$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d23fe4e7-ac79-4ead-860f-d33414380984.roa File: d23fe4e7-ac79-4ead-860f-d33414380984.roa (raw, json) Hash identifier: 5k3VD8ftNDYvt4LmDpP2JNe/9SLL0tOXlvliy/zu30E= Subject key identifier: BF:8B:26:9C:90:DE:47:3D:DC:D7:41:DA:66:AF:F6:43:14:5A:9D:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 710FAB0F7FC800B3E07FBC792EDBCB2B3A3B72DE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d23fe4e7-ac79-4ead-860f-d33414380984.roa Signing time: Fri 05 Jul 2024 00:00:00 +0000 ROA not before: Fri 05 Jul 2024 00:00:00 +0000 ROA not after: Fri 09 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0f:ab:0f:7f:c8:00:b3:e0:7f:bc:79:2e:db:cb:2b:3a:3b:72:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 5 00:00:00 2024 GMT Not After : Aug 9 23:59:59 2024 GMT Subject: serialNumber=c2e14f9be693d2ae849f64c7b3ed7de43864d38f1f8227f2f0711669e5c13890, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:ac:d7:5b:57:c8:bb:b1:26:76:76:d0:2e: b3:68:fa:97:b8:a1:a5:aa:b7:7d:98:2e:8a:bb:ab: c5:d8:ff:a0:69:63:cf:ac:66:aa:f6:c6:71:1b:94: 97:e5:98:e0:93:43:76:ab:d7:e4:6a:03:01:50:af: 52:17:c5:cb:97:f4:df:d7:a6:ce:eb:f1:fb:fc:84: a7:53:29:ab:22:43:12:52:56:d5:3e:9f:bd:7b:8f: ad:ee:09:f8:2e:61:80:35:30:bc:7f:4a:dc:54:72: e8:97:8a:4c:0f:80:6d:cb:6b:29:b0:2c:ab:5f:e0: 70:e7:83:fd:68:8b:fe:5c:1a:66:44:f4:bf:90:5e: 17:10:4f:7f:1a:0d:43:15:17:93:ef:69:24:dd:61: 97:4b:4c:5a:98:da:d2:38:ba:7e:22:05:54:c9:87: 96:a6:57:cc:fa:8b:18:3e:4b:f2:48:2b:bf:53:ef: c0:4b:c8:06:bf:41:1d:bb:46:14:21:7c:9d:d9:d6: 5f:86:95:e8:d6:26:63:8f:42:68:1e:b8:71:1f:bc: 87:9f:e3:f7:89:f5:b3:1a:40:d6:e4:de:6c:fe:af: 35:6c:49:1a:68:96:38:cf:20:11:43:20:49:da:06: dd:61:9f:00:22:96:eb:08:2d:32:1c:6a:c7:ed:7e: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8B:26:9C:90:DE:47:3D:DC:D7:41:DA:66:AF:F6:43:14:5A:9D:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d23fe4e7-ac79-4ead-860f-d33414380984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28:8000::/36 Signature Algorithm: sha256WithRSAEncryption 23:15:ac:68:e4:42:52:70:8d:83:80:40:11:ed:76:ba:7b:fd: 31:8b:36:b0:a9:6e:2c:fc:f2:51:b0:a3:e7:17:86:cd:b1:99: 12:02:b5:33:3d:a5:35:b5:50:81:0a:19:ce:10:d1:10:97:ac: e3:71:46:c3:b8:64:87:8c:b2:a8:83:06:58:23:ab:ab:a3:df: b0:d7:7e:d2:83:66:c2:41:2b:bc:59:c1:49:6f:b1:c5:a3:7a: 40:44:be:12:92:5a:00:4f:40:e6:14:f4:02:77:d7:57:90:6f: d5:b0:ac:90:0e:be:40:91:4e:c7:22:fe:28:a2:ec:19:21:26: b6:ef:1a:72:84:86:2f:2a:1f:41:ff:95:63:f3:88:2f:e0:89: dc:93:a1:50:f0:26:7d:aa:ec:4e:1e:3f:8e:99:7c:2e:42:e1: 17:91:03:37:df:6d:d1:b8:c0:b9:89:02:10:9a:f2:33:25:01: 6a:d8:8d:f7:19:54:5d:38:e3:78:a5:2c:98:dd:dc:1a:24:3f: 21:21:c8:54:48:31:cf:9b:c5:7d:06:a1:1a:46:b7:ad:48:2f: 6b:6f:c4:6b:e4:a1:de:a5:69:dd:15:da:3b:11:4d:9f:ca:49: 41:ad:aa:e8:ef:b3:6d:ac:ce:41:70:5a:81:34:c0:9f:21:ce: 48:80:d9:b0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcQ+rD3/IALPgf7x5LtvLKzo7ct4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcwNTAwMDAwMFoX DTI0MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAYzJlMTRmOWJlNjkzZDJhZTg0OWY2 NGM3YjNlZDdkZTQzODY0ZDM4ZjFmODIyN2YyZjA3MTE2NjllNWMxMzg5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ys11tXyLuxJnZ20C6zaPqXuKGl qrd9mC6Ku6vF2P+gaWPPrGaq9sZxG5SX5Zjgk0N2q9fkagMBUK9SF8XLl/Tf16bO 6/H7/ISnUymrIkMSUlbVPp+9e4+t7gn4LmGANTC8f0rcVHLol4pMD4Bty2spsCyr X+Bw54P9aIv+XBpmRPS/kF4XEE9/Gg1DFReT72kk3WGXS0xamNrSOLp+IgVUyYeW plfM+osYPkvySCu/U+/AS8gGv0Edu0YUIXyd2dZfhpXo1iZjj0JoHrhxH7yHn+P3 ifWzGkDW5N5s/q81bEkaaJY4zyARQyBJ2gbdYZ8AIpbrCC0yHGrH7X5D2wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL+LJpyQ3kc93NdB2mav9kMUWp0YMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QyM2ZlNGU3LWFjNzktNGVhZC04NjBmLWQzMzQxNDM4MDk4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKIAwDQYJKoZIhvcNAQELBQADggEBACMVrGjkQlJwjYOAQBHt drp7/TGLNrCpbiz88lGwo+cXhs2xmRICtTM9pTW1UIEKGc4Q0RCXrONxRsO4ZIeM sqiDBlgjq6uj37DXftKDZsJBK7xZwUlvscWjekBEvhKSWgBPQOYU9AJ311eQb9Ww rJAOvkCRTsci/iii7BkhJrbvGnKEhi8qH0H/lWPziC/gidyToVDwJn2q7E4eP46Z fC5C4ReRAzffbdG4wLmJAhCa8jMlAWrYjfcZVF0443ilLJjd3BokPyEhyFRIMc+b xX0GoRpGt61IL2tvxGvkod6lad0V2jsRTZ/KSUGtqujvs22szkFwWoE0wJ8hzkiA 2bA= -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:41 2024 by rpki-client on console-ams.rpki-client.org