$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa File: e4a99edb-d5fe-48fe-a94d-645381e8080f.roa (raw, json) Hash identifier: +2xOeG4a2jPIHKzsIDdoNkGznKB4oGMlHlS7tI7kn8k= Subject key identifier: AA:57:02:C1:6A:A1:FF:EF:ED:D8:70:86:C3:6A:EC:61:B5:C2:F1:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D3012194AD606B8B904D0FA07C5727726EF09F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa Signing time: Tue 19 Sep 2023 00:00:00 +0000 ROA not before: Tue 19 Sep 2023 00:00:00 +0000 ROA not after: Tue 24 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 43.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:30:12:19:4a:d6:06:b8:b9:04:d0:fa:07:c5:72:77:26:ef:09:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:00:00 2023 GMT Not After : Oct 24 23:59:59 2023 GMT Subject: serialNumber=7c0f096e37275da132ec42d5eb5248a60d4bea63713d3294d99bcfb8639bbc5d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:2f:85:df:6a:07:b9:c3:64:1f:44:50:86: 4e:de:ee:ec:f8:3a:79:1e:56:b5:8e:d7:81:28:21: 04:bd:01:74:b0:db:ba:03:39:e2:2d:76:89:a5:9f: aa:f5:c0:80:a6:ef:10:5c:e6:dc:18:db:10:e2:af: 43:e8:e9:56:32:06:df:7b:92:ec:95:33:38:39:71: 0a:57:e6:f1:a6:45:f6:fb:e5:64:34:d5:02:f5:f5: 1f:3a:86:27:d2:01:dd:b5:ef:2e:d2:ca:39:1a:a0: 0a:a5:25:ee:33:3e:d2:d1:f9:9b:ed:c6:44:90:81: cb:cb:2d:4a:c6:03:db:16:66:66:e2:40:af:fe:43: c2:fb:3a:10:7e:19:e7:f4:66:4a:aa:6c:b8:44:8a: cf:93:64:85:26:84:c8:a8:34:6a:7a:f6:a7:fe:15: 9f:79:58:c1:c6:13:63:95:ce:2f:ed:1c:74:b0:ca: 5b:25:9e:df:a5:65:92:d7:f9:56:a4:9e:7c:35:3d: c3:97:7d:a7:8a:fe:5f:67:7f:5a:ab:34:44:66:77: 95:30:04:e6:22:93:72:84:06:13:80:1c:62:35:4a: 49:df:ad:1f:62:d8:f7:84:ef:86:9f:fe:fd:4f:c6: 51:22:02:0c:6b:b9:13:f2:0b:a6:97:93:3b:bf:13: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:02:C1:6A:A1:FF:EF:ED:D8:70:86:C3:6A:EC:61:B5:C2:F1:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption 93:96:41:1e:15:25:9b:0a:12:a1:7c:59:0c:04:f2:0e:7d:a3: 61:a3:6a:85:f4:c8:84:e5:c6:41:46:0f:c4:2a:74:65:db:18: c2:1b:29:91:61:a7:ea:d7:4a:a3:47:7b:5c:43:d0:d1:4d:f2: 91:f1:8e:7c:d8:31:d8:fa:48:35:99:ea:48:88:2a:79:07:ed: 10:e5:1f:10:fa:38:50:47:be:cf:b8:39:9b:a3:9e:10:aa:d5: dd:9f:21:49:f3:be:28:83:e8:1f:53:f2:fc:a3:b9:73:14:13: ea:4a:81:0e:9b:25:23:8f:22:33:cf:81:18:2e:a3:ab:a1:a8: 6a:d6:bf:46:71:95:cb:08:5c:93:b6:4c:e8:c3:77:f0:41:77: 66:55:63:ed:a9:f2:b6:b9:d4:c4:c0:6e:20:15:ac:f8:3e:05: 15:59:67:d1:6d:ab:19:f7:13:cf:f5:16:e5:f7:e0:28:c7:4b: 94:3e:bd:b3:b7:29:e5:19:22:e2:40:03:6a:82:ff:78:9c:0c: 00:f0:82:1c:d5:3d:f3:eb:63:33:f2:4a:10:25:dc:64:85:5a: 4a:85:c9:4d:69:b7:60:57:45:7d:e9:19:dc:09:8f:d9:39:10: f2:36:aa:eb:c1:0d:63:20:fa:ad:45:9a:e5:80:cb:8a:b8:39: 61:8a:b5:dc -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUXTASGUrWBri5BND6B8VydybvCfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxOTAwMDAwMFoX DTIzMTAyNDIzNTk1OVowejFJMEcGA1UEBRNAN2MwZjA5NmUzNzI3NWRhMTMyZWM0 MmQ1ZWI1MjQ4YTYwZDRiZWE2MzcxM2QzMjk0ZDk5YmNmYjg2MzliYmM1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldAvhd9qB7nDZB9EUIZO3u7s+Dp5 Hla1jteBKCEEvQF0sNu6AzniLXaJpZ+q9cCApu8QXObcGNsQ4q9D6OlWMgbfe5Ls lTM4OXEKV+bxpkX2++VkNNUC9fUfOoYn0gHdte8u0so5GqAKpSXuMz7S0fmb7cZE kIHLyy1KxgPbFmZm4kCv/kPC+zoQfhnn9GZKqmy4RIrPk2SFJoTIqDRqevan/hWf eVjBxhNjlc4v7Rx0sMpbJZ7fpWWS1/lWpJ58NT3Dl32niv5fZ39aqzREZneVMATm IpNyhAYTgBxiNUpJ360fYtj3hO+Gn/79T8ZRIgIMa7kT8guml5M7vxOXXwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFKpXAsFqof/v7dhwhsNq7GG1wvFqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U0YTk5ZWRiLWQ1ZmUtNDhmZS1hOTRkLTY0NTM4MWU4MDgwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9swDQYJKoZIhvcNAQELBQADggEBAJOWQR4VJZsKEqF8WQwE8g59 o2GjaoX0yITlxkFGD8QqdGXbGMIbKZFhp+rXSqNHe1xD0NFN8pHxjnzYMdj6SDWZ 6kiIKnkH7RDlHxD6OFBHvs+4OZujnhCq1d2fIUnzviiD6B9T8vyjuXMUE+pKgQ6b JSOPIjPPgRguo6uhqGrWv0ZxlcsIXJO2TOjDd/BBd2ZVY+2p8ra51MTAbiAVrPg+ BRVZZ9Ftqxn3E8/1FuX34CjHS5Q+vbO3KeUZIuJAA2qC/3icDADwghzVPfPrYzPy ShAl3GSFWkqFyU1pt2BXRX3pGdwJj9k5EPI2quvBDWMg+q1FmuWAy4q4OWGKtdw= -----END CERTIFICATE-----Generated at Tue Sep 19 00:19:35 2023 by rpki-client on console-ams.rpki-client.org