$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecadad04-3a27-41ee-a687-4b1661f3c07e.roa File: ecadad04-3a27-41ee-a687-4b1661f3c07e.roa (raw, json) Hash identifier: C5Ez/GRJ46jlXEZ6PsfyKub6NmDpeMQYVyHMdltXsDU= Subject key identifier: C1:17:C2:D1:0A:70:92:93:FA:DA:F3:09:8E:15:E9:7D:3B:51:AC:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41F7888569DF1D8C725C15622BD2983821A5AD4D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecadad04-3a27-41ee-a687-4b1661f3c07e.roa Signing time: Tue 16 Jul 2024 00:00:00 +0000 ROA not before: Tue 16 Jul 2024 00:00:00 +0000 ROA not after: Tue 20 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f7:88:85:69:df:1d:8c:72:5c:15:62:2b:d2:98:38:21:a5:ad:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:00 2024 GMT Not After : Aug 20 23:59:59 2024 GMT Subject: serialNumber=39b43ba7b21fcac59f1aedc7af59c62d09e563de80cbd60e559486bb19091d01, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:6e:59:5c:65:53:25:bc:d0:f9:0f:fd:f7: ae:4f:47:09:04:51:7e:d6:35:1d:7f:ed:58:56:cc: 9e:69:41:d9:69:fe:67:d5:7c:85:bd:3a:21:06:68: 18:ee:c2:2b:58:f2:78:f1:dc:8b:56:08:ec:1a:63: d1:c4:68:4d:a3:32:3f:06:75:f5:35:10:85:af:4e: ff:2e:af:26:fe:c7:a1:02:e3:ac:c4:9c:64:43:98: 7a:6b:00:14:c8:47:d0:a3:45:90:86:45:02:5d:21: 3a:df:7f:01:ba:0d:0f:5f:0e:54:c0:4e:aa:9f:08: 8e:60:aa:65:6a:d0:25:f1:6f:90:ca:9f:53:3e:a3: ac:c7:8b:d9:d3:41:22:42:5b:2c:a8:8d:31:86:f9: 98:27:9f:d9:c2:71:77:9e:f3:66:b2:4c:cc:c9:38: a0:9e:7b:d4:47:42:08:df:33:7c:ae:f2:18:e8:5d: 79:4c:a2:ea:2a:f0:4d:97:86:b2:9e:dd:d6:5f:48: 8a:40:7e:61:84:f0:27:fb:e7:07:cf:77:82:e9:9c: a5:27:c2:b1:9c:f3:7e:8f:6e:3a:68:5d:6f:c1:10: bd:58:8a:f1:15:dd:35:49:c7:1c:a5:ee:86:a9:14: 25:04:e2:15:4e:de:90:02:e0:f7:3b:8c:49:1b:0f: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:17:C2:D1:0A:70:92:93:FA:DA:F3:09:8E:15:E9:7D:3B:51:AC:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecadad04-3a27-41ee-a687-4b1661f3c07e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:4800::/40 Signature Algorithm: sha256WithRSAEncryption b8:45:16:d0:9f:bd:3e:13:aa:fd:24:3f:d0:1f:bb:7b:ab:6e: 2f:c5:72:54:54:df:6a:30:8c:42:fc:3c:6d:d8:30:18:45:9c: 1f:63:9c:3b:ac:cd:fd:22:2d:35:2d:85:5d:62:23:06:0f:79: cb:89:b6:c6:4c:04:0c:a2:a5:ad:82:61:44:e6:17:57:c7:d6: 65:47:be:db:92:a5:24:76:24:18:1d:cb:93:57:e9:76:a3:b4: e5:a2:a8:73:09:1b:91:67:dd:7e:04:cf:56:ef:d7:58:b1:1f: bb:c5:bb:90:49:38:b9:d0:c3:ad:52:c3:d8:3e:e3:5a:43:45: 69:5e:78:1d:54:06:f5:a8:61:3d:cb:15:b1:a4:c9:fc:e8:5b: 4e:bb:d5:8f:6f:d9:cd:3d:9e:25:5c:93:18:2c:32:d3:54:8c: a2:42:5c:6a:30:ef:68:d9:a2:35:27:93:f4:09:09:67:a4:e2: 58:86:ae:10:9e:69:e4:18:a5:b4:c2:51:4a:96:2b:e0:f4:be: 07:5b:ed:0a:5f:8f:c5:f4:89:dd:10:fc:f5:96:aa:6f:8d:6c: f3:b8:5f:87:ff:9d:7b:34:58:5a:9b:62:3e:8c:91:cc:bd:d7: f6:26:a0:d7:06:12:67:9b:18:81:50:f6:b2:8a:26:ab:31:ca: cb:7f:fd:a4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQfeIhWnfHYxyXBViK9KYOCGlrU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNjAwMDAwMFoX DTI0MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMzliNDNiYTdiMjFmY2FjNTlmMWFl ZGM3YWY1OWM2MmQwOWU1NjNkZTgwY2JkNjBlNTU5NDg2YmIxOTA5MWQwMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GhuWVxlUyW80PkP/feuT0cJBFF+ 1jUdf+1YVsyeaUHZaf5n1XyFvTohBmgY7sIrWPJ48dyLVgjsGmPRxGhNozI/BnX1 NRCFr07/Lq8m/sehAuOsxJxkQ5h6awAUyEfQo0WQhkUCXSE6338Bug0PXw5UwE6q nwiOYKplatAl8W+Qyp9TPqOsx4vZ00EiQlssqI0xhvmYJ5/ZwnF3nvNmskzMyTig nnvUR0II3zN8rvIY6F15TKLqKvBNl4aynt3WX0iKQH5hhPAn++cHz3eC6ZylJ8Kx nPN+j246aF1vwRC9WIrxFd01Scccpe6GqRQlBOIVTt6QAuD3O4xJGw8uKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMEXwtEKcJKT+trzCY4V6X07UazKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjYWRhZDA0LTNhMjctNDFlZS1hNjg3LTRiMTY2MWYzYzA3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8UgwDQYJKoZIhvcNAQELBQADggEBALhFFtCfvT4Tqv0kP9Af u3urbi/FclRU32owjEL8PG3YMBhFnB9jnDuszf0iLTUthV1iIwYPecuJtsZMBAyi pa2CYUTmF1fH1mVHvtuSpSR2JBgdy5NX6XajtOWiqHMJG5Fn3X4Ez1bv11ixH7vF u5BJOLnQw61Sw9g+41pDRWleeB1UBvWoYT3LFbGkyfzoW0671Y9v2c09niVckxgs MtNUjKJCXGow72jZojUnk/QJCWek4liGrhCeaeQYpbTCUUqWK+D0vgdb7Qpfj8X0 id0Q/PWWqm+NbPO4X4f/nXs0WFqbYj6Mkcy91/YmoNcGEmebGIFQ9rKKJqsxyst/ /aQ= -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:41 2024 by rpki-client on console-ams.rpki-client.org