$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d030a36c-924d-4c99-8b6d-7ed44efb25e8.roa File: d030a36c-924d-4c99-8b6d-7ed44efb25e8.roa (raw, json) Hash identifier: QqGHFqCgzXftFl45vh01Du6DIrFthk6Zk+f+fW8P+zQ= Subject key identifier: 15:59:4A:F5:80:A8:6E:13:DD:3A:D5:17:3E:38:F5:0B:36:9F:CE:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74770279FE2DF94EE55F8CDD66AD4C30212CD224 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d030a36c-924d-4c99-8b6d-7ed44efb25e8.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:77:02:79:fe:2d:f9:4e:e5:5f:8c:dd:66:ad:4c:30:21:2c:d2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=ccde3e97eacc6e519281f6cf2ee03115e599ed55f48e3e991e3a7f80e6836920, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:83:cc:a7:ce:c3:1e:41:05:fd:e2:f9:af: e1:d7:a1:cc:55:fc:8b:14:c5:28:e0:6f:de:dd:61: 1a:9f:2f:39:02:9b:5f:18:02:b7:65:26:f8:f4:1a: 0e:2b:4a:38:97:67:99:cc:86:f4:31:f1:96:e9:c4: ee:63:4a:4f:48:ff:50:4b:67:3f:55:e8:f7:6a:15: c3:61:f8:bf:a7:f1:37:56:c2:29:2a:35:73:ad:9b: 0b:2f:c2:c3:aa:20:a6:b5:7f:7f:cf:43:f4:95:cd: 00:d8:3f:eb:05:2f:12:23:e3:4e:d6:89:4d:5c:9d: ce:dd:45:b1:04:1f:f5:54:11:96:04:4d:a2:00:cd: 46:92:b4:6b:c8:91:90:80:4e:7a:01:f7:16:19:d8: 75:f9:61:ac:d4:f5:86:28:2d:ac:0a:c1:f6:dd:3b: 9e:ed:f2:80:e2:f2:72:b7:47:30:36:7c:93:a6:94: f5:5e:59:19:b7:9f:bb:4f:0d:ea:1a:5c:e0:1c:0b: 42:6b:50:d7:00:c9:a9:62:b1:14:eb:4f:07:97:f6: 85:f1:96:fa:da:44:f2:40:17:0b:e3:20:fb:46:c4: 9f:09:cc:e6:9e:9d:e5:9f:b8:bc:d5:61:14:9c:92: be:65:72:93:98:37:d1:29:31:0e:f6:d1:74:bd:ef: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:59:4A:F5:80:A8:6E:13:DD:3A:D5:17:3E:38:F5:0B:36:9F:CE:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d030a36c-924d-4c99-8b6d-7ed44efb25e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:2000::/40 Signature Algorithm: sha256WithRSAEncryption 18:62:97:e4:7b:d3:db:aa:d0:df:6f:13:15:ff:50:d9:b6:f9: ba:c0:b3:f9:42:68:50:8d:1e:b6:6b:af:9b:20:28:19:86:d8: 2f:75:2a:59:90:31:e8:b7:08:25:90:c9:f8:83:06:76:53:6f: 1e:e0:b9:f9:f9:1e:85:c4:94:61:09:54:78:99:9e:3a:81:d7: b4:a3:6c:6c:1d:1d:c6:8d:a8:63:13:09:cf:ec:e6:cc:4c:34: ec:8d:16:7d:7e:62:05:70:d4:5d:eb:6a:96:6c:f1:4a:af:76: 2f:71:1e:9f:11:4a:09:47:23:9a:85:f3:f5:27:4b:43:1a:c3: 6f:2f:ec:97:71:80:7c:dd:96:a4:71:47:4c:4e:27:8e:cc:21: 75:d0:97:b3:0b:02:0f:99:a0:92:75:1b:b2:71:ed:75:c3:29: a4:fc:ad:aa:89:f8:b2:e6:4b:67:b1:67:ac:83:fe:60:0d:00: 3d:37:91:3f:d5:6d:b1:af:5b:61:18:f7:d1:7c:b9:1b:28:ac: 46:23:8a:5d:66:cb:2d:69:64:19:6b:1a:38:a3:d7:c5:00:08: bd:d5:60:80:53:b7:4f:81:e7:90:93:83:b7:d2:d3:81:d0:94: 88:7e:74:7b:82:f0:2e:7f:8f:11:dd:06:e0:50:91:02:0a:3a: c5:c9:c4:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdHcCef4t+U7lX4zdZq1MMCEs0iQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAY2NkZTNlOTdlYWNjNmU1MTkyODFm NmNmMmVlMDMxMTVlNTk5ZWQ1NWY0OGUzZTk5MWUzYTdmODBlNjgzNjkyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD2DzKfOwx5BBf3i+a/h16HMVfyL FMUo4G/e3WEany85AptfGAK3ZSb49BoOK0o4l2eZzIb0MfGW6cTuY0pPSP9QS2c/ Vej3ahXDYfi/p/E3VsIpKjVzrZsLL8LDqiCmtX9/z0P0lc0A2D/rBS8SI+NO1olN XJ3O3UWxBB/1VBGWBE2iAM1GkrRryJGQgE56AfcWGdh1+WGs1PWGKC2sCsH23Tue 7fKA4vJyt0cwNnyTppT1XlkZt5+7Tw3qGlzgHAtCa1DXAMmpYrEU608Hl/aF8Zb6 2kTyQBcL4yD7RsSfCczmnp3ln7i81WEUnJK+ZXKTmDfRKTEO9tF0ve9dcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBVZSvWAqG4T3TrVFz449Qs2n84HMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QwMzBhMzZjLTkyNGQtNGM5OS04YjZkLTdlZDQ0ZWZiMjVlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+CAwDQYJKoZIhvcNAQELBQADggEBABhil+R709uq0N9vExX/ UNm2+brAs/lCaFCNHrZrr5sgKBmG2C91KlmQMei3CCWQyfiDBnZTbx7gufn5HoXE lGEJVHiZnjqB17SjbGwdHcaNqGMTCc/s5sxMNOyNFn1+YgVw1F3rapZs8Uqvdi9x Hp8RSglHI5qF8/UnS0Maw28v7JdxgHzdlqRxR0xOJ47MIXXQl7MLAg+ZoJJ1G7Jx 7XXDKaT8raqJ+LLmS2exZ6yD/mANAD03kT/VbbGvW2EY99F8uRsorEYjil1myy1p ZBlrGjij18UACL3VYIBTt0+B55CTg7fS04HQlIh+dHuC8C5/jxHdBuBQkQIKOsXJ xAI= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org