$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa File: b34c7d97-b54b-48f8-bd90-2fd749965607.roa (raw, json) Hash identifier: bXNn5lB0JkCkGgF9G2qRjXGuvwZPXaC7xjrmzXV3k+U= Subject key identifier: 03:1F:61:71:AC:44:2B:88:C2:E8:92:B3:41:6F:76:F4:79:CF:3C:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7AB6F4F7CE1968D780F0DFD0DE89A18E843968B0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafc:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b6:f4:f7:ce:19:68:d7:80:f0:df:d0:de:89:a1:8e:84:39:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=98d03957f18374cc8f61fa69bca554d868ef7cafa14effaffca4370bfe552cae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:3f:fe:fb:25:d9:e5:4f:7e:82:d8:79:7e: e6:04:5e:48:8c:8a:fb:f9:a3:5b:25:2f:0a:84:92: 12:3e:51:a2:af:31:e1:38:05:ea:e0:a2:50:db:3c: 84:8b:27:ba:58:e8:30:70:5b:46:65:6d:f8:cd:b7: dd:7f:96:46:4a:c3:6d:ba:03:41:70:82:13:f1:36: e3:ae:21:9b:d8:ec:1f:1b:c2:f5:0e:3a:2a:17:47: 63:5a:01:d1:9c:b8:5f:f5:e1:48:8c:c1:b9:0e:2a: 8b:74:57:06:61:4b:52:cf:6c:14:20:d2:ab:50:14: e5:ea:43:e4:ee:e1:a2:c8:fe:f6:71:1d:1d:99:5c: 2f:57:3e:28:c6:09:2d:da:14:81:08:db:ea:18:ee: fd:51:92:bf:36:a9:9b:27:c6:b0:22:61:4b:1f:89: e6:ab:1b:65:09:37:81:ca:fa:a5:00:5f:89:dd:94: bf:5e:1b:86:93:4e:0b:bf:40:20:08:5c:8d:40:03: 5d:bd:52:16:97:80:d3:33:fa:ef:97:a5:24:9c:07: 92:87:e1:95:75:13:cb:0b:10:07:c3:6a:03:b0:7e: 8a:a2:2d:46:02:7b:91:ae:ea:4b:3e:49:fa:a3:15: 46:50:7e:ba:3f:c7:90:99:53:20:14:12:26:e8:10: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1F:61:71:AC:44:2B:88:C2:E8:92:B3:41:6F:76:F4:79:CF:3C:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafc:9000::/40 Signature Algorithm: sha256WithRSAEncryption 8c:84:a7:21:6b:7a:e5:e7:87:69:76:fc:f5:76:54:5f:ca:8a: be:e2:bb:5a:0c:25:39:12:32:df:16:51:e8:13:6d:72:43:27: 88:bd:6f:7b:e2:75:b3:39:8a:36:84:2b:43:7a:f1:d9:54:3e: 2c:11:f1:f4:93:ad:78:83:7e:99:c5:60:bc:10:85:c4:37:5e: c3:2d:0a:2b:c2:e6:67:b6:f8:57:a6:ee:e5:1c:71:1d:eb:1b: fc:cb:c7:5a:bc:24:36:81:01:7c:da:e8:1a:46:16:1b:4b:d4: ef:7e:0d:3e:b0:41:50:33:75:26:2a:1a:be:24:df:5f:2b:e9: 93:4e:a6:ab:94:43:72:db:d8:66:78:e1:c7:9c:28:61:69:d4: 2e:67:63:04:69:19:e8:8d:8e:22:41:63:97:e8:17:72:76:07: 24:ed:ae:86:9b:ec:68:28:6b:70:f9:04:96:b9:71:cb:3b:4e: b8:58:24:c1:d5:b7:35:db:d6:cd:de:04:a1:d9:4a:8a:7c:56: 1c:13:65:5c:44:d9:33:a0:f7:ed:2d:31:f2:f2:d6:30:e6:e1: 8c:34:cc:d0:6a:c6:6e:0c:fc:df:b6:9d:b5:c8:76:64:07:03: 35:be:01:36:6d:29:b3:26:a2:62:44:38:19:22:21:82:6c:59: a7:74:d5:eb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUerb0984ZaNeA8N/Q3omhjoQ5aLAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAOThkMDM5NTdmMTgzNzRjYzhmNjFm YTY5YmNhNTU0ZDg2OGVmN2NhZmExNGVmZmFmZmNhNDM3MGJmZTU1MmNhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Y//vsl2eVPfoLYeX7mBF5IjIr7 +aNbJS8KhJISPlGirzHhOAXq4KJQ2zyEiye6WOgwcFtGZW34zbfdf5ZGSsNtugNB cIIT8TbjriGb2OwfG8L1DjoqF0djWgHRnLhf9eFIjMG5DiqLdFcGYUtSz2wUINKr UBTl6kPk7uGiyP72cR0dmVwvVz4oxgkt2hSBCNvqGO79UZK/NqmbJ8awImFLH4nm qxtlCTeByvqlAF+J3ZS/XhuGk04Lv0AgCFyNQANdvVIWl4DTM/rvl6UknAeSh+GV dRPLCxAHw2oDsH6Koi1GAnuRrupLPkn6oxVGUH66P8eQmVMgFBIm6BDquwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAMfYXGsRCuIwuiSs0FvdvR5zzydMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzNGM3ZDk3LWI1NGItNDhmOC1iZDkwLTJmZDc0OTk2NTYwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/JAwDQYJKoZIhvcNAQELBQADggEBAIyEpyFreuXnh2l2/PV2 VF/Kir7iu1oMJTkSMt8WUegTbXJDJ4i9b3vidbM5ijaEK0N68dlUPiwR8fSTrXiD fpnFYLwQhcQ3XsMtCivC5me2+Fem7uUccR3rG/zLx1q8JDaBAXza6BpGFhtL1O9+ DT6wQVAzdSYqGr4k318r6ZNOpquUQ3Lb2GZ44cecKGFp1C5nYwRpGeiNjiJBY5fo F3J2ByTtroab7Ggoa3D5BJa5ccs7TrhYJMHVtzXb1s3eBKHZSop8VhwTZVxE2TOg 9+0tMfLy1jDm4Yw0zNBqxm4M/N+2nbXIdmQHAzW+ATZtKbMmomJEOBkiIYJsWad0 1es= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org