$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99872005-b4d4-42b1-83cf-883d2cac4b3c.roa File: 99872005-b4d4-42b1-83cf-883d2cac4b3c.roa (raw, json) Hash identifier: Sb2UKYIrJepehlsTnn/hdX5mH2X5D0sY6lrKZir1wAc= Subject key identifier: 39:6D:BA:39:CD:A5:25:76:A1:48:DE:5D:61:06:B7:3C:33:42:3B:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2712C68C7D7BD4702FA31637336E6927D8E49257 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99872005-b4d4-42b1-83cf-883d2cac4b3c.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 103.246.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:12:c6:8c:7d:7b:d4:70:2f:a3:16:37:33:6e:69:27:d8:e4:92:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=59ba63d6d89a8b780eadb8a3cedf5b8049b1b61569a060467dcd72643a8334d4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:ad:1e:d1:c2:06:13:be:bd:08:85:20:e6: 3e:4c:18:ee:23:60:99:9d:48:e1:d3:cd:66:89:86: aa:cc:33:4a:3e:27:08:bf:e4:07:8e:49:38:31:54: c4:6d:4c:e8:94:7c:92:50:be:6b:c8:b3:31:af:93: b3:ee:89:60:50:64:27:ed:a3:f3:ab:1c:83:d5:29: 8c:26:9c:d7:0f:3d:b1:5f:f8:81:d6:c6:9f:aa:77: 60:c2:8a:9b:cb:16:81:fd:f7:ad:be:44:9b:ec:07: 07:60:76:73:07:85:92:8c:66:83:7e:a5:62:d8:fa: dd:f4:d1:20:3a:e3:2e:aa:70:a5:91:2e:4a:a0:51: da:0a:18:08:05:04:7d:5c:25:04:15:5c:e7:40:00: 9e:9c:50:f6:24:4c:8b:77:86:e4:17:11:57:7f:2c: 79:5a:31:5e:ab:7f:df:81:88:e9:23:48:15:78:33: 5f:4c:60:e8:77:fe:9e:32:f6:43:4e:14:b3:9b:81: 13:c6:29:d1:47:b2:a7:a3:98:ac:28:b0:ef:a3:09: 50:8b:d5:2a:4d:de:b3:82:46:52:c3:9f:35:49:14: 44:a6:c9:27:6f:83:2d:91:8e:2f:08:b6:3c:9f:9a: b4:e4:9e:4f:bb:ed:7b:37:2b:1d:b8:98:39:ef:6a: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:BA:39:CD:A5:25:76:A1:48:DE:5D:61:06:B7:3C:33:42:3B:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99872005-b4d4-42b1-83cf-883d2cac4b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.148.0/23 Signature Algorithm: sha256WithRSAEncryption aa:2b:90:f2:e8:12:ef:ea:e5:09:ff:0d:46:b0:6c:c2:a0:9a: 98:30:0d:33:e5:74:32:8d:54:94:1b:87:b3:c1:54:26:b3:50: 3a:92:d5:ec:c0:90:22:a4:35:eb:ed:00:72:17:d9:be:6f:7c: 01:6f:5a:ee:7b:53:40:43:c9:a7:e7:54:e0:b9:11:29:59:f7: 13:bd:70:ca:20:46:ee:4d:7d:e9:da:14:c2:03:56:96:94:90: 1b:e1:11:15:65:59:9b:81:d0:49:72:95:5e:bd:c3:90:95:c8: fc:55:62:dc:ac:31:25:a4:41:3d:e1:fe:d5:c2:c8:22:88:19: b5:ce:9d:69:7b:4a:2c:0f:35:23:b4:ec:a3:d9:6f:18:2b:64: 63:20:86:5c:8e:92:b1:2a:62:cc:31:9e:55:09:e1:03:a1:f6: 29:31:28:fa:6c:a8:5e:21:ac:a3:4f:9e:9b:97:38:1d:04:ec: 81:8d:01:63:9d:17:36:88:6c:38:3c:03:42:09:92:70:0a:6b: da:d9:96:be:dc:58:9b:ad:fa:a5:46:4e:59:f2:d5:53:cf:41: 55:80:39:81:7e:a6:e4:76:b7:a3:43:76:46:c5:2a:63:34:91: bc:f4:2c:ab:37:d3:d6:bb:db:da:18:b4:18:19:92:df:af:76: 71:bc:b0:ca -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUJxLGjH171HAvoxY3M25pJ9jkklcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNANTliYTYzZDZkODlhOGI3ODBlYWRi OGEzY2VkZjViODA0OWIxYjYxNTY5YTA2MDQ2N2RjZDcyNjQzYTgzMzRkNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS+tHtHCBhO+vQiFIOY+TBjuI2CZ nUjh081miYaqzDNKPicIv+QHjkk4MVTEbUzolHySUL5ryLMxr5Oz7olgUGQn7aPz qxyD1SmMJpzXDz2xX/iB1safqndgwoqbyxaB/fetvkSb7AcHYHZzB4WSjGaDfqVi 2Prd9NEgOuMuqnClkS5KoFHaChgIBQR9XCUEFVznQACenFD2JEyLd4bkFxFXfyx5 WjFeq3/fgYjpI0gVeDNfTGDod/6eMvZDThSzm4ETxinRR7Kno5isKLDvowlQi9Uq Td6zgkZSw581SRREpsknb4MtkY4vCLY8n5q05J5Pu+17NysduJg572r5CQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDltujnNpSV2oUjeXWEGtzwzQjvgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5ODcyMDA1LWI0ZDQtNDJiMS04M2NmLTg4M2QyY2FjNGIzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ/aUMA0GCSqGSIb3DQEBCwUAA4IBAQCqK5Dy6BLv6uUJ/w1GsGzC oJqYMA0z5XQyjVSUG4ezwVQms1A6ktXswJAipDXr7QByF9m+b3wBb1rue1NAQ8mn 51TguREpWfcTvXDKIEbuTX3p2hTCA1aWlJAb4REVZVmbgdBJcpVevcOQlcj8VWLc rDElpEE94f7VwsgiiBm1zp1pe0osDzUjtOyj2W8YK2RjIIZcjpKxKmLMMZ5VCeED ofYpMSj6bKheIayjT56blzgdBOyBjQFjnRc2iGw4PANCCZJwCmva2Za+3Fibrfql Rk5Z8tVTz0FVgDmBfqbkdrejQ3ZGxSpjNJG89CyrN9PWu9vaGLQYGZLfr3ZxvLDK -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org