$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd0c1635-33c3-4877-b1a3-ec831be118eb.roa File: dd0c1635-33c3-4877-b1a3-ec831be118eb.roa (raw, json) Hash identifier: L365U+EYD063RIyzOw47fPuj6KlfbBCslEkOyKV0DF4= Subject key identifier: 16:BB:80:B9:8F:9B:53:9F:E3:39:D0:2B:A1:84:41:B8:BF:8A:CE:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C9A192E6A36ADD99104994BE36CEB7E3B320BF8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd0c1635-33c3-4877-b1a3-ec831be118eb.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9a:19:2e:6a:36:ad:d9:91:04:99:4b:e3:6c:eb:7e:3b:32:0b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=cf9df2f779162e7d22bec05c65c8bf27f201877b1720ec49ebd37628dd19fe07, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8d:8e:4b:dd:2f:4e:63:e9:0e:17:b0:e3:97: 88:88:ef:31:52:97:c2:1c:f9:45:fe:eb:7f:58:d3: c3:10:08:fe:50:12:29:8e:dc:db:5e:ac:0c:03:96: a4:b8:78:5e:c7:85:62:39:48:a0:04:e2:21:4f:dc: 7f:fe:59:c7:52:04:a8:be:0e:66:c3:b7:f9:44:53: 36:86:a4:eb:33:bc:e2:73:96:60:79:67:6d:22:c2: 49:a9:ac:e8:09:93:7b:c5:aa:25:db:fb:8b:6b:32: 2f:9c:4b:79:93:48:8e:43:48:35:c4:7f:18:94:b4: e4:f4:7f:38:af:68:e3:46:17:0d:6d:12:ab:a5:fd: 30:51:56:df:b5:44:2e:85:17:b3:16:0e:8c:11:d8: f8:91:47:8e:0a:01:37:e8:dc:a0:16:30:78:e1:38: 29:f0:80:60:c0:f8:cb:9f:6f:4c:52:97:5f:bd:37: b1:ba:5a:07:d7:4e:4b:1e:9f:79:bd:43:82:40:e6: cb:33:bd:13:81:ec:d9:64:cd:cf:2d:6f:3f:62:34: ca:4c:bd:a8:80:2e:77:d2:10:82:7a:ba:e1:4e:ed: c7:a5:b2:03:da:91:bb:1d:00:cc:b1:07:da:6f:de: 37:33:b5:51:d2:b4:7e:84:f7:83:bb:8c:56:dc:e4: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BB:80:B9:8F:9B:53:9F:E3:39:D0:2B:A1:84:41:B8:BF:8A:CE:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd0c1635-33c3-4877-b1a3-ec831be118eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:9000::/40 Signature Algorithm: sha256WithRSAEncryption 84:0a:02:98:01:34:4e:6c:c0:ba:5e:5c:36:a0:60:e3:c8:10: 9c:fd:c2:67:96:2b:ed:6f:ac:fe:d7:a8:eb:79:d2:ac:83:64: e9:8d:f3:20:28:d4:fb:7e:ef:8a:37:c4:a1:ff:87:10:f2:b8: ee:cc:c0:07:87:ba:ad:7e:6f:38:b1:4d:57:2a:fb:e1:aa:09: 00:56:91:7b:50:3a:0b:a5:0a:c8:7f:c6:1e:6f:48:60:16:26: f2:54:a9:10:e1:5c:9a:80:f4:45:d4:d2:fd:de:49:86:fa:32: 49:81:c4:e0:95:41:71:14:b9:d0:af:49:47:2b:40:4d:21:19: 72:86:66:b7:e3:b8:63:01:c9:fd:50:7e:02:79:e6:18:d5:01: 1d:c6:3a:da:27:26:63:bc:ad:3c:df:bf:9a:ff:2d:01:9f:d0: b6:2b:80:bf:13:ff:7a:ac:11:43:ff:ee:9c:f2:dd:bb:6c:9a: 62:2e:83:cd:be:00:bf:fe:7b:1d:27:4d:0a:95:be:fb:68:89: 9b:04:9e:23:46:54:55:7a:40:fc:1c:60:c1:6a:a3:a4:ab:fe: 01:73:e0:39:78:20:2e:49:a7:0a:28:1b:5f:b4:f0:29:ab:5f: aa:b4:af:d6:93:6b:f9:ce:43:df:f7:96:5d:db:bf:09:72:db: 9f:82:87:a3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfJoZLmo2rdmRBJlL42zrfjsyC/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAY2Y5ZGYyZjc3OTE2MmU3ZDIyYmVj MDVjNjVjOGJmMjdmMjAxODc3YjE3MjBlYzQ5ZWJkMzc2MjhkZDE5ZmUwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o2OS90vTmPpDhew45eIiO8xUpfC HPlF/ut/WNPDEAj+UBIpjtzbXqwMA5akuHhex4ViOUigBOIhT9x//lnHUgSovg5m w7f5RFM2hqTrM7zic5ZgeWdtIsJJqazoCZN7xaol2/uLazIvnEt5k0iOQ0g1xH8Y lLTk9H84r2jjRhcNbRKrpf0wUVbftUQuhRezFg6MEdj4kUeOCgE36NygFjB44Tgp 8IBgwPjLn29MUpdfvTexuloH105LHp95vUOCQObLM70TgezZZM3PLW8/YjTKTL2o gC530hCCerrhTu3HpbID2pG7HQDMsQfab943M7VR0rR+hPeDu4xW3ORP3QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBa7gLmPm1Of4znQK6GEQbi/is5EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkMGMxNjM1LTMzYzMtNDg3Ny1iMWEzLWVjODMxYmUxMThlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaZAwDQYJKoZIhvcNAQELBQADggEBAIQKApgBNE5swLpeXDag YOPIEJz9wmeWK+1vrP7XqOt50qyDZOmN8yAo1Pt+74o3xKH/hxDyuO7MwAeHuq1+ bzixTVcq++GqCQBWkXtQOgulCsh/xh5vSGAWJvJUqRDhXJqA9EXU0v3eSYb6MkmB xOCVQXEUudCvSUcrQE0hGXKGZrfjuGMByf1QfgJ55hjVAR3GOtonJmO8rTzfv5r/ LQGf0LYrgL8T/3qsEUP/7pzy3btsmmIug82+AL/+ex0nTQqVvvtoiZsEniNGVFV6 QPwcYMFqo6Sr/gFz4Dl4IC5JpwooG1+08CmrX6q0r9aTa/nOQ9/3ll3bvwly25+C h6M= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org