$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf53ee69-666c-49fb-a8aa-19f704f16a37.roa File: cf53ee69-666c-49fb-a8aa-19f704f16a37.roa (raw, json) Hash identifier: 3qIv4mRnXKSZYlRynyGDrFV4B7pnaor5/q8tsbcg5c0= Subject key identifier: 84:BD:71:D8:B0:B4:E4:2F:DC:AA:14:BF:56:D9:FE:65:A7:90:B1:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73190C313BD9DA4C7BB0DAC9091B1D0666C30F2C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf53ee69-666c-49fb-a8aa-19f704f16a37.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 43.218.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:19:0c:31:3b:d9:da:4c:7b:b0:da:c9:09:1b:1d:06:66:c3:0f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=0400171e23a70d769fe7d6b6316e68c3a27245e729b14c408096878251ede0cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f4:38:a1:79:76:37:3c:fb:e6:a8:7c:27:3d: cc:14:41:0c:9c:bf:70:b3:ea:80:7d:fe:49:d1:1b: 81:59:c0:82:07:ea:b4:4f:5e:3f:c5:6f:56:8f:17: a1:fe:83:9f:bf:36:4a:cb:1c:86:b4:d7:10:39:0a: 34:33:87:60:00:5c:89:5e:25:75:73:47:ae:c5:b8: 08:0b:b1:bd:7a:f1:33:3d:07:e8:42:6f:99:36:4d: 55:10:5e:39:c0:36:25:a3:a6:ce:0f:b5:80:af:96: 90:38:7e:be:e4:be:27:3f:98:60:dc:33:2c:3e:ef: 29:b3:a4:95:9e:92:93:65:82:c0:40:08:cf:c8:48: f9:31:88:4d:0a:30:65:96:14:05:16:ad:3b:43:c0: 33:b5:e3:94:55:9e:01:f5:f1:a6:07:9a:74:d2:d9: b0:a7:82:6e:42:d1:14:9b:2f:4c:22:b8:18:85:da: ad:5c:3a:7e:8a:52:07:d3:79:b1:a9:a4:70:25:4d: b4:13:ad:1a:fd:ab:a9:92:5a:cb:d2:54:92:3e:de: 1c:55:c0:d5:b6:72:d1:e8:07:ec:7f:b4:e5:fb:ca: 7d:bf:d2:03:f3:62:f4:7c:41:ab:a7:37:f4:54:a8: 62:b3:8d:df:d0:e2:09:ad:ab:ef:8f:cd:d1:7c:d9: 81:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:71:D8:B0:B4:E4:2F:DC:AA:14:BF:56:D9:FE:65:A7:90:B1:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf53ee69-666c-49fb-a8aa-19f704f16a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:70:6d:18:e5:a5:85:a7:f6:ec:b6:df:62:c9:f5:ae:bf:5e: 5f:a2:dd:21:36:4e:6b:6f:da:bc:87:17:ec:e7:60:11:87:12: 72:8b:a1:d4:92:53:2d:02:26:89:b8:80:b7:17:93:85:21:83: c9:bf:34:4c:c6:de:b0:58:fd:c6:34:63:d3:47:b2:70:9f:76: f9:0f:66:ca:e7:8f:0d:a4:72:75:5f:34:50:9f:f1:2c:a8:79: 8a:13:fa:31:84:1b:ac:c1:5e:e4:44:65:eb:c8:b3:e8:a9:81: 7a:f6:47:e5:e7:0e:aa:13:19:40:40:b5:62:6d:35:6d:45:e1: a2:06:56:b8:b7:bc:30:8b:ea:a2:37:15:c3:3b:ca:8e:5f:ec: 71:47:e6:c0:71:31:8e:32:f6:42:46:d4:5f:d2:02:6d:6d:ab: 3a:8a:8d:dd:0f:a6:e9:83:d9:64:0d:33:2f:aa:3b:a8:15:f1: be:71:ce:3c:d2:09:69:40:a3:da:f8:c6:3b:ea:25:bc:e5:4a: 87:9d:61:d1:94:1d:ea:ea:2d:78:dc:bf:00:83:a8:83:d9:2e: 30:5f:64:e9:4c:5b:59:d0:92:0d:a7:a5:e3:2c:c7:eb:69:5b: 8f:81:0d:9f:35:cc:1c:a8:14:10:7b:4a:a2:36:62:69:0f:41: fc:bf:fd:34 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUcxkMMTvZ2kx7sNrJCRsdBmbDDywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAMDQwMDE3MWUyM2E3MGQ3NjlmZTdk NmI2MzE2ZTY4YzNhMjcyNDVlNzI5YjE0YzQwODA5Njg3ODI1MWVkZTBjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPQ4oXl2Nzz75qh8Jz3MFEEMnL9w s+qAff5J0RuBWcCCB+q0T14/xW9Wjxeh/oOfvzZKyxyGtNcQOQo0M4dgAFyJXiV1 c0euxbgIC7G9evEzPQfoQm+ZNk1VEF45wDYlo6bOD7WAr5aQOH6+5L4nP5hg3DMs Pu8ps6SVnpKTZYLAQAjPyEj5MYhNCjBllhQFFq07Q8AzteOUVZ4B9fGmB5p00tmw p4JuQtEUmy9MIrgYhdqtXDp+ilIH03mxqaRwJU20E60a/aupklrL0lSSPt4cVcDV tnLR6Afsf7Tl+8p9v9ID82L0fEGrpzf0VKhis43f0OIJravvj83RfNmBOQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFIS9cdiwtOQv3KoUv1bZ/mWnkLGTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmNTNlZTY5LTY2NmMtNDlmYi1hOGFhLTE5ZjcwNGYxNmEzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9owDQYJKoZIhvcNAQELBQADggEBAH9wbRjlpYWn9uy232LJ9a6/ Xl+i3SE2Tmtv2ryHF+znYBGHEnKLodSSUy0CJom4gLcXk4Uhg8m/NEzG3rBY/cY0 Y9NHsnCfdvkPZsrnjw2kcnVfNFCf8SyoeYoT+jGEG6zBXuREZevIs+ipgXr2R+Xn DqoTGUBAtWJtNW1F4aIGVri3vDCL6qI3FcM7yo5f7HFH5sBxMY4y9kJG1F/SAm1t qzqKjd0PpumD2WQNMy+qO6gV8b5xzjzSCWlAo9r4xjvqJbzlSoedYdGUHerqLXjc vwCDqIPZLjBfZOlMW1nQkg2npeMsx+tpW4+BDZ81zByoFBB7SqI2YmkPQfy//TQ= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:37 2024 by rpki-client on console-fra.rpki-client.org