$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa File: 9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa (raw, json) Hash identifier: eLUQwrBus5p4eM4AcNKekHzugdq4M9Op0WyBlcVhBXE= Subject key identifier: 36:17:5B:EB:8D:0C:E6:37:A9:64:4E:B3:46:DC:BF:72:EA:55:B8:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 79DFC23569EFF30AA2FB94C41D5619DA8F6E51F6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 103.246.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:df:c2:35:69:ef:f3:0a:a2:fb:94:c4:1d:56:19:da:8f:6e:51:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=176fbcdcd60234fe344d99214d885ab894917ac56367a92d883e22aaa939d28f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:b3:1f:8d:dc:2d:b8:9b:05:74:3f:28:ed: 0a:36:c6:31:b3:b9:e4:b2:ff:43:12:c3:3c:d2:94: 3f:98:86:d5:dd:6a:d0:42:2b:de:ee:71:b2:40:68: c8:ad:38:f2:b2:2a:c9:84:bd:7b:bd:6f:4f:cd:d1: f5:0e:15:d5:90:0e:16:c0:ac:b8:d0:90:87:3d:91: f5:4d:56:ff:06:51:58:12:87:3d:c5:c7:c0:03:57: 29:28:4d:54:f9:07:16:71:d9:2f:ea:07:57:93:45: 62:03:27:70:7a:53:ac:38:6d:cc:d6:36:7b:02:70: f8:e3:08:89:d3:a6:1e:d4:0a:5e:f0:8b:a9:ea:c6: 53:20:e8:35:38:c3:27:67:d2:7e:ae:e7:de:15:34: 15:ab:ec:c2:dd:9a:52:35:5c:69:60:95:48:a8:24: df:68:a0:08:dc:4d:2a:b0:68:2e:36:0c:e9:79:11: 7e:f6:0c:4e:fb:79:6a:da:5b:3c:c2:8f:64:1f:c5: 66:77:34:3b:13:57:b1:cd:4a:52:e2:ef:b8:8d:26: f2:9b:81:5e:ae:ba:d1:2d:66:64:91:39:54:bf:26: 33:47:f5:5c:11:31:3d:1c:54:72:e0:29:52:e4:8d: f2:6f:ed:30:38:a0:7b:11:68:c4:d8:08:dc:a0:62: 03:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:17:5B:EB:8D:0C:E6:37:A9:64:4E:B3:46:DC:BF:72:EA:55:B8:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.148.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:d7:cf:25:65:72:cb:c8:38:5b:7d:9f:ee:03:e3:f1:2e:1e: b7:85:96:34:cc:87:11:e3:08:4c:7b:9e:0e:66:1f:b1:ad:bb: ed:43:01:31:00:8c:6d:c2:6a:c3:ea:7f:ad:ef:80:b2:bc:e4: 19:f0:ef:d0:54:71:f7:9a:0c:d5:01:54:f7:53:15:04:cd:1e: bc:cd:d2:5a:94:2b:08:b3:f0:2b:5e:97:a9:1a:3d:6b:07:46: b7:79:51:44:94:77:ac:8c:a2:e8:36:73:10:b8:d2:56:05:0e: fd:1a:10:97:2f:a3:fa:3e:47:f3:e0:dc:14:01:f1:53:76:54: 39:30:22:94:e7:c4:86:8d:36:e6:b2:30:76:c4:42:93:4f:06: 99:30:aa:74:f1:44:7f:d2:d0:26:56:26:8e:2f:b1:5b:8e:90: d2:2d:2a:dc:3c:ef:96:e7:b7:6e:4a:d2:8c:aa:bb:09:b3:a4: de:22:dc:5f:9a:09:b8:92:2c:c3:ae:a2:5c:ce:de:ed:20:5e: 53:bb:50:07:6d:f6:8f:1e:81:aa:cc:64:e1:71:71:7a:d5:99: 9f:2e:4d:41:77:d9:d5:52:1f:a1:13:59:cd:60:e9:d4:7e:62: be:c2:f5:2e:8e:01:27:6b:40:34:c7:fe:72:7f:9f:ee:87:55: 1d:ce:d8:e5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUed/CNWnv8wqi+5TEHVYZ2o9uUfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAMTc2ZmJjZGNkNjAyMzRmZTM0NGQ5 OTIxNGQ4ODVhYjg5NDkxN2FjNTYzNjdhOTJkODgzZTIyYWFhOTM5ZDI4ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47KzH43cLbibBXQ/KO0KNsYxs7nk sv9DEsM80pQ/mIbV3WrQQive7nGyQGjIrTjysirJhL17vW9PzdH1DhXVkA4WwKy4 0JCHPZH1TVb/BlFYEoc9xcfAA1cpKE1U+QcWcdkv6gdXk0ViAydwelOsOG3M1jZ7 AnD44wiJ06Ye1Ape8Iup6sZTIOg1OMMnZ9J+rufeFTQVq+zC3ZpSNVxpYJVIqCTf aKAI3E0qsGguNgzpeRF+9gxO+3lq2ls8wo9kH8VmdzQ7E1exzUpS4u+4jSbym4Fe rrrRLWZkkTlUvyYzR/VcETE9HFRy4ClS5I3yb+0wOKB7EWjE2AjcoGIDGQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDYXW+uNDOY3qWROs0bcv3LqVbhIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllMjJlOGVhLTU0MmYtNGUwMC05OTQ2LTQ1YjUyYTNhNDdjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/aUMA0GCSqGSIb3DQEBCwUAA4IBAQAr188lZXLLyDhbfZ/uA+Px Lh63hZY0zIcR4whMe54OZh+xrbvtQwExAIxtwmrD6n+t74CyvOQZ8O/QVHH3mgzV AVT3UxUEzR68zdJalCsIs/ArXpepGj1rB0a3eVFElHesjKLoNnMQuNJWBQ79GhCX L6P6Pkfz4NwUAfFTdlQ5MCKU58SGjTbmsjB2xEKTTwaZMKp08UR/0tAmViaOL7Fb jpDSLSrcPO+W57duStKMqrsJs6TeItxfmgm4kizDrqJczt7tIF5Tu1AHbfaPHoGq zGThcXF61ZmfLk1Bd9nVUh+hE1nNYOnUfmK+wvUujgEna0A0x/5yf5/uh1Udztjl -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:36 2024 by rpki-client on console-fra.rpki-client.org