$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9b3edad-e8f0-4c40-a573-188837983947.roa File: e9b3edad-e8f0-4c40-a573-188837983947.roa (raw, json) Hash identifier: W775OC/THe78+SYjkyQtOnFhmja/cD1r/R111bQY2Xk= Subject key identifier: 1C:62:3B:7C:35:1F:8A:B9:95:9C:7F:22:34:15:38:AC:FD:22:19:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 733680DE587680AEF2F5002A2FE7E455DAFA01F7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9b3edad-e8f0-4c40-a573-188837983947.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:36:80:de:58:76:80:ae:f2:f5:00:2a:2f:e7:e4:55:da:fa:01:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=b9615f6fd1506905027e98f153deaba15fd8f618477ea3c194beadc493db7ecb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:03:28:26:67:78:0b:77:79:e1:ae:fc:a6: a5:66:74:a2:e7:a6:2c:52:16:41:3e:cc:f3:bc:95: 01:f9:7b:cd:30:7d:0c:57:90:25:93:30:68:f3:d6: 03:db:8d:89:27:34:16:45:74:13:81:95:2b:ba:77: 60:5f:8a:fa:48:20:97:f6:1b:88:bc:e9:d7:a4:c8: c3:3d:ff:67:de:2b:bc:ba:83:64:50:43:a8:e7:fb: 8a:7e:27:c0:56:bf:c3:3e:e5:92:9a:cd:d4:94:87: fd:f0:65:1b:c5:7f:b7:a5:dd:ac:6f:e2:a3:61:6d: ad:ab:5d:df:6d:09:61:bc:b3:d8:9c:6b:8f:ca:fd: 85:68:21:86:b3:0c:16:ef:57:23:ad:ab:7e:6c:31: 19:9b:07:d7:e7:53:a7:ce:fa:8e:78:cd:84:a2:9b: 31:c6:3a:b0:08:e3:1a:c3:d3:3a:6e:d5:96:a0:9e: 8b:25:8e:8c:1a:40:79:fd:d3:37:e8:81:3c:c1:36: af:68:b9:04:66:99:55:82:99:01:9e:db:00:6b:26: 7c:2e:79:86:84:57:d4:a9:37:ee:d2:e4:99:28:3b: 24:29:0a:81:d3:0a:0d:fd:9d:1e:a0:47:ed:36:dd: 1b:6d:e2:10:8c:9d:ac:7a:96:57:1f:c4:9d:68:ce: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:62:3B:7C:35:1F:8A:B9:95:9C:7F:22:34:15:38:AC:FD:22:19:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9b3edad-e8f0-4c40-a573-188837983947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:4c:c0:d9:69:e5:99:b7:61:4d:43:eb:a7:63:dc:00:8e:a7: 68:53:e7:8c:2c:1b:7d:83:2a:d1:0e:46:35:19:f2:fc:c9:99: 58:0a:47:95:da:51:dc:95:17:10:11:9d:61:8e:7d:24:8e:6c: 35:82:4a:9c:69:d9:e6:35:ea:de:a7:e1:d5:b7:fd:e3:6a:2e: 83:4f:cd:0a:fb:c8:4b:b0:0e:52:86:9b:15:37:94:72:95:16: 4a:16:d3:a9:b2:dd:e7:28:51:f4:6a:be:f3:a6:87:00:4a:49: 1b:0c:4b:22:ad:f5:61:d1:06:ea:34:56:f2:ce:6a:ab:2e:12: 79:d8:4d:86:9b:6f:54:9e:93:07:79:2e:aa:a8:0d:d4:c1:78: b8:52:2a:57:b1:de:1e:a7:0a:ea:7c:45:c4:d8:53:af:bb:f8: 0d:60:76:ee:0c:4e:d8:5a:ad:7b:1b:8d:77:b9:0e:63:5a:73: 78:ca:42:72:82:d6:6a:e0:56:22:28:e3:5b:a3:ca:07:75:ed: 50:95:36:54:5a:ba:a0:6d:e7:5f:01:1c:97:54:04:7f:b1:7f: c5:ec:05:9a:fe:ee:94:05:7c:e9:a2:f7:ac:09:7a:d0:99:f5: 59:86:2f:fe:20:4c:29:b3:ea:c5:0f:24:91:7b:86:ee:93:ad: 0d:18:2c:8e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUczaA3lh2gK7y9QAqL+fkVdr6AfcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAYjk2MTVmNmZkMTUwNjkwNTAyN2U5 OGYxNTNkZWFiYTE1ZmQ4ZjYxODQ3N2VhM2MxOTRiZWFkYzQ5M2RiN2VjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfwDKCZneAt3eeGu/KalZnSi56Ys UhZBPszzvJUB+XvNMH0MV5AlkzBo89YD242JJzQWRXQTgZUrundgX4r6SCCX9huI vOnXpMjDPf9n3iu8uoNkUEOo5/uKfifAVr/DPuWSms3UlIf98GUbxX+3pd2sb+Kj YW2tq13fbQlhvLPYnGuPyv2FaCGGswwW71cjrat+bDEZmwfX51OnzvqOeM2Eopsx xjqwCOMaw9M6btWWoJ6LJY6MGkB5/dM36IE8wTavaLkEZplVgpkBntsAayZ8LnmG hFfUqTfu0uSZKDskKQqB0woN/Z0eoEftNt0bbeIQjJ2sepZXH8SdaM63WwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBxiO3w1H4q5lZx/IjQVOKz9IhmIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U5YjNlZGFkLWU4ZjAtNGM0MC1hNTczLTE4ODgzNzk4Mzk0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/6AwDQYJKoZIhvcNAQELBQADggEBAA5MwNlp5Zm3YU1D66dj 3ACOp2hT54wsG32DKtEORjUZ8vzJmVgKR5XaUdyVFxARnWGOfSSObDWCSpxp2eY1 6t6n4dW3/eNqLoNPzQr7yEuwDlKGmxU3lHKVFkoW06my3ecoUfRqvvOmhwBKSRsM SyKt9WHRBuo0VvLOaqsuEnnYTYabb1Sekwd5LqqoDdTBeLhSKlex3h6nCup8RcTY U6+7+A1gdu4MTtharXsbjXe5DmNac3jKQnKC1mrgViIo41ujygd17VCVNlRauqBt 518BHJdUBH+xf8XsBZr+7pQFfOmi96wJetCZ9VmGL/4gTCmz6sUPJJF7hu6TrQ0Y LI4= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:46 2023 by rpki-client on console-fra.rpki-client.org