$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/990c43ad-83b4-457e-b20f-7b3712fb2814.roa File: 990c43ad-83b4-457e-b20f-7b3712fb2814.roa (raw, json) Hash identifier: gNw8/kRmDMTbsX72cmOAj41lrrexZ1FW3yxLa6xgud4= Subject key identifier: DE:F1:18:6A:24:49:C7:82:69:85:2D:FF:0C:2A:EC:27:49:7C:E0:5F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47DBF3044EE3C4C91FDE81C8FA242A656078E667 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/990c43ad-83b4-457e-b20f-7b3712fb2814.roa Signing time: Wed 01 May 2024 00:00:00 +0000 ROA not before: Wed 01 May 2024 00:00:00 +0000 ROA not after: Wed 05 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 15:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:f3:04:4e:e3:c4:c9:1f:de:81:c8:fa:24:2a:65:60:78:e6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 1 00:00:00 2024 GMT Not After : Jun 5 23:59:59 2024 GMT Subject: serialNumber=0081630b98d7ff3795380b98ffb2a61a62a40d3183eb933f81bf7deaec95d8bb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:1c:f5:16:ea:a0:e4:59:f9:84:0b:72:9d: 30:15:ee:01:72:54:76:3d:5f:41:65:84:2d:77:c3: e6:63:3e:04:82:e0:05:fd:7b:46:67:ea:7e:76:d0: e9:0d:34:ff:cb:7c:86:6f:38:cf:09:39:26:94:00: 82:cc:7c:c0:89:8a:14:8e:e0:90:a3:67:c5:45:36: 8b:6c:c9:60:29:f9:77:d7:74:ef:70:a1:da:b2:5a: 9f:5d:27:22:b8:67:fe:2c:47:f9:79:1d:79:5e:f7: 75:d6:ad:dd:53:65:e7:e6:0a:3f:66:64:a2:a2:55: fd:9c:80:ad:96:78:bd:c1:f3:8a:e1:28:09:a6:61: 9b:20:e1:0a:4e:a3:04:1d:52:ac:ad:fe:c1:f9:5e: da:7b:af:fd:ab:9f:4e:b3:1d:fc:e2:ff:c0:45:aa: 5d:53:8d:ed:e1:a5:97:34:bd:31:05:e8:fb:5b:d9: 4a:2c:89:06:e5:85:21:c1:5f:86:05:98:0b:a9:98: 72:36:cf:86:d4:56:14:26:03:bf:85:18:73:25:31: e5:12:37:7b:d1:5b:a4:fe:62:7c:dd:7e:35:78:12: 68:83:b4:21:23:5c:12:e4:cd:e0:5c:21:71:ac:60: a0:05:66:36:09:5b:7a:6e:1c:ba:2b:01:81:02:5a: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F1:18:6A:24:49:C7:82:69:85:2D:FF:0C:2A:EC:27:49:7C:E0:5F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/990c43ad-83b4-457e-b20f-7b3712fb2814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:b000::/40 Signature Algorithm: sha256WithRSAEncryption 93:15:fc:93:92:7b:30:25:32:fa:1f:f6:92:c9:dc:10:8a:b7: b2:bb:7d:c8:3c:73:3a:73:35:d8:3a:e5:a9:50:76:f8:98:80: 35:97:04:94:8d:de:6f:ae:6d:2f:ba:fc:32:2f:b9:60:6c:93: d1:1f:6e:94:0c:64:c0:a5:7a:dc:97:f2:23:06:b1:6c:bb:c9: 8f:07:7c:eb:0b:d2:5d:e1:7f:f2:5f:7d:32:80:50:29:87:ce: 13:b9:9d:cc:81:3e:95:fd:18:f4:e8:b0:5d:40:91:5d:a1:6a: f7:1c:c4:e0:0c:89:5e:20:0d:a8:af:8c:48:26:63:61:65:4a: f8:4a:ba:17:84:fa:9f:1a:34:a7:7d:db:25:62:18:2a:10:4a: fc:8d:0d:93:6d:6e:53:5c:bb:74:cc:32:c2:ba:43:1b:21:2f: f3:04:f3:ad:95:6b:2b:42:49:1f:58:84:a5:2a:c3:58:98:2c: 4d:15:b9:31:2c:83:69:63:2e:0e:2d:30:db:4b:a2:69:f1:9c: 08:45:d9:e7:32:ed:1f:6d:98:21:a9:4b:bb:ed:d9:b1:c2:d9: e7:24:0b:ec:fc:50:f1:b5:db:ca:f3:ef:fd:ed:6f:ae:a8:86: 2a:05:f2:8a:04:6a:b7:d9:66:24:21:35:7a:e6:8d:12:4a:2e: a5:13:09:8d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR9vzBE7jxMkf3oHI+iQqZWB45mcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMTAwMDAwMFoX DTI0MDYwNTIzNTk1OVowejFJMEcGA1UEBRNAMDA4MTYzMGI5OGQ3ZmYzNzk1Mzgw Yjk4ZmZiMmE2MWE2MmE0MGQzMTgzZWI5MzNmODFiZjdkZWFlYzk1ZDhiYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6oc9RbqoORZ+YQLcp0wFe4BclR2 PV9BZYQtd8PmYz4EguAF/XtGZ+p+dtDpDTT/y3yGbzjPCTkmlACCzHzAiYoUjuCQ o2fFRTaLbMlgKfl313TvcKHaslqfXSciuGf+LEf5eR15Xvd11q3dU2Xn5go/ZmSi olX9nICtlni9wfOK4SgJpmGbIOEKTqMEHVKsrf7B+V7ae6/9q59Osx384v/ARapd U43t4aWXNL0xBej7W9lKLIkG5YUhwV+GBZgLqZhyNs+G1FYUJgO/hRhzJTHlEjd7 0Vuk/mJ83X41eBJog7QhI1wS5M3gXCFxrGCgBWY2CVt6bhy6KwGBAlpfQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN7xGGokSceCaYUt/wwq7CdJfOBfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5MGM0M2FkLTgzYjQtNDU3ZS1iMjBmLTdiMzcxMmZiMjgxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYbAwDQYJKoZIhvcNAQELBQADggEBAJMV/JOSezAlMvof9pLJ 3BCKt7K7fcg8czpzNdg65alQdviYgDWXBJSN3m+ubS+6/DIvuWBsk9EfbpQMZMCl etyX8iMGsWy7yY8HfOsL0l3hf/JffTKAUCmHzhO5ncyBPpX9GPTosF1AkV2havcc xOAMiV4gDaivjEgmY2FlSvhKuheE+p8aNKd92yViGCoQSvyNDZNtblNcu3TMMsK6 QxshL/ME862VaytCSR9YhKUqw1iYLE0VuTEsg2ljLg4tMNtLomnxnAhF2ecy7R9t mCGpS7vt2bHC2eckC+z8UPG128rz7/3tb66ohioF8ooEarfZZiQhNXrmjRJKLqUT CY0= -----END CERTIFICATE-----Generated at Tue May 7 16:43:59 2024 by rpki-client on console-ams.rpki-client.org