$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c671666b-e400-4754-9776-096e38b7857c.roa File: c671666b-e400-4754-9776-096e38b7857c.roa (raw, json) Hash identifier: 59KjEcXJzOHBsTwI5G+1vx1S6qjhLnabrMauoOt0exQ= Subject key identifier: 10:8B:F2:3B:5A:78:21:50:3D:2E:7E:54:A7:5F:E8:C8:66:68:1B:B6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6921668B21E8AE1520A74AA466518DB910AB5532 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c671666b-e400-4754-9776-096e38b7857c.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:21:66:8b:21:e8:ae:15:20:a7:4a:a4:66:51:8d:b9:10:ab:55:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=b4d3a9cc8a156c01a1cb875361434ec18ae628cd0474528729fbc9cc9a3188af, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:a6:10:c0:b2:8a:f5:61:6f:a7:87:64:01: c5:f5:23:a0:9b:3f:6c:d5:21:fc:a7:95:e0:04:fa: db:de:e4:8e:8d:df:49:4c:95:6e:8a:d1:58:31:79: 11:a8:cf:72:c3:9c:77:21:ac:a3:04:98:d3:57:c0: d8:17:e2:56:69:3a:3b:10:30:39:74:b6:5d:57:c5: 59:f8:96:c6:35:8d:d2:c8:dc:f9:f1:79:2e:10:8b: 8f:e5:4e:fc:52:1c:ee:87:1a:9b:f3:f4:3f:c8:cf: 33:7b:75:6b:40:cc:9e:12:d5:b8:45:8a:a2:9e:f9: c2:21:9f:cf:50:44:20:18:2a:34:26:b2:0e:ad:12: 18:9f:cf:5c:c4:6d:b5:e1:ee:24:c7:8f:05:db:f3: 31:55:31:9a:c7:0b:5d:cc:79:d9:c4:67:2c:65:1d: 05:13:71:7c:61:57:c6:c5:96:d1:d8:e7:40:10:ba: c7:56:f8:59:9f:41:96:f0:2c:c1:23:0a:b6:2f:7e: 60:25:66:c8:30:d9:f1:6b:37:bd:ea:ed:a4:6c:08: 3f:f0:29:b1:9d:ef:5e:bd:8b:a2:88:38:36:30:ca: c4:30:14:90:23:df:b1:b9:c1:1a:cc:cd:5f:35:ef: d1:d6:ff:33:dc:68:94:e2:f7:c8:16:6b:21:cc:3b: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:F2:3B:5A:78:21:50:3D:2E:7E:54:A7:5F:E8:C8:66:68:1B:B6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c671666b-e400-4754-9776-096e38b7857c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:6000::/40 Signature Algorithm: sha256WithRSAEncryption a1:32:d7:57:2e:b7:94:e3:c8:59:c7:04:17:82:69:56:5f:42: 07:52:f6:58:be:92:07:e0:ad:28:80:f2:9c:02:0e:80:97:04: 5d:ac:bc:cb:98:b1:28:1d:59:82:c8:57:39:cd:98:1a:2b:8e: 9b:ba:38:5a:d4:6c:7d:b2:da:22:ab:8d:b2:80:e0:0c:5d:97: 98:37:8a:b9:a7:34:1b:2b:12:fe:d1:3f:ef:06:8a:41:31:1a: 39:0b:b1:51:83:31:93:3d:6f:b3:aa:95:20:c2:f0:64:8d:92: 29:28:3c:6d:6e:51:10:f0:da:34:5c:54:ab:59:0e:2a:87:fd: c3:3c:5c:79:5b:fc:5d:79:db:84:aa:fa:71:4b:2b:07:8c:4d: 0c:9e:3b:7e:a3:fc:a3:02:1a:1b:5b:82:a0:57:ae:a6:0f:00: dd:68:eb:ce:b7:cc:55:7c:2e:25:82:11:93:f7:e2:9d:7d:a6: b0:2a:f9:a5:29:c7:b8:7a:89:1a:94:fb:27:61:83:12:c6:e3: 73:f1:0f:c0:3f:e0:15:a4:b3:da:cf:33:d1:36:65:7e:aa:79: 19:9a:b4:6f:5b:89:f0:a2:f1:92:d9:6d:56:6e:e7:17:d9:5f: 7e:f7:ac:bf:4d:f3:87:db:81:83:dd:0e:2d:43:9e:56:43:76: 53:aa:58:b4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaSFmiyHorhUgp0qkZlGNuRCrVTIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAYjRkM2E5Y2M4YTE1NmMwMWExY2I4 NzUzNjE0MzRlYzE4YWU2MjhjZDA0NzQ1Mjg3MjlmYmM5Y2M5YTMxODhhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdqmEMCyivVhb6eHZAHF9SOgmz9s 1SH8p5XgBPrb3uSOjd9JTJVuitFYMXkRqM9yw5x3IayjBJjTV8DYF+JWaTo7EDA5 dLZdV8VZ+JbGNY3SyNz58XkuEIuP5U78Uhzuhxqb8/Q/yM8ze3VrQMyeEtW4RYqi nvnCIZ/PUEQgGCo0JrIOrRIYn89cxG214e4kx48F2/MxVTGaxwtdzHnZxGcsZR0F E3F8YVfGxZbR2OdAELrHVvhZn0GW8CzBIwq2L35gJWbIMNnxaze96u2kbAg/8Cmx ne9evYuiiDg2MMrEMBSQI9+xucEazM1fNe/R1v8z3GiU4vfIFmshzDtVlQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBCL8jtaeCFQPS5+VKdf6MhmaBu2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M2NzE2NjZiLWU0MDAtNDc1NC05Nzc2LTA5NmUzOGI3ODU3Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8mAwDQYJKoZIhvcNAQELBQADggEBAKEy11cut5TjyFnHBBeC aVZfQgdS9li+kgfgrSiA8pwCDoCXBF2svMuYsSgdWYLIVznNmBorjpu6OFrUbH2y 2iKrjbKA4Axdl5g3irmnNBsrEv7RP+8GikExGjkLsVGDMZM9b7OqlSDC8GSNkiko PG1uURDw2jRcVKtZDiqH/cM8XHlb/F1524Sq+nFLKweMTQyeO36j/KMCGhtbgqBX rqYPAN1o6863zFV8LiWCEZP34p19prAq+aUpx7h6iRqU+ydhgxLG43PxD8A/4BWk s9rPM9E2ZX6qeRmatG9bifCi8ZLZbVZu5xfZX373rL9N84fbgYPdDi1DnlZDdlOq WLQ= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:15 2024 by rpki-client on console-ams.rpki-client.org