8f:62:2f:ef:d8:c3:0c:f7:b4:72:9f:38:aa:02:4a: 49:66:99:eb:a3:e1:0f:b5:aa:e6:bf:5e:73:e4:2d:7a:27:95: ca:fa:90:13:ce:df:7c:d5:77:7a:26:a7:e3:de:7f:08:97:02: 77:49:f1:9c:58:24:5a:60:b8:44:49:6f:d3:16:ac:b8:e6:8a: e2:2a:82:9c:ef:23:03:76:f9:3a:00:56:a3:76:48:8d:71:13: 7c:85:fa:be -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZqeHbNQ8y7dXYDfLd2rbI5RdP94wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExMTAwMDAwMFoX DTI0MTIxNjIzNTk1OVowejFJMEcGA1UEBRNAODFhMmVmYjNiODRkZGFlZDI0YWQ1 ZjgwOWUyZWJkOGU1NzJjMGFkNDRjNzEyZTVlZDY2ZWUwY2VkMDNmNzVmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Nf0ebWCXUoLJhntTyWZzuuArv4 9AU6QAfbTCKFDvNy1AQt9A4iUeZETYsv7R3uVzS5tqCeKHErdyXev6x7YCF9gEYF 9n0xLYKEC0e1bZNMCqjtGt7uEDwf2o941+CmmRnndOQ7dZuxQioJNn1YrsBsIbir LM5AKnnbX8iN6MkL09Sb+hct5UKzEKVBeZQoNs/fVc9+FekXJCsdbwMTrBe3y46B XNjKEet6UESHON6U9rm/tPD/rV/cgq4v6qzh3NG589ijmYajBxh5BSPP7N60ZwgP cLVkbjfV+yIH+iC0sCbrcWFgjVJF9OheZv3PX8v0foXhSxMWIQYUvJW0JQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGI0C3lWAdAcnhGjjZFHZPLVuX30MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4YmJiY2VmLTAyMTctNGM1MS1hNzE3LTdhZjMwYzYzYmUyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+IgwDQYJKoZIhvcNAQELBQADggEBADhCU5JVrRjZ/B8+fgVQ 4bRn7JijE9HUMp2LoBDfrqYYRDCkGhwzru0WmqwwGYW12XCWy1NpE67Ya++NIl8Z 0AceBanz0nJnM/cX4u435W0iEzIh+Nj0w84RgOXdJK1pDazKBVaYQ5iyyvi8FSOZ 3tiU+Sn2RBghA8UG2tN3rwXn+ghF7cn2ND6T6DUqaR9ergA+FfqLL62DKAc2bpun YDK08toj9Y9iL+/Ywwz3tHKfOKoCSklmmeuj4Q+1qua/XnPkLXonlcr6kBPO33zV d3omp+PefwiXAndJ8ZxYJFpguERJb9MWrLjmiuIqgpzvIwN2+ToAVqN2SI1xE3yF +r4= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:36 2024 by rpki-client on console-fra.rpki-client.org