$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e12ebfb3-de22-49f4-b321-09628178aadd.roa File: e12ebfb3-de22-49f4-b321-09628178aadd.roa (raw, json) Hash identifier: XYIfvhXrx4llBxXvT/EzkkjKX4E/6TfqhtxULTRpfRw= Subject key identifier: 98:00:97:CE:0F:50:B6:A9:A1:B2:63:01:71:38:67:75:7B:01:C0:25 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 018F8D65A1613D21338FFA8DF7FA041095E4364C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e12ebfb3-de22-49f4-b321-09628178aadd.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8d:65:a1:61:3d:21:33:8f:fa:8d:f7:fa:04:10:95:e4:36:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=fd31bfdfc34569f5268c8e9840e688e86267b0e7b4c4678e228608e08e44301d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:bc:fd:fd:19:22:c9:65:a8:42:bf:5d:cf: 5a:af:37:13:80:9a:10:92:34:c3:83:7d:fb:7b:cf: ea:83:15:06:ac:f7:17:be:65:29:b6:15:e6:43:26: 9f:5d:18:74:e4:14:97:df:75:f9:7e:d3:4b:c1:15: 32:3e:78:be:3b:bc:11:d4:1f:16:09:5b:09:75:ea: 4a:30:8b:0d:b6:6c:73:e4:d6:4e:80:38:21:06:64: fa:66:a4:2e:54:da:00:03:1b:1e:55:ec:bf:a3:16: 98:9d:1d:40:04:2a:80:05:f7:be:86:db:4b:f3:75: 54:d9:ae:84:ff:3f:23:8f:8e:f4:80:1c:d1:5d:89: 96:47:2c:35:c9:e9:79:c7:18:ba:4f:aa:04:eb:60: 46:94:ea:af:f3:11:8b:f0:5d:bd:10:db:ff:af:1e: fd:08:ad:2a:0f:13:f0:8e:fa:65:c2:8d:a5:eb:d0: ab:d3:3f:b6:73:52:27:88:7a:7c:f5:95:7b:b5:c6: 4d:a5:38:58:6d:36:e2:02:ee:ea:c6:0b:27:2e:0b: 2e:01:0c:0a:fe:bc:9c:ca:92:17:65:eb:4f:25:af: b3:6e:3e:fc:4b:be:1e:3c:36:8e:4e:9f:4b:18:47: 4e:6d:0a:7e:30:c2:10:e5:4a:35:1c:af:a6:9f:cd: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:00:97:CE:0F:50:B6:A9:A1:B2:63:01:71:38:67:75:7B:01:C0:25 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e12ebfb3-de22-49f4-b321-09628178aadd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:2800::/40 Signature Algorithm: sha256WithRSAEncryption 9c:f5:d7:62:8b:14:ea:5c:d7:0e:80:49:e4:37:38:9b:32:9d: 13:63:a3:0e:36:ed:63:4d:52:82:98:9f:b5:ee:18:ae:66:9e: 2a:be:74:10:ac:ef:2f:2b:39:71:d7:22:89:5e:b1:0d:fc:38: 24:24:48:f5:a3:05:c8:1d:cf:e4:ce:2d:c0:6d:df:70:50:42: 83:05:01:ec:34:d8:4b:05:10:2a:a2:66:88:e7:67:7d:10:9c: ee:15:c8:97:62:7c:85:f0:f0:ad:98:57:c3:34:81:44:34:b1: 4b:c1:93:c4:4c:ad:6c:6c:15:15:0b:40:33:d9:c6:81:b5:78: a4:20:d6:c7:de:c2:97:70:11:f2:eb:00:9f:c2:8d:ba:25:3a: 94:f8:6b:f3:5b:0b:be:17:67:43:5d:f7:2a:05:09:3b:d0:9b: 9f:71:f4:21:7f:d7:2c:30:44:ef:0e:45:58:fa:2d:c7:08:46: d1:bb:97:9f:ef:f6:a7:3e:86:6c:ac:2e:8d:8d:6f:cc:08:74: 87:47:94:f0:f0:1b:5c:3a:ab:aa:6a:71:1c:6a:fa:44:c1:e1: b4:2f:7c:e2:f5:6f:e2:31:f7:5c:5b:6c:d6:32:87:2b:12:a2: 97:d8:00:e0:a4:11:70:16:5c:db:bf:e7:dc:40:a1:a2:10:76: f8:0c:81:e3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAY+NZaFhPSEzj/qN9/oEEJXkNkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAZmQzMWJmZGZjMzQ1NjlmNTI2OGM4 ZTk4NDBlNjg4ZTg2MjY3YjBlN2I0YzQ2NzhlMjI4NjA4ZTA4ZTQ0MzAxZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGa8/f0ZIsllqEK/Xc9arzcTgJoQ kjTDg337e8/qgxUGrPcXvmUpthXmQyafXRh05BSX33X5ftNLwRUyPni+O7wR1B8W CVsJdepKMIsNtmxz5NZOgDghBmT6ZqQuVNoAAxseVey/oxaYnR1ABCqABfe+httL 83VU2a6E/z8jj470gBzRXYmWRyw1yel5xxi6T6oE62BGlOqv8xGL8F29ENv/rx79 CK0qDxPwjvplwo2l69Cr0z+2c1IniHp89ZV7tcZNpThYbTbiAu7qxgsnLgsuAQwK /rycypIXZetPJa+zbj78S74ePDaOTp9LGEdObQp+MMIQ5Uo1HK+mn8252QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJgAl84PULapobJjAXE4Z3V7AcAlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxMmViZmIzLWRlMjItNDlmNC1iMzIxLTA5NjI4MTc4YWFkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9igwDQYJKoZIhvcNAQELBQADggEBAJz112KLFOpc1w6ASeQ3 OJsynRNjow427WNNUoKYn7XuGK5mniq+dBCs7y8rOXHXIolesQ38OCQkSPWjBcgd z+TOLcBt33BQQoMFAew02EsFECqiZojnZ30QnO4VyJdifIXw8K2YV8M0gUQ0sUvB k8RMrWxsFRULQDPZxoG1eKQg1sfewpdwEfLrAJ/CjbolOpT4a/NbC74XZ0Nd9yoF CTvQm59x9CF/1ywwRO8ORVj6LccIRtG7l5/v9qc+hmysLo2Nb8wIdIdHlPDwG1w6 q6pqcRxq+kTB4bQvfOL1b+Ix91xbbNYyhysSopfYAOCkEXAWXNu/59xAoaIQdvgM geM= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:37 2024 by rpki-client on console-fra.rpki-client.org