$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa File: df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa (raw, json) Hash identifier: 2uJi8fNhJuxp1HN8qT5eZEuaezpao8Qi+mMdl7sVgPc= Subject key identifier: 30:E6:44:6C:E4:FA:36:0D:A5:89:A8:E3:00:C1:7A:FB:C9:4B:D0:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55A7E8FA580D37952D2B7BAA4CDDB7AD07671B8F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa Signing time: Tue 09 Apr 2024 00:00:00 +0000 ROA not before: Tue 09 Apr 2024 00:00:00 +0000 ROA not after: Tue 14 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 00:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a7:e8:fa:58:0d:37:95:2d:2b:7b:aa:4c:dd:b7:ad:07:67:1b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 9 00:00:00 2024 GMT Not After : May 14 23:59:59 2024 GMT Subject: serialNumber=1ad053c7e951665d42ea669578af2af0399621d9141f1cd4567c5a4576d3d14e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:01:f5:37:d2:59:a8:ba:6d:da:e3:28:0f: 23:80:a0:e1:cd:48:ae:f1:a1:85:7b:ce:5a:2b:fa: 46:ae:a7:01:f0:92:b7:4d:dd:ae:11:26:75:76:a6: 2c:a1:a3:1e:0d:55:45:85:31:e1:75:39:97:db:3d: 4c:88:06:e7:24:67:d9:8c:44:81:89:30:93:ca:b6: f5:90:c8:1d:88:c6:b9:f2:26:16:82:f0:f1:c1:de: 53:41:55:56:b0:8a:1a:14:33:7c:7f:59:09:13:a0: 5e:2d:1e:af:a9:c3:d6:5a:c9:1d:33:d4:e3:68:94: 29:51:e3:86:ae:ee:7b:d6:64:40:ac:e9:c1:f8:73: 2b:0b:4e:64:1e:af:7e:e0:45:8d:08:8b:8c:a8:dd: 53:3e:11:db:4e:bf:b5:1a:84:3c:9a:14:fa:85:cb: 73:a6:04:72:d8:47:4f:32:8a:c6:a7:2e:63:e3:0b: d0:11:35:86:1c:0e:1c:70:d2:25:2f:b7:8b:58:96: 52:8a:be:cd:b9:b1:f7:4a:eb:bc:ef:c7:8a:11:8c: 7d:bf:14:2b:9b:bd:2e:2c:86:05:ec:9a:a8:0e:10: 42:0f:86:59:06:bc:b4:92:4c:48:0f:47:eb:65:2c: 94:91:13:2a:a9:47:da:80:ee:28:74:98:d8:78:25: 30:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E6:44:6C:E4:FA:36:0D:A5:89:A8:E3:00:C1:7A:FB:C9:4B:D0:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:800::/40 Signature Algorithm: sha256WithRSAEncryption 19:a0:dc:7b:ac:fb:9d:6d:b9:27:9a:49:10:c3:0b:0a:a6:e4: 54:2c:ab:fc:0c:52:9b:8f:36:59:cc:cd:84:ae:1b:ce:d4:58: dd:ab:3f:ad:dd:96:2f:9d:97:1b:2e:1e:9b:4a:9f:16:5f:04: df:21:69:0c:2c:29:29:ff:51:1e:1e:58:5b:59:9c:92:ef:b6: 8d:ba:b6:79:35:65:76:ce:40:69:88:59:3b:31:34:60:2e:22: e4:2c:66:40:94:d1:63:d7:c1:57:ab:24:22:64:54:da:d2:c6: f0:fc:7e:09:1f:ea:32:cd:2b:1a:ea:5b:59:69:fd:18:83:91: 37:d7:df:4f:1e:96:a8:8a:b5:0b:58:eb:94:89:e5:4c:c9:c3: 7c:87:ad:95:2e:da:85:6a:ae:ae:7a:72:8b:fb:c7:24:2b:d3: 3d:4f:af:f4:da:75:a6:62:c1:7d:a9:0f:29:b1:d0:98:6c:95: ad:22:0f:45:55:ae:d5:e1:f1:55:ce:8f:8e:a6:e5:92:41:e1: 4c:19:b8:24:ba:6a:cb:5c:25:5b:23:95:65:45:33:46:0b:11: 51:f0:87:0e:a8:76:18:77:30:00:12:02:33:cc:8f:d5:aa:ce: f0:bd:0c:c2:4a:90:be:7c:ae:9f:57:55:7a:08:ce:57:da:24: 44:47:9d:fa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVafo+lgNN5UtK3uqTN23rQdnG48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwOTAwMDAwMFoX DTI0MDUxNDIzNTk1OVowejFJMEcGA1UEBRNAMWFkMDUzYzdlOTUxNjY1ZDQyZWE2 Njk1NzhhZjJhZjAzOTk2MjFkOTE0MWYxY2Q0NTY3YzVhNDU3NmQzZDE0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArasB9TfSWai6bdrjKA8jgKDhzUiu 8aGFe85aK/pGrqcB8JK3Td2uESZ1dqYsoaMeDVVFhTHhdTmX2z1MiAbnJGfZjESB iTCTyrb1kMgdiMa58iYWgvDxwd5TQVVWsIoaFDN8f1kJE6BeLR6vqcPWWskdM9Tj aJQpUeOGru571mRArOnB+HMrC05kHq9+4EWNCIuMqN1TPhHbTr+1GoQ8mhT6hctz pgRy2EdPMorGpy5j4wvQETWGHA4ccNIlL7eLWJZSir7NubH3Suu878eKEYx9vxQr m70uLIYF7JqoDhBCD4ZZBry0kkxID0frZSyUkRMqqUfagO4odJjYeCUwHwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDDmRGzk+jYNpYmo4wDBevvJS9BLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMGVhOGU1LTJkNTUtNDIxNC05ZTA2LTVlNmZmMzg1MDgzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoAgwDQYJKoZIhvcNAQELBQADggEBABmg3Hus+51tuSeaSRDD Cwqm5FQsq/wMUpuPNlnMzYSuG87UWN2rP63dli+dlxsuHptKnxZfBN8haQwsKSn/ UR4eWFtZnJLvto26tnk1ZXbOQGmIWTsxNGAuIuQsZkCU0WPXwVerJCJkVNrSxvD8 fgkf6jLNKxrqW1lp/RiDkTfX308elqiKtQtY65SJ5UzJw3yHrZUu2oVqrq56cov7 xyQr0z1Pr/TadaZiwX2pDymx0Jhsla0iD0VVrtXh8VXOj46m5ZJB4UwZuCS6astc JVsjlWVFM0YLEVHwhw6odhh3MAASAjPMj9WqzvC9DMJKkL58rp9XVXoIzlfaJERH nfo= -----END CERTIFICATE-----Generated at Fri May 3 01:27:45 2024 by rpki-client on console-fra.rpki-client.org