$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1ccb23a-389c-4dbf-ad4d-5d2c87756cd4.roa File: f1ccb23a-389c-4dbf-ad4d-5d2c87756cd4.roa (raw, json) Hash identifier: jx9Kz21qSuse71xyGp5miP393m1AdjeCi5MCTHunrgY= Subject key identifier: 12:B7:31:1F:D8:60:91:B3:CE:BC:D2:9B:6D:DA:E4:51:39:EF:48:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7EF888E7204574788B06E43220F4833E55EC8160 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1ccb23a-389c-4dbf-ad4d-5d2c87756cd4.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f8:88:e7:20:45:74:78:8b:06:e4:32:20:f4:83:3e:55:ec:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=400baab7fb3c7f05b6a230b2a4e7ae68048ac10beb568141241d42d28c62c2a3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:1d:ed:3a:ab:42:43:a8:ff:5e:ee:ce:c4: af:df:ea:b5:31:aa:05:45:50:a7:8c:c0:42:94:47: 04:7f:c5:33:ac:7e:a1:cc:cf:41:54:a4:85:5a:2e: 96:fa:22:dc:e4:fb:45:35:95:a5:ce:08:fe:4d:24: 09:5d:2a:c2:9b:4a:02:b9:30:6f:2e:8d:cc:5d:1f: 84:f8:4a:62:1e:e1:e3:55:e0:c6:b3:aa:5f:51:1d: 6e:d3:4a:38:1b:38:01:b2:5b:e5:54:92:fe:97:d5: 07:60:86:c1:31:1d:85:60:ce:bf:98:e1:17:a7:4c: d7:0b:e8:35:28:f2:5b:ca:f0:58:e3:fe:11:7e:f3: 80:ca:7c:49:62:74:28:61:22:d2:af:38:76:cb:b9: 86:42:93:1e:a9:cd:7a:42:75:1e:84:45:61:6e:29: 08:a0:93:bf:33:ff:6e:06:af:91:2a:8d:1b:db:ca: 9d:43:9c:ea:ee:29:59:1d:7f:5f:95:d8:3f:cd:eb: b2:48:b7:f8:4e:a7:e7:90:73:c7:d9:bf:6d:81:eb: 8d:84:1c:10:0d:8b:19:0c:2d:4d:83:59:75:02:e8: 97:19:db:69:03:44:aa:b9:77:be:80:76:00:65:04: 2d:42:4e:ae:65:95:c4:4c:66:dc:be:69:d8:8f:45: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B7:31:1F:D8:60:91:B3:CE:BC:D2:9B:6D:DA:E4:51:39:EF:48:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1ccb23a-389c-4dbf-ad4d-5d2c87756cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8000::/40 Signature Algorithm: sha256WithRSAEncryption 43:34:13:ce:53:0a:7c:50:16:31:37:05:80:a4:a4:d0:a4:82: 7e:b2:c0:3c:24:49:b6:b9:fd:51:95:6b:0e:81:e4:c5:97:12: 74:bb:dd:39:bd:bc:e6:cf:43:e7:4d:0f:b1:22:ae:1f:8a:fc: cc:87:0d:e5:76:f3:e6:6a:d4:81:1d:00:10:29:63:85:af:31: 2c:ce:fd:bc:61:72:52:a0:f0:ba:6b:4b:db:59:eb:e2:d2:47: d6:46:68:6d:1b:c8:c5:2a:a7:72:0a:fe:2a:b4:6a:43:c5:0a: 99:5c:20:51:d3:de:96:4d:d0:4d:1f:ce:5b:b4:97:32:f6:c5: ed:f3:d1:37:2a:a4:54:5b:b7:7a:d7:f2:6d:51:ad:69:06:2d: 00:65:e0:88:4c:ef:ed:56:5a:a8:9a:f1:cb:5d:f1:19:1b:eb: f9:91:3e:dc:78:ee:2a:bf:08:2f:38:83:8b:95:6b:28:32:ae: e7:c2:e6:f4:c5:8e:76:8e:f8:09:3b:fb:b1:0c:82:e3:9f:5d: b6:76:d4:db:92:b3:5b:f2:38:3e:75:1f:10:47:d9:af:8c:64: 57:df:64:74:97:02:04:9c:2b:c5:71:60:e2:4b:41:72:1b:cc: 42:b4:7d:3a:86:1b:0b:5a:39:39:a0:cb:3c:93:0d:ae:38:8b: fb:08:fb:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfviI5yBFdHiLBuQyIPSDPlXsgWAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNANDAwYmFhYjdmYjNjN2YwNWI2YTIz MGIyYTRlN2FlNjgwNDhhYzEwYmViNTY4MTQxMjQxZDQyZDI4YzYyYzJhMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9cd7TqrQkOo/17uzsSv3+q1MaoF RVCnjMBClEcEf8UzrH6hzM9BVKSFWi6W+iLc5PtFNZWlzgj+TSQJXSrCm0oCuTBv Lo3MXR+E+EpiHuHjVeDGs6pfUR1u00o4GzgBslvlVJL+l9UHYIbBMR2FYM6/mOEX p0zXC+g1KPJbyvBY4/4RfvOAynxJYnQoYSLSrzh2y7mGQpMeqc16QnUehEVhbikI oJO/M/9uBq+RKo0b28qdQ5zq7ilZHX9fldg/zeuySLf4TqfnkHPH2b9tgeuNhBwQ DYsZDC1Ng1l1AuiXGdtpA0SquXe+gHYAZQQtQk6uZZXETGbcvmnYj0U4MQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBK3MR/YYJGzzrzSm23a5FE570hwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YxY2NiMjNhLTM4OWMtNGRiZi1hZDRkLTVkMmM4Nzc1NmNkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/4AwDQYJKoZIhvcNAQELBQADggEBAEM0E85TCnxQFjE3BYCk pNCkgn6ywDwkSba5/VGVaw6B5MWXEnS73Tm9vObPQ+dND7Eirh+K/MyHDeV28+Zq 1IEdABApY4WvMSzO/bxhclKg8LprS9tZ6+LSR9ZGaG0byMUqp3IK/iq0akPFCplc IFHT3pZN0E0fzlu0lzL2xe3z0TcqpFRbt3rX8m1RrWkGLQBl4IhM7+1WWqia8ctd 8Rkb6/mRPtx47iq/CC84g4uVaygyrufC5vTFjnaO+Ak7+7EMguOfXbZ21NuSs1vy OD51HxBH2a+MZFffZHSXAgScK8VxYOJLQXIbzEK0fTqGGwtaOTmgyzyTDa44i/sI +ys= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:40 2024 by rpki-client on console-fra.rpki-client.org