$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f06962bd-0f09-4f1c-984d-8d79e4fd79c3.roa File: f06962bd-0f09-4f1c-984d-8d79e4fd79c3.roa (raw, json) Hash identifier: cC5RuiZU2iCdMSTZvpHNdYC0XzbKg+sOqzI4ECJpztc= Subject key identifier: 28:DC:77:26:45:59:1C:46:11:56:46:F8:44:DD:C5:C0:F1:37:BB:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5826984C87DEB356AD6DBAD093C794A5ACCEAE84 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f06962bd-0f09-4f1c-984d-8d79e4fd79c3.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 43.216.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:26:98:4c:87:de:b3:56:ad:6d:ba:d0:93:c7:94:a5:ac:ce:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=dadfe6793c05c6614d99e5beba05033da47bbf73a3311e59ce31b847a8b59282, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:c8:3b:9f:ee:84:09:b4:e4:ef:75:53:e8: 2d:72:35:58:a5:82:55:48:5b:ed:f7:7c:ed:16:29: e5:4c:af:37:61:f7:fc:15:21:c5:0b:ee:1b:a8:4d: d7:30:2e:79:60:72:52:85:e9:98:4d:f4:41:7a:86: 32:9a:91:fd:6d:78:a6:ef:d0:80:f1:f6:85:3a:52: 40:60:91:58:3a:4f:56:33:b0:b1:eb:c1:b4:27:c3: 5a:3a:6e:c4:56:97:08:3e:e1:03:2b:fd:0c:2a:29: 08:ac:d6:0b:9e:01:36:f7:22:42:45:88:b2:05:45: 13:36:12:23:66:0a:3e:51:d1:ec:c5:6d:c0:55:87: c2:23:76:6f:a0:94:27:41:35:16:d3:8a:34:23:d3: 14:69:01:de:d8:e8:73:a3:d3:dc:32:7a:1f:2e:ec: be:87:0b:f9:1f:c7:4d:ab:a2:ac:2c:fb:66:72:0f: b8:04:a6:2e:24:f1:0c:9e:3f:8c:3a:83:52:18:67: 43:20:07:3d:e4:23:9c:4f:94:70:e8:96:33:4a:30: d7:bf:ab:8f:b4:20:c7:d3:b7:0e:bc:67:9a:e7:1e: 38:c0:41:f7:1f:fa:17:c4:7e:42:da:b9:1a:78:7d: 85:73:d2:b6:67:7d:92:7f:98:33:f1:66:37:59:83: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DC:77:26:45:59:1C:46:11:56:46:F8:44:DD:C5:C0:F1:37:BB:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f06962bd-0f09-4f1c-984d-8d79e4fd79c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.0.0/15 Signature Algorithm: sha256WithRSAEncryption a2:b1:d1:32:2c:f1:f2:2c:b1:cf:4d:a0:bf:c9:7e:89:82:d1: 5a:af:1e:62:e1:2f:73:b5:aa:f7:47:5f:8c:f2:fd:7a:0c:b0: 40:09:38:9c:93:31:4b:ff:e0:0e:e2:24:a9:2b:7b:66:c5:82: 4b:2e:3f:0e:5b:d5:2a:e9:83:fd:d3:6a:39:3a:d1:d2:e8:16: 72:e9:cc:1f:11:ee:5c:d5:c9:0f:a8:46:cd:83:71:3e:f7:91: 6c:cd:bd:c7:f2:2d:22:7e:9e:ae:1a:0b:4d:38:fb:8c:ee:d4: 85:ff:ec:0a:8f:a0:29:6b:3f:45:8f:98:51:eb:29:01:29:ec: d1:87:12:6b:fd:1a:07:b1:31:ad:d2:d8:4a:81:42:b1:66:0f: e6:0d:39:b1:1e:fc:4f:e6:f5:b8:c2:7b:ef:a0:e0:f0:e2:68: a0:d2:fa:89:4d:8a:7c:5a:3d:d6:a4:77:3d:96:4b:7a:9a:c7: fa:82:fc:ce:31:0d:48:8b:99:69:6c:97:8b:5a:d4:9d:94:1b: a5:5f:16:e9:50:3d:ce:aa:44:f3:8d:5f:56:5f:7e:1e:57:7f: 26:7c:bc:d1:98:00:47:74:37:09:e9:f0:79:36:06:e2:7e:73: 8b:48:f6:b8:dd:9f:2c:2e:f4:8d:83:a6:e2:77:2c:d2:59:2c: b4:d1:02:ca -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUWCaYTIfes1atbbrQk8eUpazOroQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwODAwMDAwMFoX DTI0MDUxMzIzNTk1OVowejFJMEcGA1UEBRNAZGFkZmU2NzkzYzA1YzY2MTRkOTll NWJlYmEwNTAzM2RhNDdiYmY3M2EzMzExZTU5Y2UzMWI4NDdhOGI1OTI4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LHIO5/uhAm05O91U+gtcjVYpYJV SFvt93ztFinlTK83Yff8FSHFC+4bqE3XMC55YHJShemYTfRBeoYympH9bXim79CA 8faFOlJAYJFYOk9WM7Cx68G0J8NaOm7EVpcIPuEDK/0MKikIrNYLngE29yJCRYiy BUUTNhIjZgo+UdHsxW3AVYfCI3ZvoJQnQTUW04o0I9MUaQHe2Ohzo9PcMnofLuy+ hwv5H8dNq6KsLPtmcg+4BKYuJPEMnj+MOoNSGGdDIAc95COcT5Rw6JYzSjDXv6uP tCDH07cOvGea5x44wEH3H/oXxH5C2rkaeH2Fc9K2Z32Sf5gz8WY3WYOFdQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFCjcdyZFWRxGEVZG+ETdxcDxN7vEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YwNjk2MmJkLTBmMDktNGYxYy05ODRkLThkNzllNGZkNzljMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9gwDQYJKoZIhvcNAQELBQADggEBAKKx0TIs8fIssc9NoL/JfomC 0VqvHmLhL3O1qvdHX4zy/XoMsEAJOJyTMUv/4A7iJKkre2bFgksuPw5b1Srpg/3T ajk60dLoFnLpzB8R7lzVyQ+oRs2DcT73kWzNvcfyLSJ+nq4aC004+4zu1IX/7AqP oClrP0WPmFHrKQEp7NGHEmv9GgexMa3S2EqBQrFmD+YNObEe/E/m9bjCe++g4PDi aKDS+olNinxaPdakdz2WS3qax/qC/M4xDUiLmWlsl4ta1J2UG6VfFulQPc6qRPON X1Zffh5XfyZ8vNGYAEd0Nwnp8Hk2BuJ+c4tI9rjdnywu9I2DpuJ3LNJZLLTRAso= -----END CERTIFICATE-----Generated at Thu Apr 25 01:59:40 2024 by rpki-client on console-ams.rpki-client.org