$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98cc120c-2d83-4ed5-b6c2-d3c92a4f78ed.roa File: 98cc120c-2d83-4ed5-b6c2-d3c92a4f78ed.roa (raw, json) Hash identifier: ztZ113lK0fbpJNUGQHK2Fb9R/eVpIIK++uFHG928DyI= Subject key identifier: 63:56:4C:D8:37:AB:FD:36:FB:A7:34:BD:94:63:AE:72:4A:93:3E:F8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 06D06A1EEC2D0EED3A9C8253E4E8F79B28D81E1F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98cc120c-2d83-4ed5-b6c2-d3c92a4f78ed.roa Signing time: Tue 16 Jul 2024 00:00:00 +0000 ROA not before: Tue 16 Jul 2024 00:00:00 +0000 ROA not after: Tue 20 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d0:6a:1e:ec:2d:0e:ed:3a:9c:82:53:e4:e8:f7:9b:28:d8:1e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:00 2024 GMT Not After : Aug 20 23:59:59 2024 GMT Subject: serialNumber=0f524c762f28d39b547a6c556260456455db908b0363b94597d2384a0dfec831, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:5d:50:5f:5c:f7:0f:78:2e:f2:15:0b:e5: fe:3a:2e:0c:84:83:92:a3:7c:4b:13:ea:81:e3:29: f0:85:0b:90:ad:a4:d3:dc:06:9f:a5:75:70:d4:c4: ae:01:82:fc:34:ee:c5:47:de:9d:77:a6:dd:30:b0: b2:bb:42:dc:15:40:59:41:dc:26:b3:a9:4e:fb:b5: c6:bc:94:1e:7a:3b:b6:94:a2:22:72:cc:a1:9e:f0: c8:5b:f5:de:eb:8c:e1:de:6d:7c:8f:58:44:fe:d4: 71:b7:3e:3f:e9:05:2a:c8:ae:27:a7:0f:a6:d8:b2: 7d:99:a6:72:73:f9:99:28:82:66:58:9e:dc:54:15: 7f:02:27:86:16:6e:02:81:8c:80:7d:07:7a:d6:e3: 48:f6:dd:c1:da:d2:d6:94:eb:fe:3a:00:83:77:a9: 5c:3f:d1:61:ac:2b:b6:03:50:ac:92:b8:01:aa:07: e8:bd:8f:f4:f6:24:b8:76:7f:70:b7:e4:40:eb:08: 0b:ec:12:05:d5:99:cb:04:c4:17:4e:da:4f:81:d6: cf:b3:bf:63:9a:bf:2e:87:52:1f:46:96:55:37:3a: 0f:29:09:d2:46:89:fb:a0:86:1d:4d:d3:b2:1a:20: 1e:99:b1:6a:b6:3c:40:f3:53:cc:cf:74:38:c4:34: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:56:4C:D8:37:AB:FD:36:FB:A7:34:BD:94:63:AE:72:4A:93:3E:F8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98cc120c-2d83-4ed5-b6c2-d3c92a4f78ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:4800::/40 Signature Algorithm: sha256WithRSAEncryption 8a:9e:19:7e:1e:2c:55:78:68:31:31:2f:5d:0d:fc:aa:09:85: b2:8b:11:75:18:b7:e8:26:17:83:85:af:32:57:63:3b:b5:6a: 94:c8:fc:a9:70:dc:9f:ae:34:d6:80:43:0c:de:19:1a:80:42: 6e:84:1e:6f:3a:e5:2f:b8:16:f1:3b:df:16:31:2c:67:4a:81: 67:f6:eb:d6:fd:64:9c:c1:cf:21:0f:07:81:dd:c6:04:c2:d1: 82:3a:3e:8b:01:28:22:f7:5d:3c:52:3a:6e:80:da:9c:81:71: a1:cd:98:a4:be:4a:ae:ab:3d:8e:25:7d:c6:bf:28:a0:df:ca: 0a:fe:33:ac:74:5d:d5:aa:36:46:8b:5a:3d:40:14:70:39:78: e3:59:b0:99:9c:6e:31:f4:bf:68:72:15:25:01:73:96:8c:28: 7b:e2:e4:06:0c:f4:59:ef:80:ff:d4:af:f8:d4:34:a6:e5:1d: 40:2e:e8:8f:60:f7:3d:ae:dd:c0:20:44:cc:43:b3:99:ad:b0: b3:9a:aa:0a:a8:72:c5:09:e8:41:f6:0e:b0:3e:f0:28:31:db: 19:ad:5d:e7:28:2a:5d:16:74:68:0d:34:c2:a1:31:cd:ff:8c: 22:88:a1:b4:7c:36:cd:f5:3e:a4:66:7e:16:f0:b7:72:5c:85: 76:b1:2c:74 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBtBqHuwtDu06nIJT5Oj3myjYHh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNjAwMDAwMFoX DTI0MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMGY1MjRjNzYyZjI4ZDM5YjU0N2E2 YzU1NjI2MDQ1NjQ1NWRiOTA4YjAzNjNiOTQ1OTdkMjM4NGEwZGZlYzgzMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKFdUF9c9w94LvIVC+X+Oi4MhIOS o3xLE+qB4ynwhQuQraTT3AafpXVw1MSuAYL8NO7FR96dd6bdMLCyu0LcFUBZQdwm s6lO+7XGvJQeeju2lKIicsyhnvDIW/Xe64zh3m18j1hE/tRxtz4/6QUqyK4npw+m 2LJ9maZyc/mZKIJmWJ7cVBV/AieGFm4CgYyAfQd61uNI9t3B2tLWlOv+OgCDd6lc P9FhrCu2A1CskrgBqgfovY/09iS4dn9wt+RA6wgL7BIF1ZnLBMQXTtpPgdbPs79j mr8uh1IfRpZVNzoPKQnSRon7oIYdTdOyGiAembFqtjxA81PMz3Q4xDS5MQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGNWTNg3q/02+6c0vZRjrnJKkz74MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4Y2MxMjBjLTJkODMtNGVkNS1iNmMyLWQzYzkyYTRmNzhlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYEgwDQYJKoZIhvcNAQELBQADggEBAIqeGX4eLFV4aDExL10N /KoJhbKLEXUYt+gmF4OFrzJXYzu1apTI/Klw3J+uNNaAQwzeGRqAQm6EHm865S+4 FvE73xYxLGdKgWf269b9ZJzBzyEPB4HdxgTC0YI6PosBKCL3XTxSOm6A2pyBcaHN mKS+Sq6rPY4lfca/KKDfygr+M6x0XdWqNkaLWj1AFHA5eONZsJmcbjH0v2hyFSUB c5aMKHvi5AYM9FnvgP/Ur/jUNKblHUAu6I9g9z2u3cAgRMxDs5mtsLOaqgqocsUJ 6EH2DrA+8Cgx2xmtXecoKl0WdGgNNMKhMc3/jCKIobR8Ns31PqRmfhbwt3JchXax LHQ= -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:41 2024 by rpki-client on console-ams.rpki-client.org