$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cb246f9-1e8a-4a94-a021-2e5403a01093.roa File: 9cb246f9-1e8a-4a94-a021-2e5403a01093.roa (raw, json) Hash identifier: QF7UIgod8BerzWcDhFBDYTZFX6nDzEO2Q7q3uTISgkA= Subject key identifier: B9:3B:D5:8A:0E:4E:71:3C:B6:4C:F4:8C:5F:2F:CF:87:4E:20:2E:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 316EB8E56A3C0DD4BBD6829DCDF046E0E741812D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cb246f9-1e8a-4a94-a021-2e5403a01093.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6e:b8:e5:6a:3c:0d:d4:bb:d6:82:9d:cd:f0:46:e0:e7:41:81:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=4ee8d2d76d271b151c803d25f885d0620e7c2cae7163dc0acb523bc451d6558d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:58:c7:a0:e1:1e:04:27:b9:52:c7:55:92: ad:23:ac:59:7c:7d:84:42:81:10:eb:d6:0d:a4:a0: 72:57:98:9a:52:88:70:4a:29:7b:70:df:7c:17:e4: aa:00:53:12:fd:30:78:27:36:28:59:cc:a9:6a:09: 50:b4:19:32:86:b7:33:a8:a5:c2:3b:53:9f:65:fb: 96:02:36:4b:5f:c2:8c:73:16:2b:be:3e:16:73:e3: 97:db:cd:78:59:ac:4f:b0:5b:50:93:2f:d0:94:8d: 46:c4:93:27:da:8d:85:a1:31:75:80:5a:4c:49:bd: db:cb:06:75:bb:87:dd:60:18:e5:ea:65:33:4b:9e: 63:57:93:fd:52:56:6e:31:98:b4:67:71:69:6e:d3: 59:b1:67:54:f4:a8:5e:0f:96:a5:cd:2e:07:57:45: 0d:d4:71:47:9b:b9:65:c1:b4:97:a2:95:f7:63:ec: 8d:ca:ce:58:76:77:82:eb:39:cd:5b:cd:1c:e1:39: f9:df:b7:d4:d4:72:d6:66:53:9b:e6:b0:cb:cb:12: 62:55:d8:5c:41:be:ae:3b:81:8c:21:cb:c4:38:20: 90:a7:4c:73:73:fb:e6:b9:ef:1d:df:d4:d9:15:7c: 06:36:43:dd:19:3f:0e:9e:58:d4:27:ba:fc:fe:52: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3B:D5:8A:0E:4E:71:3C:B6:4C:F4:8C:5F:2F:CF:87:4E:20:2E:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cb246f9-1e8a-4a94-a021-2e5403a01093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:e000::/40 Signature Algorithm: sha256WithRSAEncryption 23:87:e4:a2:8b:de:eb:c5:b3:3e:4f:2f:15:01:c3:bc:9c:9e: 97:d7:d3:27:df:39:db:ca:14:b7:77:78:b1:1e:df:de:bb:58: c0:bc:e0:29:a8:d3:fa:e3:6e:29:a9:cc:a2:13:8c:b3:c4:be: e6:a7:67:e8:e5:5d:e8:69:b1:ac:1a:bf:37:0f:07:72:f6:d1: 3d:0f:20:8b:d6:5b:d6:fc:96:d3:5f:6d:2f:5a:c7:74:2d:66: 71:cf:69:e6:fa:10:b5:5a:99:55:72:08:f7:6b:fc:4f:77:c2: 21:61:e2:ba:ba:d9:0a:ae:89:2e:d6:8d:1a:9c:00:fc:57:c7: c0:58:52:39:24:e5:93:08:64:01:d7:5b:1e:fd:a2:b1:aa:ce: f4:2d:2c:56:76:85:6b:94:f6:2a:4f:e3:d4:11:56:a2:40:dc: bb:48:ed:41:11:0a:c8:fb:d2:e5:c6:fd:3e:a3:53:c4:12:e2: 0e:3f:59:fe:bd:bf:3d:2a:c4:b9:14:e7:ca:4e:d5:6e:77:41: 0d:1b:31:d3:21:f0:0c:23:0f:26:9c:af:04:91:fe:0d:92:eb: 81:1f:1c:85:5e:07:2a:d0:b8:8d:f4:6a:36:c2:1f:23:35:eb: e1:8f:79:ad:76:22:4d:c1:75:04:45:9e:21:3e:3d:af:1d:98: 87:e4:0d:92 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMW645Wo8DdS71oKdzfBG4OdBgS0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyOTAwMDAwMFoX DTI0MTIwMzIzNTk1OVowejFJMEcGA1UEBRNANGVlOGQyZDc2ZDI3MWIxNTFjODAz ZDI1Zjg4NWQwNjIwZTdjMmNhZTcxNjNkYzBhY2I1MjNiYzQ1MWQ2NTU4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmANYx6DhHgQnuVLHVZKtI6xZfH2E QoEQ69YNpKByV5iaUohwSil7cN98F+SqAFMS/TB4JzYoWcypaglQtBkyhrczqKXC O1OfZfuWAjZLX8KMcxYrvj4Wc+OX2814WaxPsFtQky/QlI1GxJMn2o2FoTF1gFpM Sb3bywZ1u4fdYBjl6mUzS55jV5P9UlZuMZi0Z3FpbtNZsWdU9KheD5alzS4HV0UN 1HFHm7llwbSXopX3Y+yNys5YdneC6znNW80c4Tn537fU1HLWZlOb5rDLyxJiVdhc Qb6uO4GMIcvEOCCQp0xzc/vmue8d39TZFXwGNkPdGT8OnljUJ7r8/lL0cQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLk71YoOTnE8tkz0jF8vz4dOIC6fMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzljYjI0NmY5LTFlOGEtNGE5NC1hMDIxLTJlNTQwM2EwMTA5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/+AwDQYJKoZIhvcNAQELBQADggEBACOH5KKL3uvFsz5PLxUB w7ycnpfX0yffOdvKFLd3eLEe3967WMC84Cmo0/rjbimpzKITjLPEvuanZ+jlXehp sawavzcPB3L20T0PIIvWW9b8ltNfbS9ax3QtZnHPaeb6ELVamVVyCPdr/E93wiFh 4rq62QquiS7WjRqcAPxXx8BYUjkk5ZMIZAHXWx79orGqzvQtLFZ2hWuU9ipP49QR VqJA3LtI7UERCsj70uXG/T6jU8QS4g4/Wf69vz0qxLkU58pO1W53QQ0bMdMh8Awj DyacrwSR/g2S64EfHIVeByrQuI30ajbCHyM16+GPea12Ik3BdQRFniE+Pa8dmIfk DZI= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:39 2024 by rpki-client on console-ams.rpki-client.org