$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d413dad8-13c0-4621-b1c7-27016c60a7e8.roa File: d413dad8-13c0-4621-b1c7-27016c60a7e8.roa (raw, json) Hash identifier: w4vx3/3T9brhPJSNeatEKO10gliMjwigWI9QK8PzxVU= Subject key identifier: 2F:F7:BE:20:D7:F5:5B:DE:59:0F:88:CA:98:6B:72:41:DB:7F:17:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73B62E8488DD3CE8F287F3A74110BD69E31F2C75 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d413dad8-13c0-4621-b1c7-27016c60a7e8.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 43.249.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b6:2e:84:88:dd:3c:e8:f2:87:f3:a7:41:10:bd:69:e3:1f:2c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=c64956c318ebd723b4d7d01e9f14049f3bc66662c844b8d875e8013c6ab41073, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:31:9e:30:b7:a8:33:7b:07:1b:19:df:89: ac:25:a3:96:f1:cf:ed:71:d4:c6:f5:f5:17:61:12: 38:5a:1b:c6:4b:12:d4:09:c9:94:81:57:f1:c0:8c: a4:9b:88:a7:bb:9b:75:80:8e:0f:fe:57:2a:90:db: fe:1d:79:86:64:9d:3c:ef:cf:c6:60:7e:fa:ba:99: f5:36:e9:0e:12:a0:8b:bd:50:0d:8e:5c:92:df:a0: 43:b9:e9:3a:65:fb:a3:b2:a1:94:34:bf:41:70:e8: 56:97:b0:eb:b5:41:f9:2c:76:04:7e:de:65:57:a2: b4:9e:b6:41:c9:28:57:62:88:91:06:49:ef:7b:a2: 61:62:86:f6:78:ae:4e:28:6f:c6:62:fb:32:e8:11: 3b:9a:80:1b:d1:98:63:04:bf:15:d4:da:2b:5f:c0: 18:78:af:0a:70:9c:3b:18:cf:01:c1:cf:ad:f2:41: 04:73:49:6b:5f:fa:70:12:b9:ad:b1:cd:ff:50:0c: e5:36:e2:c4:3c:2c:11:06:a1:ef:9e:8b:f5:03:8b: 56:7d:c9:95:03:a8:ae:4a:10:5f:33:43:5c:ed:a1: eb:8f:c8:7a:f0:e5:a7:c1:e0:d3:0c:bb:06:af:b0: 32:0e:c3:0f:e0:ac:bd:90:3a:1a:6b:1a:7c:6a:ee: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F7:BE:20:D7:F5:5B:DE:59:0F:88:CA:98:6B:72:41:DB:7F:17:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d413dad8-13c0-4621-b1c7-27016c60a7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.45.0/24 Signature Algorithm: sha256WithRSAEncryption c0:cf:fd:75:d4:3b:64:57:69:dd:57:bc:fc:ed:83:99:b6:94: 38:4b:e5:a2:2b:e6:4b:ec:08:d5:8a:6f:19:2c:d5:6c:9e:76: e2:a4:73:0c:51:71:af:14:ca:a8:b4:7b:8e:e9:43:16:fa:42: 39:fa:57:af:99:a2:46:9b:31:b8:fb:26:d5:9a:ca:34:59:c6: 87:fc:7b:8a:f3:22:b4:62:b9:8e:f8:70:6f:33:ec:55:ad:3e: 10:01:59:71:21:0d:3c:02:85:0f:a2:a2:6d:33:74:ee:11:8b: 15:07:24:0b:c3:71:cd:12:c4:e3:1a:c7:b6:f1:18:9b:ef:08: 89:ed:63:b0:ce:5e:8a:e9:66:a6:6a:a6:12:3e:d1:99:c6:fc: 27:73:24:ec:eb:a6:44:f1:31:97:31:60:f2:a4:07:c0:0f:89: 4c:ea:6a:d7:94:e4:27:74:11:ad:c3:1e:6e:12:7e:96:6c:5e: 36:97:c9:43:d3:9f:68:ed:c9:50:4d:c0:cb:54:d9:3c:b2:d2: 27:81:54:43:e1:db:4e:bd:34:48:b6:58:a7:3b:ff:45:42:42: e3:de:5f:20:00:47:76:c6:59:4d:92:8d:27:f8:0c:fe:d1:9c: 6b:50:0a:d8:54:34:51:64:dc:ea:42:65:7b:ae:f1:3d:7b:61: 5c:22:16:d5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUc7YuhIjdPOjyh/OnQRC9aeMfLHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAYzY0OTU2YzMxOGViZDcyM2I0ZDdk MDFlOWYxNDA0OWYzYmM2NjY2MmM4NDRiOGQ4NzVlODAxM2M2YWI0MTA3MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJQxnjC3qDN7BxsZ34msJaOW8c/t cdTG9fUXYRI4WhvGSxLUCcmUgVfxwIykm4inu5t1gI4P/lcqkNv+HXmGZJ0878/G YH76upn1NukOEqCLvVANjlyS36BDuek6ZfujsqGUNL9BcOhWl7DrtUH5LHYEft5l V6K0nrZByShXYoiRBknve6JhYob2eK5OKG/GYvsy6BE7moAb0ZhjBL8V1NorX8AY eK8KcJw7GM8Bwc+t8kEEc0lrX/pwErmtsc3/UAzlNuLEPCwRBqHvnov1A4tWfcmV A6iuShBfM0Nc7aHrj8h68OWnweDTDLsGr7AyDsMP4Ky9kDoaaxp8au6arwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFC/3viDX9VveWQ+IyphrckHbfxf/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0MTNkYWQ4LTEzYzAtNDYyMS1iMWM3LTI3MDE2YzYwYTdlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/ktMA0GCSqGSIb3DQEBCwUAA4IBAQDAz/111DtkV2ndV7z87YOZ tpQ4S+WiK+ZL7AjVim8ZLNVsnnbipHMMUXGvFMqotHuO6UMW+kI5+levmaJGmzG4 +ybVmso0WcaH/HuK8yK0YrmO+HBvM+xVrT4QAVlxIQ08AoUPoqJtM3TuEYsVByQL w3HNEsTjGse28Rib7wiJ7WOwzl6K6WamaqYSPtGZxvwncyTs66ZE8TGXMWDypAfA D4lM6mrXlOQndBGtwx5uEn6WbF42l8lD059o7clQTcDLVNk8stIngVRD4dtOvTRI tlinO/9FQkLj3l8gAEd2xllNko0n+Az+0ZxrUArYVDRRZNzqQmV7rvE9e2FcIhbV -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org