$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa File: bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa (raw, json) Hash identifier: epOwqpsP1J3Xo1eiS+T50OvXA+QJiUf7EUQggk94Bm8= Subject key identifier: 53:44:CF:1D:1B:40:25:D2:53:1C:EF:24:8C:25:84:CF:20:57:27:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B9BF6F9E96D47651DC095583B9A8386F87D1688 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9b:f6:f9:e9:6d:47:65:1d:c0:95:58:3b:9a:83:86:f8:7d:16:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=c86b22e9873e408855a43499d1cd1038d59ebe8f163cc7608b8e340a07e93273, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:95:03:de:ef:b6:57:e6:0e:fb:de:18:60: 7e:21:d5:7e:cc:a9:d5:8f:b2:48:93:b6:9b:6c:1b: 21:62:b1:cf:51:25:d3:89:5c:26:ec:2a:85:ac:53: 36:77:41:f6:98:c3:62:aa:d7:3d:e7:3a:a4:cd:be: 94:54:80:82:31:22:2a:e3:56:93:42:f3:63:49:28: bb:9f:24:dc:27:cf:32:78:c8:da:d8:2c:c1:0c:a5: 74:d6:0e:2a:c8:3b:3a:42:c2:e6:fd:ff:da:ca:c8: 9c:e2:bf:cc:a7:45:eb:2f:dd:5d:30:61:0a:4c:21: b6:a4:0d:3c:ea:2b:37:68:1c:f5:66:2c:6b:27:32: a1:b2:73:d0:b7:1d:a8:c7:c8:72:9a:c0:27:fc:da: d1:92:99:47:57:28:13:22:9e:b5:7a:be:77:a2:bb: f0:b8:8f:2a:88:c7:82:35:78:02:36:50:87:ab:46: d7:0f:04:31:de:85:d7:6d:37:97:12:f8:c1:9a:27: be:c6:3c:f7:54:3c:18:e0:c3:51:ac:e8:cf:62:3d: e5:9c:99:87:71:e8:df:e9:3e:b2:55:97:d3:f6:bf: 88:e9:e1:bb:91:70:69:ca:7e:ca:0f:15:f3:27:ec: 86:de:7d:22:24:db:f0:15:da:81:c8:6d:cd:e7:4a: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:44:CF:1D:1B:40:25:D2:53:1C:EF:24:8C:25:84:CF:20:57:27:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:f000::/40 Signature Algorithm: sha256WithRSAEncryption b9:17:a2:fe:39:e2:7f:07:8c:77:1a:1c:2f:3f:fe:d8:d3:d4: 07:17:8b:2e:8a:63:38:2c:63:76:04:ab:d0:9f:4d:75:4c:0e: 84:0c:60:73:52:fb:2c:cc:78:f6:65:ae:09:50:b7:55:8d:4f: b8:90:4d:94:df:32:b0:43:77:6b:0b:2c:4d:94:93:26:03:b3: 0a:a7:7b:8f:87:15:25:0f:18:03:aa:44:ff:a2:e8:3b:f4:52: d9:5d:4f:24:3d:9e:a5:40:fb:aa:bb:cd:63:76:70:1a:61:1b: 02:bd:be:54:a3:6a:fa:a7:ff:dc:4d:2a:57:fc:2f:82:39:55: 9b:0a:90:34:51:37:07:9a:fd:a7:8d:38:a9:f5:da:d5:56:0d: 51:16:ce:d1:89:31:59:74:cb:85:22:ff:00:77:65:0c:b6:f1: c3:46:85:a6:e8:af:41:15:c6:46:ef:90:72:c6:c4:bc:26:9d: 41:78:25:99:b2:c0:1f:d7:bd:f5:ba:cb:e6:84:56:42:0e:13: 59:04:0c:00:59:c4:6e:d8:24:38:0c:02:39:80:06:ae:03:64: e5:01:c7:30:52:ab:82:49:80:cd:43:ee:ab:09:78:9b:5b:b0: 38:e0:5e:00:2f:fa:93:b2:62:da:9d:23:6f:f5:4f:9f:37:81: 92:b5:21:7f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa5v2+eltR2UdwJVYO5qDhvh9FogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyOTAwMDAwMFoX DTI0MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAYzg2YjIyZTk4NzNlNDA4ODU1YTQz NDk5ZDFjZDEwMzhkNTllYmU4ZjE2M2NjNzYwOGI4ZTM0MGEwN2U5MzI3MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5aVA97vtlfmDvveGGB+IdV+zKnV j7JIk7abbBshYrHPUSXTiVwm7CqFrFM2d0H2mMNiqtc95zqkzb6UVICCMSIq41aT QvNjSSi7nyTcJ88yeMja2CzBDKV01g4qyDs6QsLm/f/aysic4r/Mp0XrL91dMGEK TCG2pA086is3aBz1ZixrJzKhsnPQtx2ox8hymsAn/NrRkplHVygTIp61er53orvw uI8qiMeCNXgCNlCHq0bXDwQx3oXXbTeXEvjBmie+xjz3VDwY4MNRrOjPYj3lnJmH cejf6T6yVZfT9r+I6eG7kXBpyn7KDxXzJ+yG3n0iJNvwFdqByG3N50oryQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFNEzx0bQCXSUxzvJIwlhM8gVyfaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmY2IzZjM4LThjYTMtNGZkOS1hZjlhLTRjMzhkNmNhZGYwYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8PAwDQYJKoZIhvcNAQELBQADggEBALkXov454n8HjHcaHC8/ /tjT1AcXiy6KYzgsY3YEq9CfTXVMDoQMYHNS+yzMePZlrglQt1WNT7iQTZTfMrBD d2sLLE2UkyYDswqne4+HFSUPGAOqRP+i6Dv0UtldTyQ9nqVA+6q7zWN2cBphGwK9 vlSjavqn/9xNKlf8L4I5VZsKkDRRNwea/aeNOKn12tVWDVEWztGJMVl0y4Ui/wB3 ZQy28cNGhabor0EVxkbvkHLGxLwmnUF4JZmywB/XvfW6y+aEVkIOE1kEDABZxG7Y JDgMAjmABq4DZOUBxzBSq4JJgM1D7qsJeJtbsDjgXgAv+pOyYtqdI2/1T583gZK1 IX8= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:36 2024 by rpki-client on console-fra.rpki-client.org