$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f993f52-1ca1-45e4-9cdd-a5b0c2507502.roa File: 9f993f52-1ca1-45e4-9cdd-a5b0c2507502.roa (raw, json) Hash identifier: aMox4u+WqdsXF0Ir0QMcPNEiHiscrdmlriqf4Tu75Kk= Subject key identifier: C1:E7:C0:A8:B6:DC:C4:F2:AE:6E:87:69:E0:1E:FB:75:50:9C:C8:53 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1689F98B95916EE5797596DE82AC30C7A5902302 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f993f52-1ca1-45e4-9cdd-a5b0c2507502.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf9:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:89:f9:8b:95:91:6e:e5:79:75:96:de:82:ac:30:c7:a5:90:23:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=8d3ef9cbef916df99a736165e1bea7461e617ef676e6df3205862193f6d3edd1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0a:fc:a9:16:78:fd:f4:cc:7c:5b:27:67:c3: 39:88:e7:24:7a:d2:e4:44:eb:aa:c5:93:a7:f2:ce: 4a:e2:bf:45:5b:98:85:44:55:d1:6c:dc:a9:46:ec: 62:55:02:c2:cf:d8:b6:53:cc:85:24:2a:f3:3e:bf: 3d:27:23:99:d8:68:f6:74:88:0e:07:ba:d0:9f:cb: 91:ce:33:5d:ff:e7:0a:fd:28:16:3c:ea:49:8c:bb: b7:8d:f6:db:18:21:b3:12:e1:ce:f6:10:35:1e:35: c6:6e:b5:a0:b4:c8:b6:a5:e5:9e:e1:6c:73:af:35: 50:31:3c:0f:04:cf:b1:93:55:09:7d:fd:1c:61:f9: 98:15:65:0b:fc:48:10:b5:ab:66:62:62:29:bd:83: d4:35:88:89:c1:f4:23:cc:79:3d:fa:f6:9a:88:70: aa:0d:c3:07:70:7c:eb:20:e2:ff:d0:f4:84:0b:cb: 9b:e4:4a:4c:8b:c1:b9:9a:37:80:22:c4:89:9f:d1: 2a:96:a0:d1:c0:52:36:f1:c6:0b:48:86:0a:32:a8: 82:28:63:ca:e9:48:c3:9a:d9:54:0f:98:04:08:c6: e9:82:96:8d:e7:e3:6e:fe:c3:03:da:0f:da:cb:a4: d2:fe:43:3c:7b:b8:19:a3:1a:28:38:56:af:9d:46: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E7:C0:A8:B6:DC:C4:F2:AE:6E:87:69:E0:1E:FB:75:50:9C:C8:53 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f993f52-1ca1-45e4-9cdd-a5b0c2507502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf9:a000::/40 Signature Algorithm: sha256WithRSAEncryption 85:08:9a:ce:10:d6:43:d8:cf:8a:7f:69:b3:0a:cb:c6:a1:a0: 6e:04:a0:68:8e:eb:7b:95:3b:7e:34:ea:e4:03:0c:7e:df:1e: 3b:16:12:82:41:cd:9e:67:fc:1f:8f:68:4f:2c:53:d0:28:21: 74:9a:50:7b:bc:30:f8:e5:08:a7:30:49:4b:07:a1:0e:9d:0b: b2:f9:e4:5c:01:7e:e8:ac:70:ef:27:89:81:34:e1:40:ed:a4: 2c:e5:d9:24:cb:45:85:1a:d4:06:ed:95:a7:04:03:2e:19:22: 20:10:6f:cd:aa:d1:ca:43:01:56:de:0d:ca:a6:36:28:15:26: ff:be:58:9d:d0:3c:5d:4c:2a:de:47:1a:c1:e2:21:5c:fb:9a: dc:7d:06:af:d5:c0:69:5c:2e:be:67:3b:28:43:09:4f:16:59: 5e:28:cd:73:9e:7b:84:cb:bd:b3:4b:67:8d:81:ed:37:54:9e: 3b:db:05:43:db:59:cf:a8:b5:be:23:a2:ca:8f:91:9d:8b:65: ac:d7:2c:49:91:37:3b:1d:94:1b:1a:ff:7a:1c:88:30:a4:86: bf:26:17:f5:4f:03:be:fd:0c:38:91:c6:0d:93:e0:19:79:d5: 1d:9c:70:81:c1:6b:9b:cd:7b:1a:6e:3d:b3:a7:77:97:b2:74: 42:60:87:e9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFon5i5WRbuV5dZbegqwwx6WQIwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAOGQzZWY5Y2JlZjkxNmRmOTlhNzM2 MTY1ZTFiZWE3NDYxZTYxN2VmNjc2ZTZkZjMyMDU4NjIxOTNmNmQzZWRkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwr8qRZ4/fTMfFsnZ8M5iOcketLk ROuqxZOn8s5K4r9FW5iFRFXRbNypRuxiVQLCz9i2U8yFJCrzPr89JyOZ2Gj2dIgO B7rQn8uRzjNd/+cK/SgWPOpJjLu3jfbbGCGzEuHO9hA1HjXGbrWgtMi2peWe4Wxz rzVQMTwPBM+xk1UJff0cYfmYFWUL/EgQtatmYmIpvYPUNYiJwfQjzHk9+vaaiHCq DcMHcHzrIOL/0PSEC8ub5EpMi8G5mjeAIsSJn9EqlqDRwFI28cYLSIYKMqiCKGPK 6UjDmtlUD5gECMbpgpaN5+Nu/sMD2g/ay6TS/kM8e7gZoxooOFavnUbuBwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMHnwKi23MTyrm6HaeAe+3VQnMhTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmOTkzZjUyLTFjYTEtNDVlNC05Y2RkLWE1YjBjMjUwNzUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+aAwDQYJKoZIhvcNAQELBQADggEBAIUIms4Q1kPYz4p/abMK y8ahoG4EoGiO63uVO3406uQDDH7fHjsWEoJBzZ5n/B+PaE8sU9AoIXSaUHu8MPjl CKcwSUsHoQ6dC7L55FwBfuiscO8niYE04UDtpCzl2STLRYUa1AbtlacEAy4ZIiAQ b82q0cpDAVbeDcqmNigVJv++WJ3QPF1MKt5HGsHiIVz7mtx9Bq/VwGlcLr5nOyhD CU8WWV4ozXOee4TLvbNLZ42B7TdUnjvbBUPbWc+otb4josqPkZ2LZazXLEmRNzsd lBsa/3ociDCkhr8mF/VPA779DDiRxg2T4Bl51R2ccIHBa5vNexpuPbOnd5eydEJg h+k= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:45 2023 by rpki-client on console-fra.rpki-client.org