$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa File: 9f814f86-a00e-47ae-afd0-75d7996777e3.roa (raw, json) Hash identifier: PzxhopgrhOQoM7bdXEtqX+uogfLW72GWq8PY8Vcj4bc= Subject key identifier: 84:4D:A2:5D:3A:7F:5C:5F:54:E3:27:02:AD:60:0D:E9:44:D6:E6:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42A45364CAD78EDA935D1DBCD23E7C1832CE54DC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a4:53:64:ca:d7:8e:da:93:5d:1d:bc:d2:3e:7c:18:32:ce:54:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=6b91045b0cee324be5b4c88758cef02aad04548dd3bbe7a440c9319f0797fc1d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:4e:a9:a9:03:57:08:6f:59:bf:23:c1:e5: 7d:92:eb:a8:7d:17:ee:5e:33:ba:6d:db:80:62:d0: 15:31:66:33:09:2c:7d:91:90:4c:89:ad:9b:7b:3d: 9e:14:ad:74:0e:30:da:4b:69:c8:a9:1b:d7:d2:4c: f5:f3:f6:b4:42:fc:df:75:47:8f:74:c5:e7:c6:e2: cf:2f:68:22:79:6f:61:1f:f1:e3:5b:ba:72:35:62: e4:28:62:ff:71:27:44:d4:65:12:ad:0e:90:18:68: b0:aa:d4:9f:eb:11:b3:9e:1e:40:23:bc:41:78:75: f4:8c:58:00:7e:a2:16:36:5f:c5:9e:62:60:46:72: 96:f9:65:6e:20:ff:5b:e9:ac:96:3d:8e:06:43:99: 79:3f:e8:61:41:bf:7d:43:1f:e6:a1:f4:b8:22:21: 2a:ee:45:90:e8:e3:3a:94:be:1b:d5:59:26:1d:0c: 0d:52:8f:c4:3e:f2:12:0a:00:f2:98:5d:05:23:03: ec:f3:ca:04:e4:04:48:05:fe:de:4c:99:09:2f:5f: 63:1a:f9:2a:6c:82:93:96:1b:95:ae:75:56:f1:46: 45:3d:07:43:00:4a:71:8f:4c:90:35:9f:e5:c8:2e: 4c:4f:11:00:48:01:b1:2e:b0:65:66:6d:3a:0f:1f: 62:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4D:A2:5D:3A:7F:5C:5F:54:E3:27:02:AD:60:0D:E9:44:D6:E6:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f814f86-a00e-47ae-afd0-75d7996777e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:9000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:6a:a4:69:90:a3:58:2a:07:2c:2e:67:5a:60:7a:8b:80:d7: c2:dd:f4:e8:ca:55:45:f0:d6:99:c5:29:1c:f4:04:9b:d0:12: c4:f2:c2:eb:77:8c:44:23:cc:c0:6f:3c:e6:33:c7:ab:c9:0f: ea:23:f4:d4:64:aa:ac:9d:1c:a0:83:72:bc:f5:8e:92:80:f1: bb:73:12:4e:3a:b9:d4:3d:00:bb:46:38:a5:62:2d:37:81:e5: 28:b9:f6:df:53:78:5e:a2:80:38:79:eb:10:ce:6f:a4:4a:32: 9b:e8:ce:a1:22:31:c6:1f:6c:36:65:8c:96:f8:42:14:ce:ca: 6f:b7:e9:47:c4:cd:97:45:c5:62:01:f3:dc:db:e6:d5:17:42: a6:09:c5:2b:8f:69:a4:3c:b0:63:77:8a:9b:e0:3f:35:3b:ff: 35:3f:d3:58:cb:a4:e7:8a:ef:c0:ec:76:96:01:29:8b:21:6c: a7:8b:29:d8:f6:94:70:1a:36:13:51:09:58:c0:f2:55:06:31: 6c:53:03:da:2f:9a:5e:ab:35:9d:b5:a8:1b:c2:c6:9e:af:8d: 49:95:29:5d:8a:97:78:bb:eb:c6:9e:2a:e6:97:c5:1e:3e:ce: 8f:ea:d4:d7:06:70:d8:8c:a6:10:e1:c0:b7:de:cf:05:37:d1: 4a:ac:31:2d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQqRTZMrXjtqTXR280j58GDLOVNwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNANmI5MTA0NWIwY2VlMzI0YmU1YjRj ODg3NThjZWYwMmFhZDA0NTQ4ZGQzYmJlN2E0NDBjOTMxOWYwNzk3ZmMxZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AVOqakDVwhvWb8jweV9kuuofRfu XjO6bduAYtAVMWYzCSx9kZBMia2bez2eFK10DjDaS2nIqRvX0kz18/a0QvzfdUeP dMXnxuLPL2gieW9hH/HjW7pyNWLkKGL/cSdE1GUSrQ6QGGiwqtSf6xGznh5AI7xB eHX0jFgAfqIWNl/FnmJgRnKW+WVuIP9b6ayWPY4GQ5l5P+hhQb99Qx/mofS4IiEq 7kWQ6OM6lL4b1VkmHQwNUo/EPvISCgDymF0FIwPs88oE5ARIBf7eTJkJL19jGvkq bIKTlhuVrnVW8UZFPQdDAEpxj0yQNZ/lyC5MTxEASAGxLrBlZm06Dx9iqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIRNol06f1xfVOMnAq1gDelE1uaLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmODE0Zjg2LWEwMGUtNDdhZS1hZmQwLTc1ZDc5OTY3NzdlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+JAwDQYJKoZIhvcNAQELBQADggEBABtqpGmQo1gqBywuZ1pg eouA18Ld9OjKVUXw1pnFKRz0BJvQEsTywut3jEQjzMBvPOYzx6vJD+oj9NRkqqyd HKCDcrz1jpKA8btzEk46udQ9ALtGOKViLTeB5Si59t9TeF6igDh56xDOb6RKMpvo zqEiMcYfbDZljJb4QhTOym+36UfEzZdFxWIB89zb5tUXQqYJxSuPaaQ8sGN3ipvg PzU7/zU/01jLpOeK78DsdpYBKYshbKeLKdj2lHAaNhNRCVjA8lUGMWxTA9ovml6r NZ21qBvCxp6vjUmVKV2Kl3i768aeKuaXxR4+zo/q1NcGcNiMphDhwLfezwU30Uqs MS0= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:39 2024 by rpki-client on console-ams.rpki-client.org