$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae5ce213-99c8-491c-abe1-c691ee1f3d07.roa File: ae5ce213-99c8-491c-abe1-c691ee1f3d07.roa (raw, json) Hash identifier: slgng5JQ7oZV8WQ647iBkPkTfPRQ0EvyaRGPwHSuN2Q= Subject key identifier: B0:DF:71:53:6E:85:B0:DB:77:32:30:60:D3:34:BA:5A:C3:AD:CA:B6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3638972E05C380182153BFEFB654CC8D29A413FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae5ce213-99c8-491c-abe1-c691ee1f3d07.roa Signing time: Wed 17 Jul 2024 00:00:00 +0000 ROA not before: Wed 17 Jul 2024 00:00:00 +0000 ROA not after: Wed 21 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:38:97:2e:05:c3:80:18:21:53:bf:ef:b6:54:cc:8d:29:a4:13:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 17 00:00:00 2024 GMT Not After : Aug 21 23:59:59 2024 GMT Subject: serialNumber=30b1626f2a7cf87eed47c3841d07342ace20ba54b3e1ff8e62b8db30887fe01c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a5:f1:1a:e6:e3:44:ae:f1:de:7d:17:85:fb: 13:5e:db:c7:74:7b:31:8e:e7:8d:64:04:0e:ba:75: 60:7c:c4:c9:27:04:7a:7a:91:ac:31:75:10:1d:5b: 73:f6:3b:67:be:ed:6c:4d:41:c6:55:46:32:6e:ef: 12:21:c7:b1:db:a7:5d:66:f5:78:c6:aa:12:48:ec: bd:a5:37:2a:24:6e:84:09:bc:3f:41:89:82:59:ea: af:09:92:03:fb:3f:4e:f9:f7:fe:50:31:88:ed:0b: c2:bf:bc:f9:9c:66:fd:82:e8:fa:44:0b:e2:37:cd: 99:d5:dd:78:7b:76:48:ad:8c:5d:51:b6:ed:58:c4: 1e:1e:ab:9e:3f:da:33:d3:76:9e:30:17:c8:92:67: 76:6d:c2:d0:38:35:82:c8:4b:a5:48:ce:98:88:8c: ed:9a:76:de:ee:ae:aa:54:2f:a0:69:97:71:83:5f: fe:ea:bd:06:44:b7:e3:76:74:62:2d:eb:42:85:0f: b3:c0:5a:3f:eb:5d:a1:ff:20:8d:ba:02:8f:8c:da: 14:db:a0:1b:c1:ad:58:0b:2c:36:50:84:0e:e7:6e: 17:94:19:93:51:bf:44:aa:28:49:5b:2a:8b:b6:fc: bf:69:aa:fb:dd:b7:17:d3:42:c0:75:e2:a7:47:ca: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:71:53:6E:85:B0:DB:77:32:30:60:D3:34:BA:5A:C3:AD:CA:B6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae5ce213-99c8-491c-abe1-c691ee1f3d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:c800::/40 Signature Algorithm: sha256WithRSAEncryption 98:8b:43:72:ac:a1:ad:21:be:a7:37:7a:9b:a4:95:41:b0:5d: 90:ec:7e:4b:f4:5a:6d:4c:12:06:50:0d:75:26:07:28:ef:90: fb:56:bb:97:e3:8b:a7:d2:ba:66:92:6f:91:f2:a6:5f:5a:eb: 41:95:0a:0d:14:82:01:c6:7d:23:0e:ef:25:39:8b:15:71:bd: de:49:8e:4b:21:27:c2:56:8b:27:98:24:fd:a7:c3:0a:b9:1b: 78:ee:13:90:e1:22:12:4c:44:5a:c1:cf:23:b9:56:c7:59:67: 18:0b:bf:26:eb:0a:d4:61:ac:e2:38:f7:02:70:b3:4b:8c:35: bb:6a:0e:a3:e1:53:06:57:7b:c4:e4:90:f5:26:86:8f:d4:17: d4:e0:52:9e:27:fa:a5:6a:8d:9a:1b:45:56:22:cb:42:b4:b5: 5e:a6:d2:4f:bd:b6:c6:b6:aa:9b:aa:69:ca:38:8c:a8:2a:88: fe:9f:b1:6c:96:fe:70:d4:90:32:be:02:ae:f1:ae:40:6a:c6: fe:53:9b:d4:61:38:99:fb:53:a7:8b:e1:e2:c3:1c:32:ff:37: a9:fa:66:d2:9f:e3:4c:ad:2b:f3:74:e6:23:8e:61:c3:92:ac: 5d:8a:0c:c8:1b:74:0a:5c:be:61:a5:8a:b7:47:9d:2b:aa:c6: 13:dc:d4:ab -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNjiXLgXDgBghU7/vtlTMjSmkE/8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNzAwMDAwMFoX DTI0MDgyMTIzNTk1OVowejFJMEcGA1UEBRNAMzBiMTYyNmYyYTdjZjg3ZWVkNDdj Mzg0MWQwNzM0MmFjZTIwYmE1NGIzZTFmZjhlNjJiOGRiMzA4ODdmZTAxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qXxGubjRK7x3n0XhfsTXtvHdHsx jueNZAQOunVgfMTJJwR6epGsMXUQHVtz9jtnvu1sTUHGVUYybu8SIcex26ddZvV4 xqoSSOy9pTcqJG6ECbw/QYmCWeqvCZID+z9O+ff+UDGI7QvCv7z5nGb9guj6RAvi N82Z1d14e3ZIrYxdUbbtWMQeHqueP9oz03aeMBfIkmd2bcLQODWCyEulSM6YiIzt mnbe7q6qVC+gaZdxg1/+6r0GRLfjdnRiLetChQ+zwFo/612h/yCNugKPjNoU26Ab wa1YCyw2UIQO524XlBmTUb9EqihJWyqLtvy/aar73bcX00LAdeKnR8qU8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLDfcVNuhbDbdzIwYNM0ulrDrcq2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlNWNlMjEzLTk5YzgtNDkxYy1hYmUxLWM2OTFlZTFmM2QwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9MgwDQYJKoZIhvcNAQELBQADggEBAJiLQ3Ksoa0hvqc3epuk lUGwXZDsfkv0Wm1MEgZQDXUmByjvkPtWu5fji6fSumaSb5Hypl9a60GVCg0UggHG fSMO7yU5ixVxvd5JjkshJ8JWiyeYJP2nwwq5G3juE5DhIhJMRFrBzyO5VsdZZxgL vybrCtRhrOI49wJws0uMNbtqDqPhUwZXe8TkkPUmho/UF9TgUp4n+qVqjZobRVYi y0K0tV6m0k+9tsa2qpuqaco4jKgqiP6fsWyW/nDUkDK+Aq7xrkBqxv5Tm9RhOJn7 U6eL4eLDHDL/N6n6ZtKf40ytK/N05iOOYcOSrF2KDMgbdApcvmGlirdHnSuqxhPc 1Ks= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:16 2024 by rpki-client on console-fra.rpki-client.org