$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa File: ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa (raw, json) Hash identifier: RPMM4blvDl6VawSsa8lclMmchc+Hq7d9cmUSeuEBYaQ= Subject key identifier: 07:BC:1B:AE:83:82:EE:04:D8:1E:8A:92:5B:C7:39:EF:AE:8A:AB:49 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0B268E4F4A19418D121C63D2C017E7EC60A0F0B2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:26:8e:4f:4a:19:41:8d:12:1c:63:d2:c0:17:e7:ec:60:a0:f0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=2c2699edc86e6d923a59aa1e7d731b8bd21c3cf674c4baa94ec576897cc359d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:ae:a2:f1:cd:92:b7:37:1b:74:6a:6c:54: 22:93:08:74:9e:c4:91:9c:8a:05:a0:cc:36:7b:2e: 26:09:6c:86:0a:3b:03:fd:fe:15:ba:0e:20:aa:d3: f5:57:6b:22:dd:bb:fe:6f:21:36:f2:5c:1e:d7:ab: f7:77:f4:09:8c:52:3b:9a:6e:b5:6a:33:f6:97:13: bf:00:24:bb:08:cf:a2:bd:2a:7a:58:d4:c4:68:71: 02:31:34:e4:59:66:74:e7:4a:0a:b4:2b:86:ca:f9: 93:aa:7c:24:42:eb:62:8c:b3:a0:76:9f:e8:2b:94: a2:e7:2f:b5:08:c5:8d:2d:87:d0:8e:34:8d:0f:7b: 28:97:d2:e6:75:a1:55:c0:c1:5d:dc:fe:94:17:30: 99:95:1a:f0:65:76:4f:12:49:48:9f:a2:0c:58:c8: dc:b0:78:b1:b3:b8:09:80:6d:46:c1:70:cc:90:9f: be:d4:16:3e:f7:ae:fe:02:75:59:44:6c:c0:b8:27: 57:3e:6d:0c:6a:55:f6:5d:6c:be:f7:ff:65:d5:2d: 0a:d2:70:78:16:11:b1:27:62:dc:74:ae:52:f3:22: e0:f2:a7:db:b8:92:06:1c:79:83:0c:e6:8f:f5:a9: 84:b5:c2:b8:aa:cf:58:71:51:62:2b:7d:f5:cb:b5: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BC:1B:AE:83:82:EE:04:D8:1E:8A:92:5B:C7:39:EF:AE:8A:AB:49 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:2000::/40 Signature Algorithm: sha256WithRSAEncryption 09:1d:9a:07:ea:27:ac:c4:51:b5:c3:38:76:f4:16:d3:a7:6e: cc:f4:16:47:45:16:53:03:62:46:e8:71:28:c0:69:e4:37:b1: 64:8c:55:86:29:43:fb:0a:64:a2:99:af:e9:57:57:a8:87:6f: 58:08:9d:8b:f9:64:0a:d2:a2:8a:6f:4a:f5:e0:08:dd:d2:3a: 04:76:80:fe:c2:27:3d:4a:21:68:56:2c:6c:ae:90:52:e7:63: 4e:b8:aa:87:cf:1d:5e:3f:ae:16:f0:7e:ca:c3:cc:60:2f:1f: cf:80:05:b1:25:50:0b:c9:54:86:76:1e:45:fd:de:6a:5a:b2: 5a:14:f5:8f:72:89:57:66:13:ce:bf:f6:13:4e:13:b5:ca:7c: 78:1b:a0:01:a7:83:76:46:39:c3:7a:34:28:0b:97:0d:48:53: b5:6f:00:55:12:ce:3e:0d:60:c5:8c:c5:b1:72:61:8e:fc:ed: a6:63:3c:03:d7:b4:d5:54:ae:32:73:47:77:02:7f:c4:7a:81: e5:02:0b:a1:d9:00:96:d5:92:66:1d:2f:60:a0:29:95:52:0d: ff:36:ef:59:4d:27:6c:cb:54:04:fd:7d:07:17:ea:ac:84:a9: df:c6:cd:1c:31:b6:4e:ae:60:49:e7:42:61:b4:7b:2a:15:a1: ab:a2:46:c5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCyaOT0oZQY0SHGPSwBfn7GCg8LIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMmMyNjk5ZWRjODZlNmQ5MjNhNTlh YTFlN2Q3MzFiOGJkMjFjM2NmNjc0YzRiYWE5NGVjNTc2ODk3Y2MzNTlkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoeuovHNkrc3G3RqbFQikwh0nsSR nIoFoMw2ey4mCWyGCjsD/f4Vug4gqtP1V2si3bv+byE28lwe16v3d/QJjFI7mm61 ajP2lxO/ACS7CM+ivSp6WNTEaHECMTTkWWZ050oKtCuGyvmTqnwkQutijLOgdp/o K5Si5y+1CMWNLYfQjjSND3sol9LmdaFVwMFd3P6UFzCZlRrwZXZPEklIn6IMWMjc sHixs7gJgG1GwXDMkJ++1BY+967+AnVZRGzAuCdXPm0MalX2XWy+9/9l1S0K0nB4 FhGxJ2LcdK5S8yLg8qfbuJIGHHmDDOaP9amEtcK4qs9YcVFiK331y7XWOQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAe8G66Dgu4E2B6KklvHOe+uiqtJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhMWY2YmE3LWFlY2YtNDg3MS1hOWYyLTNlMjBmZjM1NzE0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoCAwDQYJKoZIhvcNAQELBQADggEBAAkdmgfqJ6zEUbXDOHb0 FtOnbsz0FkdFFlMDYkbocSjAaeQ3sWSMVYYpQ/sKZKKZr+lXV6iHb1gInYv5ZArS oopvSvXgCN3SOgR2gP7CJz1KIWhWLGyukFLnY064qofPHV4/rhbwfsrDzGAvH8+A BbElUAvJVIZ2HkX93mpasloU9Y9yiVdmE86/9hNOE7XKfHgboAGng3ZGOcN6NCgL lw1IU7VvAFUSzj4NYMWMxbFyYY787aZjPAPXtNVUrjJzR3cCf8R6geUCC6HZAJbV kmYdL2CgKZVSDf8271lNJ2zLVAT9fQcX6qyEqd/GzRwxtk6uYEnnQmG0eyoVoaui RsU= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org