$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa File: 9f814f86-a00e-47ae-afd0-75d7996777e3.roa (raw, json) Hash identifier: trDcwKpPDlt5FVz0QaHoC2t0rCfCpm1Kr3Ct1JuRFpg= Subject key identifier: 9C:21:92:11:00:3A:24:14:72:E9:29:B3:8D:2B:A4:48:FE:BF:2E:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A1E2E4906EC075044A5296825E153BBDB465FF8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1e:2e:49:06:ec:07:50:44:a5:29:68:25:e1:53:bb:db:46:5f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=12ed8b2d81930af60f95e4254ef6cc1263aaf742ad3a56ec55ec92b8e250ebf4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:fc:73:b0:62:df:8f:b6:a5:5e:b8:ab:cc: e8:b5:17:2c:85:5f:07:0d:ea:8f:4c:11:39:36:9c: 0f:9d:c5:6d:e2:a5:0c:06:c4:45:ca:f5:42:b8:33: 84:1f:82:04:44:6b:f1:62:9e:65:19:83:0d:ac:0b: b3:58:f2:11:6d:f6:7e:0b:6d:65:63:16:17:8e:2c: 82:11:07:15:1b:72:8a:74:7d:84:e9:8f:ce:fe:d7: 3d:9b:06:ed:e4:e0:2b:0a:54:a2:9c:9a:13:b9:0c: ef:65:14:f2:ae:0b:5d:9b:66:d2:74:79:a8:30:d3: 79:c8:4b:aa:37:68:fe:e7:90:aa:a9:79:b3:a7:b1: 63:e6:8c:5f:7e:c4:ef:50:74:0e:64:fa:2e:60:6b: fd:b5:f9:ca:23:84:92:c0:50:57:7e:22:b3:0a:1a: 3c:f4:46:f8:86:7c:1d:2d:da:33:49:09:b6:12:54: d9:61:f7:3c:d1:01:e4:d4:1a:a9:48:df:61:06:29: 8c:5b:b0:a9:85:56:8b:51:9d:5f:9f:bd:65:66:b7: bb:3b:f1:56:0e:a1:97:ea:47:45:1e:d6:4c:6c:72: 03:e5:48:5f:a3:03:de:37:54:1f:e4:4f:e1:57:58: ed:57:51:88:3c:fc:97:bf:0a:1c:2f:6a:27:e7:1e: 87:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:21:92:11:00:3A:24:14:72:E9:29:B3:8D:2B:A4:48:FE:BF:2E:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:9000::/40 Signature Algorithm: sha256WithRSAEncryption 67:ba:26:13:80:80:e3:0d:3c:93:4b:52:23:c8:62:18:4e:5e: 1f:cd:a1:06:5e:26:54:0a:68:d8:77:2c:b1:bb:ac:a6:af:2e: 15:76:e7:26:c2:a4:4d:ad:8c:a2:95:d3:21:1f:17:d9:f2:bf: 95:34:11:7b:92:13:dc:0b:10:96:a4:f2:69:ea:4c:8a:f6:d1: 28:3c:0f:7f:e4:45:0a:57:9d:13:10:c5:2b:da:16:22:5f:14: 7f:13:31:91:c4:23:db:40:85:f1:e2:32:f1:b0:dd:2d:de:fe: b0:44:5d:52:c2:a2:87:cf:0a:14:e0:8f:c8:e2:e0:26:c0:87: e9:a6:9c:a1:71:cf:31:d2:05:5c:3a:a4:ab:d2:a0:6a:de:d0: 86:39:b7:a9:a0:35:8e:b3:15:8b:81:f2:22:99:51:fb:fc:aa: e0:14:2f:26:15:a6:c5:ff:ac:25:dc:ba:ab:de:93:98:42:5c: d6:ff:a5:bb:57:be:c3:f4:b0:5c:4c:57:f6:2d:a5:6c:fc:f8: 8e:7e:d7:37:f4:db:46:62:dd:3e:09:9e:f7:de:85:e5:cf:0b: 85:d2:54:7a:5e:74:96:e0:1d:31:31:a0:77:ed:b0:0c:bc:33: db:9a:5f:99:31:11:e3:f7:f0:12:c3:be:a4:51:2b:db:ee:a2: b7:05:4a:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKh4uSQbsB1BEpSloJeFTu9tGX/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMTJlZDhiMmQ4MTkzMGFmNjBmOTVl NDI1NGVmNmNjMTI2M2FhZjc0MmFkM2E1NmVjNTVlYzkyYjhlMjUwZWJmNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xX8c7Bi34+2pV64q8zotRcshV8H DeqPTBE5NpwPncVt4qUMBsRFyvVCuDOEH4IERGvxYp5lGYMNrAuzWPIRbfZ+C21l YxYXjiyCEQcVG3KKdH2E6Y/O/tc9mwbt5OArClSinJoTuQzvZRTyrgtdm2bSdHmo MNN5yEuqN2j+55CqqXmzp7Fj5oxffsTvUHQOZPouYGv9tfnKI4SSwFBXfiKzCho8 9Eb4hnwdLdozSQm2ElTZYfc80QHk1BqpSN9hBimMW7CphVaLUZ1fn71lZre7O/FW DqGX6kdFHtZMbHID5UhfowPeN1Qf5E/hV1jtV1GIPPyXvwocL2on5x6HHwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJwhkhEAOiQUcukps40rpEj+vy6SMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODE0Zjg2LWEwMGUtNDdhZS1hZmQwLTc1ZDc5OTY3NzdlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+JAwDQYJKoZIhvcNAQELBQADggEBAGe6JhOAgOMNPJNLUiPI YhhOXh/NoQZeJlQKaNh3LLG7rKavLhV25ybCpE2tjKKV0yEfF9nyv5U0EXuSE9wL EJak8mnqTIr20Sg8D3/kRQpXnRMQxSvaFiJfFH8TMZHEI9tAhfHiMvGw3S3e/rBE XVLCoofPChTgj8ji4CbAh+mmnKFxzzHSBVw6pKvSoGre0IY5t6mgNY6zFYuB8iKZ Ufv8quAULyYVpsX/rCXcuqvek5hCXNb/pbtXvsP0sFxMV/YtpWz8+I5+1zf020Zi 3T4JnvfeheXPC4XSVHpedJbgHTExoHftsAy8M9uaX5kxEeP38BLDvqRRK9vuorcF SoM= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org