$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa File: 9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa (raw, json) Hash identifier: IzDPWTkviuSVJjJo8258wCjjaNDrruxhMPiQaWFZD90= Subject key identifier: 1E:75:F4:88:2E:62:C2:45:FE:12:AB:57:C3:71:8B:D2:6B:7D:A5:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 675E2C4689E2697049CE4750928CB6A32C09DFD3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5e:2c:46:89:e2:69:70:49:ce:47:50:92:8c:b6:a3:2c:09:df:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=99ed13ef4512450627273a9607426dcc1210f0a6b8f56332290e80ce959bbad0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:08:7e:1f:2e:d0:57:30:e4:eb:46:47:46: 4b:d5:76:a9:f2:17:db:59:27:c3:48:63:00:5d:fd: a5:a3:77:19:77:3b:7b:d7:e9:2b:d5:b3:4a:ac:45: 89:b7:59:12:7d:24:52:bd:23:1b:c3:c2:2f:3b:df: 03:67:c3:3a:1b:f4:07:15:ac:30:0c:ca:d1:81:3e: 0b:9f:c2:ad:3e:42:49:c9:b9:72:67:fa:49:28:68: 2f:c2:04:61:5f:8c:13:ee:e3:13:4e:29:0c:2b:d4: 76:3d:8d:c7:cd:66:41:4c:96:5a:8b:22:6b:ba:1b: a8:00:29:06:39:6e:ac:b9:1b:ba:cd:8c:ae:c7:10: 1c:3a:4b:ad:05:82:d3:92:42:2b:26:c8:8f:09:c1: 2b:d7:22:42:49:36:e8:13:8b:20:58:28:fc:d0:d8: 27:87:64:e6:da:48:47:a2:8f:ae:9a:3f:7f:9f:1c: 05:89:a0:4f:e4:61:45:07:1f:6a:00:0e:98:0e:32: e9:9d:6b:ec:ae:ac:d2:1e:47:c2:9c:25:3c:6c:84: aa:c8:99:2b:ff:02:90:30:0b:73:cf:b7:de:89:70: 23:fc:cb:c5:7a:ec:83:26:d6:8e:de:45:2b:a1:40: b4:73:f5:60:03:11:de:30:fc:08:f6:64:0a:ea:bf: 95:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:75:F4:88:2E:62:C2:45:FE:12:AB:57:C3:71:8B:D2:6B:7D:A5:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f32aedc-a073-4f9f-a362-fb6ab646d6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:6000::/40 Signature Algorithm: sha256WithRSAEncryption 90:33:4c:d5:97:2b:ec:c7:cd:3d:99:7c:78:8e:ba:f9:a6:83: ed:be:40:b4:19:40:e9:7d:9f:d6:cd:0e:c3:4e:c7:ae:b6:9b: cf:20:8d:62:09:0c:90:d1:ed:4a:c2:18:5b:ee:2b:71:ab:cc: ab:c9:4c:6e:86:ed:92:f9:40:b3:74:d1:df:9c:1c:aa:99:1e: 17:2a:2b:6a:3b:3c:6b:9b:39:0f:a2:e2:4a:82:38:73:bc:ca: 25:1e:5a:f3:00:34:57:94:d4:96:2e:3c:14:56:44:2d:24:65: 5f:5c:3a:a3:cc:2b:b0:17:6a:dc:b0:73:85:d9:7a:fa:9d:ae: ad:9a:24:aa:a8:6b:47:18:9e:0a:62:3a:ed:0c:d5:a8:c0:be: f0:33:0b:53:4a:3b:af:78:e2:7a:bb:16:c7:b1:71:27:ca:48: c1:03:e5:40:9f:61:0c:31:35:ed:47:ef:06:98:38:a9:d2:83: b5:87:8e:1a:41:89:3f:0b:de:c3:55:18:53:33:f0:31:03:8a: f3:33:09:f3:8a:81:39:d3:16:cb:9c:ea:ad:b1:c2:9b:62:10: ad:a8:52:68:3e:5c:11:5d:c5:1c:60:ae:f3:71:50:25:fd:41: 10:ab:05:1f:f0:50:a5:b5:72:4b:8f:41:3f:5f:c5:12:98:5c: 23:d1:4f:50 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZ14sRoniaXBJzkdQkoy2oywJ39MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAOTllZDEzZWY0NTEyNDUwNjI3Mjcz YTk2MDc0MjZkY2MxMjEwZjBhNmI4ZjU2MzMyMjkwZTgwY2U5NTliYmFkMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrcIfh8u0Fcw5OtGR0ZL1Xap8hfb WSfDSGMAXf2lo3cZdzt71+kr1bNKrEWJt1kSfSRSvSMbw8IvO98DZ8M6G/QHFaww DMrRgT4Ln8KtPkJJyblyZ/pJKGgvwgRhX4wT7uMTTikMK9R2PY3HzWZBTJZaiyJr uhuoACkGOW6suRu6zYyuxxAcOkutBYLTkkIrJsiPCcEr1yJCSTboE4sgWCj80Ngn h2Tm2khHoo+umj9/nxwFiaBP5GFFBx9qAA6YDjLpnWvsrqzSHkfCnCU8bISqyJkr /wKQMAtzz7feiXAj/MvFeuyDJtaO3kUroUC0c/VgAxHeMPwI9mQK6r+VfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB519IguYsJF/hKrV8Nxi9JrfaWmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMzJhZWRjLWEwNzMtNGY5Zi1hMzYyLWZiNmFiNjQ2ZDZkYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoGAwDQYJKoZIhvcNAQELBQADggEBAJAzTNWXK+zHzT2ZfHiO uvmmg+2+QLQZQOl9n9bNDsNOx662m88gjWIJDJDR7UrCGFvuK3GrzKvJTG6G7ZL5 QLN00d+cHKqZHhcqK2o7PGubOQ+i4kqCOHO8yiUeWvMANFeU1JYuPBRWRC0kZV9c OqPMK7AXatywc4XZevqdrq2aJKqoa0cYngpiOu0M1ajAvvAzC1NKO6944nq7Fsex cSfKSMED5UCfYQwxNe1H7waYOKnSg7WHjhpBiT8L3sNVGFMz8DEDivMzCfOKgTnT Fsuc6q2xwptiEK2oUmg+XBFdxRxgrvNxUCX9QRCrBR/wUKW1ckuPQT9fxRKYXCPR T1A= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org