$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edbc6fb5-ebb3-4ac4-9475-ea43f00f10e6.roa File: edbc6fb5-ebb3-4ac4-9475-ea43f00f10e6.roa (raw, json) Hash identifier: KgBTxouO9U6yQlvXMjF/EL6jSPjE9BMTjs2YAKZvDLE= Subject key identifier: FC:E5:AA:18:10:E7:2D:07:12:EE:5B:41:47:48:41:FD:65:84:03:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02DA012EB6745F04F85991562BC2EB67C34F0FA8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edbc6fb5-ebb3-4ac4-9475-ea43f00f10e6.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf9:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:da:01:2e:b6:74:5f:04:f8:59:91:56:2b:c2:eb:67:c3:4f:0f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=402c864d732fea580904c85dd23fabe28a1f048d9a758554ee821b57b874fd05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:91:16:5b:3c:61:e1:93:e8:fe:e3:48:2c: 69:e9:49:78:e6:cc:04:8c:7c:3f:b5:f8:8d:da:95: df:a6:54:4f:70:df:89:9d:8f:44:65:6e:5f:9f:76: 57:bc:04:ae:41:69:d1:5e:ca:91:ad:fa:1e:be:21: 9e:54:5f:17:55:72:6b:1f:9c:bf:35:37:36:b1:4c: 51:e2:67:15:14:84:6a:4d:67:3d:42:b8:52:95:6b: 7e:25:31:74:ec:01:fb:1c:ce:f8:b1:ae:ad:4a:b7: 6d:99:41:aa:c7:9f:c5:49:2d:d1:51:6c:ef:85:52: 35:3f:5f:d8:d6:28:df:ac:a3:bb:8a:53:5c:89:42: 4a:62:f5:5c:3b:d8:93:33:47:24:07:a5:16:e1:64: 94:4d:5e:2c:ed:4b:10:71:7b:7f:3b:dc:f7:c6:bf: 4b:f1:bd:db:9e:41:0f:9b:7a:70:bb:e8:90:ed:20: 66:71:cd:9a:48:7c:d7:cf:e3:b6:f0:ca:0b:8d:9a: 6c:89:a2:77:df:7f:ab:fb:bf:94:46:0a:5f:fd:16: 0e:7b:49:99:24:23:a4:e3:21:5c:4a:9d:ff:ed:ef: 86:70:22:db:96:c5:7c:e2:35:01:c2:df:77:c7:bc: 5b:fd:66:8c:41:b0:43:43:4d:03:2c:8f:3a:09:80: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E5:AA:18:10:E7:2D:07:12:EE:5B:41:47:48:41:FD:65:84:03:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edbc6fb5-ebb3-4ac4-9475-ea43f00f10e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf9:f000::/40 Signature Algorithm: sha256WithRSAEncryption a8:4c:2d:27:af:cf:22:39:da:7d:f9:75:d5:6e:1c:11:80:26: ac:5d:d6:fb:31:45:3b:d9:57:a6:7d:b1:a4:f4:f5:c4:59:df: ca:79:c6:a4:d6:c9:17:68:2c:09:76:45:6a:5d:0d:7e:6d:8a: 27:56:98:ee:ed:11:fd:3d:fb:bb:0c:33:c4:c2:eb:0d:5a:1b: 86:1a:11:c0:2c:42:d5:d6:83:d6:f2:6a:e0:5f:82:b1:d9:45: 2f:55:45:1d:ca:e0:fc:0d:73:9b:eb:07:87:1e:d6:b9:e3:8b: 51:81:82:05:8e:48:70:f0:6b:fd:d1:13:e9:eb:77:66:55:76: 7c:b3:13:17:9e:96:18:66:71:5c:e6:fc:8a:b5:0c:60:94:c2: 3a:7f:04:65:ac:5d:e5:7e:02:c4:2c:7c:ef:8d:91:5b:2f:76: e1:0b:49:83:98:f5:00:e3:06:9a:ab:51:2c:f1:18:ed:b1:0f: 05:68:83:62:59:45:b9:a1:a0:a6:6a:6a:22:a3:2f:ee:d2:8e: ec:7a:84:84:e3:e9:aa:3d:ba:ff:73:f1:7e:04:34:8e:e1:11: fd:05:e5:bf:48:a6:38:ac:2d:f6:89:f1:21:bb:ef:4a:9c:b5: b3:22:92:55:d1:93:05:12:3c:99:fd:1a:87:c4:70:fe:77:c3: b6:83:d7:b1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAtoBLrZ0XwT4WZFWK8LrZ8NPD6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNANDAyYzg2NGQ3MzJmZWE1ODA5MDRj ODVkZDIzZmFiZTI4YTFmMDQ4ZDlhNzU4NTU0ZWU4MjFiNTdiODc0ZmQwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAummRFls8YeGT6P7jSCxp6Ul45swE jHw/tfiN2pXfplRPcN+JnY9EZW5fn3ZXvASuQWnRXsqRrfoeviGeVF8XVXJrH5y/ NTc2sUxR4mcVFIRqTWc9QrhSlWt+JTF07AH7HM74sa6tSrdtmUGqx5/FSS3RUWzv hVI1P1/Y1ijfrKO7ilNciUJKYvVcO9iTM0ckB6UW4WSUTV4s7UsQcXt/O9z3xr9L 8b3bnkEPm3pwu+iQ7SBmcc2aSHzXz+O28MoLjZpsiaJ333+r+7+URgpf/RYOe0mZ JCOk4yFcSp3/7e+GcCLblsV84jUBwt93x7xb/WaMQbBDQ00DLI86CYAhSQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPzlqhgQ5y0HEu5bQUdIQf1lhANtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkYmM2ZmI1LWViYjMtNGFjNC05NDc1LWVhNDNmMDBmMTBlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+fAwDQYJKoZIhvcNAQELBQADggEBAKhMLSevzyI52n35ddVu HBGAJqxd1vsxRTvZV6Z9saT09cRZ38p5xqTWyRdoLAl2RWpdDX5tiidWmO7tEf09 +7sMM8TC6w1aG4YaEcAsQtXWg9byauBfgrHZRS9VRR3K4PwNc5vrB4ce1rnji1GB ggWOSHDwa/3RE+nrd2ZVdnyzExeelhhmcVzm/Iq1DGCUwjp/BGWsXeV+AsQsfO+N kVsvduELSYOY9QDjBpqrUSzxGO2xDwVog2JZRbmhoKZqaiKjL+7Sjux6hITj6ao9 uv9z8X4ENI7hEf0F5b9IpjisLfaJ8SG770qctbMiklXRkwUSPJn9GofEcP53w7aD 17E= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:46 2023 by rpki-client on console-fra.rpki-client.org