$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b89e1b5a-6ce4-4b65-931b-a6ec1d72711e.roa File: b89e1b5a-6ce4-4b65-931b-a6ec1d72711e.roa (raw, json) Hash identifier: uSpxODCrLQ8li8XSfEpIG1nLlNM2zFRZrkczzWoOGjI= Subject key identifier: 09:C0:D5:FB:74:E0:1B:E2:D3:8A:6A:F0:F2:B9:83:D7:F9:EC:96:FD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C2674BBEE2D9155110FF928C2B5952C048CD5DC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b89e1b5a-6ce4-4b65-931b-a6ec1d72711e.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 00:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:26:74:bb:ee:2d:91:55:11:0f:f9:28:c2:b5:95:2c:04:8c:d5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=89b83ee1f72b0786ad07213f6aa95f007ccf07cfe192f10dfdf91748751a509c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:c5:b2:17:d1:01:9b:1c:44:b4:de:36:82: 6d:1a:2e:c9:ea:67:66:81:f8:d5:b8:9d:bd:e8:06: ff:d7:39:1b:91:cd:b1:4d:47:40:c6:b8:8a:e2:b0: e1:8e:42:c6:e9:cf:ce:2c:f5:9f:1b:2d:83:05:3e: 0a:07:3c:cd:33:0b:34:9d:e0:82:08:87:6d:9e:60: 17:13:f2:25:98:3b:79:34:35:53:2e:21:cc:d3:0b: e6:53:4e:ce:da:ec:29:f4:de:7a:72:30:39:65:87: 3b:64:b2:7f:47:18:28:69:df:17:3d:59:c0:09:a5: 81:7c:08:a3:16:3a:bf:d4:f2:ff:00:5a:e6:8e:b9: 67:ff:1f:f4:bd:24:56:d6:e2:1b:8a:b0:95:65:ad: e6:12:39:9b:f6:8c:d0:f7:a2:dc:29:1d:52:4f:4d: 09:96:31:9e:e0:e8:5d:75:79:66:99:4c:82:06:52: b1:2c:e0:8c:50:9a:e8:0f:76:99:c6:d1:8e:9b:01: 2f:44:13:c8:43:d6:44:92:25:02:2d:95:55:4a:65: 47:e8:d7:99:3a:8b:f7:44:24:d1:b1:56:84:5c:e2: 28:77:30:f3:94:e8:2a:05:63:73:c6:06:eb:ed:44: 76:a6:a3:1b:2a:dc:b0:28:47:06:cb:5f:94:c1:e8: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:D5:FB:74:E0:1B:E2:D3:8A:6A:F0:F2:B9:83:D7:F9:EC:96:FD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b89e1b5a-6ce4-4b65-931b-a6ec1d72711e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:c800::/40 Signature Algorithm: sha256WithRSAEncryption 11:ec:1b:61:65:63:49:5d:ab:aa:75:28:d0:7e:83:79:9f:b6: c5:05:78:e1:b6:38:16:d1:62:2d:0c:f5:f8:5e:3f:77:c3:2a: 21:73:bb:32:2a:70:f4:3f:72:2f:dc:65:bd:d0:c8:82:93:bb: fb:a7:a0:03:a3:41:60:ef:33:0b:a6:c8:d7:9f:e6:7a:05:50: b8:2c:f4:26:7c:69:e9:71:ca:44:aa:55:02:87:f6:c3:f6:f3: 63:5f:d6:dd:fa:ca:64:9a:a8:e4:82:57:a4:70:54:26:78:52: 70:dd:cd:b6:b6:ae:38:8e:0c:7b:1a:61:75:06:a0:f4:45:9e: c8:00:98:56:db:a1:da:4a:84:33:92:3f:18:83:5b:9b:b9:5e: e9:e0:ed:e2:b9:65:be:0a:68:c5:8b:01:76:72:db:94:f9:dc: b5:35:8d:26:a2:4d:15:63:25:89:d1:bc:39:8e:29:f6:49:b5: 58:43:ad:38:15:68:4a:f0:c0:cf:f8:9e:27:85:8e:75:2b:0d: 30:b5:ec:fe:91:e7:48:d8:09:1f:18:f9:33:a4:5d:c7:84:fe: 32:17:e3:51:2d:5d:2c:d2:de:13:6f:26:0b:36:1f:f2:5a:de: 56:0b:5d:b1:82:75:fe:14:8d:18:64:ae:56:0b:b1:c4:af:ae: c5:49:ed:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfCZ0u+4tkVURD/kowrWVLASM1dwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQyMzAwMDAwMFoX DTI0MDUyODIzNTk1OVowejFJMEcGA1UEBRNAODliODNlZTFmNzJiMDc4NmFkMDcy MTNmNmFhOTVmMDA3Y2NmMDdjZmUxOTJmMTBkZmRmOTE3NDg3NTFhNTA5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDjFshfRAZscRLTeNoJtGi7J6mdm gfjVuJ296Ab/1zkbkc2xTUdAxriK4rDhjkLG6c/OLPWfGy2DBT4KBzzNMws0neCC CIdtnmAXE/IlmDt5NDVTLiHM0wvmU07O2uwp9N56cjA5ZYc7ZLJ/Rxgoad8XPVnA CaWBfAijFjq/1PL/AFrmjrln/x/0vSRW1uIbirCVZa3mEjmb9ozQ96LcKR1ST00J ljGe4OhddXlmmUyCBlKxLOCMUJroD3aZxtGOmwEvRBPIQ9ZEkiUCLZVVSmVH6NeZ Oov3RCTRsVaEXOIodzDzlOgqBWNzxgbr7UR2pqMbKtywKEcGy1+Uwegl/QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAnA1ft04Bvi04pq8PK5g9f57Jb9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4OWUxYjVhLTZjZTQtNGI2NS05MzFiLWE2ZWMxZDcyNzExZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+MgwDQYJKoZIhvcNAQELBQADggEBABHsG2FlY0ldq6p1KNB+ g3mftsUFeOG2OBbRYi0M9fheP3fDKiFzuzIqcPQ/ci/cZb3QyIKTu/unoAOjQWDv MwumyNef5noFULgs9CZ8aelxykSqVQKH9sP282Nf1t36ymSaqOSCV6RwVCZ4UnDd zba2rjiODHsaYXUGoPRFnsgAmFbbodpKhDOSPxiDW5u5Xung7eK5Zb4KaMWLAXZy 25T53LU1jSaiTRVjJYnRvDmOKfZJtVhDrTgVaErwwM/4nieFjnUrDTC17P6R50jY CR8Y+TOkXceE/jIX41EtXSzS3hNvJgs2H/Ja3lYLXbGCdf4UjRhkrlYLscSvrsVJ 7VQ= -----END CERTIFICATE-----Generated at Sun May 5 01:20:22 2024 by rpki-client on console-fra.rpki-client.org