$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa File: e4a99edb-d5fe-48fe-a94d-645381e8080f.roa (raw, json) Hash identifier: 7+mFzF9oOGIj+rhFuyepFk8QkG0RGF5/izeKtlpk4bg= Subject key identifier: 63:8F:74:42:62:12:91:28:F4:31:0F:DD:72:0B:17:8B:E6:EF:00:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 33AA5C372A32A06A04EE19359BF4F33AC33D60C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 43.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Oct 2024 00:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:aa:5c:37:2a:32:a0:6a:04:ee:19:35:9b:f4:f3:3a:c3:3d:60:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=ec77d85844e5101410969dae83721ebd7e52f8b1a50c3f9ee69168a2fff9ea7d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:7c:ef:42:6f:30:95:08:1b:06:08:17:29: f9:df:9e:a6:5c:13:0d:0b:cc:3d:79:35:7d:91:a2: b5:16:a4:22:10:90:0a:dc:42:c9:b4:3e:b7:97:ee: 8f:a0:55:04:6e:79:7e:c1:f4:71:05:f6:90:e6:1b: bd:cf:5f:e8:68:64:dd:7e:4a:32:4c:cc:cc:49:7b: 3d:67:40:64:15:0d:81:24:4a:d1:b7:d7:11:d7:d8: 78:d3:1e:3e:d2:f4:8e:1b:8e:c5:53:8a:ff:96:65: 9c:69:17:51:87:ea:ea:23:27:1b:dd:2b:f5:ac:ab: d1:a9:2a:8b:9e:29:5d:6f:4d:86:c8:11:b2:bb:37: fa:40:f3:5e:4c:75:ad:48:17:88:ed:ab:29:f6:e6: b6:4b:26:1c:39:d8:a5:f7:70:b8:b8:09:7d:46:b2: 60:06:b3:7f:28:55:26:a4:61:16:1c:b2:9c:b0:f5: 58:1a:0d:ec:e7:a4:f4:96:a4:7b:a7:68:4e:ed:8b: 98:23:d7:24:47:3c:b4:4f:ce:1d:b6:ab:66:a7:f6: 15:34:ab:40:1c:01:c1:27:1e:4e:36:01:6e:0d:b0: b2:0d:3b:d6:f0:2e:d3:aa:20:ad:73:76:d3:29:8f: e2:ae:8a:d0:35:b5:2e:2c:d6:17:4c:d3:22:2e:1e: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8F:74:42:62:12:91:28:F4:31:0F:DD:72:0B:17:8B:E6:EF:00:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption c6:2f:f4:dd:79:35:d6:6f:74:44:9c:92:c7:5a:9f:b0:dd:a1: e0:0d:27:90:ee:bd:21:6b:53:e7:a7:66:49:6a:55:25:0d:bd: 82:3f:9d:c1:da:fb:bc:aa:35:19:81:97:89:52:c2:45:2f:b0: a5:a4:15:50:df:dc:3f:ff:61:06:5d:ea:b1:d6:18:a8:14:4b: b8:ec:9d:3c:33:bb:68:7d:1e:a5:0b:d7:98:c6:35:8b:69:75: 2c:83:c3:17:b1:c1:98:f6:ec:9c:04:c3:2d:74:74:5f:b6:c1: 9e:64:12:66:52:fc:52:2a:43:d3:39:23:4b:56:41:0e:b1:c7: 31:6e:bc:a8:67:27:c7:f0:62:4c:dc:71:7d:ca:ad:70:9f:b3: 44:e7:6a:8e:00:9c:a5:fc:cd:3d:11:90:de:dc:80:96:52:b6: 96:83:37:0c:3c:43:df:26:c2:7f:88:03:04:e3:7c:65:92:3c: 0e:6f:50:08:81:59:d2:01:f3:26:45:80:a4:de:68:47:f5:d8: 38:47:d5:c2:a7:ec:96:77:42:cc:21:99:43:4e:1c:b0:f1:ec: a2:e1:7e:e1:2e:c9:06:85:ab:db:89:1c:6b:b0:75:0b:ed:62: 44:c3:44:f6:fa:45:7b:04:9c:65:e3:81:6d:14:f1:5c:6a:94: dd:81:98:62 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUM6pcNyoyoGoE7hk1m/TzOsM9YMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAZWM3N2Q4NTg0NGU1MTAxNDEwOTY5 ZGFlODM3MjFlYmQ3ZTUyZjhiMWE1MGMzZjllZTY5MTY4YTJmZmY5ZWE3ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gt870JvMJUIGwYIFyn5356mXBMN C8w9eTV9kaK1FqQiEJAK3ELJtD63l+6PoFUEbnl+wfRxBfaQ5hu9z1/oaGTdfkoy TMzMSXs9Z0BkFQ2BJErRt9cR19h40x4+0vSOG47FU4r/lmWcaRdRh+rqIycb3Sv1 rKvRqSqLnildb02GyBGyuzf6QPNeTHWtSBeI7asp9ua2SyYcOdil93C4uAl9RrJg BrN/KFUmpGEWHLKcsPVYGg3s56T0lqR7p2hO7YuYI9ckRzy0T84dtqtmp/YVNKtA HAHBJx5ONgFuDbCyDTvW8C7TqiCtc3bTKY/irorQNbUuLNYXTNMiLh6+oQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFGOPdEJiEpEo9DEP3XILF4vm7wBPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U0YTk5ZWRiLWQ1ZmUtNDhmZS1hOTRkLTY0NTM4MWU4MDgwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9swDQYJKoZIhvcNAQELBQADggEBAMYv9N15NdZvdEScksdan7Dd oeANJ5DuvSFrU+enZklqVSUNvYI/ncHa+7yqNRmBl4lSwkUvsKWkFVDf3D//YQZd 6rHWGKgUS7jsnTwzu2h9HqUL15jGNYtpdSyDwxexwZj27JwEwy10dF+2wZ5kEmZS /FIqQ9M5I0tWQQ6xxzFuvKhnJ8fwYkzccX3KrXCfs0Tnao4AnKX8zT0RkN7cgJZS tpaDNww8Q98mwn+IAwTjfGWSPA5vUAiBWdIB8yZFgKTeaEf12DhH1cKn7JZ3Qswh mUNOHLDx7KLhfuEuyQaFq9uJHGuwdQvtYkTDRPb6RXsEnGXjgW0U8VxqlN2BmGI= -----END CERTIFICATE-----Generated at Sat Oct 12 01:10:13 2024 by rpki-client on console-fra.rpki-client.org