$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa File: f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa (raw, json) Hash identifier: W7/mvfO6zs6/HpF3kuWGlSCm1hXiNLymyhl3h5s68Y0= Subject key identifier: B2:B7:F3:30:55:97:42:9E:57:1F:CE:7A:52:07:24:5D:CF:03:70:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 19C3C21A72E1F2294140FF8090A6463727DDCEE0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa Signing time: Thu 02 May 2024 00:00:00 +0000 ROA not before: Thu 02 May 2024 00:00:00 +0000 ROA not after: Thu 06 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c3:c2:1a:72:e1:f2:29:41:40:ff:80:90:a6:46:37:27:dd:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:00:00 2024 GMT Not After : Jun 6 23:59:59 2024 GMT Subject: serialNumber=09785ba0f4a41e735147157f6bea62fb9403c67a4c7a945006cdfc5b6615ad58, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:9c:df:51:c6:e0:9a:de:29:d7:70:a4:e4: c7:c1:7d:cd:03:ab:48:e7:70:9c:d3:e8:36:16:54: 35:8e:81:9f:06:49:bd:ce:c2:e7:d1:b0:9f:15:38: c1:91:dc:8c:45:96:b8:89:98:d9:e0:7d:13:e6:7b: 55:7d:2c:b6:8b:e8:da:35:40:d1:10:3c:19:86:0f: 8a:0d:05:fa:27:f7:d6:aa:9c:8b:a5:42:28:4d:c6: 0b:a4:4e:7d:b4:a4:fa:a1:af:fe:05:04:0f:e2:b2: 8a:d6:a9:85:66:c3:bf:ee:80:0c:03:91:8b:ec:32: f8:9c:7d:c7:af:cd:a1:7d:21:54:7b:54:31:83:d8: df:f1:5f:f7:35:cd:5c:27:7c:6d:41:19:89:93:ce: 7e:11:f5:19:06:6a:64:5e:5d:8a:51:dc:35:dc:f1: bc:df:e9:15:b3:24:95:45:eb:0e:4a:de:de:49:a3: 8c:fb:8d:cd:73:12:e4:4d:01:21:e4:3c:40:fd:90: c3:90:e1:16:46:c2:8a:57:b8:18:e5:c9:35:b6:11: d4:66:b0:91:9c:88:1e:25:53:91:91:25:8a:62:b1: 17:e5:bb:27:44:e1:60:aa:50:33:d4:6e:47:bb:3d: e8:1c:b7:a9:90:e6:6e:14:9a:c0:41:f4:7f:9a:61: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B7:F3:30:55:97:42:9E:57:1F:CE:7A:52:07:24:5D:CF:03:70:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f118a776-8ccf-4ed5-b6f6-f62d644d9e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:e000::/40 Signature Algorithm: sha256WithRSAEncryption a1:3d:d7:70:ae:b8:11:af:63:11:29:4c:8e:0c:47:7e:47:58: bf:a6:6e:ff:d2:9b:b7:d0:92:d2:84:f5:84:c0:48:d3:82:47: 40:36:2f:cb:ad:88:c6:f5:90:15:29:2e:2a:76:a6:37:a5:eb: 78:fb:d4:c7:87:11:f6:2f:72:f1:ce:d6:35:67:05:b6:a7:af: 39:73:58:e1:fa:db:40:dc:61:af:01:89:d8:59:eb:a0:1d:54: bf:f7:f3:9a:f9:33:50:63:06:11:d8:d9:cc:db:cd:4a:c2:80: 0f:cb:00:c4:af:2e:d7:8d:3c:86:61:c6:f2:8a:78:ac:6c:ac: 5f:f0:4e:fc:be:11:b5:30:9c:71:3d:f5:33:1d:e5:cc:3f:b4: ff:9c:a8:1a:58:2f:d5:43:15:20:9a:d2:2a:39:54:b6:e2:b4: 8c:af:9d:13:8c:b4:db:da:b3:dc:8a:dc:3d:56:d5:93:0e:69: 65:d2:2e:8f:e3:fc:09:cb:b1:e1:52:ff:ce:1f:4f:d8:c7:81: 0a:48:b6:33:6f:fe:d2:e1:7e:cc:3c:ce:10:5b:e7:eb:94:c1: bb:27:96:4e:12:5b:74:43:5d:a9:e6:85:9b:4e:da:a7:76:ac: 7d:86:4e:8b:59:a5:76:42:8b:ce:76:63:38:e1:3a:90:15:e9: ee:76:ea:da -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGcPCGnLh8ilBQP+AkKZGNyfdzuAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMjAwMDAwMFoX DTI0MDYwNjIzNTk1OVowejFJMEcGA1UEBRNAMDk3ODViYTBmNGE0MWU3MzUxNDcx NTdmNmJlYTYyZmI5NDAzYzY3YTRjN2E5NDUwMDZjZGZjNWI2NjE1YWQ1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zqc31HG4JreKddwpOTHwX3NA6tI 53Cc0+g2FlQ1joGfBkm9zsLn0bCfFTjBkdyMRZa4iZjZ4H0T5ntVfSy2i+jaNUDR EDwZhg+KDQX6J/fWqpyLpUIoTcYLpE59tKT6oa/+BQQP4rKK1qmFZsO/7oAMA5GL 7DL4nH3Hr82hfSFUe1Qxg9jf8V/3Nc1cJ3xtQRmJk85+EfUZBmpkXl2KUdw13PG8 3+kVsySVResOSt7eSaOM+43NcxLkTQEh5DxA/ZDDkOEWRsKKV7gY5ck1thHUZrCR nIgeJVORkSWKYrEX5bsnROFgqlAz1G5Huz3oHLepkOZuFJrAQfR/mmEccwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLK38zBVl0KeVx/OelIHJF3PA3CPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YxMThhNzc2LThjY2YtNGVkNS1iNmY2LWY2MmQ2NDRkOWUzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOOAwDQYJKoZIhvcNAQELBQADggEBAKE913CuuBGvYxEpTI4M R35HWL+mbv/Sm7fQktKE9YTASNOCR0A2L8utiMb1kBUpLip2pjel63j71MeHEfYv cvHO1jVnBbanrzlzWOH620DcYa8BidhZ66AdVL/385r5M1BjBhHY2czbzUrCgA/L AMSvLteNPIZhxvKKeKxsrF/wTvy+EbUwnHE99TMd5cw/tP+cqBpYL9VDFSCa0io5 VLbitIyvnROMtNvas9yK3D1W1ZMOaWXSLo/j/AnLseFS/84fT9jHgQpItjNv/tLh fsw8zhBb5+uUwbsnlk4SW3RDXanmhZtO2qd2rH2GTotZpXZCi852YzjhOpAV6e52 6to= -----END CERTIFICATE-----Generated at Thu May 23 05:06:53 2024 by rpki-client on console-fra.rpki-client.org