$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa File: bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa (raw, json) Hash identifier: Mm0UV1NdnCcJYz3XlPfammDMISyNhLKbQKqYQ0kywSA= Subject key identifier: EE:15:2B:92:04:35:8C:51:AD:84:74:29:67:16:73:0F:42:05:F2:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48366D92E944FFA1AEF49472AF7A5DAA6CA127CF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa Signing time: Sat 23 Nov 2024 00:00:00 +0000 ROA not before: Sat 23 Nov 2024 00:00:00 +0000 ROA not after: Sat 28 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da13::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:36:6d:92:e9:44:ff:a1:ae:f4:94:72:af:7a:5d:aa:6c:a1:27:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:00 2024 GMT Not After : Dec 28 23:59:59 2024 GMT Subject: serialNumber=96286beb1df09c12c51754e6c0aab0ff6178be8fba93b3c8f01c9d5ec5a57910, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:05:81:85:36:47:cc:2b:ff:27:46:a9:76: 1d:94:6b:1f:3a:fc:5b:8e:b7:d6:78:7d:23:98:f9: aa:ce:68:75:f8:46:8b:59:4e:29:d5:11:5b:91:27: 0f:e5:2b:e5:82:49:8b:bc:91:56:c8:16:a3:04:7e: 10:97:0b:64:99:d9:dd:dc:aa:08:72:d0:8f:40:3c: f7:79:6d:21:a9:95:81:33:97:e5:57:a0:95:ba:99: e4:47:36:1a:d6:3f:84:ec:45:84:d9:fa:ec:25:69: b1:23:e0:d5:ff:95:1c:3f:51:6e:1f:a0:69:c4:99: 15:d0:2d:b4:75:fd:f0:f7:2c:e5:5c:06:11:d4:a2: 79:ef:8d:46:29:a4:b9:99:27:3f:b1:8b:b0:29:d8: 5b:42:ea:2d:2d:51:e6:a2:54:f6:a4:94:75:dc:0a: 99:6e:cb:93:00:bb:2f:3a:c3:d0:9b:c2:d6:7c:ed: f8:aa:58:74:d6:75:74:64:12:6e:19:b8:78:49:49: 0b:77:7b:08:9f:12:33:0f:51:08:94:4c:bc:44:48: 56:ff:4e:c7:5d:a8:80:70:5a:8e:a9:89:20:9a:d5: b7:f8:36:16:b5:0b:2b:cf:81:73:7a:fb:7d:8f:e2: 53:4f:68:e0:7f:aa:01:b8:fa:5d:4b:71:e3:17:9f: f3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:15:2B:92:04:35:8C:51:AD:84:74:29:67:16:73:0F:42:05:F2:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da13::/36 Signature Algorithm: sha256WithRSAEncryption 27:19:6e:f9:8d:4d:ca:bf:4e:6f:68:35:8d:74:0d:b9:5e:21: 00:55:c3:be:e5:fc:ce:ed:ba:f4:11:9b:12:32:3d:0f:ef:ff: 9a:67:55:44:b5:3c:ce:f2:f9:e5:43:cd:3b:5a:f5:72:b4:52: cc:15:0b:07:e7:48:19:90:3d:e1:5e:e5:16:51:e9:d8:51:9b: fa:8f:92:e9:41:0b:1f:5b:0b:48:ed:36:b4:7f:50:5c:1e:11: 7e:ad:82:79:24:6d:93:9c:17:d4:cb:55:30:db:f1:c2:aa:20: 75:dc:d8:5a:3f:95:de:1b:4b:a0:13:1e:a9:3d:9e:44:f1:1c: 36:31:65:14:a1:d7:22:b3:23:04:99:95:e8:e5:49:c4:2f:01: 3a:79:4b:26:dd:75:2a:ff:1a:00:b9:af:70:40:2e:0b:4b:6c: 40:04:f4:6e:9a:ce:68:2c:4d:07:00:ca:fe:0a:fa:8c:20:0b: 61:b6:ab:e5:70:61:21:70:ab:b5:9a:ad:c6:c6:50:57:63:19: 56:c8:fa:ed:9e:27:c7:22:70:74:5f:17:b1:c6:93:73:62:cc: bf:d2:7a:d6:42:d0:17:c7:0c:85:8b:74:83:73:6d:bf:d7:08: cc:2e:73:3a:21:df:44:b5:c0:74:e0:89:3f:9f:53:29:8a:bc: 6e:77:0d:01 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSDZtkulE/6Gu9JRyr3pdqmyhJ88wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMzAwMDAwMFoX DTI0MTIyODIzNTk1OVowejFJMEcGA1UEBRNAOTYyODZiZWIxZGYwOWMxMmM1MTc1 NGU2YzBhYWIwZmY2MTc4YmU4ZmJhOTNiM2M4ZjAxYzlkNWVjNWE1NzkxMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BAFgYU2R8wr/ydGqXYdlGsfOvxb jrfWeH0jmPmqzmh1+EaLWU4p1RFbkScP5SvlgkmLvJFWyBajBH4Qlwtkmdnd3KoI ctCPQDz3eW0hqZWBM5flV6CVupnkRzYa1j+E7EWE2frsJWmxI+DV/5UcP1FuH6Bp xJkV0C20df3w9yzlXAYR1KJ5741GKaS5mSc/sYuwKdhbQuotLVHmolT2pJR13AqZ bsuTALsvOsPQm8LWfO34qlh01nV0ZBJuGbh4SUkLd3sInxIzD1EIlEy8REhW/07H XaiAcFqOqYkgmtW3+DYWtQsrz4Fzevt9j+JTT2jgf6oBuPpdS3HjF5/zzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO4VK5IENYxRrYR0KWcWcw9CBfLiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmODEzMWU4LTNiMDctNGI1ZS05NDdkLWQ2ZWU0YzJlN2I1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEwAwDQYJKoZIhvcNAQELBQADggEBACcZbvmNTcq/Tm9oNY10 DbleIQBVw77l/M7tuvQRmxIyPQ/v/5pnVUS1PM7y+eVDzTta9XK0UswVCwfnSBmQ PeFe5RZR6dhRm/qPkulBCx9bC0jtNrR/UFweEX6tgnkkbZOcF9TLVTDb8cKqIHXc 2Fo/ld4bS6ATHqk9nkTxHDYxZRSh1yKzIwSZlejlScQvATp5SybddSr/GgC5r3BA LgtLbEAE9G6azmgsTQcAyv4K+owgC2G2q+VwYSFwq7WarcbGUFdjGVbI+u2eJ8ci cHRfF7HGk3NizL/SetZC0BfHDIWLdINzbb/XCMwuczoh30S1wHTgiT+fUymKvG53 DQE= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:15 2024 by rpki-client on console-ams.rpki-client.org