$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa File: d28e878b-7026-4092-9657-bcad7c6b3e74.roa (raw, json) Hash identifier: RYhtu39HXvprhENNbOMtddAKLZ7Ca2oF0f+VxZnLmuc= Subject key identifier: 90:95:F6:1A:A8:62:66:8F:53:CE:F0:64:FA:84:2D:BD:34:D7:07:F1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42D4AFCDC67C177341659B33489E089B7AA1B189 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa Signing time: Wed 17 Jul 2024 00:00:00 +0000 ROA not before: Wed 17 Jul 2024 00:00:00 +0000 ROA not after: Wed 21 Aug 2024 23:59:59 +0000 asID: 8987 IP address blocks: 103.246.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d4:af:cd:c6:7c:17:73:41:65:9b:33:48:9e:08:9b:7a:a1:b1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 17 00:00:00 2024 GMT Not After : Aug 21 23:59:59 2024 GMT Subject: serialNumber=ac1c1f5c34b0674d1e1b4dcc4b420cf22bf7c71ee157565d08592bae753f0681, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:1c:3f:00:64:78:20:75:d8:02:eb:e8:80: 08:64:12:e4:27:b6:0d:a9:ca:fa:f1:6d:72:c9:12: a3:82:70:90:c8:ab:d1:9a:92:2c:b3:e6:6d:f9:06: 2c:c2:c3:e9:0e:9a:73:54:ff:8e:9c:da:3d:20:3c: 79:31:64:1f:5b:f4:40:1c:49:de:97:c1:8d:10:6a: 32:23:43:b1:87:58:76:4a:b0:e3:1d:9f:00:d5:05: a1:1f:9c:70:56:0d:4c:3f:d7:42:79:b1:4a:70:1e: b9:64:3d:e3:c9:25:9d:bc:5a:bb:f1:01:7c:73:ec: 1c:d1:f1:82:47:4d:c7:de:89:9c:57:78:f9:d8:18: 88:38:14:71:6d:2c:09:74:dc:2f:99:6e:dd:a0:19: 6a:ec:62:54:ec:25:04:e6:f1:ba:2f:b4:ba:1b:d8: f9:34:06:b5:5c:7e:be:b7:64:e2:c4:2c:87:2d:f1: b5:9a:3a:6e:d9:5a:53:47:2d:5e:32:79:cf:d7:26: 63:c6:6a:69:0c:a9:9d:59:63:80:eb:89:67:b7:06: e5:c4:59:2f:b7:7f:65:e0:7f:39:81:bc:80:87:cf: e2:26:bc:98:d2:f1:90:0c:d3:89:70:73:28:4b:5f: 3e:43:76:d2:26:2f:6b:b3:b0:4a:1d:66:a7:e9:71: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:95:F6:1A:A8:62:66:8F:53:CE:F0:64:FA:84:2D:BD:34:D7:07:F1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.148.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:e8:41:83:3f:4e:fc:8f:8b:ec:a6:8d:66:ba:a8:ca:d4:c6: 46:03:cc:e8:8a:02:91:7a:20:f6:e3:39:6c:4b:11:5e:76:aa: 0d:7d:f6:ff:ae:ce:7b:f3:75:39:61:8c:82:82:b5:8a:d0:b7: be:35:80:c4:e7:ef:82:57:56:0b:33:b5:98:92:b4:dc:c7:96: 92:50:8d:20:f3:2d:16:d2:97:06:8f:2f:90:ca:7a:15:9a:40: 71:b0:46:d9:e0:b6:6b:36:35:21:71:88:c1:0d:46:bd:fd:24: a0:4f:5b:f9:5b:b4:7d:66:35:e5:20:56:b5:00:5f:7c:e0:73: e6:07:a6:e6:0e:ac:d5:f0:a2:7a:fb:7b:6d:ee:33:b6:17:e4: 35:10:fd:6b:02:5f:3c:08:bb:0e:87:51:00:cf:4f:c2:54:98: 6a:18:ae:b7:77:b4:f8:0e:77:7b:f3:fe:11:45:d0:bc:d4:65: 89:fd:4b:03:7d:08:cb:9e:2e:86:e2:9b:58:2b:71:cb:65:de: eb:2a:b6:91:6b:92:f4:47:e9:67:f5:a9:73:f1:6e:5b:33:b3: 7a:02:d0:0d:5f:38:e7:ae:fd:b7:aa:13:48:f0:88:70:35:56: ea:e0:f0:8f:54:3f:93:79:a1:f0:5a:61:96:3b:cf:37:cc:dd: 74:d4:cf:0f -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUQtSvzcZ8F3NBZZszSJ4Im3qhsYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNzAwMDAwMFoX DTI0MDgyMTIzNTk1OVowejFJMEcGA1UEBRNAYWMxYzFmNWMzNGIwNjc0ZDFlMWI0 ZGNjNGI0MjBjZjIyYmY3YzcxZWUxNTc1NjVkMDg1OTJiYWU3NTNmMDY4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cIcPwBkeCB12ALr6IAIZBLkJ7YN qcr68W1yyRKjgnCQyKvRmpIss+Zt+QYswsPpDppzVP+OnNo9IDx5MWQfW/RAHEne l8GNEGoyI0Oxh1h2SrDjHZ8A1QWhH5xwVg1MP9dCebFKcB65ZD3jySWdvFq78QF8 c+wc0fGCR03H3omcV3j52BiIOBRxbSwJdNwvmW7doBlq7GJU7CUE5vG6L7S6G9j5 NAa1XH6+t2TixCyHLfG1mjpu2VpTRy1eMnnP1yZjxmppDKmdWWOA64lntwblxFkv t39l4H85gbyAh8/iJryY0vGQDNOJcHMoS18+Q3bSJi9rs7BKHWan6XHFZwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJCV9hqoYmaPU87wZPqELb001wfxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QyOGU4NzhiLTcwMjYtNDA5Mi05NjU3LWJjYWQ3YzZiM2U3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/aUMA0GCSqGSIb3DQEBCwUAA4IBAQBM6EGDP078j4vspo1muqjK 1MZGA8zoigKReiD24zlsSxFedqoNffb/rs5783U5YYyCgrWK0Le+NYDE5++CV1YL M7WYkrTcx5aSUI0g8y0W0pcGjy+QynoVmkBxsEbZ4LZrNjUhcYjBDUa9/SSgT1v5 W7R9ZjXlIFa1AF984HPmB6bmDqzV8KJ6+3tt7jO2F+Q1EP1rAl88CLsOh1EAz0/C VJhqGK63d7T4Dnd78/4RRdC81GWJ/UsDfQjLni6G4ptYK3HLZd7rKraRa5L0R+ln 9alz8W5bM7N6AtANXzjnrv23qhNI8IhwNVbq4PCPVD+TeaHwWmGWO883zN101M8P -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:41 2024 by rpki-client on console-ams.rpki-client.org