$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/990c43ad-83b4-457e-b20f-7b3712fb2814.roa File: 990c43ad-83b4-457e-b20f-7b3712fb2814.roa (raw, json) Hash identifier: TBit8whdQ5NCoR4/1hak8Ox8dNitQXp1DimDYwZPuXw= Subject key identifier: 44:7A:1B:06:9E:EC:43:50:47:FA:BF:32:E0:D4:F9:C4:8A:AF:FE:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 548E4EDB54FFDAC0A0464A325646ABC1567A72A4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/990c43ad-83b4-457e-b20f-7b3712fb2814.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8e:4e:db:54:ff:da:c0:a0:46:4a:32:56:46:ab:c1:56:7a:72:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=005118986a184a8ae18efead73179f9b3dc4078aca57c7c9c1d97c349100c4e5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:e6:ae:03:51:a4:05:b2:3f:65:51:a9:96: 12:30:9c:12:1b:d0:3b:81:71:7c:2a:c4:a2:0c:82: 6c:4d:5e:53:43:16:73:64:f5:70:24:20:91:27:70: 10:a0:c7:ad:4d:99:26:ed:79:1d:3b:f7:eb:fa:cd: e2:fb:e0:d9:99:8d:cf:f5:85:5e:f9:f0:60:bb:e8: f1:81:c8:94:00:b0:c5:5e:94:21:92:77:13:e8:51: 03:5a:a8:9f:d6:4c:ce:e2:27:67:c6:a8:44:15:58: c4:1b:5b:ee:e2:13:27:89:1b:de:d2:80:af:e8:1c: d8:d6:15:3a:62:8f:bb:13:ab:1e:5a:48:92:e5:4c: fa:88:43:67:4a:10:20:2e:50:16:a2:1c:e9:f4:27: f6:3a:fa:8a:c3:5a:e0:28:da:68:e0:eb:4c:27:bd: aa:ed:af:dd:1c:3e:d2:13:18:ed:d4:cf:56:27:7f: a4:f2:0e:c8:9f:d2:4d:7f:f0:5e:80:1a:5c:41:0a: 7b:03:66:b0:95:19:4f:5c:24:55:c1:ee:52:f4:f7: 6d:a9:a4:9f:5f:15:26:33:ff:92:f0:ad:ad:7e:5f: 45:04:8f:aa:d4:60:ae:9e:74:07:f4:38:40:51:73: dd:e1:1b:2d:fe:83:eb:77:a3:38:d1:f1:06:51:30: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7A:1B:06:9E:EC:43:50:47:FA:BF:32:E0:D4:F9:C4:8A:AF:FE:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/990c43ad-83b4-457e-b20f-7b3712fb2814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b000::/40 Signature Algorithm: sha256WithRSAEncryption bf:2e:38:24:1f:0f:7c:da:c3:07:08:3c:e6:25:46:17:89:ec: de:c0:c4:0b:c9:8a:6d:0f:7c:43:1f:a9:6c:2f:d9:cc:88:10: 83:93:ca:7b:ba:1f:de:f1:80:1c:82:1b:f3:44:54:ca:47:48: 58:63:df:31:38:5d:01:c9:c4:13:97:9a:77:7d:70:e0:da:39: 31:0f:b6:62:a9:b8:72:d2:7d:35:2d:ae:59:e5:60:a7:0d:fc: a1:c1:16:c5:11:f0:f3:5c:03:b5:24:7c:ec:bd:b3:a0:b2:28: 5a:e9:27:08:e8:ba:a5:57:f2:8b:9b:60:ad:1b:74:4d:94:4a: 58:c0:7e:20:69:78:59:33:35:6a:22:a1:a8:f2:02:59:5a:05: 82:e6:00:1b:10:cd:65:72:44:aa:c2:48:47:a6:d3:42:0d:71: 1d:4b:fb:a1:f9:a6:d9:bb:ef:c1:30:30:3c:e3:5d:88:60:37: e3:71:f1:52:ec:f8:4a:39:f7:90:41:ad:b4:d8:1c:a9:27:cc: bf:b7:47:30:b1:d7:1d:c2:1e:40:9a:f6:a1:ba:4e:f0:07:3f: 38:03:5c:03:27:7d:e8:ad:75:c0:c3:20:5d:ac:a4:f9:6b:5e: e0:69:5a:2b:31:5d:c8:a7:4a:d6:e6:81:dd:49:1e:54:55:90: 72:d7:fd:0d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVI5O21T/2sCgRkoyVkarwVZ6cqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMDA1MTE4OTg2YTE4NGE4YWUxOGVm ZWFkNzMxNzlmOWIzZGM0MDc4YWNhNTdjN2M5YzFkOTdjMzQ5MTAwYzRlNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS3mrgNRpAWyP2VRqZYSMJwSG9A7 gXF8KsSiDIJsTV5TQxZzZPVwJCCRJ3AQoMetTZkm7XkdO/fr+s3i++DZmY3P9YVe +fBgu+jxgciUALDFXpQhkncT6FEDWqif1kzO4idnxqhEFVjEG1vu4hMniRve0oCv 6BzY1hU6Yo+7E6seWkiS5Uz6iENnShAgLlAWohzp9Cf2OvqKw1rgKNpo4OtMJ72q 7a/dHD7SExjt1M9WJ3+k8g7In9JNf/BegBpcQQp7A2awlRlPXCRVwe5S9PdtqaSf XxUmM/+S8K2tfl9FBI+q1GCunnQH9DhAUXPd4Rst/oPrd6M40fEGUTBmKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFER6Gwae7ENQR/q/MuDU+cSKr/7iMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5MGM0M2FkLTgzYjQtNDU3ZS1iMjBmLTdiMzcxMmZiMjgxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYbAwDQYJKoZIhvcNAQELBQADggEBAL8uOCQfD3zawwcIPOYl RheJ7N7AxAvJim0PfEMfqWwv2cyIEIOTynu6H97xgByCG/NEVMpHSFhj3zE4XQHJ xBOXmnd9cODaOTEPtmKpuHLSfTUtrlnlYKcN/KHBFsUR8PNcA7UkfOy9s6CyKFrp JwjouqVX8oubYK0bdE2USljAfiBpeFkzNWoioajyAllaBYLmABsQzWVyRKrCSEem 00INcR1L+6H5ptm778EwMDzjXYhgN+Nx8VLs+Eo595BBrbTYHKknzL+3RzCx1x3C HkCa9qG6TvAHPzgDXAMnfeitdcDDIF2spPlrXuBpWisxXcinStbmgd1JHlRVkHLX /Q0= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org