$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa File: 999295ac-d636-4755-94c3-3c615012f6dd.roa (raw, json) Hash identifier: Y8SW4y5+IXZEqYSOWwKTCtKFLp+ppwm2wbPFTaTFtY0= Subject key identifier: 9B:26:B6:58:71:59:17:F3:32:76:EA:15:4D:4B:9E:36:44:3C:21:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C60391AE83F8CEA9A363A81C71E1FB83281D1EF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:60:39:1a:e8:3f:8c:ea:9a:36:3a:81:c7:1e:1f:b8:32:81:d1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=1043700baea769e7a734ca2610a1e95b6b4552a071d71422278c7c70e6dee5fd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:30:06:90:0d:a5:01:3c:0b:80:fe:8f:f5:9f: bc:c8:f4:8e:0d:4c:30:0a:a5:c0:72:55:4f:99:09: da:1d:70:6a:95:7a:d7:f1:ed:7b:27:20:32:3b:fe: 64:4d:8f:29:86:2c:db:8d:bf:92:57:62:b2:81:a7: e4:20:b7:0f:c8:19:87:ac:56:62:c1:2f:13:f2:c8: 00:85:5d:68:0d:dd:8e:df:06:35:34:d6:78:7b:4a: 5b:35:33:f5:05:a1:23:76:18:e6:ac:21:29:33:0e: 15:1b:7e:b9:e5:ff:64:af:fb:ba:ca:f8:ef:73:23: fa:1c:35:1e:4d:da:20:b9:15:3c:d4:2c:47:bc:68: bf:c4:0f:06:ac:d6:ca:32:7b:e0:4b:52:3e:71:62: dc:60:50:68:6b:b0:46:52:0d:fb:c0:43:74:b1:10: cc:da:83:9c:21:95:f2:eb:bc:74:a2:3a:8c:8c:fa: 9e:05:bc:24:c4:cd:ca:a2:6b:0d:45:c4:e7:35:87: dc:3b:7a:f2:b4:22:40:3c:94:2f:75:1c:84:58:ea: ee:9e:f6:7b:4d:cd:6d:01:93:42:2d:f0:24:f1:0c: f8:2f:21:42:fe:80:f6:9f:49:91:1d:ab:fb:bb:01: ae:73:53:be:08:3d:65:b7:8b:91:08:9f:e8:64:6a: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:26:B6:58:71:59:17:F3:32:76:EA:15:4D:4B:9E:36:44:3C:21:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:f000::/40 Signature Algorithm: sha256WithRSAEncryption 62:0e:2f:65:1a:81:65:f3:7d:aa:a9:9f:6b:be:91:09:85:ee: 22:3b:1f:0d:3e:aa:f3:00:6e:5c:5a:a4:c0:4e:46:f7:07:3e: ba:95:cd:48:7a:72:80:29:7e:59:e6:b1:cd:09:f1:33:89:e2: 29:aa:f3:53:c6:40:32:6f:d8:1f:c7:0c:73:ea:4a:b6:0a:f6: a4:67:e0:c1:dc:e1:2b:78:fd:49:9e:0a:30:5d:2f:f9:b8:0c: e3:4d:ef:aa:04:de:a1:dd:35:88:eb:85:4b:55:77:67:2e:f9: 98:3a:98:d5:dd:53:e4:85:c8:5f:77:9e:04:46:40:cf:b9:3d: fb:d5:05:bd:7b:f4:14:bd:12:ad:5c:fc:69:a4:c7:8d:85:0d: 02:45:7b:30:95:c6:3e:32:3f:06:af:27:b0:43:2a:60:b7:01: 69:06:6f:c3:58:ea:28:01:80:d0:9c:8a:98:fa:66:9b:77:57: 23:29:a7:21:eb:6d:bf:41:7e:f1:43:4a:ec:ec:1b:23:84:d7: 5b:c8:72:36:23:97:26:ba:d9:ea:73:73:96:5a:78:c1:17:de: 50:b5:72:58:9b:ee:2c:25:be:9d:c5:bc:70:ae:20:c3:bb:18: 14:25:7d:5b:71:99:a5:19:fa:92:03:91:8f:76:36:4b:6a:0c: 66:69:d1:05 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTGA5Gug/jOqaNjqBxx4fuDKB0e8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAMTA0MzcwMGJhZWE3NjllN2E3MzRj YTI2MTBhMWU5NWI2YjQ1NTJhMDcxZDcxNDIyMjc4YzdjNzBlNmRlZTVmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TAGkA2lATwLgP6P9Z+8yPSODUww CqXAclVPmQnaHXBqlXrX8e17JyAyO/5kTY8phizbjb+SV2KygafkILcPyBmHrFZi wS8T8sgAhV1oDd2O3wY1NNZ4e0pbNTP1BaEjdhjmrCEpMw4VG3655f9kr/u6yvjv cyP6HDUeTdoguRU81CxHvGi/xA8GrNbKMnvgS1I+cWLcYFBoa7BGUg37wEN0sRDM 2oOcIZXy67x0ojqMjPqeBbwkxM3KomsNRcTnNYfcO3rytCJAPJQvdRyEWOrunvZ7 Tc1tAZNCLfAk8Qz4LyFC/oD2n0mRHav7uwGuc1O+CD1lt4uRCJ/oZGqObwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJsmtlhxWRfzMnbqFU1LnjZEPCEgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5OTI5NWFjLWQ2MzYtNDc1NS05NGMzLTNjNjE1MDEyZjZkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoPAwDQYJKoZIhvcNAQELBQADggEBAGIOL2UagWXzfaqpn2u+ kQmF7iI7Hw0+qvMAblxapMBORvcHPrqVzUh6coApflnmsc0J8TOJ4imq81PGQDJv 2B/HDHPqSrYK9qRn4MHc4St4/UmeCjBdL/m4DONN76oE3qHdNYjrhUtVd2cu+Zg6 mNXdU+SFyF93ngRGQM+5PfvVBb179BS9Eq1c/Gmkx42FDQJFezCVxj4yPwavJ7BD KmC3AWkGb8NY6igBgNCcipj6Zpt3VyMppyHrbb9BfvFDSuzsGyOE11vIcjYjlya6 2epzc5ZaeMEX3lC1clib7iwlvp3FvHCuIMO7GBQlfVtxmaUZ+pIDkY92NktqDGZp 0QU= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:40 2024 by rpki-client on console-fra.rpki-client.org