$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa File: 9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa (raw, json) Hash identifier: HFsU2Df0JhrShklx/+T2gKTRL3cM7oChfupP0pOTAbU= Subject key identifier: 6D:52:B5:89:C7:D3:E6:F3:1C:2F:C6:22:53:F1:7A:FE:36:DF:4F:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DA190AB0DC0F8FD459BAE6786C1A44B0F4C051D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a1:90:ab:0d:c0:f8:fd:45:9b:ae:67:86:c1:a4:4b:0f:4c:05:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=b4dcf99eb9882565a6ebdcfa299e697f9fab7f5b463279d90ea7139f4ab838e1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:80:b1:ad:10:bd:22:32:6c:c7:ac:af:07: 41:1c:0d:67:63:85:1e:df:84:6c:cd:62:c9:22:16: 71:85:a2:b5:2a:5d:51:70:ee:5c:cb:f8:0a:b3:16: d7:be:61:a4:2d:00:94:48:d2:b8:d1:9e:c5:a5:3c: 60:8f:14:be:63:67:98:11:5d:f0:f7:f7:ef:fd:67: b3:f9:7a:78:8c:e0:14:f9:c1:e2:8d:e8:14:e9:c1: c2:a6:69:b1:69:d4:f1:2b:7b:cb:b3:a5:79:b9:4b: 19:a2:19:e0:af:d6:85:fb:07:94:bb:aa:4e:1e:ce: 55:7d:a4:69:b6:2e:5b:d9:3e:36:b5:95:13:61:88: 1a:1a:c8:a5:f4:df:15:36:df:ec:14:a9:69:0c:65: 6e:cf:64:e7:b4:5f:eb:dc:a7:6c:b6:e5:5e:77:65: 35:37:57:75:02:6f:e1:1b:e8:df:69:b3:f7:a3:6b: 21:77:6b:90:b9:49:56:e4:4d:da:c8:f8:57:18:51: 23:15:59:66:ec:ed:5e:71:25:61:46:a7:89:ff:6a: 91:2a:67:e0:90:ab:66:41:c5:09:27:86:5a:a6:f8: 7f:f7:11:6c:96:b1:78:cb:15:29:f7:2c:24:61:78: ac:47:c7:45:f2:37:b7:3d:f7:18:35:c7:4c:cf:a5: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:B5:89:C7:D3:E6:F3:1C:2F:C6:22:53:F1:7A:FE:36:DF:4F:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:6000::/40 Signature Algorithm: sha256WithRSAEncryption b9:2e:d0:01:d3:a6:ca:31:fe:96:03:74:b2:fa:94:78:d1:d9: ea:f5:94:eb:1e:7b:3b:9b:1f:b4:9a:36:30:0c:13:7a:54:9a: 7b:c4:b2:d6:ee:06:73:b4:ef:5c:56:34:9f:93:ff:0c:13:3e: 05:0f:de:5e:f6:41:80:e2:3e:f4:07:13:3f:c7:47:42:18:06: 35:ef:84:2f:6f:f8:50:40:b8:d1:c2:a6:55:49:e7:e2:80:0c: 08:64:10:12:b8:c1:d5:38:47:62:6f:2f:67:f5:e6:d3:c7:0d: f0:16:6d:87:37:62:d4:23:7e:c8:18:ba:00:33:b2:16:7e:f0: 64:54:bb:b3:e7:37:b5:2a:cf:66:7f:61:52:52:9f:e2:0d:95: 59:4e:81:b8:f7:6c:4d:96:f0:82:63:4a:85:ef:83:ae:02:73: 9a:56:2c:4a:3d:c3:88:69:c3:2e:0f:24:5f:de:45:d4:7d:fb: f4:e0:7f:ed:98:72:2e:0a:99:22:fe:c4:9f:b5:87:24:dc:82: 07:d6:6c:2f:15:d9:3b:0e:7e:4d:fa:79:9a:61:66:90:69:f2: 7a:0d:57:ef:af:00:24:24:64:08:97:1a:3a:f7:53:93:8b:d5: bc:f5:90:d7:c5:d0:0d:22:9a:69:7c:5d:c3:c5:67:2d:d9:bc: 84:a4:ea:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHaGQqw3A+P1Fm65nhsGkSw9MBR0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAYjRkY2Y5OWViOTg4MjU2NWE2ZWJk Y2ZhMjk5ZTY5N2Y5ZmFiN2Y1YjQ2MzI3OWQ5MGVhNzEzOWY0YWI4MzhlMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxyAsa0QvSIybMesrwdBHA1nY4Ue 34RszWLJIhZxhaK1Kl1RcO5cy/gKsxbXvmGkLQCUSNK40Z7FpTxgjxS+Y2eYEV3w 9/fv/Wez+Xp4jOAU+cHijegU6cHCpmmxadTxK3vLs6V5uUsZohngr9aF+weUu6pO Hs5VfaRpti5b2T42tZUTYYgaGsil9N8VNt/sFKlpDGVuz2TntF/r3KdstuVed2U1 N1d1Am/hG+jfabP3o2shd2uQuUlW5E3ayPhXGFEjFVlm7O1ecSVhRqeJ/2qRKmfg kKtmQcUJJ4Zapvh/9xFslrF4yxUp9ywkYXisR8dF8je3PfcYNcdMz6XVgQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG1StYnH0+bzHC/GIlPxev4230/dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMzJhZWRjLWEwNzMtNGY5Zi1hMzYyLWZiNmFiNjQ2ZDZkYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoGAwDQYJKoZIhvcNAQELBQADggEBALku0AHTpsox/pYDdLL6 lHjR2er1lOseezubH7SaNjAME3pUmnvEstbuBnO071xWNJ+T/wwTPgUP3l72QYDi PvQHEz/HR0IYBjXvhC9v+FBAuNHCplVJ5+KADAhkEBK4wdU4R2JvL2f15tPHDfAW bYc3YtQjfsgYugAzshZ+8GRUu7PnN7Uqz2Z/YVJSn+INlVlOgbj3bE2W8IJjSoXv g64Cc5pWLEo9w4hpwy4PJF/eRdR9+/Tgf+2Yci4KmSL+xJ+1hyTcggfWbC8V2TsO fk36eZphZpBp8noNV++vACQkZAiXGjr3U5OL1bz1kNfF0A0imml8XcPFZy3ZvISk 6lQ= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:34 2024 by rpki-client on console-fra.rpki-client.org