$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa File: b34c7d97-b54b-48f8-bd90-2fd749965607.roa (raw, json) Hash identifier: meICMCr71TccK0XSKHgpb8xpaDhzR3rkd9+iWTalZe0= Subject key identifier: A6:4C:F9:C0:9A:18:C0:16:89:12:D9:90:29:DA:0D:56:64:85:9B:1C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 698E6A8F7E52611D0EA055CD639D337659D4E5CD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafc:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8e:6a:8f:7e:52:61:1d:0e:a0:55:cd:63:9d:33:76:59:d4:e5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=1a07b7b2689110acfe9973bfda220c830115df133b4a71697e966e91b547e90b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:3a:9b:80:c5:73:42:67:fa:35:07:57:d3: b7:ee:83:5b:15:f0:86:c8:ea:8a:a8:0b:c7:38:5b: 56:aa:d1:8b:69:fb:e6:b3:2b:b8:b7:2f:e4:e7:61: 6d:59:f7:27:af:f6:de:59:2a:66:66:4a:6b:7d:d3: 77:15:c1:19:38:c3:a5:5a:9e:1a:36:d8:80:b6:f9: 3f:1a:a3:2c:d4:47:ae:6f:ec:71:d4:7b:1e:ca:80: 89:f1:21:f8:ff:38:e2:f9:25:25:38:68:78:df:64: 19:1a:d5:e4:09:38:08:8a:e6:df:c1:a9:9e:1b:a9: ab:f0:9d:7d:54:84:65:a0:6e:09:fb:2e:33:0a:6c: 88:41:8e:86:e0:1d:b1:6d:53:b2:d8:bb:e0:67:1f: ec:28:2c:bc:28:a7:24:55:47:17:0b:ae:56:a0:ea: 83:9b:10:b2:a2:f7:0b:29:8f:d7:b5:f2:7b:cf:80: c2:1a:a5:89:82:34:3e:ba:ea:d3:7b:2d:02:99:13: 87:4a:fe:7b:f4:86:a4:01:5f:12:39:45:02:ca:d5: 1f:43:9e:52:e2:90:58:b8:57:1d:cb:60:68:91:4b: 4a:91:ae:44:55:62:bf:a7:f0:62:e3:28:5c:47:44: 63:b9:db:0a:49:11:94:b4:01:90:ab:b9:af:08:a7: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4C:F9:C0:9A:18:C0:16:89:12:D9:90:29:DA:0D:56:64:85:9B:1C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafc:9000::/40 Signature Algorithm: sha256WithRSAEncryption bb:64:35:0f:0b:15:bd:47:cf:e0:d4:9d:2b:28:a5:f1:69:30: 50:24:e5:ce:e6:5a:a1:91:ab:e0:3f:19:9a:3b:09:4f:93:7a: 96:16:b1:6f:bd:54:c6:fa:24:f0:32:e5:11:90:22:0b:f6:4a: e1:a0:e9:7c:5d:b6:fc:a5:8d:44:47:7d:07:a1:f9:08:3c:58: 9c:b9:91:93:24:c7:67:1d:b6:03:1e:69:b4:a1:a6:38:f5:8d: 9d:1c:de:04:fe:86:a1:b2:02:df:3d:d8:29:b8:88:82:7b:c6: 89:fa:28:34:6b:75:f6:05:29:3d:79:77:09:60:99:5f:b0:89: 69:61:ea:91:e1:c6:b4:42:49:f3:24:9c:7c:f9:d3:1f:a2:6e: b1:ad:05:72:0c:d7:b2:58:a6:31:e3:3e:3c:f1:c2:fb:b7:f8: e5:84:15:ee:bf:7f:85:aa:e8:22:d8:3e:11:9f:62:bb:3f:28: a6:db:14:54:b7:b7:dd:7e:81:71:73:5c:9a:23:27:db:08:ef: a8:26:2a:cf:39:cc:b0:0a:94:b3:72:89:65:c4:07:8e:16:3b: 0e:f5:84:3c:d4:29:19:46:4f:87:61:71:f5:a2:48:48:cf:a0: 79:37:de:8d:52:20:04:ca:83:bb:c7:bd:1c:42:ab:2e:53:3d: 08:65:01:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaY5qj35SYR0OoFXNY50zdlnU5c0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAMWEwN2I3YjI2ODkxMTBhY2ZlOTk3 M2JmZGEyMjBjODMwMTE1ZGYxMzNiNGE3MTY5N2U5NjZlOTFiNTQ3ZTkwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwM6m4DFc0Jn+jUHV9O37oNbFfCG yOqKqAvHOFtWqtGLafvmsyu4ty/k52FtWfcnr/beWSpmZkprfdN3FcEZOMOlWp4a NtiAtvk/GqMs1Eeub+xx1HseyoCJ8SH4/zji+SUlOGh432QZGtXkCTgIiubfwame G6mr8J19VIRloG4J+y4zCmyIQY6G4B2xbVOy2LvgZx/sKCy8KKckVUcXC65WoOqD mxCyovcLKY/XtfJ7z4DCGqWJgjQ+uurTey0CmROHSv579IakAV8SOUUCytUfQ55S 4pBYuFcdy2BokUtKka5EVWK/p/Bi4yhcR0RjudsKSRGUtAGQq7mvCKcBlQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKZM+cCaGMAWiRLZkCnaDVZkhZscMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzNGM3ZDk3LWI1NGItNDhmOC1iZDkwLTJmZDc0OTk2NTYwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/JAwDQYJKoZIhvcNAQELBQADggEBALtkNQ8LFb1Hz+DUnSso pfFpMFAk5c7mWqGRq+A/GZo7CU+TepYWsW+9VMb6JPAy5RGQIgv2SuGg6Xxdtvyl jURHfQeh+Qg8WJy5kZMkx2cdtgMeabShpjj1jZ0c3gT+hqGyAt892Cm4iIJ7xon6 KDRrdfYFKT15dwlgmV+wiWlh6pHhxrRCSfMknHz50x+ibrGtBXIM17JYpjHjPjzx wvu3+OWEFe6/f4Wq6CLYPhGfYrs/KKbbFFS3t91+gXFzXJojJ9sI76gmKs85zLAK lLNyiWXEB44WOw71hDzUKRlGT4dhcfWiSEjPoHk33o1SIATKg7vHvRxCqy5TPQhl AZs= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:26 2024 by rpki-client on console-ams.rpki-client.org