$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa File: f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa (raw, json) Hash identifier: Id2hMmu56GuKJV2vQ4lvLMfzBmnO/k+3bWJZjotaf8w= Subject key identifier: 82:9B:D7:7A:40:C0:F8:23:DC:A4:D5:62:D4:6E:DB:EF:F4:8E:4A:AD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 072615C12D757B602A1C2B1B76A403406EF79DED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:26:15:c1:2d:75:7b:60:2a:1c:2b:1b:76:a4:03:40:6e:f7:9d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=91deb063ce51b2c722e35dad4f6d486aa0f73225245614d1052053e18f4907f5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:44:99:a5:b1:82:79:ec:f7:2f:79:c3:e9: ba:4e:d7:17:5e:42:35:24:3f:54:3e:7d:7a:98:74: e3:b0:76:2b:0a:ba:44:4a:70:bf:55:32:6d:6c:e5: 8c:bd:e5:1b:0f:f6:cf:6c:e1:c5:21:cf:8a:a0:b5: 54:50:4b:9c:bc:ad:b9:76:f1:0e:ac:5c:c5:bc:25: 19:ec:cd:21:ca:39:ed:ba:9c:dd:e5:57:8e:50:a0: ba:83:96:5e:01:0f:6d:d0:c4:ea:aa:22:db:77:54: 0c:c6:d7:f2:f7:f5:97:12:ac:85:bd:c1:96:ef:ca: cd:2d:51:41:ec:98:71:2b:b7:fc:bc:49:49:8b:cb: cc:db:bd:8c:59:47:e3:89:20:81:c1:1c:ba:d9:d6: 74:a7:06:14:cd:9e:19:7f:8a:57:b6:cb:26:ce:9e: 14:46:ac:f9:77:82:bf:72:28:0e:c4:7a:d5:5d:d3: 57:0a:98:91:99:3d:80:aa:1b:4b:75:47:6e:65:58: 6c:42:d6:9b:2c:d8:58:97:12:c8:41:cf:5c:71:7b: 68:d7:40:d9:82:51:64:ae:0a:32:26:7f:f3:f8:d6: 85:8f:0c:58:12:92:93:e4:6d:88:56:cf:6e:9b:ef: 6b:f8:b2:e9:8d:44:8d:e0:22:23:20:3c:b3:b0:04: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9B:D7:7A:40:C0:F8:23:DC:A4:D5:62:D4:6E:DB:EF:F4:8E:4A:AD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:e000::/40 Signature Algorithm: sha256WithRSAEncryption c1:7f:76:e1:c6:81:2f:02:e2:3c:a2:ff:4f:9c:19:cb:e7:99: 04:77:2c:52:cb:4c:6c:da:ef:77:73:2d:87:43:07:a2:42:dd: 81:f5:27:53:4d:4a:54:59:65:45:30:b7:cc:75:4e:bb:20:49: 88:cf:8c:95:ac:28:ca:be:70:24:de:d7:c3:b9:a1:87:99:7d: ee:9e:c7:44:67:e8:c8:c1:69:eb:68:44:7c:bd:b2:4b:87:92: 60:67:5a:02:b0:2c:7f:d7:83:70:7a:4f:86:15:e2:4c:d5:bf: b4:d4:a1:6d:1b:bb:3f:06:ff:0d:bf:4b:de:1d:07:5e:43:33: 46:07:92:35:bd:81:13:8d:d1:91:b4:75:07:43:3c:02:9b:0b: a6:b4:b8:2f:62:d6:bc:94:e6:ed:89:20:67:54:75:24:b0:4a: 2e:bc:fe:3c:cf:6a:24:06:56:6d:f3:d9:fe:6b:8b:ba:21:19: d9:c7:f8:f6:8f:82:e8:26:8f:2d:e8:4c:5b:10:86:b7:95:3a: 13:ec:c4:6e:3b:c2:94:a2:73:ea:43:10:c9:bf:7e:24:78:d2: 43:30:05:4a:8c:6d:17:69:50:d3:98:ea:ee:6c:6a:0a:5b:9d: 1c:11:d5:7d:80:8c:ad:ba:5b:23:7a:cc:67:08:31:68:34:42: e2:7e:b1:9c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUByYVwS11e2AqHCsbdqQDQG73ne0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTExOTAwMDAwMFoX DTI0MTIyNDIzNTk1OVowejFJMEcGA1UEBRNAOTFkZWIwNjNjZTUxYjJjNzIyZTM1 ZGFkNGY2ZDQ4NmFhMGY3MzIyNTI0NTYxNGQxMDUyMDUzZTE4ZjQ5MDdmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgVEmaWxgnns9y95w+m6TtcXXkI1 JD9UPn16mHTjsHYrCrpESnC/VTJtbOWMveUbD/bPbOHFIc+KoLVUUEucvK25dvEO rFzFvCUZ7M0hyjntupzd5VeOUKC6g5ZeAQ9t0MTqqiLbd1QMxtfy9/WXEqyFvcGW 78rNLVFB7JhxK7f8vElJi8vM272MWUfjiSCBwRy62dZ0pwYUzZ4Zf4pXtssmzp4U Rqz5d4K/cigOxHrVXdNXCpiRmT2AqhtLdUduZVhsQtabLNhYlxLIQc9ccXto10DZ glFkrgoyJn/z+NaFjwxYEpKT5G2IVs9um+9r+LLpjUSN4CIjIDyzsAQs4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIKb13pAwPgj3KTVYtRu2+/0jkqtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YxMThhNzc2LThjY2YtNGVkNS1iNmY2LWY2MmQ2NDRkOWUzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOOAwDQYJKoZIhvcNAQELBQADggEBAMF/duHGgS8C4jyi/0+c GcvnmQR3LFLLTGza73dzLYdDB6JC3YH1J1NNSlRZZUUwt8x1TrsgSYjPjJWsKMq+ cCTe18O5oYeZfe6ex0Rn6MjBaetoRHy9skuHkmBnWgKwLH/Xg3B6T4YV4kzVv7TU oW0buz8G/w2/S94dB15DM0YHkjW9gRON0ZG0dQdDPAKbC6a0uC9i1ryU5u2JIGdU dSSwSi68/jzPaiQGVm3z2f5ri7ohGdnH+PaPgugmjy3oTFsQhreVOhPsxG47wpSi c+pDEMm/fiR40kMwBUqMbRdpUNOY6u5sagpbnRwR1X2AjK26WyN6zGcIMWg0QuJ+ sZw= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:40 2024 by rpki-client on console-ams.rpki-client.org