$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa File: bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa (raw, json) Hash identifier: m66y71w8WCeU1d8J0BIK3uSQDO1TMRdyms6EdQUCHWA= Subject key identifier: 6B:2C:80:52:B7:FA:63:C3:57:8A:AC:61:22:91:02:7A:5A:E8:2F:4D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 33A196BE1E0B7F7F21F06F7652F5CA5D645EADE5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da13::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a1:96:be:1e:0b:7f:7f:21:f0:6f:76:52:f5:ca:5d:64:5e:ad:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=93331ae6679433a4f50d9d518fc736d5389bb8b8b7bc50e825d272ea3b46e26a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:ba:df:30:56:48:d0:1c:83:9c:e2:85:d8: e2:ae:51:f3:8f:f4:f2:94:fd:0b:ec:e4:03:65:15: 80:75:03:1a:3c:31:ec:fd:51:9e:15:0c:1e:49:df: 4a:99:04:5e:61:47:85:b0:9e:3b:f5:f9:09:67:5d: b4:f7:70:59:b2:b1:8a:05:67:c5:a3:e6:31:13:7d: 24:62:ef:a4:33:fd:69:2d:1c:4f:57:9f:91:87:0b: 6b:1d:98:35:3c:39:55:81:8f:7a:f9:b8:89:6b:8f: c1:30:1a:6a:c5:86:d1:6a:17:88:d9:e8:34:a4:51: 1d:fe:44:36:cf:63:e3:b3:12:7d:ed:64:f1:8b:b0: 39:5c:65:04:e9:3a:33:12:f7:96:25:6c:e5:37:1a: 2e:f4:18:24:75:9d:f4:52:be:d9:ab:cc:e4:a4:45: fd:37:d1:31:f9:e4:86:95:f3:55:61:6a:15:0a:d8: 5f:a5:8b:fb:7b:97:80:4f:3d:d0:8c:bf:de:a6:10: 05:bb:53:d6:d8:66:4e:60:7c:1b:c8:3b:f0:97:19: c9:0a:3e:c8:db:2e:8b:80:b8:e4:01:4a:b3:9f:88: 98:8c:13:62:a3:00:21:e4:84:86:6d:a1:4c:9e:03: a8:0a:92:42:37:d9:93:68:be:c7:40:58:2f:27:a6: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:80:52:B7:FA:63:C3:57:8A:AC:61:22:91:02:7A:5A:E8:2F:4D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8131e8-3b07-4b5e-947d-d6ee4c2e7b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da13::/36 Signature Algorithm: sha256WithRSAEncryption 89:64:5b:f1:fd:10:55:25:1c:5c:da:43:d5:f5:58:70:ec:9c: db:97:03:64:b9:80:d9:fb:8b:52:2c:a2:84:97:53:fa:7e:81: 4d:7e:9d:f8:38:72:8b:fa:ad:5e:a0:54:8b:19:67:a3:c7:e9: bb:3e:1a:99:91:d1:27:c2:69:83:a5:0e:a3:0c:6f:54:8e:77: 8a:87:dd:2f:13:fd:80:08:ca:88:c5:66:91:6c:13:42:e8:e8: 7e:a3:9b:45:ad:d1:ef:fb:c9:79:19:3e:17:d8:42:f7:8f:3a: 37:cc:85:3b:d3:6a:cc:c9:ba:c6:0f:b7:67:e1:33:98:72:58: b8:82:59:8f:00:1a:7c:4e:19:9c:ff:54:10:f4:2a:93:30:9a: 19:ee:37:02:92:dd:80:d8:00:32:8b:4a:b9:65:03:c5:b0:64: 75:28:25:4c:90:e0:e9:5f:04:1e:2d:72:1a:42:7e:26:ce:82: 9f:6a:3d:ff:e3:76:b6:c3:40:09:29:a1:e6:a6:9e:3e:6d:2f: 02:ca:c0:a1:66:e9:58:ad:b1:26:c8:f6:e2:48:6a:42:5e:80: 89:18:3c:8a:b5:40:15:6c:db:a0:e0:65:ad:2b:5b:79:e7:6c: 52:ef:da:5a:3f:0f:48:c5:52:7f:6e:b7:33:6f:7f:7e:a4:de: 00:c2:0f:73 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUM6GWvh4Lf38h8G92UvXKXWRereUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNAOTMzMzFhZTY2Nzk0MzNhNGY1MGQ5 ZDUxOGZjNzM2ZDUzODliYjhiOGI3YmM1MGU4MjVkMjcyZWEzYjQ2ZTI2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFi63zBWSNAcg5zihdjirlHzj/Ty lP0L7OQDZRWAdQMaPDHs/VGeFQweSd9KmQReYUeFsJ479fkJZ12093BZsrGKBWfF o+YxE30kYu+kM/1pLRxPV5+RhwtrHZg1PDlVgY96+biJa4/BMBpqxYbRaheI2eg0 pFEd/kQ2z2PjsxJ97WTxi7A5XGUE6TozEveWJWzlNxou9BgkdZ30Ur7Zq8zkpEX9 N9Ex+eSGlfNVYWoVCthfpYv7e5eATz3QjL/ephAFu1PW2GZOYHwbyDvwlxnJCj7I 2y6LgLjkAUqzn4iYjBNiowAh5ISGbaFMngOoCpJCN9mTaL7HQFgvJ6Z1uwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGssgFK3+mPDV4qsYSKRAnpa6C9NMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmODEzMWU4LTNiMDctNGI1ZS05NDdkLWQ2ZWU0YzJlN2I1YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEwAwDQYJKoZIhvcNAQELBQADggEBAIlkW/H9EFUlHFzaQ9X1 WHDsnNuXA2S5gNn7i1IsooSXU/p+gU1+nfg4cov6rV6gVIsZZ6PH6bs+GpmR0SfC aYOlDqMMb1SOd4qH3S8T/YAIyojFZpFsE0Lo6H6jm0Wt0e/7yXkZPhfYQvePOjfM hTvTaszJusYPt2fhM5hyWLiCWY8AGnxOGZz/VBD0KpMwmhnuNwKS3YDYADKLSrll A8WwZHUoJUyQ4OlfBB4tchpCfibOgp9qPf/jdrbDQAkpoeamnj5tLwLKwKFm6Vit sSbI9uJIakJegIkYPIq1QBVs26DgZa0rW3nnbFLv2lo/D0jFUn9utzNvf36k3gDC D3M= -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org