$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e92d60d-f237-433e-b59b-27edfab50359.roa File: 9e92d60d-f237-433e-b59b-27edfab50359.roa (raw, json) Hash identifier: t5l79pkQcq5t+i1CFwTWhZxz4wQ8UaaZFlWxA+8k7Ao= Subject key identifier: D3:40:35:A5:97:15:7E:EE:31:68:A5:45:EE:56:91:DF:4F:FD:B8:2A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 585F5E646B8DD23342A8097AC3FD4FD4DF57DBC4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e92d60d-f237-433e-b59b-27edfab50359.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5f:5e:64:6b:8d:d2:33:42:a8:09:7a:c3:fd:4f:d4:df:57:db:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=e3f52f00e734b07ac649e4156637cb0c114e5f015196185f474d35e13c91c78b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:c6:ab:b8:cd:7d:45:f0:cb:ef:a0:3e:0e: 18:04:db:00:07:eb:d4:27:bd:e7:c5:f1:1a:8c:53: ce:ff:9c:dd:67:37:b6:7f:d6:12:2a:53:9b:12:67: e1:a4:dc:af:de:fa:a3:6c:31:28:c6:12:b5:35:83: 9c:ad:95:c8:82:89:e2:6e:2c:35:17:d1:fc:de:00: a0:9e:43:f1:d4:ab:87:b8:14:ca:9a:6e:20:6f:25: 01:8e:e7:12:c1:90:d5:cf:7d:c4:76:a2:90:23:00: 9d:73:11:0e:c0:a3:8c:bc:b5:84:86:8d:63:4f:de: 08:86:0e:b2:07:aa:d6:d3:a3:98:9c:06:1d:86:e2: 9b:f2:1e:74:e0:5e:c6:69:00:51:6b:6f:a1:68:6d: d3:09:39:f6:95:10:2c:c4:67:06:38:2e:5e:19:75: 80:b1:bb:96:14:21:47:11:b5:e6:87:69:27:57:96: 8b:c3:e6:d9:d0:01:d5:bb:c3:14:fd:3a:f8:2a:ed: 27:23:b0:f4:66:a8:9a:8b:b7:c2:9f:4b:4d:85:67: 67:f7:5c:c6:70:d6:50:c5:61:fd:40:70:68:50:17: 7c:20:e1:49:e3:26:a9:ca:22:c6:47:18:b4:04:39: 98:ef:0d:61:fa:a9:2d:39:43:3a:da:da:37:07:1e: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:35:A5:97:15:7E:EE:31:68:A5:45:EE:56:91:DF:4F:FD:B8:2A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e92d60d-f237-433e-b59b-27edfab50359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:7000::/40 Signature Algorithm: sha256WithRSAEncryption ca:6c:e6:44:b4:d1:f4:4e:00:e5:8e:68:8c:b3:cb:9f:14:c5: 58:df:f1:b9:39:e6:88:90:8d:f2:d8:df:7d:90:42:a7:c2:92: 08:19:c2:66:2f:c2:7a:0e:0f:db:b5:f6:0a:c8:f1:79:dd:a2: b8:f0:5e:28:4a:77:7b:d6:b6:98:45:40:93:fe:a3:04:43:2c: 98:4a:b9:85:89:3c:e0:be:3d:d9:7c:ad:d2:1e:68:63:a9:63: 87:10:3d:c3:4d:30:50:43:6b:8c:52:95:18:0e:e1:72:91:af: 68:59:c0:c8:5f:70:6a:51:a0:b6:8d:46:02:17:18:f7:f1:7e: b3:23:2d:a7:91:d8:28:7b:57:e9:4d:c9:d0:34:c6:bb:e6:79: ea:2c:61:19:2c:a6:f7:14:05:ae:e4:21:c0:31:01:b1:e1:7a: 64:59:fc:e0:df:df:43:f0:d5:1d:47:be:b0:10:7d:df:15:ff: 2e:5a:a3:b6:ce:85:a0:e5:3e:71:6d:bd:fb:b2:b1:2b:e6:6c: 88:fc:57:20:35:50:8b:ae:9f:91:04:1f:62:1d:08:a1:d5:d2: b0:54:07:76:41:f1:2b:f1:79:6b:b2:44:4c:6f:b9:44:a5:d2: 90:3e:dd:d1:8a:66:04:88:65:c5:5e:e4:42:f6:15:fa:29:b3: 29:d0:9c:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWF9eZGuN0jNCqAl6w/1P1N9X28QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAZTNmNTJmMDBlNzM0YjA3YWM2NDll NDE1NjYzN2NiMGMxMTRlNWYwMTUxOTYxODVmNDc0ZDM1ZTEzYzkxYzc4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuLGq7jNfUXwy++gPg4YBNsAB+vU J73nxfEajFPO/5zdZze2f9YSKlObEmfhpNyv3vqjbDEoxhK1NYOcrZXIgonibiw1 F9H83gCgnkPx1KuHuBTKmm4gbyUBjucSwZDVz33EdqKQIwCdcxEOwKOMvLWEho1j T94Ihg6yB6rW06OYnAYdhuKb8h504F7GaQBRa2+haG3TCTn2lRAsxGcGOC5eGXWA sbuWFCFHEbXmh2knV5aLw+bZ0AHVu8MU/Tr4Ku0nI7D0Zqiai7fCn0tNhWdn91zG cNZQxWH9QHBoUBd8IOFJ4yapyiLGRxi0BDmY7w1h+qktOUM62to3Bx7CUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNNANaWXFX7uMWilRe5Wkd9P/bgqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllOTJkNjBkLWYyMzctNDMzZS1iNTliLTI3ZWRmYWI1MDM1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+3AwDQYJKoZIhvcNAQELBQADggEBAMps5kS00fROAOWOaIyz y58UxVjf8bk55oiQjfLY332QQqfCkggZwmYvwnoOD9u19grI8XndorjwXihKd3vW tphFQJP+owRDLJhKuYWJPOC+Pdl8rdIeaGOpY4cQPcNNMFBDa4xSlRgO4XKRr2hZ wMhfcGpRoLaNRgIXGPfxfrMjLaeR2Ch7V+lNydA0xrvmeeosYRkspvcUBa7kIcAx AbHhemRZ/ODf30Pw1R1HvrAQfd8V/y5ao7bOhaDlPnFtvfuysSvmbIj8VyA1UIuu n5EEH2IdCKHV0rBUB3ZB8SvxeWuyRExvuUSl0pA+3dGKZgSIZcVe5EL2FfopsynQ nMA= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org