$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba0659ea-8ed9-4a7e-84c3-131d4d5ba252.roa File: ba0659ea-8ed9-4a7e-84c3-131d4d5ba252.roa (raw, json) Hash identifier: GFv0rQTzn/PRwGRHf+nVEMQ1ueFFbVxCDku4p4h4WYc= Subject key identifier: D5:71:7E:9C:49:78:E5:BB:FC:6E:C7:25:B6:EA:9D:43:E3:0E:7D:BF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7B6C9A7AA9989906362DCD570D1D9356FC45C8C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba0659ea-8ed9-4a7e-84c3-131d4d5ba252.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6c:9a:7a:a9:98:99:06:36:2d:cd:57:0d:1d:93:56:fc:45:c8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=c7d2f81b09748205bb3fa209f4c35a643b3c811364dd47c478aa4dcf98935683, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:e3:8f:7e:7b:e1:5a:da:8b:08:86:33:e4: b1:ca:79:e2:e9:02:c2:6f:1e:e4:32:2c:dc:e8:c4: dd:07:6d:b5:77:b7:3c:b7:4d:b0:10:9d:0e:71:7e: 96:03:18:03:54:a3:dd:60:1a:ee:87:63:7a:d8:72: 6c:0f:50:ba:ec:67:41:2d:aa:8f:48:ae:f7:03:82: 09:41:64:0c:51:7c:f8:f7:d9:40:27:ee:f5:2e:22: ed:a0:a0:42:93:b4:1a:5d:0a:d0:89:f1:3e:bd:70: 54:20:38:82:da:bb:5f:64:41:02:b2:16:1e:13:11: ef:f3:21:68:07:8f:e0:de:4c:0e:91:50:84:fc:af: e8:f2:21:4e:1f:b3:aa:c8:1d:f7:7b:d8:9e:6f:0b: 0e:f9:05:c0:d6:67:b8:e1:31:0a:a1:eb:14:d5:31: dc:fa:75:4d:f1:18:66:70:db:3c:ef:3b:33:7d:a8: 08:b3:31:9b:37:b4:ae:66:7e:9e:86:41:5f:6f:36: 6b:11:ac:40:82:12:85:8a:a3:f0:88:68:1a:cb:f7: 38:bc:f0:64:50:a7:d2:64:bb:eb:df:97:5f:7b:08: c0:46:c5:f7:8a:6d:2a:d3:6e:3d:38:f4:87:d0:2c: 08:69:37:c6:a8:90:23:71:42:98:5a:06:f7:31:37: 94:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:71:7E:9C:49:78:E5:BB:FC:6E:C7:25:B6:EA:9D:43:E3:0E:7D:BF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba0659ea-8ed9-4a7e-84c3-131d4d5ba252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:4000::/40 Signature Algorithm: sha256WithRSAEncryption 60:bc:2a:75:ea:e2:ef:78:c8:2d:a9:0f:db:96:55:da:af:88: 63:4a:58:8c:25:70:e1:56:ff:77:a6:2b:00:a3:d6:81:89:04: a4:f1:a3:b0:73:4b:c6:46:34:88:c3:83:5c:3f:54:2e:66:76: 47:3e:2b:79:1f:a2:91:f8:46:e1:44:64:87:be:35:30:79:98: 5c:58:3d:b3:1f:e1:aa:11:08:aa:f3:87:e6:95:c1:4b:a2:b1: 7e:a5:9a:75:49:12:c9:6e:86:98:6a:f7:bf:cd:7e:fd:aa:af: aa:cb:6a:de:ff:ff:bb:0b:11:94:a6:5f:f6:b6:f3:28:dc:f9: 8d:fa:db:47:fd:67:f7:d2:b1:7e:7b:49:63:bc:ad:9b:fe:56: f8:14:5f:fa:f8:3d:56:80:1d:e8:23:51:65:6a:92:f0:e6:e6: d3:98:cd:99:cd:59:3e:ee:b7:bc:41:30:ee:9e:ee:b3:22:90: de:24:4f:43:2f:15:b5:f9:4e:4e:f5:35:0f:10:7a:d5:74:44: e3:8a:e3:3e:a4:55:73:30:12:d9:d3:73:9e:78:95:dc:93:83: 03:65:72:4e:18:fe:87:a4:28:8c:bc:af:d0:07:7a:b5:e9:55: bf:6d:b7:80:be:06:8c:37:73:af:75:ca:47:28:9c:ea:9d:f6: cb:b8:00:3a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUe2yaeqmYmQY2Lc1XDR2TVvxFyMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAYzdkMmY4MWIwOTc0ODIwNWJiM2Zh MjA5ZjRjMzVhNjQzYjNjODExMzY0ZGQ0N2M0NzhhYTRkY2Y5ODkzNTY4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyevjj3574VraiwiGM+Sxynni6QLC bx7kMizc6MTdB221d7c8t02wEJ0OcX6WAxgDVKPdYBruh2N62HJsD1C67GdBLaqP SK73A4IJQWQMUXz499lAJ+71LiLtoKBCk7QaXQrQifE+vXBUIDiC2rtfZEECshYe ExHv8yFoB4/g3kwOkVCE/K/o8iFOH7OqyB33e9iebwsO+QXA1me44TEKoesU1THc +nVN8RhmcNs87zszfagIszGbN7SuZn6ehkFfbzZrEaxAghKFiqPwiGgay/c4vPBk UKfSZLvr35dfewjARsX3im0q0249OPSH0CwIaTfGqJAjcUKYWgb3MTeUDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNVxfpxJeOW7/G7HJbbqnUPjDn2/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhMDY1OWVhLThlZDktNGE3ZS04NGMzLTEzMWQ0ZDViYTI1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/kAwDQYJKoZIhvcNAQELBQADggEBAGC8KnXq4u94yC2pD9uW VdqviGNKWIwlcOFW/3emKwCj1oGJBKTxo7BzS8ZGNIjDg1w/VC5mdkc+K3kfopH4 RuFEZIe+NTB5mFxYPbMf4aoRCKrzh+aVwUuisX6lmnVJEsluhphq97/Nfv2qr6rL at7//7sLEZSmX/a28yjc+Y3620f9Z/fSsX57SWO8rZv+VvgUX/r4PVaAHegjUWVq kvDm5tOYzZnNWT7ut7xBMO6e7rMikN4kT0MvFbX5Tk71NQ8QetV0ROOK4z6kVXMw EtnTc554ldyTgwNlck4Y/oekKIy8r9AHerXpVb9tt4C+Bow3c691ykconOqd9su4 ADo= -----END CERTIFICATE-----Generated at Tue Apr 23 18:30:12 2024 by rpki-client on console-fra.rpki-client.org