$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae5ce213-99c8-491c-abe1-c691ee1f3d07.roa File: ae5ce213-99c8-491c-abe1-c691ee1f3d07.roa (raw, json) Hash identifier: 8H1FNlIKpZrlRqmRVODJpRP/8dVHI6pbn2gqsJpuHOg= Subject key identifier: FE:F3:46:07:65:5E:D6:EE:1B:CD:F7:0D:DA:24:69:E9:97:B2:88:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 670622E35BE0D2B9E63367C4A3FAFA8048AE0D56 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae5ce213-99c8-491c-abe1-c691ee1f3d07.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:06:22:e3:5b:e0:d2:b9:e6:33:67:c4:a3:fa:fa:80:48:ae:0d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=affe090379dc960e10d98d61bc10ea51b2738d2eb0df29e2f34098718d3b0372, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:91:43:d3:57:9a:52:4d:16:5d:e4:b1:61: 71:49:ae:ea:99:78:85:85:e3:93:e8:6b:1b:07:b6: 9a:c7:07:3f:fb:e3:2d:e8:ee:09:5c:9e:15:ea:db: 9b:8e:82:89:6d:a9:33:34:25:9d:a2:00:c9:f1:76: 64:d1:ad:e9:92:ae:a4:60:0c:d9:68:a2:a3:9e:12: 4c:a5:ec:81:4b:ba:ab:35:3a:e6:a3:30:59:f6:c4: fd:d4:ab:28:a9:bb:f7:0f:87:c2:ec:e2:63:86:0d: 32:81:4d:68:e4:46:59:e8:cd:c6:c0:25:30:10:5c: 8c:9f:de:1d:a4:25:44:9f:ac:25:ee:62:17:df:63: 91:75:f0:d0:a2:f0:59:bf:a1:a5:60:71:df:85:6d: d3:7b:3e:b5:07:d3:bb:ce:56:05:ab:09:f1:b3:76: 54:b6:55:01:64:be:43:33:6d:62:f3:d9:37:e4:ac: 4e:ed:9a:99:3a:1c:86:8a:b3:b0:ef:0b:90:c6:35: 49:03:27:d5:0e:81:c8:8e:ad:76:4a:39:bc:bf:f1: 7d:3c:11:79:19:ab:5f:4a:74:a7:ff:ac:d7:ff:c6: ba:e8:30:f4:bc:76:09:64:a6:81:0e:ed:61:44:03: 1f:77:64:e6:f8:ed:a6:b8:4d:e0:56:0a:c4:f1:1d: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F3:46:07:65:5E:D6:EE:1B:CD:F7:0D:DA:24:69:E9:97:B2:88:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae5ce213-99c8-491c-abe1-c691ee1f3d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:c800::/40 Signature Algorithm: sha256WithRSAEncryption 4c:cb:39:97:ac:9a:1c:6a:be:69:10:ef:64:d9:9a:6c:e3:4a: 19:5a:60:00:72:44:8a:4e:3b:0a:c6:4b:68:93:73:e0:ff:ff: 59:21:cb:cc:d7:aa:9f:92:5b:9a:79:f3:53:4e:1b:f7:d6:26: 8f:a9:60:91:25:c0:9f:f0:9a:f4:d9:70:c8:3e:03:fd:b0:f0: 71:02:ca:9b:fd:fc:a5:96:9d:5d:65:8a:5e:0b:b9:58:2d:67: 63:4e:35:86:f4:10:92:e8:48:82:e1:d8:15:71:6c:c7:1b:74: c9:10:09:04:49:64:b5:60:d5:cd:41:20:bd:85:f1:4b:86:bd: e5:33:ec:f0:3e:3b:20:94:c0:7c:b2:20:2b:dd:ea:b6:06:e7: 1d:9d:a9:53:85:5b:e4:10:2d:4f:dc:9c:b4:8c:24:d6:55:be: f6:a1:3c:3f:83:7c:5b:35:8d:51:94:72:16:aa:9a:33:f5:69: 0e:5c:10:dc:7f:bb:40:1e:26:e3:77:f5:26:6d:24:70:40:7b: 9c:31:28:5a:31:5a:6e:9b:77:73:e2:78:e1:b6:a8:33:16:a2: 10:1c:37:e3:35:da:07:b8:b8:58:06:65:d2:86:cb:10:f2:72: 08:e8:3c:ad:3a:66:7f:da:c9:46:6c:98:06:80:82:83:b6:1a: 59:5f:0a:36 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZwYi41vg0rnmM2fEo/r6gEiuDVYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMzAwMDAwMFoX DTI0MDYwNzIzNTk1OVowejFJMEcGA1UEBRNAYWZmZTA5MDM3OWRjOTYwZTEwZDk4 ZDYxYmMxMGVhNTFiMjczOGQyZWIwZGYyOWUyZjM0MDk4NzE4ZDNiMDM3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQeRQ9NXmlJNFl3ksWFxSa7qmXiF heOT6GsbB7aaxwc/++Mt6O4JXJ4V6tubjoKJbakzNCWdogDJ8XZk0a3pkq6kYAzZ aKKjnhJMpeyBS7qrNTrmozBZ9sT91Ksoqbv3D4fC7OJjhg0ygU1o5EZZ6M3GwCUw EFyMn94dpCVEn6wl7mIX32ORdfDQovBZv6GlYHHfhW3Tez61B9O7zlYFqwnxs3ZU tlUBZL5DM21i89k35KxO7ZqZOhyGirOw7wuQxjVJAyfVDoHIjq12Sjm8v/F9PBF5 GatfSnSn/6zX/8a66DD0vHYJZKaBDu1hRAMfd2Tm+O2muE3gVgrE8R2ifwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP7zRgdlXtbuG833DdokaemXsoirMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlNWNlMjEzLTk5YzgtNDkxYy1hYmUxLWM2OTFlZTFmM2QwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9MgwDQYJKoZIhvcNAQELBQADggEBAEzLOZesmhxqvmkQ72TZ mmzjShlaYAByRIpOOwrGS2iTc+D//1khy8zXqp+SW5p581NOG/fWJo+pYJElwJ/w mvTZcMg+A/2w8HECypv9/KWWnV1lil4LuVgtZ2NONYb0EJLoSILh2BVxbMcbdMkQ CQRJZLVg1c1BIL2F8UuGveUz7PA+OyCUwHyyICvd6rYG5x2dqVOFW+QQLU/cnLSM JNZVvvahPD+DfFs1jVGUchaqmjP1aQ5cENx/u0AeJuN39SZtJHBAe5wxKFoxWm6b d3PieOG2qDMWohAcN+M12ge4uFgGZdKGyxDycgjoPK06Zn/ayUZsmAaAgoO2Gllf CjY= -----END CERTIFICATE-----Generated at Wed May 22 05:58:05 2024 by rpki-client on console-ams.rpki-client.org