$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa File: b235d168-8a46-461c-98e6-45ec802567db.roa (raw, json) Hash identifier: 7JCo0l992PlneaNVbKtiOdZfBnKWdHIqx4EHUTW99rg= Subject key identifier: EE:A4:51:C5:18:8E:C7:AA:7C:52:EB:76:E8:1A:50:1A:52:6A:7C:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FF65A5D6844D0C48B6AD254D98A41879C113011 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f6:5a:5d:68:44:d0:c4:8b:6a:d2:54:d9:8a:41:87:9c:11:30:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=f207441b158f05b454fe85a98056d995fc389822b7695fd0e6bfa3892c7e3f05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:7e:ac:31:60:33:32:23:fe:55:6d:e9:38: 2f:95:8a:f4:46:8f:6b:c0:07:3d:65:66:ff:51:ab: 10:e1:76:95:3a:cc:ec:a7:bb:21:b4:b3:f7:a0:1d: bb:83:1a:0f:f8:e1:b5:2c:65:9d:d9:bd:aa:e9:20: fd:cd:61:2f:12:b1:1f:53:9b:a4:da:e4:20:ff:48: 65:48:01:42:77:94:5a:14:cd:e6:d7:ae:1c:d0:8e: f4:49:9f:d1:ea:dd:c9:c3:fc:5c:45:04:24:e5:93: e8:4f:1a:d9:05:ce:6d:8b:17:8f:78:9e:71:35:51: 00:13:c0:54:a3:12:ce:e0:87:9d:06:e3:c6:5a:7e: 71:26:7a:1a:f3:8c:65:04:c9:2c:d9:ef:4f:c0:92: 90:02:e0:60:f2:1b:52:9d:c0:58:97:3d:72:c2:e2: 88:56:85:fd:ab:4d:a4:90:da:f0:ed:33:dd:80:31: b9:21:a1:46:49:e0:90:61:69:b2:7b:66:cd:a8:74: 71:12:86:27:49:02:a0:fb:8b:44:cc:80:a2:13:d2: e1:38:3f:b0:4c:14:ff:82:02:1c:10:ee:9f:b8:23: ef:7c:54:d0:a2:4b:3f:2a:0b:71:79:0f:7f:4c:d2: ad:88:bc:02:6b:d4:b7:d5:83:3c:56:bc:91:23:84: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A4:51:C5:18:8E:C7:AA:7C:52:EB:76:E8:1A:50:1A:52:6A:7C:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:9000::/40 Signature Algorithm: sha256WithRSAEncryption 2a:68:31:5f:97:df:6d:7c:fd:58:3a:5b:76:50:17:69:95:af: 94:3f:6a:84:b7:b7:18:e5:35:ef:95:0a:42:05:af:b4:73:d7: 8d:a6:45:2c:2a:52:d8:66:37:86:75:05:5a:90:f6:76:3d:e3: 96:99:55:5f:7a:2e:7a:9f:b7:50:3c:62:fc:16:67:e5:3a:54: 17:f1:4e:bb:79:f5:8d:0a:88:31:7b:fa:24:a9:91:25:82:4c: 2f:70:e7:28:0c:86:7b:7a:7e:ce:11:31:34:a8:07:2f:3d:5f: e6:4b:2b:8a:31:37:00:89:cc:5d:7f:b4:46:bb:84:bb:39:e8: 27:99:c3:8d:84:a3:1e:d5:c6:c9:a2:4f:98:9c:d0:89:76:ca: d2:2f:2d:80:78:2d:04:d0:17:c4:20:ba:ed:48:1c:2f:0c:7b: e0:ad:38:99:6e:e4:7d:96:1c:fb:f0:34:82:5d:49:0b:3e:6e: 4f:79:13:94:7e:14:41:c3:17:78:c4:fb:f0:97:e6:2b:e4:5e: db:3b:92:83:cb:52:38:15:ee:f0:36:ad:94:75:e9:46:ca:37: d7:49:1e:c9:1b:1c:31:e8:0d:79:97:b2:4d:52:11:4a:f7:ea: c2:c3:49:52:6c:70:54:8c:b1:54:b2:30:ab:b5:1b:9f:3a:36: 8d:b3:4e:4d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL/ZaXWhE0MSLatJU2YpBh5wRMBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAZjIwNzQ0MWIxNThmMDViNDU0ZmU4 NWE5ODA1NmQ5OTVmYzM4OTgyMmI3Njk1ZmQwZTZiZmEzODkyYzdlM2YwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RZ+rDFgMzIj/lVt6TgvlYr0Ro9r wAc9ZWb/UasQ4XaVOszsp7shtLP3oB27gxoP+OG1LGWd2b2q6SD9zWEvErEfU5uk 2uQg/0hlSAFCd5RaFM3m164c0I70SZ/R6t3Jw/xcRQQk5ZPoTxrZBc5tixePeJ5x NVEAE8BUoxLO4IedBuPGWn5xJnoa84xlBMks2e9PwJKQAuBg8htSncBYlz1ywuKI VoX9q02kkNrw7TPdgDG5IaFGSeCQYWmye2bNqHRxEoYnSQKg+4tEzICiE9LhOD+w TBT/ggIcEO6fuCPvfFTQoks/KgtxeQ9/TNKtiLwCa9S31YM8VryRI4S80QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO6kUcUYjseqfFLrdugaUBpSanyRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyMzVkMTY4LThhNDYtNDYxYy05OGU2LTQ1ZWM4MDI1NjdkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ZAwDQYJKoZIhvcNAQELBQADggEBACpoMV+X3218/Vg6W3ZQ F2mVr5Q/aoS3txjlNe+VCkIFr7Rz142mRSwqUthmN4Z1BVqQ9nY945aZVV96Lnqf t1A8YvwWZ+U6VBfxTrt59Y0KiDF7+iSpkSWCTC9w5ygMhnt6fs4RMTSoBy89X+ZL K4oxNwCJzF1/tEa7hLs56CeZw42Eox7VxsmiT5ic0Il2ytIvLYB4LQTQF8Qguu1I HC8Me+CtOJlu5H2WHPvwNIJdSQs+bk95E5R+FEHDF3jE+/CX5ivkXts7koPLUjgV 7vA2rZR16UbKN9dJHskbHDHoDXmXsk1SEUr36sLDSVJscFSMsVSyMKu1G586No2z Tk0= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:36 2024 by rpki-client on console-fra.rpki-client.org