$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd21958-807a-4f6b-90a8-2c9e23f5d9c9.roa File: afd21958-807a-4f6b-90a8-2c9e23f5d9c9.roa (raw, json) Hash identifier: K5oNLentpZPk7cBVZb2p+YmlsDgsJ4pg9TL8E3jXO0w= Subject key identifier: F5:08:F1:45:29:4C:29:29:CB:AF:75:BF:47:D1:45:23:6D:CC:60:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E5F9D9355930F89608B227145D326D0187A98AD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd21958-807a-4f6b-90a8-2c9e23f5d9c9.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5f:9d:93:55:93:0f:89:60:8b:22:71:45:d3:26:d0:18:7a:98:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=c4446457122b236fded626f02f4d1949b14d08c319587655d0f06bdf203cdb02, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:19:26:5c:0c:a3:07:8b:9a:af:37:f7:2f: b5:2e:e0:23:34:a8:94:45:7f:09:77:09:a9:80:dd: f2:7b:66:11:ab:62:45:d2:9c:d3:fb:f7:2e:9a:29: bc:c3:c3:98:df:fb:92:62:74:ce:13:d8:a7:cb:c8: 54:a3:2b:86:9b:a7:91:f2:94:39:5a:01:09:88:96: 83:0f:93:c5:35:73:15:f2:ce:0e:bb:70:0a:65:41: e3:80:ad:d9:b1:c4:5c:b3:ae:4e:c5:8d:44:78:f6: 3b:69:87:20:ee:53:84:4a:74:7a:5d:50:35:e4:99: 86:60:13:2d:f6:cb:54:af:68:8d:8e:2d:63:44:05: f5:ac:31:1a:53:71:e6:87:86:19:46:01:50:c7:c7: ee:6c:46:ca:c3:73:de:41:3d:32:2f:cb:b9:a1:7c: 70:31:7f:ff:cf:8a:84:53:52:e4:15:30:4a:0c:e1: ae:ee:78:1c:d4:8f:08:1f:19:27:ba:8f:00:af:cc: 12:94:3a:bc:ad:a3:82:b3:6e:84:92:38:5c:36:42: 67:59:94:12:db:1f:2b:50:c4:8e:b7:0a:f8:c9:cd: 18:4f:8c:b4:7a:a2:a4:28:b9:76:07:0a:db:55:dc: a8:cd:ad:6f:6f:0f:33:b6:f9:4d:ad:a3:10:25:cb: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:08:F1:45:29:4C:29:29:CB:AF:75:BF:47:D1:45:23:6D:CC:60:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afd21958-807a-4f6b-90a8-2c9e23f5d9c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2800::/40 Signature Algorithm: sha256WithRSAEncryption a8:0e:a2:75:fa:96:4a:d4:19:15:fd:e5:06:6b:ef:a6:5e:76: 70:81:04:a6:af:78:10:1e:38:09:4e:9b:c1:8f:c3:55:86:63: 83:0b:5d:f0:2d:ad:4e:56:90:9a:95:e0:69:f2:93:71:44:4a: 3a:c7:de:f0:7f:96:b6:74:a0:62:98:c7:75:ca:6b:ac:93:11: 68:90:15:06:c0:d0:f8:da:be:ba:b0:46:14:df:39:16:45:0c: f8:15:fd:42:e0:bd:55:61:68:0f:76:da:89:d4:1c:45:80:e2: 2e:af:16:80:59:e0:4f:64:0c:5b:d4:fe:01:4b:cb:3b:38:e8: e1:69:df:b3:3d:ab:ef:91:2d:7e:40:fc:b6:fe:bf:85:a3:a4: 1e:9a:3f:4f:d0:a2:da:bb:4d:ef:38:5c:97:fb:8e:6d:79:54: 75:22:6b:8a:8f:e8:0b:40:93:ce:f8:9a:ef:53:b0:43:a8:2a: f9:12:4e:b3:da:9a:05:83:50:a0:17:9d:15:57:86:e6:e8:bb: 5e:07:12:46:90:2e:8d:ce:9d:b0:b1:b6:4f:8a:51:48:16:ca: 7b:24:80:a3:6f:ad:18:05:77:ee:10:f7:e3:82:d9:82:ef:29: d2:3e:c6:44:13:5f:67:6a:e8:20:a7:5e:7e:70:33:dc:e4:8d: 38:b5:00:f7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPl+dk1WTD4lgiyJxRdMm0Bh6mK0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAYzQ0NDY0NTcxMjJiMjM2ZmRlZDYy NmYwMmY0ZDE5NDliMTRkMDhjMzE5NTg3NjU1ZDBmMDZiZGYyMDNjZGIwMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02UZJlwMoweLmq839y+1LuAjNKiU RX8JdwmpgN3ye2YRq2JF0pzT+/cumim8w8OY3/uSYnTOE9iny8hUoyuGm6eR8pQ5 WgEJiJaDD5PFNXMV8s4Ou3AKZUHjgK3ZscRcs65OxY1EePY7aYcg7lOESnR6XVA1 5JmGYBMt9stUr2iNji1jRAX1rDEaU3Hmh4YZRgFQx8fubEbKw3PeQT0yL8u5oXxw MX//z4qEU1LkFTBKDOGu7ngc1I8IHxknuo8Ar8wSlDq8raOCs26EkjhcNkJnWZQS 2x8rUMSOtwr4yc0YT4y0eqKkKLl2BwrbVdyoza1vbw8ztvlNraMQJcsfzQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPUI8UUpTCkpy691v0fRRSNtzGALMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmZDIxOTU4LTgwN2EtNGY2Yi05MGE4LTJjOWUyM2Y1ZDljOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CgwDQYJKoZIhvcNAQELBQADggEBAKgOonX6lkrUGRX95QZr 76ZednCBBKaveBAeOAlOm8GPw1WGY4MLXfAtrU5WkJqV4Gnyk3FESjrH3vB/lrZ0 oGKYx3XKa6yTEWiQFQbA0PjavrqwRhTfORZFDPgV/ULgvVVhaA922onUHEWA4i6v FoBZ4E9kDFvU/gFLyzs46OFp37M9q++RLX5A/Lb+v4WjpB6aP0/Qotq7Te84XJf7 jm15VHUia4qP6AtAk874mu9TsEOoKvkSTrPamgWDUKAXnRVXhubou14HEkaQLo3O nbCxtk+KUUgWynskgKNvrRgFd+4Q9+OC2YLvKdI+xkQTX2dq6CCnXn5wM9zkjTi1 APc= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:34 2024 by rpki-client on console-fra.rpki-client.org