$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bee74e4e-477e-4b99-bb07-7a0940636740.roa File: bee74e4e-477e-4b99-bb07-7a0940636740.roa (raw, json) Hash identifier: RQiq0D8LshD47b5aPr1eT8mW13Y9X5XK8BJLyvxg1S4= Subject key identifier: 9B:AB:B7:B4:44:3F:95:7C:F4:52:51:AC:44:19:F2:AB:C6:35:B3:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 565700D229CB42B7ED656C386A2F087FEFBF6760 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bee74e4e-477e-4b99-bb07-7a0940636740.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:57:00:d2:29:cb:42:b7:ed:65:6c:38:6a:2f:08:7f:ef:bf:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=dda58ff6e1b7996e3641c6f5e0d7f7e1d37fb8118d957b2f2f9852a5a0573643, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:ec:df:c1:36:45:20:06:5b:31:ca:69:8f: a3:08:7e:b1:3b:9c:23:62:1f:93:20:9f:5d:e0:59: 20:30:09:88:ae:19:a4:67:de:f0:01:59:3e:ba:65: fe:3a:5c:f7:80:ae:e6:67:31:85:28:b6:10:a0:7e: 75:3d:dc:2f:91:14:22:a2:bc:0b:b6:17:b4:52:f9: 3e:0c:e0:54:1e:38:84:17:1b:84:ba:f0:10:27:11: 95:94:8e:6b:93:63:07:9f:82:08:93:9f:54:02:08: 2b:55:ed:35:53:01:98:c7:0c:fe:1c:de:87:a9:59: cb:7b:a8:c7:ce:cf:b5:89:7c:fb:22:6e:0f:bd:87: e4:cd:d5:7c:27:92:10:e9:93:40:45:b4:fa:af:4e: c5:30:3a:75:88:46:e2:70:0a:d6:b6:27:76:99:f1: 94:82:7a:da:cf:b6:8e:b2:40:c8:ea:d5:48:4b:85: 6b:3f:a9:79:93:63:9f:a3:05:05:9c:aa:5f:4a:d9: 33:f6:26:8e:39:b9:85:28:4c:8d:00:68:20:e5:d6: 7e:b7:22:d7:d9:03:a4:f9:97:35:62:d0:2d:24:9d: 09:27:1c:3a:2b:e4:5d:e0:5d:94:f4:f3:2e:a1:58: 17:35:d4:c0:7d:a1:d1:d6:ce:a7:d8:45:ab:20:29: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AB:B7:B4:44:3F:95:7C:F4:52:51:AC:44:19:F2:AB:C6:35:B3:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bee74e4e-477e-4b99-bb07-7a0940636740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11::/36 Signature Algorithm: sha256WithRSAEncryption 43:bb:c4:c0:de:b4:af:33:72:47:78:0a:93:00:ce:64:8e:93: d3:aa:dc:7a:3a:4a:ce:49:d6:c3:e8:b2:83:c9:db:ed:c7:b9: 5b:15:da:73:3d:e4:3d:2d:50:4f:83:62:d6:5c:82:c1:58:e5: b7:9d:01:8d:3e:76:d6:8e:70:82:b1:d5:ff:bd:b5:69:57:48: c6:49:67:1a:8f:4a:df:2f:39:c2:99:1c:6c:08:c7:2f:67:9a: 65:2f:20:e1:f5:23:41:a7:aa:bb:41:35:5a:7b:c2:78:9b:ae: 5c:f3:30:ad:5d:36:db:1e:b5:39:7f:62:d8:28:ea:c2:8b:df: cd:45:b1:22:98:59:94:22:b7:f7:1a:3d:0c:71:c3:8b:ca:82: c8:b3:83:f6:d5:5c:c6:fc:4f:ee:a7:cc:e3:96:a8:6e:01:07: 51:45:5c:bf:fa:12:fa:74:ea:26:63:a0:f1:9d:08:a0:63:4f: 89:24:f7:83:ee:51:e9:af:6d:36:71:24:73:ae:2f:2d:28:37: 11:df:dd:25:0c:4e:6e:65:c3:42:e6:fd:62:0a:53:42:a9:31: a9:52:9a:2e:e2:3e:b3:93:91:f6:11:56:0b:43:4c:ca:52:4b: 18:3c:f7:55:6e:0c:7e:04:76:8e:3b:6b:c2:e7:e2:eb:a8:4c: d9:49:30:67 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVlcA0inLQrftZWw4ai8If++/Z2AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAZGRhNThmZjZlMWI3OTk2ZTM2NDFj NmY1ZTBkN2Y3ZTFkMzdmYjgxMThkOTU3YjJmMmY5ODUyYTVhMDU3MzY0MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnbs38E2RSAGWzHKaY+jCH6xO5wj Yh+TIJ9d4FkgMAmIrhmkZ97wAVk+umX+Olz3gK7mZzGFKLYQoH51PdwvkRQiorwL the0Uvk+DOBUHjiEFxuEuvAQJxGVlI5rk2MHn4IIk59UAggrVe01UwGYxwz+HN6H qVnLe6jHzs+1iXz7Im4PvYfkzdV8J5IQ6ZNARbT6r07FMDp1iEbicArWtid2mfGU gnraz7aOskDI6tVIS4VrP6l5k2OfowUFnKpfStkz9iaOObmFKEyNAGgg5dZ+tyLX 2QOk+Zc1YtAtJJ0JJxw6K+Rd4F2U9PMuoVgXNdTAfaHR1s6n2EWrICmUNQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJurt7REP5V89FJRrEQZ8qvGNbOsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JlZTc0ZTRlLTQ3N2UtNGI5OS1iYjA3LTdhMDk0MDYzNjc0MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEQAwDQYJKoZIhvcNAQELBQADggEBAEO7xMDetK8zckd4CpMA zmSOk9Oq3Ho6Ss5J1sPosoPJ2+3HuVsV2nM95D0tUE+DYtZcgsFY5bedAY0+dtaO cIKx1f+9tWlXSMZJZxqPSt8vOcKZHGwIxy9nmmUvIOH1I0GnqrtBNVp7wnibrlzz MK1dNtsetTl/Ytgo6sKL381FsSKYWZQit/caPQxxw4vKgsizg/bVXMb8T+6nzOOW qG4BB1FFXL/6Evp06iZjoPGdCKBjT4kk94PuUemvbTZxJHOuLy0oNxHf3SUMTm5l w0Lm/WIKU0KpMalSmi7iPrOTkfYRVgtDTMpSSxg891VuDH4Edo47a8Ln4uuoTNlJ MGc= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:46 2023 by rpki-client on console-fra.rpki-client.org