$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa File: b85f489e-343d-41f3-bec5-5d34db511649.roa (raw, json) Hash identifier: wbXnXMpXb1GyMdFMLdRuJ+ftr2RIaJFzr0QWy0rk1FI= Subject key identifier: 54:42:A2:51:C9:80:B8:B5:91:1F:E3:57:4A:FC:2E:24:CF:FC:3B:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48AC75962C05E449C4509DEE020B71B8ADE48482 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ac:75:96:2c:05:e4:49:c4:50:9d:ee:02:0b:71:b8:ad:e4:84:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=3cff31e2056c506929a074e9d33c42b65e3df63e4aa3ecce4865edb720f833a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cf:14:33:db:b1:3a:d5:1c:85:5b:c0:f5:ac: b4:1e:e2:10:61:91:11:f7:3c:6e:16:0b:05:2e:74: 2a:f7:13:69:19:5d:10:47:22:3b:d1:02:7e:41:9f: 8c:f2:b6:b7:4d:5e:44:3c:60:f4:91:56:97:0d:22: 67:4e:87:a2:7a:0d:f5:48:0f:4d:90:4a:14:51:ec: 22:91:f9:49:13:b8:81:da:03:62:d9:09:db:91:24: cb:28:92:10:24:04:16:96:27:91:8a:51:f1:fa:d1: cf:eb:15:31:a1:97:e9:61:27:08:9b:b1:4b:ec:00: 14:03:57:f4:d5:2b:66:4b:c7:e1:d7:ef:d3:6f:b1: a9:3b:c9:3f:d6:d6:17:6e:87:67:96:73:ee:ab:d2: 6f:e3:e1:b7:a3:03:51:bb:db:b0:68:83:f2:51:b0: 54:ce:75:dd:1f:65:52:43:8f:91:39:de:26:6c:f1: 59:82:8d:37:1d:57:69:e8:c4:03:c4:f0:44:c8:a4: 3e:cd:3e:f8:31:a7:38:9f:56:86:1d:53:73:c5:d5: 52:3b:30:56:18:ea:2f:e4:f3:27:7b:c0:35:c2:dc: 17:98:86:28:ae:cd:7e:0d:5f:0a:66:83:bb:1c:94: 06:1c:b3:aa:19:4d:22:04:25:0e:2e:06:f1:0f:f2: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:A2:51:C9:80:B8:B5:91:1F:E3:57:4A:FC:2E:24:CF:FC:3B:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:2000::/40 Signature Algorithm: sha256WithRSAEncryption 09:a6:ac:36:bf:af:55:7e:48:6a:c6:b5:8b:41:f4:62:d3:39: 9e:1b:15:e1:02:03:15:9c:85:16:74:a5:d3:87:04:64:71:65: b1:91:3f:40:73:6c:45:d6:c6:d7:67:52:2d:10:15:b7:19:df: ef:f0:44:ab:80:9c:ad:08:67:31:21:17:d4:39:c8:15:b3:32: f8:d3:bc:5b:58:b3:17:5d:cc:38:b5:43:0d:1a:92:f5:7a:63: d5:79:05:97:38:1b:2a:61:8f:79:27:ec:54:bf:50:63:be:52: 10:f3:81:79:9b:67:c9:4f:90:b3:eb:65:8c:98:93:3e:83:6a: 31:36:68:be:69:3d:bc:b3:38:4f:ac:89:76:bc:aa:58:83:87: 26:b8:80:b2:cd:51:6d:76:f4:7f:96:b4:3f:46:27:2e:22:24: 6b:02:dc:75:5f:f9:8c:4b:d8:c3:d2:ad:20:bb:84:6e:09:67: 34:40:0f:df:7b:17:03:9d:9c:9a:68:38:68:fc:15:b0:e8:5d: 40:14:53:8e:c7:2d:ae:a3:d7:3c:33:4c:a9:76:4e:d7:43:62: a6:fa:40:57:84:37:28:e0:a1:50:92:86:65:30:fb:16:83:83: 9d:19:5b:7d:99:35:8a:0a:62:cb:20:2a:34:fa:7f:e9:9f:f5: ec:21:24:e7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSKx1liwF5EnEUJ3uAgtxuK3khIIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAM2NmZjMxZTIwNTZjNTA2OTI5YTA3 NGU5ZDMzYzQyYjY1ZTNkZjYzZTRhYTNlY2NlNDg2NWVkYjcyMGY4MzNhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs8UM9uxOtUchVvA9ay0HuIQYZER 9zxuFgsFLnQq9xNpGV0QRyI70QJ+QZ+M8ra3TV5EPGD0kVaXDSJnToeieg31SA9N kEoUUewikflJE7iB2gNi2QnbkSTLKJIQJAQWlieRilHx+tHP6xUxoZfpYScIm7FL 7AAUA1f01StmS8fh1+/Tb7GpO8k/1tYXbodnlnPuq9Jv4+G3owNRu9uwaIPyUbBU znXdH2VSQ4+ROd4mbPFZgo03HVdp6MQDxPBEyKQ+zT74Mac4n1aGHVNzxdVSOzBW GOov5PMne8A1wtwXmIYors1+DV8KZoO7HJQGHLOqGU0iBCUOLgbxD/KmjwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFRColHJgLi1kR/jV0r8LiTP/DtAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4NWY0ODllLTM0M2QtNDFmMy1iZWM1LTVkMzRkYjUxMTY0OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8CAwDQYJKoZIhvcNAQELBQADggEBAAmmrDa/r1V+SGrGtYtB 9GLTOZ4bFeECAxWchRZ0pdOHBGRxZbGRP0BzbEXWxtdnUi0QFbcZ3+/wRKuAnK0I ZzEhF9Q5yBWzMvjTvFtYsxddzDi1Qw0akvV6Y9V5BZc4Gyphj3kn7FS/UGO+UhDz gXmbZ8lPkLPrZYyYkz6DajE2aL5pPbyzOE+siXa8qliDhya4gLLNUW129H+WtD9G Jy4iJGsC3HVf+YxL2MPSrSC7hG4JZzRAD997FwOdnJpoOGj8FbDoXUAUU47HLa6j 1zwzTKl2TtdDYqb6QFeENyjgoVCShmUw+xaDg50ZW32ZNYoKYssgKjT6f+mf9ewh JOc= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:39 2024 by rpki-client on console-ams.rpki-client.org