$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1361f9d-9fd0-413e-80ed-1194152eac1f.roa File: a1361f9d-9fd0-413e-80ed-1194152eac1f.roa (raw, json) Hash identifier: NDVuXz71scNQ3kwgzF2Q0pI5igHI77cvmIpyg12Lc/c= Subject key identifier: C8:E0:0E:49:F7:B0:D2:D3:8B:77:69:E8:66:F8:FF:E4:6C:2F:EF:FA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F72DCEDDF9104CE9B9BF64BD970B5C6767D24D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1361f9d-9fd0-413e-80ed-1194152eac1f.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:72:dc:ed:df:91:04:ce:9b:9b:f6:4b:d9:70:b5:c6:76:7d:24:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=e0d12dcea6ab3e52ba92340f4a36bc860d7b2d79ed34224556a9dc10896c4d88, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:9c:7b:bd:61:23:9c:21:b6:6f:b1:f5:33: 55:00:c0:13:01:2b:d4:fb:74:48:b6:12:07:49:2d: b5:8f:f6:79:8e:d7:15:d9:43:43:1d:cf:6a:13:be: 18:f9:65:66:c3:b1:1d:ac:83:b1:75:78:56:4a:ed: 98:de:b0:8e:45:1c:45:64:37:5b:fb:9f:e4:b6:f9: 7e:b5:fb:ca:76:e8:25:7b:ba:65:e6:0a:5d:81:90: 54:41:41:ea:18:7f:15:f0:e9:52:b6:f5:92:45:a4: 9d:de:f9:24:e5:48:5f:6c:c2:d7:5f:ff:d2:3a:e3: ec:81:0b:c2:d4:71:76:38:44:46:14:16:5c:8b:1a: f2:48:0b:d0:e7:b0:87:10:cb:be:b3:bb:6f:48:26: 29:73:0e:e4:fb:c4:e2:cc:d2:e7:de:6f:3d:13:bd: e6:d7:09:a3:22:7c:63:30:d2:45:d2:dd:fc:79:19: 54:6c:cd:0a:d6:79:a0:fe:14:a8:f0:ab:5e:2b:70: b7:f3:25:85:23:64:3f:ce:e0:48:4c:64:49:2a:16: 4c:15:9d:e8:ad:a3:f6:e3:db:67:d9:1d:ba:cf:04: f0:74:42:79:5d:ad:ec:f7:7e:26:b6:09:38:36:d5: ba:da:f8:38:aa:61:3e:ad:e1:31:90:00:49:fb:5c: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E0:0E:49:F7:B0:D2:D3:8B:77:69:E8:66:F8:FF:E4:6C:2F:EF:FA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a1361f9d-9fd0-413e-80ed-1194152eac1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c::/36 Signature Algorithm: sha256WithRSAEncryption a7:cc:23:b7:bc:8f:84:f8:da:1c:67:8b:f8:fa:23:2d:84:31: f4:ec:ac:12:11:82:a9:48:5b:2d:18:42:51:a4:9e:27:28:a4: fc:3d:14:73:d4:71:e5:6d:1c:ae:58:bb:3b:f0:9d:2c:b6:93: 15:db:42:e5:8c:f0:ba:b6:94:aa:5d:3b:66:e2:61:2b:b9:f0: 7c:f2:c1:77:05:22:59:53:ed:42:9f:9a:d9:80:37:a2:b7:75: be:47:b2:1f:45:60:71:5a:01:35:e5:60:7b:07:a8:50:14:15: 14:5c:ba:4c:21:fd:a7:9c:5c:10:3b:96:9c:16:b7:43:40:0a: c1:6a:19:a5:70:d6:96:6c:66:04:5b:22:21:69:49:fb:6e:8a: df:a2:57:fd:03:5d:fb:65:bf:dd:70:14:6a:f8:78:84:21:27: be:64:b8:85:52:11:a9:0e:5f:41:9c:ff:68:a9:2f:9b:36:23: 55:b0:0d:d9:ae:43:76:bd:d1:84:69:18:54:e7:87:0a:d2:4c: e8:5f:58:4e:c1:d4:a9:a2:f9:97:1b:ec:ed:c1:c9:2b:76:15: 60:09:b6:6d:57:c9:78:ba:df:17:21:f9:2d:97:c0:2d:1b:9e: 2d:56:52:29:4d:81:d9:54:8a:aa:73:39:5a:38:27:98:56:2e: fd:28:48:fa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf3Lc7d+RBM6bm/ZL2XC1xnZ9JNUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAZTBkMTJkY2VhNmFiM2U1MmJhOTIz NDBmNGEzNmJjODYwZDdiMmQ3OWVkMzQyMjQ1NTZhOWRjMTA4OTZjNGQ4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Kce71hI5whtm+x9TNVAMATASvU +3RIthIHSS21j/Z5jtcV2UNDHc9qE74Y+WVmw7EdrIOxdXhWSu2Y3rCORRxFZDdb +5/ktvl+tfvKdugle7pl5gpdgZBUQUHqGH8V8OlStvWSRaSd3vkk5UhfbMLXX//S OuPsgQvC1HF2OERGFBZcixrySAvQ57CHEMu+s7tvSCYpcw7k+8TizNLn3m89E73m 1wmjInxjMNJF0t38eRlUbM0K1nmg/hSo8KteK3C38yWFI2Q/zuBITGRJKhZMFZ3o raP249tn2R26zwTwdEJ5Xa3s934mtgk4NtW62vg4qmE+reExkABJ+1zGXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMjgDkn3sNLTi3dp6Gb4/+RsL+/6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ExMzYxZjlkLTlmZDAtNDEzZS04MGVkLTExOTQxNTJlYWMxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaHAAwDQYJKoZIhvcNAQELBQADggEBAKfMI7e8j4T42hxni/j6 Iy2EMfTsrBIRgqlIWy0YQlGknicopPw9FHPUceVtHK5YuzvwnSy2kxXbQuWM8Lq2 lKpdO2biYSu58HzywXcFIllT7UKfmtmAN6K3db5Hsh9FYHFaATXlYHsHqFAUFRRc ukwh/aecXBA7lpwWt0NACsFqGaVw1pZsZgRbIiFpSftuit+iV/0DXftlv91wFGr4 eIQhJ75kuIVSEakOX0Gc/2ipL5s2I1WwDdmuQ3a90YRpGFTnhwrSTOhfWE7B1Kmi +Zcb7O3BySt2FWAJtm1XyXi63xch+S2XwC0bni1WUilNgdlUiqpzOVo4J5hWLv0o SPo= -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org