$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c080299b-ff82-4a13-8f81-d446173de159.roa File: c080299b-ff82-4a13-8f81-d446173de159.roa (raw, json) Hash identifier: CauaOi3mUEVq8De8wafjh8Fdx7XST0hsIS3UVwGhEBc= Subject key identifier: A7:36:6A:4D:D9:A9:22:1E:4A:FA:AB:FC:D4:03:0D:D1:36:FD:A8:B5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 595EC1834768FE43A8EA3F00608B926CA68EB771 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c080299b-ff82-4a13-8f81-d446173de159.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5e:c1:83:47:68:fe:43:a8:ea:3f:00:60:8b:92:6c:a6:8e:b7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=208347c0a1fb4d10a2877cae755269e987c335bac616870f686551329fe5ddf8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:39:2c:2d:2c:19:a4:49:8a:2b:08:35:4b: 64:d9:00:f3:6b:70:e9:8d:74:8a:bc:8c:af:99:6d: 8f:56:df:01:f3:50:4a:9c:98:96:c8:bd:84:07:fb: ff:89:3b:5b:4c:24:fc:40:5e:6e:ea:c5:9e:8e:0a: b0:f6:ed:b4:9b:9e:5a:98:12:3b:5f:c4:5e:3e:d7: f7:d5:10:17:64:ab:d7:07:51:04:8f:fd:dc:d3:54: f6:9d:40:fa:90:1c:28:64:6d:be:01:94:dd:c3:bf: 43:36:8b:9a:3d:72:a5:e1:76:f1:e4:ad:53:c4:12: 54:0b:f5:ce:53:0b:7c:09:cc:4a:8e:1f:aa:9e:4a: ba:64:1c:cd:eb:6e:22:dd:75:ab:6f:64:77:66:ea: f3:a7:ab:c7:3d:f3:60:e5:89:83:54:b7:ec:d1:74: 7f:64:33:19:05:9f:83:78:4b:af:0d:61:df:e5:dd: 73:00:ea:6a:ae:cc:6c:5d:63:82:f4:f5:00:2e:cb: e3:7a:a4:7e:6f:91:e3:ca:2d:14:7f:66:32:9b:25: e7:6c:22:96:e4:f1:d8:09:7a:0c:22:42:87:eb:3e: 83:c9:97:62:66:46:38:dc:82:9d:93:cc:28:d8:6a: 8e:d9:64:09:76:7a:d4:51:a6:b8:8b:83:4c:28:c5: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:36:6A:4D:D9:A9:22:1E:4A:FA:AB:FC:D4:03:0D:D1:36:FD:A8:B5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c080299b-ff82-4a13-8f81-d446173de159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:2800::/40 Signature Algorithm: sha256WithRSAEncryption 23:64:50:aa:62:c1:33:27:12:53:db:9c:8c:63:cf:5e:b8:d1: 0b:8e:56:75:34:fe:1e:b9:d6:b7:ca:04:c4:4d:67:7d:5f:19: 60:db:16:f5:38:0b:f7:31:6e:1d:c5:69:9c:9b:48:ab:c2:e8: b3:72:54:70:9d:d4:72:38:2a:2f:d7:b9:2d:a0:c4:89:cd:91: 4e:7d:0e:06:47:7e:74:4a:27:4c:68:b2:70:09:b5:36:bb:29: 8e:ee:45:0e:33:27:c7:b3:45:78:80:29:a7:60:db:ff:21:d8: 3e:22:38:7d:90:7a:e8:48:71:a1:84:8c:9e:15:fa:72:b3:a2: 55:67:c0:65:16:6b:e8:15:a1:6e:4f:69:30:e5:75:b6:89:7c: 9c:ee:ef:4c:64:be:02:d1:fa:2f:f8:bb:2d:23:d4:4d:e7:db: b7:ed:44:b4:c6:17:92:e8:37:77:fb:c9:8d:0e:82:c6:81:76: 83:e8:bb:c9:af:e1:6d:96:5d:92:a2:5e:19:f5:56:c3:64:72: 4a:90:03:b4:2f:74:ee:ab:d2:92:54:ba:41:4f:dd:64:e3:24: b6:2f:f5:ba:be:28:da:58:ba:ab:57:c3:a4:1f:4a:5f:9c:c6: e4:53:d6:99:7a:37:92:01:a9:0f:1f:2e:04:3f:80:4d:c3:f6: 0b:c5:53:df -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWV7Bg0do/kOo6j8AYIuSbKaOt3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAMjA4MzQ3YzBhMWZiNGQxMGEyODc3 Y2FlNzU1MjY5ZTk4N2MzMzViYWM2MTY4NzBmNjg2NTUxMzI5ZmU1ZGRmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9U5LC0sGaRJiisINUtk2QDza3Dp jXSKvIyvmW2PVt8B81BKnJiWyL2EB/v/iTtbTCT8QF5u6sWejgqw9u20m55amBI7 X8RePtf31RAXZKvXB1EEj/3c01T2nUD6kBwoZG2+AZTdw79DNouaPXKl4Xbx5K1T xBJUC/XOUwt8CcxKjh+qnkq6ZBzN624i3XWrb2R3Zurzp6vHPfNg5YmDVLfs0XR/ ZDMZBZ+DeEuvDWHf5d1zAOpqrsxsXWOC9PUALsvjeqR+b5Hjyi0Uf2YymyXnbCKW 5PHYCXoMIkKH6z6DyZdiZkY43IKdk8wo2GqO2WQJdnrUUaa4i4NMKMWthwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKc2ak3ZqSIeSvqr/NQDDdE2/ai1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwODAyOTliLWZmODItNGExMy04ZjgxLWQ0NDYxNzNkZTE1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+ygwDQYJKoZIhvcNAQELBQADggEBACNkUKpiwTMnElPbnIxj z1640QuOVnU0/h651rfKBMRNZ31fGWDbFvU4C/cxbh3FaZybSKvC6LNyVHCd1HI4 Ki/XuS2gxInNkU59DgZHfnRKJ0xosnAJtTa7KY7uRQ4zJ8ezRXiAKadg2/8h2D4i OH2QeuhIcaGEjJ4V+nKzolVnwGUWa+gVoW5PaTDldbaJfJzu70xkvgLR+i/4uy0j 1E3n27ftRLTGF5LoN3f7yY0OgsaBdoPou8mv4W2WXZKiXhn1VsNkckqQA7QvdO6r 0pJUukFP3WTjJLYv9bq+KNpYuqtXw6QfSl+cxuRT1pl6N5IBqQ8fLgQ/gE3D9gvF U98= -----END CERTIFICATE-----Generated at Sun Nov 24 02:34:57 2024 by rpki-client on console-fra.rpki-client.org