$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd8bb927-2445-4a8c-afa9-cc9fd2839c51.roa File: dd8bb927-2445-4a8c-afa9-cc9fd2839c51.roa (raw, json) Hash identifier: 3rCeCXuowUZiYMxXTIPCqpZLiQX9uRQaps74LDJpQUM= Subject key identifier: E6:66:67:DC:0F:63:5D:FA:21:67:6B:8D:1E:91:76:27:8F:1F:6B:38 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 630777AFF7976031FF3DE904F26F7EFF83C0ED79 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd8bb927-2445-4a8c-afa9-cc9fd2839c51.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafc:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:07:77:af:f7:97:60:31:ff:3d:e9:04:f2:6f:7e:ff:83:c0:ed:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=6e146ea2c6076cb2db9a41a17b4a58467c5565675153ca9d42f3a2e4ab6d5acc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:e8:76:61:5e:86:2c:32:b0:78:6b:f7:71: 04:85:bf:4c:f1:1e:be:94:a4:7f:3f:20:cf:28:78: 21:a5:a1:be:e5:ac:6e:4c:da:cb:2b:9c:3e:b7:68: d9:9f:ee:6a:2e:47:b2:01:cf:8f:d7:4f:87:4a:5e: 56:95:49:8f:ce:4d:25:e3:9a:a6:bd:3d:80:92:95: dd:0b:ab:83:87:f1:67:8c:af:3b:51:61:41:5c:16: 38:4a:e9:8f:75:c5:ab:c5:d1:da:f1:19:cf:22:78: 24:04:29:02:52:49:47:d3:d6:82:c6:a2:01:b9:a1: 1d:1e:ce:c7:35:b0:a2:e4:c8:75:dc:0e:45:2c:41: e8:ac:a3:ba:5b:61:a3:64:79:e1:c5:43:f6:4c:37: c0:67:87:61:bf:6f:83:13:e9:6f:06:04:20:67:08: e4:72:9b:78:58:97:7e:3e:75:56:10:22:a2:d8:22: 2d:92:c5:93:91:ba:d7:71:ff:ad:56:fc:a8:3a:16: b8:af:f8:d1:5f:b8:26:0e:a0:f7:0c:c0:96:a0:65: 4c:c0:30:db:1a:02:c0:54:20:b1:e7:87:36:05:4a: eb:e9:44:a5:a8:9e:96:54:71:34:b6:1d:26:0d:a1: c0:a0:af:1b:63:ca:d3:2e:f4:85:0e:a0:f5:cb:00: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:66:67:DC:0F:63:5D:FA:21:67:6B:8D:1E:91:76:27:8F:1F:6B:38 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd8bb927-2445-4a8c-afa9-cc9fd2839c51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafc:800::/40 Signature Algorithm: sha256WithRSAEncryption 16:2d:f2:9b:e7:14:bf:e5:9c:81:16:33:13:bf:a7:84:81:e4: e5:11:41:a2:03:07:70:b5:09:92:77:ec:49:e8:c3:ac:09:a1: 3e:97:e6:39:d1:b7:09:88:dc:e3:56:dc:74:61:27:30:cd:d6: c7:ca:19:78:1c:64:70:8a:45:7b:71:71:1f:e7:22:96:d7:92: 54:3a:ee:33:97:1c:14:7f:55:e9:76:d0:94:dd:c9:d2:1c:b4: 6a:88:25:ce:68:f2:18:ae:aa:de:d6:c0:2f:3a:49:2f:36:80: d2:9e:2b:88:d4:79:e9:70:b6:2b:40:52:1b:5b:39:c9:60:e5: d6:83:5e:46:f4:28:77:1e:63:ef:6e:15:3f:a8:44:f3:9c:22: 25:80:4a:ea:92:8b:20:70:2c:8f:08:ea:6a:5e:83:90:3d:51: 6b:e6:c5:ef:c8:10:e5:7d:98:5b:a7:9c:e4:41:0c:5e:eb:cd: dd:19:21:2f:0e:ec:43:d5:cd:05:c7:fb:56:d9:21:a3:a1:eb: 39:a7:83:d5:d1:c6:e6:45:2f:23:34:1a:a2:52:4e:a0:de:51: 02:ce:63:2c:d8:3f:08:e7:1a:55:1c:1e:e2:b8:72:04:bd:33: 31:09:46:d1:ea:e0:c6:c3:bf:e1:cf:69:98:af:9c:65:2a:c7: bd:c5:68:37 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYwd3r/eXYDH/PekE8m9+/4PA7XkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyOTAwMDAwMFoX DTI0MTIwMzIzNTk1OVowejFJMEcGA1UEBRNANmUxNDZlYTJjNjA3NmNiMmRiOWE0 MWExN2I0YTU4NDY3YzU1NjU2NzUxNTNjYTlkNDJmM2EyZTRhYjZkNWFjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jnodmFehiwysHhr93EEhb9M8R6+ lKR/PyDPKHghpaG+5axuTNrLK5w+t2jZn+5qLkeyAc+P10+HSl5WlUmPzk0l45qm vT2AkpXdC6uDh/FnjK87UWFBXBY4SumPdcWrxdHa8RnPIngkBCkCUklH09aCxqIB uaEdHs7HNbCi5Mh13A5FLEHorKO6W2GjZHnhxUP2TDfAZ4dhv2+DE+lvBgQgZwjk cpt4WJd+PnVWECKi2CItksWTkbrXcf+tVvyoOha4r/jRX7gmDqD3DMCWoGVMwDDb GgLAVCCx54c2BUrr6USlqJ6WVHE0th0mDaHAoK8bY8rTLvSFDqD1ywC2YwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOZmZ9wPY136IWdrjR6RdiePH2s4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkOGJiOTI3LTI0NDUtNGE4Yy1hZmE5LWNjOWZkMjgzOWM1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/AgwDQYJKoZIhvcNAQELBQADggEBABYt8pvnFL/lnIEWMxO/ p4SB5OURQaIDB3C1CZJ37Enow6wJoT6X5jnRtwmI3ONW3HRhJzDN1sfKGXgcZHCK RXtxcR/nIpbXklQ67jOXHBR/Vel20JTdydIctGqIJc5o8hiuqt7WwC86SS82gNKe K4jUeelwtitAUhtbOclg5daDXkb0KHceY+9uFT+oRPOcIiWASuqSiyBwLI8I6mpe g5A9UWvmxe/IEOV9mFunnORBDF7rzd0ZIS8O7EPVzQXH+1bZIaOh6zmng9XRxuZF LyM0GqJSTqDeUQLOYyzYPwjnGlUcHuK4cgS9MzEJRtHq4MbDv+HPaZivnGUqx73F aDc= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:40 2024 by rpki-client on console-ams.rpki-client.org