$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa File: bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa (raw, json) Hash identifier: mYDbEiIwtZzLxB756WjPL51VvI4Oh4K7Sskqgs9EFlE= Subject key identifier: 25:9E:C6:B3:1E:EC:07:6D:D7:6F:2A:99:CA:80:A9:0A:06:23:23:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FCF802AF64540F1E263668D5DB45B5C8B3B7A02 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cf:80:2a:f6:45:40:f1:e2:63:66:8d:5d:b4:5b:5c:8b:3b:7a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=72d4a347464c5062769287442610f38fef4b7ae515060730ba917a28a6293dbb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:54:31:63:88:2a:39:3d:55:25:66:6a:46: be:30:fb:2b:b9:7f:d3:60:5d:e2:34:f6:77:49:37: 84:bd:36:19:8e:1a:a9:f4:83:3a:29:16:43:30:43: 60:0c:a4:9c:b4:01:a5:b2:c7:c9:f0:0e:f0:6d:fa: 40:b7:0b:03:8f:c6:3e:1f:7c:78:e3:a6:eb:b2:00: 53:c6:ce:11:4b:a6:3b:42:63:5a:be:b5:e1:67:f5: 2c:c3:bc:52:15:7f:e4:b2:70:f1:88:ac:18:5f:4d: 20:38:d8:57:5e:c1:30:bb:d0:d5:5e:a0:53:c5:9c: ba:09:c1:ee:04:94:f4:b6:8d:35:32:f6:1d:03:23: de:d4:2f:1c:6c:9b:06:fc:3d:10:ba:83:b0:eb:78: 0c:a2:3a:5b:b1:81:f8:9f:87:00:1e:ec:ff:e4:1f: 9b:f4:8c:29:b7:14:b5:c7:05:17:fe:77:8d:c3:1f: c8:ec:fe:50:20:2e:8f:99:5e:48:dc:dd:b5:47:13: cc:a3:03:99:6a:68:90:81:bf:0a:72:be:35:3e:eb: 7a:d5:43:8e:29:0f:c8:cb:ba:49:1b:3e:89:c6:ab: 04:0c:3a:28:35:43:bb:11:b0:b2:5a:87:cc:bf:8c: 12:ac:4b:d8:2e:87:65:26:0c:7a:81:38:e2:a2:82: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9E:C6:B3:1E:EC:07:6D:D7:6F:2A:99:CA:80:A9:0A:06:23:23:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:f000::/40 Signature Algorithm: sha256WithRSAEncryption 92:0b:b1:f6:98:11:c8:7b:e7:7d:57:5e:80:d4:98:df:22:56: 33:98:a5:1d:f4:8d:45:5c:75:c9:17:ad:40:6c:a4:ff:81:bc: 5c:98:70:7a:16:7e:e8:40:51:d1:b0:5e:cd:09:c5:b7:8a:d4: a0:55:95:01:bf:5f:ed:fe:94:2e:01:35:96:a3:2a:c5:2d:55: fa:ac:d4:23:27:91:f5:19:79:e9:f5:96:a9:ca:0c:b6:be:ab: 54:7d:e1:d3:39:19:88:d0:8a:51:f0:04:26:a7:dc:78:ac:a4: dc:b8:80:a7:5e:6f:25:4e:a7:24:12:e6:a4:dd:4d:d6:46:25: 3a:79:8a:5e:c0:37:fa:82:cc:f1:23:02:29:19:d4:dc:9a:c0: 44:0a:6e:dc:ce:47:c8:f0:64:e1:01:cd:b8:d2:5d:5d:f0:51: dc:6b:37:6e:50:37:48:c6:4d:4f:76:a9:dc:3e:21:0d:6b:18: c4:4d:76:9a:97:8c:c5:47:3e:0c:37:4d:40:6f:0c:e5:4e:8c: 77:fe:54:68:73:78:42:0f:63:66:18:79:82:06:bf:db:d5:b5: 92:f5:eb:7c:59:2a:c4:2d:d2:44:79:67:c5:d2:a0:cd:ae:b1: a3:2d:2b:1a:90:54:48:cd:84:68:26:94:f5:11:2e:fa:f2:aa: b7:58:89:08 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX8+AKvZFQPHiY2aNXbRbXIs7egIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxMDAwMDAwMFoX DTI0MDUxNTIzNTk1OVowejFJMEcGA1UEBRNANzJkNGEzNDc0NjRjNTA2Mjc2OTI4 NzQ0MjYxMGYzOGZlZjRiN2FlNTE1MDYwNzMwYmE5MTdhMjhhNjI5M2RiYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhVUMWOIKjk9VSVmaka+MPsruX/T YF3iNPZ3STeEvTYZjhqp9IM6KRZDMENgDKSctAGlssfJ8A7wbfpAtwsDj8Y+H3x4 46brsgBTxs4RS6Y7QmNavrXhZ/Usw7xSFX/ksnDxiKwYX00gONhXXsEwu9DVXqBT xZy6CcHuBJT0to01MvYdAyPe1C8cbJsG/D0QuoOw63gMojpbsYH4n4cAHuz/5B+b 9IwptxS1xwUX/neNwx/I7P5QIC6PmV5I3N21RxPMowOZamiQgb8Kcr41Put61UOO KQ/Iy7pJGz6JxqsEDDooNUO7EbCyWofMv4wSrEvYLodlJgx6gTjiooL8pwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCWexrMe7Adt128qmcqAqQoGIyP5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmY2IzZjM4LThjYTMtNGZkOS1hZjlhLTRjMzhkNmNhZGYwYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8PAwDQYJKoZIhvcNAQELBQADggEBAJILsfaYEch7531XXoDU mN8iVjOYpR30jUVcdckXrUBspP+BvFyYcHoWfuhAUdGwXs0JxbeK1KBVlQG/X+3+ lC4BNZajKsUtVfqs1CMnkfUZeen1lqnKDLa+q1R94dM5GYjQilHwBCan3HispNy4 gKdebyVOpyQS5qTdTdZGJTp5il7AN/qCzPEjAikZ1NyawEQKbtzOR8jwZOEBzbjS XV3wUdxrN25QN0jGTU92qdw+IQ1rGMRNdpqXjMVHPgw3TUBvDOVOjHf+VGhzeEIP Y2YYeYIGv9vVtZL163xZKsQt0kR5Z8XSoM2usaMtKxqQVEjNhGgmlPURLvryqrdY iQg= -----END CERTIFICATE-----Generated at Fri Apr 26 06:07:24 2024 by rpki-client on console-ams.rpki-client.org