$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa File: 996429fb-4fb5-4437-9fbd-29531436e253.roa (raw, json) Hash identifier: 0nJ8GPTMdPrq+w3l0D4FUrI+bVcIZBsDocCWyLQ4GgA= Subject key identifier: 2F:2B:82:79:58:98:9D:31:67:AA:6F:B0:55:CB:F6:9F:AC:F1:5B:4A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0AD78A3FA995D297485CAE84830ADDE98956741E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa Signing time: Thu 02 May 2024 00:00:00 +0000 ROA not before: Thu 02 May 2024 00:00:00 +0000 ROA not after: Thu 06 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d7:8a:3f:a9:95:d2:97:48:5c:ae:84:83:0a:dd:e9:89:56:74:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:00:00 2024 GMT Not After : Jun 6 23:59:59 2024 GMT Subject: serialNumber=e05c462ed67939d740d4ba29884bf253a3a86fb8c9c99864cf66095da05a96a3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:51:47:07:ad:df:93:4b:00:a6:37:6a:49:74: 97:62:b2:fd:78:52:77:3f:8b:78:ea:fd:f0:57:0d: 64:56:f8:c9:c8:29:a8:84:b1:7a:fe:b7:7a:13:cb: 7f:ad:c6:b4:0f:92:3f:3f:2e:be:c6:a9:79:32:c9: c8:73:d8:35:72:9c:ed:8b:b9:44:6b:a8:69:8b:45: 52:34:31:c8:ac:85:f0:66:16:dd:98:1b:66:66:34: 5e:50:8b:1f:a1:81:30:7b:9f:ba:0e:f9:0e:86:a3: 57:48:32:55:70:73:60:9f:4d:b6:d9:df:db:ab:59: 3f:89:b0:92:ee:bc:47:ab:45:d9:69:47:e9:47:82: 62:76:e0:50:a7:0a:e7:54:af:67:38:9d:06:ae:5c: 9a:2f:b8:c3:ae:ec:31:7c:0e:cd:81:ce:6f:ba:49: 85:32:c0:3c:88:d4:82:de:72:da:a2:47:3b:6d:9f: 72:92:04:1f:4f:fb:7c:e8:dd:e6:cd:fd:99:f4:df: f0:85:4e:59:be:27:4a:8c:10:a4:b7:63:5d:cd:9e: 9d:29:f2:e9:30:8d:e9:bc:7a:db:1a:f4:1a:cf:17: fc:ab:94:82:2f:32:ac:a8:bf:14:40:12:8e:de:5b: b4:f4:52:91:66:7f:45:c2:6a:a5:9f:e0:41:73:69: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2B:82:79:58:98:9D:31:67:AA:6F:B0:55:CB:F6:9F:AC:F1:5B:4A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:c000::/40 Signature Algorithm: sha256WithRSAEncryption 8e:dd:98:25:16:83:18:b1:c5:0c:43:7c:24:65:55:7e:47:a3: 00:03:d5:b9:74:9f:eb:d1:b8:22:a6:ea:b1:59:35:1c:65:98: 3a:87:63:55:bd:27:7d:c0:7e:0b:82:e9:86:c3:64:e7:59:60: 8f:77:01:bf:4f:4c:47:89:e2:64:46:49:f6:a8:66:cc:23:64: 68:08:e4:50:b7:a7:1e:93:58:9d:ce:f5:dc:3c:e5:b5:98:4f: 55:4f:06:5e:17:ba:3e:e7:bb:6e:91:75:76:23:a4:b4:fb:9e: cc:4d:aa:78:17:7e:58:fb:28:83:0f:49:d1:78:64:c0:61:66: 5b:25:55:d4:2b:d9:e3:f8:e4:ff:1c:71:7c:4d:67:d0:dd:9c: 5a:98:74:71:91:7f:14:0c:c9:f6:66:d1:57:e4:cd:84:51:a2: cf:0a:3e:a6:c9:21:ca:a2:41:a6:7d:e6:2a:32:05:a7:12:6a: dd:33:dc:0d:2d:60:41:4f:1b:eb:36:d5:4a:6e:d0:78:d7:41: 00:71:f4:1c:b4:a1:dc:86:6e:79:78:98:0b:8b:e8:06:c7:65: f4:09:9a:ba:3d:21:bd:6c:9f:80:29:22:7f:4d:f7:af:83:6d: b7:91:4b:a0:83:9f:3f:dc:4f:bd:40:46:7d:48:e1:15:78:d0: c1:23:8a:00 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCteKP6mV0pdIXK6Egwrd6YlWdB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMjAwMDAwMFoX DTI0MDYwNjIzNTk1OVowejFJMEcGA1UEBRNAZTA1YzQ2MmVkNjc5MzlkNzQwZDRi YTI5ODg0YmYyNTNhM2E4NmZiOGM5Yzk5ODY0Y2Y2NjA5NWRhMDVhOTZhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFFHB63fk0sApjdqSXSXYrL9eFJ3 P4t46v3wVw1kVvjJyCmohLF6/rd6E8t/rca0D5I/Py6+xql5MsnIc9g1cpzti7lE a6hpi0VSNDHIrIXwZhbdmBtmZjReUIsfoYEwe5+6DvkOhqNXSDJVcHNgn0222d/b q1k/ibCS7rxHq0XZaUfpR4JiduBQpwrnVK9nOJ0GrlyaL7jDruwxfA7Ngc5vukmF MsA8iNSC3nLaokc7bZ9ykgQfT/t86N3mzf2Z9N/whU5ZvidKjBCkt2NdzZ6dKfLp MI3pvHrbGvQazxf8q5SCLzKsqL8UQBKO3lu09FKRZn9Fwmqln+BBc2kuNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC8rgnlYmJ0xZ6pvsFXL9p+s8VtKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NjQyOWZiLTRmYjUtNDQzNy05ZmJkLTI5NTMxNDM2ZTI1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaucAwDQYJKoZIhvcNAQELBQADggEBAI7dmCUWgxixxQxDfCRl VX5HowAD1bl0n+vRuCKm6rFZNRxlmDqHY1W9J33AfguC6YbDZOdZYI93Ab9PTEeJ 4mRGSfaoZswjZGgI5FC3px6TWJ3O9dw85bWYT1VPBl4Xuj7nu26RdXYjpLT7nsxN qngXflj7KIMPSdF4ZMBhZlslVdQr2eP45P8ccXxNZ9DdnFqYdHGRfxQMyfZm0Vfk zYRRos8KPqbJIcqiQaZ95ioyBacSat0z3A0tYEFPG+s21Upu0HjXQQBx9By0odyG bnl4mAuL6AbHZfQJmro9Ib1sn4ApIn9N96+DbbeRS6CDnz/cT71ARn1I4RV40MEj igA= -----END CERTIFICATE-----Generated at Thu May 23 01:35:20 2024 by rpki-client on console-fra.rpki-client.org