$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d08b8cf2-d259-41d7-9742-c44b7e3b3dac.roa File: d08b8cf2-d259-41d7-9742-c44b7e3b3dac.roa (raw, json) Hash identifier: 5BVKbPRblCBAUm3H8vXfO8jGBgbWWXUG/yaZixlYO30= Subject key identifier: 12:FD:5B:B4:47:70:02:5A:61:30:CD:6A:16:27:C5:29:6B:F3:9F:C0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 199B581B6078CF9165D9721F72C1CBA8DA8F5172 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d08b8cf2-d259-41d7-9742-c44b7e3b3dac.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9b:58:1b:60:78:cf:91:65:d9:72:1f:72:c1:cb:a8:da:8f:51:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=a2097bd048ca6ea851a14dfc05e0db816fc4de5ef314c0dddbbe959b871448cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:2b:c5:26:b9:f7:69:d9:8c:6f:d5:f4:d9: 62:6b:8c:a3:f7:4d:f2:f7:12:15:c9:cf:cd:f0:90: 24:6a:1b:f5:24:3f:aa:98:9f:8d:7b:ab:58:db:eb: 6d:b4:66:80:b1:c6:d0:3c:29:2a:d7:70:70:68:20: 7e:e4:8e:f5:b5:cd:77:48:c7:88:cc:07:70:46:a1: 72:4e:a3:bc:69:a8:ba:c1:7d:a2:b6:03:5a:3a:8f: d3:d2:9b:fd:37:c5:66:96:e7:88:d3:bc:29:d6:cc: a2:e8:df:20:f2:8b:4a:79:0c:79:a5:8d:2c:f9:ba: b9:98:4d:44:ce:13:18:c5:3b:d5:81:3a:c7:fc:dc: d8:61:66:24:47:69:ec:28:b8:dd:25:8c:52:5c:1a: 04:4d:31:8f:a3:db:0a:64:de:48:36:b4:87:11:27: 85:b5:9e:48:00:a0:51:99:40:77:0b:e7:e7:96:24: 5c:4e:4f:30:b2:80:40:94:f3:38:8a:ca:f1:7a:c6: 71:69:2e:96:d0:42:20:ce:82:84:f8:af:2a:69:4b: e7:4e:79:4e:87:81:df:2f:e4:1c:27:2d:a7:2f:de: a8:c3:df:be:93:81:f5:cb:fe:87:4d:66:c1:07:fe: e9:df:05:3c:39:dc:a4:52:cb:d9:e7:33:70:20:52: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FD:5B:B4:47:70:02:5A:61:30:CD:6A:16:27:C5:29:6B:F3:9F:C0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d08b8cf2-d259-41d7-9742-c44b7e3b3dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:a000::/40 Signature Algorithm: sha256WithRSAEncryption 2c:e8:ad:47:61:6f:7c:a4:8c:2a:72:1d:32:dc:19:ea:f2:a4: b0:45:4f:cf:1d:24:8f:d8:a6:ce:93:54:58:d2:36:e4:e4:4b: a6:96:d3:9e:65:3f:f9:11:ab:90:87:61:f5:8a:7b:2a:fa:dd: 23:cb:e3:f2:6b:d9:c6:e5:61:fa:1d:53:3e:1d:25:e3:bb:5b: 5c:6f:95:d8:59:e9:48:d4:cb:92:85:27:c3:2c:81:39:d9:a9: 7d:85:9a:0a:77:93:7c:e9:50:71:fe:ac:46:5e:a1:b6:57:fd: 2f:54:f8:e5:bc:9f:97:2b:a5:50:78:83:ae:05:43:d8:e3:29: 5f:9a:e5:03:ab:9d:06:cd:2f:d6:6b:7a:dd:6f:df:11:bf:30: e4:da:8c:80:e5:b5:d6:02:b1:c2:b9:c1:74:cd:4b:d5:85:52: 70:d6:34:19:40:8f:c1:b9:2d:18:01:b9:7a:19:d0:e6:4e:d1: 01:4d:e9:32:a6:ec:7d:7c:b9:3a:c8:d6:4e:53:52:a3:f7:58: c1:ab:43:43:3d:22:bb:9a:8e:01:f8:df:39:44:84:f9:5a:70: 50:3c:1b:6a:95:e2:62:15:de:ff:4f:db:1d:98:9a:5b:c2:5c: 7a:bc:b4:c4:c6:d2:68:bd:c5:54:e5:72:44:56:7c:07:2a:26: f2:56:3a:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGZtYG2B4z5Fl2XIfcsHLqNqPUXIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAYTIwOTdiZDA0OGNhNmVhODUxYTE0 ZGZjMDVlMGRiODE2ZmM0ZGU1ZWYzMTRjMGRkZGJiZTk1OWI4NzE0NDhjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDcrxSa592nZjG/V9Nlia4yj903y 9xIVyc/N8JAkahv1JD+qmJ+Ne6tY2+tttGaAscbQPCkq13BwaCB+5I71tc13SMeI zAdwRqFyTqO8aai6wX2itgNaOo/T0pv9N8VmlueI07wp1syi6N8g8otKeQx5pY0s +bq5mE1EzhMYxTvVgTrH/NzYYWYkR2nsKLjdJYxSXBoETTGPo9sKZN5INrSHESeF tZ5IAKBRmUB3C+fnliRcTk8wsoBAlPM4isrxesZxaS6W0EIgzoKE+K8qaUvnTnlO h4HfL+QcJy2nL96ow9++k4H1y/6HTWbBB/7p3wU8OdykUsvZ5zNwIFIWEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBL9W7RHcAJaYTDNahYnxSlr85/AMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QwOGI4Y2YyLWQyNTktNDFkNy05NzQyLWM0NGI3ZTNiM2RhYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacKAwDQYJKoZIhvcNAQELBQADggEBACzorUdhb3ykjCpyHTLc GerypLBFT88dJI/Yps6TVFjSNuTkS6aW055lP/kRq5CHYfWKeyr63SPL4/Jr2cbl YfodUz4dJeO7W1xvldhZ6UjUy5KFJ8MsgTnZqX2Fmgp3k3zpUHH+rEZeobZX/S9U +OW8n5crpVB4g64FQ9jjKV+a5QOrnQbNL9Zret1v3xG/MOTajIDltdYCscK5wXTN S9WFUnDWNBlAj8G5LRgBuXoZ0OZO0QFN6TKm7H18uTrI1k5TUqP3WMGrQ0M9Irua jgH43zlEhPlacFA8G2qV4mIV3v9P2x2YmlvCXHq8tMTG0mi9xVTlckRWfAcqJvJW OgI= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:39 2024 by rpki-client on console-ams.rpki-client.org