$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1914f3-f02e-43ce-aa27-24773867bc5d.roa File: af1914f3-f02e-43ce-aa27-24773867bc5d.roa (raw, json) Hash identifier: eu8M8kFInSlDVp2B6kmYlri6CZ+0oLnNwEcRHori5OU= Subject key identifier: A3:40:A8:FA:53:39:1D:8F:22:03:57:EC:02:06:F5:DC:F8:E3:3D:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08E56B731E2E0727FF1AC60726F49FA8FE6E9C93 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1914f3-f02e-43ce-aa27-24773867bc5d.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafc:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e5:6b:73:1e:2e:07:27:ff:1a:c6:07:26:f4:9f:a8:fe:6e:9c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=d003dd808d540212394e549952838691baf2fa662bdb13ca04eec31dadadba57, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:de:08:02:08:a5:0d:b6:8a:50:8b:0d:ea: 5f:dc:15:83:50:ff:75:8b:ef:74:44:08:fe:ad:ac: cf:a6:b1:d3:23:89:b6:ad:63:79:c3:c4:90:87:17: f2:2a:63:fe:ee:a7:fe:20:3d:cb:ed:88:f9:27:2d: 5b:cd:a9:2c:8e:a4:e8:99:1b:43:38:97:1d:53:26: e9:49:35:d4:26:e6:de:6c:54:14:35:4c:96:a0:52: ec:99:be:85:56:cf:9f:38:57:33:b5:49:4b:8b:24: 41:29:a5:3e:9c:45:9d:22:32:34:56:be:83:f2:75: 68:1a:81:d1:34:e6:70:ce:8b:c1:87:f6:01:64:a5: fe:52:79:32:20:76:3d:39:99:d1:4b:0b:e6:6e:b9: da:dd:82:6c:58:42:6b:9f:1f:71:a3:d1:f8:09:88: 0c:25:a0:2f:92:ff:d4:5c:ac:7e:27:19:5f:c6:92: f1:92:c9:69:85:9d:c0:84:99:2f:b8:b4:c3:88:0c: 6a:eb:2c:84:eb:16:dc:1c:0c:76:03:bf:a9:cc:9a: 45:41:77:b2:35:4f:2b:ee:4d:d0:4e:ab:22:11:29: d5:d4:29:3c:b0:e2:a2:0f:4d:ae:13:5b:a9:17:43: ca:14:ad:c0:e5:01:9f:c5:a7:c8:a6:e4:d7:5d:49: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:40:A8:FA:53:39:1D:8F:22:03:57:EC:02:06:F5:DC:F8:E3:3D:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1914f3-f02e-43ce-aa27-24773867bc5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafc:1000::/40 Signature Algorithm: sha256WithRSAEncryption 74:aa:c1:85:77:2b:6f:e4:0b:da:63:92:e6:aa:fa:11:e3:1d: 5e:b5:50:06:7f:a8:d1:25:27:f7:a1:5f:d8:3c:f1:08:c8:2e: 4d:db:8b:db:8e:22:66:4f:56:a7:7b:46:87:6d:96:80:61:3d: 2f:18:36:e1:13:e2:e8:b2:5d:37:d8:93:4a:b3:74:d7:d3:32: b2:fa:ae:c1:82:79:cc:5c:e3:16:1d:66:cf:51:54:2d:c0:4d: 6c:f7:66:0d:04:82:46:95:41:34:7e:7b:e4:d0:1b:b4:a0:4e: 84:be:13:43:a5:c7:4f:b4:33:78:ad:fd:73:d2:d6:44:d1:45: e9:2e:b1:d7:37:3a:85:cf:2d:5d:39:c3:dc:88:56:6e:6b:7e: 3b:5a:05:50:89:7c:70:17:6f:7a:59:28:3a:f0:08:41:62:75: cc:9b:43:6f:c9:6e:d3:2a:e0:70:24:42:6b:fb:8b:0c:50:87: 74:ea:bf:e3:d1:e8:d6:b1:df:8c:70:3e:f1:42:ec:bf:86:6d: 8b:95:d5:d1:e1:26:65:e2:02:68:2d:59:5c:f8:47:af:69:a2: 4b:3f:ac:29:40:be:4e:53:45:ab:eb:bd:c6:5b:6d:22:88:9d: ae:d3:51:a2:1a:5e:24:f8:e2:77:1a:9e:2f:3d:a5:af:c9:8d: 09:e3:3c:48 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCOVrcx4uByf/GsYHJvSfqP5unJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAZDAwM2RkODA4ZDU0MDIxMjM5NGU1 NDk5NTI4Mzg2OTFiYWYyZmE2NjJiZGIxM2NhMDRlZWMzMWRhZGFkYmE1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHHeCAIIpQ22ilCLDepf3BWDUP91 i+90RAj+razPprHTI4m2rWN5w8SQhxfyKmP+7qf+ID3L7Yj5Jy1bzaksjqTomRtD OJcdUybpSTXUJubebFQUNUyWoFLsmb6FVs+fOFcztUlLiyRBKaU+nEWdIjI0Vr6D 8nVoGoHRNOZwzovBh/YBZKX+UnkyIHY9OZnRSwvmbrna3YJsWEJrnx9xo9H4CYgM JaAvkv/UXKx+JxlfxpLxkslphZ3AhJkvuLTDiAxq6yyE6xbcHAx2A7+pzJpFQXey NU8r7k3QTqsiESnV1Ck8sOKiD02uE1upF0PKFK3A5QGfxafIpuTXXUkvuwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKNAqPpTOR2PIgNX7AIG9dz44z35MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmMTkxNGYzLWYwMmUtNDNjZS1hYTI3LTI0NzczODY3YmM1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/BAwDQYJKoZIhvcNAQELBQADggEBAHSqwYV3K2/kC9pjkuaq +hHjHV61UAZ/qNElJ/ehX9g88QjILk3bi9uOImZPVqd7RodtloBhPS8YNuET4uiy XTfYk0qzdNfTMrL6rsGCecxc4xYdZs9RVC3ATWz3Zg0EgkaVQTR+e+TQG7SgToS+ E0Olx0+0M3it/XPS1kTRRekusdc3OoXPLV05w9yIVm5rfjtaBVCJfHAXb3pZKDrw CEFidcybQ2/JbtMq4HAkQmv7iwxQh3Tqv+PR6Nax34xwPvFC7L+GbYuV1dHhJmXi AmgtWVz4R69poks/rClAvk5TRavrvcZbbSKIna7TUaIaXiT44ncani89pa/JjQnj PEg= -----END CERTIFICATE-----Generated at Fri Apr 19 00:30:58 2024 by rpki-client on console-fra.rpki-client.org