$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac9dc8a4-f6db-4624-a36b-eadaf859cdbc.roa File: ac9dc8a4-f6db-4624-a36b-eadaf859cdbc.roa (raw, json) Hash identifier: qipym6KLHIO58dKYVTxH0F7XE7zLY0Y6pIkQIad6ikA= Subject key identifier: D2:35:C7:7A:09:B9:60:47:A3:0D:D3:54:95:55:55:8D:3C:3D:4C:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 368057ED227552A5509F64D256DFD5D6E6394675 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac9dc8a4-f6db-4624-a36b-eadaf859cdbc.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 00:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:80:57:ed:22:75:52:a5:50:9f:64:d2:56:df:d5:d6:e6:39:46:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=07bdac22cf39f92b2b45a135e7cd1d111a2b6f3d9034d13ae7cd991e56890580, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:ab:a6:f7:c1:25:65:21:52:01:a0:6d:3c: 7e:28:b7:4a:e1:60:e1:d8:40:e2:ec:58:e5:43:d9: 89:22:a8:37:8b:39:f8:6b:d4:64:6a:20:bf:ef:21: bd:79:77:19:a3:be:83:0e:71:86:56:cd:36:8e:17: 0e:39:34:ff:fb:b8:33:07:69:0d:06:41:8c:a5:82: 8b:f6:aa:06:d1:9f:6d:6a:07:81:17:00:7a:36:4f: ac:12:99:02:ff:f7:f3:d7:91:bb:ab:7b:71:81:47: 7b:20:28:2a:3c:0d:01:e4:d5:6c:dd:8f:4c:21:13: dd:ab:02:b4:cb:bf:a4:b1:8e:d9:6f:9f:a7:6b:a1: ea:c1:58:74:f7:fe:00:f9:a6:26:24:26:8a:a2:59: d1:d9:02:c7:e8:cb:8f:c1:c0:a8:d9:98:a2:16:d6: 8e:56:61:55:b4:88:f4:0e:5a:1f:10:c9:1a:c2:37: 3a:71:1b:e6:78:12:36:18:57:16:55:57:8b:64:a8: 5a:3f:27:f2:4d:ce:17:02:ae:03:91:04:14:32:28: 6e:30:61:33:22:ac:dc:d1:ab:65:c6:dd:1b:a7:b0: 1e:50:3d:21:4c:e9:8d:95:2c:16:a3:66:6b:01:24: a4:7b:1f:79:87:6c:ad:9e:e7:ea:ae:82:df:61:e7: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:35:C7:7A:09:B9:60:47:A3:0D:D3:54:95:55:55:8D:3C:3D:4C:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac9dc8a4-f6db-4624-a36b-eadaf859cdbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:2800::/40 Signature Algorithm: sha256WithRSAEncryption 83:a8:62:4d:bf:39:ff:cc:8f:11:47:5f:e8:9c:09:02:3f:a1: 9d:2f:dc:a0:66:68:69:46:78:5f:62:bf:de:87:d9:cf:9e:ef: 6f:05:04:78:b4:03:9c:f9:d5:24:6e:99:ae:e3:f8:f5:8a:fc: 07:ae:d8:6f:21:9c:e3:91:e3:76:75:3e:38:a8:33:42:1c:26: f5:c5:62:29:e8:18:43:0d:20:cb:c0:00:7c:49:94:cb:6b:26: 84:00:c5:31:fd:e0:b4:19:9e:bf:7a:5e:05:5d:f7:9c:71:8a: fa:8d:e0:20:e2:b8:ac:5b:f9:a2:6d:4f:e8:72:ed:3f:45:bf: 3f:eb:a9:a0:0d:08:92:2d:87:ff:db:93:ff:07:28:22:3a:60: 13:8e:9e:61:a2:94:bd:71:45:27:68:b0:5c:47:cb:43:ac:24: 0e:44:c9:fc:5e:f6:7e:fb:0d:3d:f1:cd:29:91:ce:99:51:19: 1e:ae:0e:81:df:e7:0d:81:2c:3e:b3:55:a9:31:b9:04:cb:6a: 45:dc:fd:e1:d3:ff:98:81:4b:c6:a5:88:5b:c7:71:67:9b:43: 0e:16:bc:1e:1c:3e:09:38:74:71:cd:31:c1:f7:2c:c1:63:87: 37:a2:fc:1f:bf:f7:9a:e9:31:50:6e:53:2c:a7:22:cb:7f:63: b7:d0:fc:06 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNoBX7SJ1UqVQn2TSVt/V1uY5RnUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAMDdiZGFjMjJjZjM5ZjkyYjJiNDVh MTM1ZTdjZDFkMTExYTJiNmYzZDkwMzRkMTNhZTdjZDk5MWU1Njg5MDU4MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN+rpvfBJWUhUgGgbTx+KLdK4WDh 2EDi7FjlQ9mJIqg3izn4a9RkaiC/7yG9eXcZo76DDnGGVs02jhcOOTT/+7gzB2kN BkGMpYKL9qoG0Z9tageBFwB6Nk+sEpkC//fz15G7q3txgUd7ICgqPA0B5NVs3Y9M IRPdqwK0y7+ksY7Zb5+na6HqwVh09/4A+aYmJCaKolnR2QLH6MuPwcCo2ZiiFtaO VmFVtIj0DlofEMkawjc6cRvmeBI2GFcWVVeLZKhaPyfyTc4XAq4DkQQUMihuMGEz Iqzc0atlxt0bp7AeUD0hTOmNlSwWo2ZrASSkex95h2ytnufqroLfYecS8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNI1x3oJuWBHow3TVJVVVY08PUxUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjOWRjOGE0LWY2ZGItNDYyNC1hMzZiLWVhZGFmODU5Y2RiYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYCgwDQYJKoZIhvcNAQELBQADggEBAIOoYk2/Of/MjxFHX+ic CQI/oZ0v3KBmaGlGeF9iv96H2c+e728FBHi0A5z51SRuma7j+PWK/Aeu2G8hnOOR 43Z1PjioM0IcJvXFYinoGEMNIMvAAHxJlMtrJoQAxTH94LQZnr96XgVd95xxivqN 4CDiuKxb+aJtT+hy7T9Fvz/rqaANCJIth//bk/8HKCI6YBOOnmGilL1xRSdosFxH y0OsJA5Eyfxe9n77DT3xzSmRzplRGR6uDoHf5w2BLD6zVakxuQTLakXc/eHT/5iB S8aliFvHcWebQw4WvB4cPgk4dHHNMcH3LMFjhzei/B+/95rpMVBuUyynIst/Y7fQ /AY= -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:16 2024 by rpki-client on console-fra.rpki-client.org