$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cbddca6-6793-4da6-9b50-c00c91bb2814.roa File: 9cbddca6-6793-4da6-9b50-c00c91bb2814.roa (raw, json) Hash identifier: wOpcRCMtvMNWESW52v4tbDCga8BYEZ4BqF4WNzbCJUs= Subject key identifier: 87:DF:3E:AA:06:5E:9F:4E:8E:3C:21:91:94:A3:16:E7:DD:0B:07:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 441C90C33F1FF3978EA2CCE1D2694CF7799DFC60 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cbddca6-6793-4da6-9b50-c00c91bb2814.roa Signing time: Tue 16 Jul 2024 00:00:00 +0000 ROA not before: Tue 16 Jul 2024 00:00:00 +0000 ROA not after: Tue 20 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1c:90:c3:3f:1f:f3:97:8e:a2:cc:e1:d2:69:4c:f7:79:9d:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:00 2024 GMT Not After : Aug 20 23:59:59 2024 GMT Subject: serialNumber=635d1fa39a1e81ea1a94d242385d90d8bf0ac7e13c0ce325f27c8d61afed2880, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:90:05:18:59:63:29:3c:2e:c1:d9:93:d5: f1:2e:12:b7:e9:3a:09:21:fc:fa:86:ac:50:18:a5: 92:ed:49:90:42:71:82:34:1a:a0:a5:ec:c5:00:70: 39:47:91:fb:06:fe:fe:ff:d3:78:e6:ce:cf:fd:2e: 57:17:9a:2c:c8:6a:1f:58:0b:9d:39:40:8d:8f:02: 06:e5:95:a8:9c:6e:40:fa:cd:4c:1f:04:62:3d:02: 7c:2a:04:71:28:2d:2b:f0:9f:37:45:5e:09:c0:96: 48:73:9d:1d:c2:ed:31:de:ed:c0:b8:70:8d:7d:f1: 6a:b5:54:29:02:ad:0f:29:00:6a:96:80:74:be:9f: 0c:90:11:70:f2:cd:59:85:9f:38:65:44:9a:49:9f: 86:f0:0e:b1:b5:51:6a:64:07:5d:5d:1d:7c:76:d3: 7c:b2:5a:ba:dc:38:8b:f5:68:8d:7d:39:e1:b3:9e: f1:bc:11:84:d1:ec:d1:58:4f:ed:22:21:a2:62:14: 6b:99:5c:66:52:38:f6:76:02:28:f8:01:d7:23:2e: 47:b0:0c:3b:3a:b4:77:30:74:f1:7b:96:28:09:f6: d5:95:ff:a2:a4:b9:af:8d:b8:ba:ed:d1:3e:2a:80: 17:9e:fd:54:6b:1b:32:a7:c6:2e:24:45:79:d1:f0: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:3E:AA:06:5E:9F:4E:8E:3C:21:91:94:A3:16:E7:DD:0B:07:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cbddca6-6793-4da6-9b50-c00c91bb2814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4800::/40 Signature Algorithm: sha256WithRSAEncryption 87:6b:25:c9:27:0c:34:44:da:b6:66:15:35:74:0f:b9:01:fc: 6c:f0:02:a9:37:cc:b6:0b:90:2c:ec:24:a4:19:73:20:85:b1: 3c:73:81:63:8f:05:03:26:34:ff:6d:0f:b2:24:88:16:67:37: ad:70:ec:04:f7:70:92:d0:c1:84:97:d4:ee:f4:5e:28:4b:72: b0:f8:ac:d1:46:d1:ca:28:2e:26:5a:6f:8f:e8:61:bf:bd:8f: cd:d1:95:f4:90:7a:6f:e9:0a:8a:d6:70:d9:18:97:ec:5c:e1: 3f:12:65:6f:ed:65:d6:f3:72:18:eb:4b:0e:b6:b7:f3:b7:fd: f1:df:c7:7f:30:ba:85:03:db:88:70:48:ba:89:ec:22:97:16: 5d:9c:ef:36:4a:11:bf:0c:0f:2c:da:e2:38:1f:0e:91:cc:a6: b4:21:04:c7:8f:f9:11:88:a7:12:d8:f0:68:7a:65:0d:a4:d4: eb:d3:32:ea:07:75:92:ba:14:6c:10:64:ac:71:01:71:72:e6: df:19:43:5e:d8:9d:0f:aa:5e:33:43:d5:1f:e8:02:e1:4b:e5: c4:e5:8e:22:1c:41:df:68:6e:1e:23:f1:b4:e3:87:26:c1:43: 00:2c:4e:06:11:b3:d6:a9:2d:1c:b8:67:b1:fe:2f:ca:9a:19: ab:2c:25:a6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURByQwz8f85eOoszh0mlM93md/GAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNjAwMDAwMFoX DTI0MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANjM1ZDFmYTM5YTFlODFlYTFhOTRk MjQyMzg1ZDkwZDhiZjBhYzdlMTNjMGNlMzI1ZjI3YzhkNjFhZmVkMjg4MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHaQBRhZYyk8LsHZk9XxLhK36ToJ Ifz6hqxQGKWS7UmQQnGCNBqgpezFAHA5R5H7Bv7+/9N45s7P/S5XF5osyGofWAud OUCNjwIG5ZWonG5A+s1MHwRiPQJ8KgRxKC0r8J83RV4JwJZIc50dwu0x3u3AuHCN ffFqtVQpAq0PKQBqloB0vp8MkBFw8s1ZhZ84ZUSaSZ+G8A6xtVFqZAddXR18dtN8 slq63DiL9WiNfTnhs57xvBGE0ezRWE/tIiGiYhRrmVxmUjj2dgIo+AHXIy5HsAw7 OrR3MHTxe5YoCfbVlf+ipLmvjbi67dE+KoAXnv1Uaxsyp8YuJEV50fBQrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIffPqoGXp9OjjwhkZSjFufdCwcVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzljYmRkY2E2LTY3OTMtNGRhNi05YjUwLWMwMGM5MWJiMjgxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EgwDQYJKoZIhvcNAQELBQADggEBAIdrJcknDDRE2rZmFTV0 D7kB/GzwAqk3zLYLkCzsJKQZcyCFsTxzgWOPBQMmNP9tD7IkiBZnN61w7AT3cJLQ wYSX1O70XihLcrD4rNFG0cooLiZab4/oYb+9j83RlfSQem/pCorWcNkYl+xc4T8S ZW/tZdbzchjrSw62t/O3/fHfx38wuoUD24hwSLqJ7CKXFl2c7zZKEb8MDyza4jgf DpHMprQhBMeP+RGIpxLY8Gh6ZQ2k1OvTMuoHdZK6FGwQZKxxAXFy5t8ZQ17YnQ+q XjND1R/oAuFL5cTljiIcQd9obh4j8bTjhybBQwAsTgYRs9apLRy4Z7H+L8qaGass JaY= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:16 2024 by rpki-client on console-fra.rpki-client.org