$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa File: bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa (raw, json) Hash identifier: gHgGt6FBLToVf5WbBmdImg97mis83F5dOG+QIKYxOkg= Subject key identifier: 33:AD:C1:81:08:32:37:52:DD:96:C1:CA:FE:D9:D3:D5:91:F7:52:EA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D0C7A6A0513C691224FB7ECE89CE80CEEFB5465 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa Signing time: Sat 20 Jul 2024 00:00:00 +0000 ROA not before: Sat 20 Jul 2024 00:00:00 +0000 ROA not after: Sat 24 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0c:7a:6a:05:13:c6:91:22:4f:b7:ec:e8:9c:e8:0c:ee:fb:54:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 20 00:00:00 2024 GMT Not After : Aug 24 23:59:59 2024 GMT Subject: serialNumber=9d459a50f3a3aae26fddbc299abc737faf0345cfba11f3d5b27f1b7d6fa1a126, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:04:0d:5a:53:90:e1:f7:c7:5e:d5:8d:ff: 39:d2:3c:2b:4e:1f:37:04:ac:26:aa:86:39:3f:d3: 98:d1:ff:64:55:26:dd:6a:9c:41:86:93:1e:65:e5: 54:5c:04:62:26:cf:dd:3e:da:57:0e:40:3a:1e:ae: f6:ca:96:95:be:20:ca:46:50:4b:fe:f1:82:d8:f8: ea:4f:12:8e:55:da:92:65:a5:45:7d:19:42:df:d4: 67:84:82:74:ca:f7:d0:dd:ad:73:c2:a3:e7:e6:4f: 3b:51:4a:b8:5f:52:f6:20:75:c8:92:d5:78:08:ac: 33:cc:fc:55:6e:eb:92:ad:2e:d7:f5:91:ce:cd:eb: 7f:ee:f7:d1:ab:0e:6c:da:9c:da:d0:00:9b:6c:6c: bd:79:a1:e2:af:22:38:f2:04:b4:24:5d:2d:60:4e: 3f:b9:52:50:d5:a8:70:08:0e:f3:f8:14:c7:a7:fd: 05:d5:6c:19:6a:ac:db:2b:f0:60:aa:58:27:53:36: 92:7f:47:ef:21:69:b7:e6:fa:c8:cc:11:3d:71:26: 3a:6b:fb:49:02:74:90:dd:2b:64:28:c8:54:c5:c0: 4f:74:3a:eb:67:b3:79:96:d2:ed:d1:45:a0:40:e3: cb:a9:2d:66:cd:31:ab:ea:e9:64:ff:ec:54:5e:42: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:C1:81:08:32:37:52:DD:96:C1:CA:FE:D9:D3:D5:91:F7:52:EA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:f000::/40 Signature Algorithm: sha256WithRSAEncryption 73:93:9d:fa:ef:b7:81:fc:b9:23:ca:4b:60:d1:07:b5:b7:dc: d7:f8:d1:ac:b4:eb:25:b0:73:ba:b0:82:ab:76:8a:ea:97:b8: 09:1a:4a:84:2b:58:2c:24:32:a5:b0:2d:0b:c1:09:cf:53:60: 17:35:be:7e:14:a6:e8:25:94:c4:30:05:3b:52:e9:9b:d7:b4: f3:fc:3a:65:a4:15:e4:73:bc:18:57:4e:9f:11:dd:69:d3:3b: 2a:2b:a2:1e:03:bf:b2:73:09:89:b3:06:0a:a8:4a:3f:74:01: ae:d1:87:a1:92:ed:a4:6d:c5:a4:21:e0:0a:0d:43:4c:e3:e0: d0:d7:46:76:b7:ec:27:23:5e:b9:ab:b1:e2:7a:9b:71:48:65: 59:f8:2b:e6:51:b9:6d:9b:05:32:7f:06:8b:21:d8:be:9a:25: 1a:34:3a:74:98:75:31:bd:fc:5a:a0:aa:4c:86:47:bd:e4:29: 50:e2:f6:52:cf:bc:9c:12:60:87:17:8d:a8:e2:4b:6e:df:d9: 2e:18:b2:a8:78:8a:3d:c2:e1:88:de:52:60:29:74:ae:07:e5: cf:87:c4:49:26:d6:6b:cd:9a:46:ed:4f:1e:a3:9f:7a:c0:20: e6:21:11:1e:b4:d8:1c:d2:6a:a6:a1:8f:81:7c:14:76:08:d3: 17:96:c5:24 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfQx6agUTxpEiT7fs6JzoDO77VGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcyMDAwMDAwMFoX DTI0MDgyNDIzNTk1OVowejFJMEcGA1UEBRNAOWQ0NTlhNTBmM2EzYWFlMjZmZGRi YzI5OWFiYzczN2ZhZjAzNDVjZmJhMTFmM2Q1YjI3ZjFiN2Q2ZmExYTEyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl0EDVpTkOH3x17Vjf850jwrTh83 BKwmqoY5P9OY0f9kVSbdapxBhpMeZeVUXARiJs/dPtpXDkA6Hq72ypaVviDKRlBL /vGC2PjqTxKOVdqSZaVFfRlC39RnhIJ0yvfQ3a1zwqPn5k87UUq4X1L2IHXIktV4 CKwzzPxVbuuSrS7X9ZHOzet/7vfRqw5s2pza0ACbbGy9eaHiryI48gS0JF0tYE4/ uVJQ1ahwCA7z+BTHp/0F1WwZaqzbK/BgqlgnUzaSf0fvIWm35vrIzBE9cSY6a/tJ AnSQ3StkKMhUxcBPdDrrZ7N5ltLt0UWgQOPLqS1mzTGr6ulk/+xUXkKm2QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDOtwYEIMjdS3ZbByv7Z09WR91LqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmY2IzZjM4LThjYTMtNGZkOS1hZjlhLTRjMzhkNmNhZGYwYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8PAwDQYJKoZIhvcNAQELBQADggEBAHOTnfrvt4H8uSPKS2DR B7W33Nf40ay06yWwc7qwgqt2iuqXuAkaSoQrWCwkMqWwLQvBCc9TYBc1vn4Upugl lMQwBTtS6ZvXtPP8OmWkFeRzvBhXTp8R3WnTOyoroh4Dv7JzCYmzBgqoSj90Aa7R h6GS7aRtxaQh4AoNQ0zj4NDXRna37CcjXrmrseJ6m3FIZVn4K+ZRuW2bBTJ/Bosh 2L6aJRo0OnSYdTG9/FqgqkyGR73kKVDi9lLPvJwSYIcXjajiS27f2S4Ysqh4ij3C 4YjeUmApdK4H5c+HxEkm1mvNmkbtTx6jn3rAIOYhER602BzSaqahj4F8FHYI0xeW xSQ= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:16 2024 by rpki-client on console-fra.rpki-client.org