$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa File: d28e878b-7026-4092-9657-bcad7c6b3e74.roa (raw, json) Hash identifier: hB1GVrchXcHehv6fPmpusyoxlx2oRfR/EJxHEyqJOpg= Subject key identifier: C6:DF:2D:73:D9:07:72:CB:71:47:1D:46:6F:93:52:F4:F6:40:D4:81 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C67ADA4D52532902021CF99D6BF2A0B5A151D74 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 103.246.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Apr 2024 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:67:ad:a4:d5:25:32:90:20:21:cf:99:d6:bf:2a:0b:5a:15:1d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=746fa688b21adbbf97afd798ece3c6d3ebff11bb3b34ea8ab11e5c4da355a5e9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:10:dd:31:2d:4e:27:4b:4b:ba:fb:96:f6:86: 95:d2:45:68:f1:ea:ae:1a:65:31:2b:b7:03:9a:11: 53:cd:1f:1d:7c:2f:85:a9:a1:a5:c1:80:24:96:9f: ec:94:f9:99:c7:34:68:f7:f1:4e:94:3e:ee:6a:0b: 8c:09:9c:1e:ec:04:88:85:7d:e6:66:30:c7:c5:66: b4:f6:60:d4:74:6f:d6:32:91:9c:d1:78:e4:11:38: 70:7f:5b:7a:18:9e:99:8a:c9:cb:57:1d:3d:07:e0: 76:57:67:fd:a0:a3:8c:17:00:7b:8a:9a:99:f9:59: 39:29:79:04:e2:f5:f7:1c:8b:be:8a:53:b5:05:91: 45:e1:e5:57:01:4a:92:6a:e0:59:2f:97:17:e8:43: 25:71:b2:40:56:bd:06:22:9e:3f:87:ae:73:7f:45: 55:0d:40:5a:c3:99:38:07:8f:ce:5d:7e:4c:bf:2a: 4a:f8:e6:15:9d:2d:b5:8e:e5:99:e3:b8:1b:d6:44: 24:ce:c3:97:d5:b3:55:cb:9b:96:ee:ad:60:95:6f: 58:04:61:23:af:8c:92:40:c9:16:ca:9d:fa:50:ef: 00:16:9e:69:c9:6e:7e:69:95:1c:33:14:ad:61:96: 11:02:92:b1:4f:a3:4c:f7:b2:50:1b:74:3f:6a:91: ef:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DF:2D:73:D9:07:72:CB:71:47:1D:46:6F:93:52:F4:F6:40:D4:81 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.148.0/22 Signature Algorithm: sha256WithRSAEncryption b4:05:f1:ee:1c:4f:be:41:df:c8:6d:0f:ab:46:e5:d0:b1:32: 7b:05:d3:c5:16:d5:af:b9:18:9b:fb:83:9a:32:3a:da:b5:ee: cb:6d:76:dc:4d:f1:0f:86:09:96:ff:4f:8a:f3:22:24:cf:38: ad:19:e3:f1:0b:39:ff:07:ac:c9:b1:1d:bc:9d:ac:82:47:20: f4:a7:ba:03:97:1d:6f:e2:31:ac:cd:c8:03:0b:68:86:93:01: 4a:c8:0d:4a:30:6c:72:da:c8:7d:c9:e7:ae:75:7b:73:e9:ac: 1b:44:b6:4e:fb:b9:c1:d4:41:e4:8d:2f:8a:c6:a8:64:a3:ee: 34:d4:3e:b2:7b:02:fd:6e:9c:95:ec:0b:37:50:4a:51:38:ff: 2c:35:ac:28:59:89:25:a4:b6:65:1d:ba:a1:8c:2e:45:92:da: 79:e0:6a:7b:b6:94:ce:04:34:f3:b2:ef:50:fe:6e:c3:78:9d: bb:0f:f8:1f:31:de:33:1d:58:f5:e8:1d:a3:94:11:ca:3b:4a: 50:00:e9:49:ee:88:6b:20:22:cd:26:e3:fb:45:3d:95:1b:7b: 38:10:80:4a:04:83:85:ed:2e:c1:12:d3:a6:b8:31:e2:de:f9: a5:7c:82:bd:f8:f8:f1:7e:83:1c:4a:63:d5:b9:ea:bf:a6:fe: 37:f7:e9:90 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUHGetpNUlMpAgIc+Z1r8qC1oVHXQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwODAwMDAwMFoX DTI0MDUxMzIzNTk1OVowejFJMEcGA1UEBRNANzQ2ZmE2ODhiMjFhZGJiZjk3YWZk Nzk4ZWNlM2M2ZDNlYmZmMTFiYjNiMzRlYThhYjExZTVjNGRhMzU1YTVlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxDdMS1OJ0tLuvuW9oaV0kVo8equ GmUxK7cDmhFTzR8dfC+FqaGlwYAklp/slPmZxzRo9/FOlD7uaguMCZwe7ASIhX3m ZjDHxWa09mDUdG/WMpGc0XjkEThwf1t6GJ6ZisnLVx09B+B2V2f9oKOMFwB7ipqZ +Vk5KXkE4vX3HIu+ilO1BZFF4eVXAUqSauBZL5cX6EMlcbJAVr0GIp4/h65zf0VV DUBaw5k4B4/OXX5MvypK+OYVnS21juWZ47gb1kQkzsOX1bNVy5uW7q1glW9YBGEj r4ySQMkWyp36UO8AFp5pyW5+aZUcMxStYZYRApKxT6NM97JQG3Q/apHvuQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFMbfLXPZB3LLcUcdRm+TUvT2QNSBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QyOGU4NzhiLTcwMjYtNDA5Mi05NjU3LWJjYWQ3YzZiM2U3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/aUMA0GCSqGSIb3DQEBCwUAA4IBAQC0BfHuHE++Qd/IbQ+rRuXQ sTJ7BdPFFtWvuRib+4OaMjrate7LbXbcTfEPhgmW/0+K8yIkzzitGePxCzn/B6zJ sR28nayCRyD0p7oDlx1v4jGszcgDC2iGkwFKyA1KMGxy2sh9yeeudXtz6awbRLZO +7nB1EHkjS+Kxqhko+401D6yewL9bpyV7As3UEpROP8sNawoWYklpLZlHbqhjC5F ktp54Gp7tpTOBDTzsu9Q/m7DeJ27D/gfMd4zHVj16B2jlBHKO0pQAOlJ7ohrICLN JuP7RT2VG3s4EIBKBIOF7S7BEtOmuDHi3vmlfIK9+PjxfoMcSmPVueq/pv439+mQ -----END CERTIFICATE-----Generated at Sat Apr 20 01:07:32 2024 by rpki-client on console-ams.rpki-client.org