$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa File: f24045a5-5771-4886-b5e9-a11c9adba808.roa (raw, json) Hash identifier: sP2FUCkIRDexksWWPrRlqFClCB6/YPUkuDae4DW05u8= Subject key identifier: A4:60:36:CD:E1:1F:7E:6E:E8:AA:FC:11:57:C6:6F:AC:5D:5B:44:AA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1CD9DAC6725C2808B1899CCF647AFB18FEA89AB4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 103.246.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d9:da:c6:72:5c:28:08:b1:89:9c:cf:64:7a:fb:18:fe:a8:9a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=2ebb5e3b5f45016951fa5a3ca56747a6a18711e0d97dad6dfd2e5418c8141aae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:6c:27:59:56:65:93:20:26:79:36:44:0a: 5c:99:6f:9d:cc:35:8f:73:42:71:a0:30:ac:60:72: 62:c1:60:ba:d2:ef:aa:15:3f:62:03:5b:05:a6:93: 6b:4a:28:bc:a2:4c:9c:4a:0f:bc:6d:05:3e:2d:b7: 8b:31:c8:eb:69:f4:7f:66:1d:8c:f7:03:39:91:61: 6e:27:54:05:a8:90:79:b6:a8:fc:15:bf:ad:33:cc: fe:7d:62:9c:ab:98:31:c7:32:21:7a:ff:bc:58:f2: 7d:e6:97:8f:c6:56:d5:ce:b0:f4:04:ef:35:d7:65: 5a:10:44:2b:c2:56:f7:85:49:32:61:42:0a:98:b5: fe:9a:ab:4e:26:2d:48:06:fe:4c:54:f8:62:4a:0f: 94:a8:f0:f2:cb:c0:e8:c9:58:2b:6a:f8:d1:07:34: d4:fe:90:28:e7:ad:40:77:99:7b:c5:61:02:d1:6a: a6:f7:6e:a5:df:95:e1:a4:b9:78:5f:56:9c:7f:a1: b0:53:d4:97:fe:0a:f7:f0:2d:cc:99:3b:a6:80:00: e4:46:1c:64:25:8a:df:50:2d:81:cd:4c:02:54:01: 42:0d:d5:fd:8d:c9:88:26:58:39:5b:70:0f:31:a9: 46:a9:22:90:22:e8:c8:ab:cb:d6:83:77:a9:cf:77: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:60:36:CD:E1:1F:7E:6E:E8:AA:FC:11:57:C6:6F:AC:5D:5B:44:AA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.148.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:5e:1c:ad:bb:63:cb:d9:20:da:66:3c:3a:68:91:14:cd:3b: f5:c5:d5:12:ed:94:13:c2:67:86:21:5b:47:e9:7c:c6:fa:8d: 77:8a:d8:45:1c:94:6e:c8:25:eb:1c:af:ef:b2:ff:3d:23:07: 6b:53:c5:f7:29:fb:d2:45:b2:59:6d:bc:1b:65:02:2c:83:1d: 80:ab:c4:e5:a6:e9:33:a6:01:79:83:5d:f1:91:37:35:88:ce: 4e:e1:b2:0b:e3:15:1a:e2:26:77:3d:d1:61:fe:ed:d9:c7:4f: 9d:55:50:a8:3d:c6:d3:e0:b4:4f:c7:0b:83:1c:8b:29:c3:9d: 01:01:02:e0:76:7f:3c:99:d9:50:83:bc:cc:71:66:7a:c0:5b: 77:73:f6:72:d7:34:f7:e3:d2:e5:41:12:ee:5d:08:23:23:c5: ff:24:ad:ab:a5:93:38:6f:73:51:0b:8e:58:0a:18:42:f2:f7: 29:fe:c2:6f:26:cd:fa:db:3b:30:d5:50:a4:6a:e0:7b:ca:fa: 43:2d:09:d8:17:c7:86:63:97:a5:e9:bb:35:5d:8c:d3:e9:3f: a1:1b:6f:cf:ab:19:26:be:ec:58:5a:2b:6d:03:ab:5f:b0:8e: 08:c5:33:e0:94:61:32:88:d3:e0:27:ff:bd:08:aa:09:fa:cd: fa:f2:f9:0f -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUHNnaxnJcKAixiZzPZHr7GP6omrQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwODAwMDAwMFoX DTI0MDUxMzIzNTk1OVowejFJMEcGA1UEBRNAMmViYjVlM2I1ZjQ1MDE2OTUxZmE1 YTNjYTU2NzQ3YTZhMTg3MTFlMGQ5N2RhZDZkZmQyZTU0MThjODE0MWFhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RlsJ1lWZZMgJnk2RApcmW+dzDWP c0JxoDCsYHJiwWC60u+qFT9iA1sFppNrSii8okycSg+8bQU+LbeLMcjrafR/Zh2M 9wM5kWFuJ1QFqJB5tqj8Fb+tM8z+fWKcq5gxxzIhev+8WPJ95pePxlbVzrD0BO81 12VaEEQrwlb3hUkyYUIKmLX+mqtOJi1IBv5MVPhiSg+UqPDyy8DoyVgravjRBzTU /pAo561Ad5l7xWEC0Wqm926l35XhpLl4X1acf6GwU9SX/gr38C3MmTumgADkRhxk JYrfUC2BzUwCVAFCDdX9jcmIJlg5W3APMalGqSKQIujIq8vWg3epz3fVuwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKRgNs3hH35u6Kr8EVfGb6xdW0SqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyNDA0NWE1LTU3NzEtNDg4Ni1iNWU5LWExMWM5YWRiYTgwOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/aUMA0GCSqGSIb3DQEBCwUAA4IBAQBsXhytu2PL2SDaZjw6aJEU zTv1xdUS7ZQTwmeGIVtH6XzG+o13ithFHJRuyCXrHK/vsv89IwdrU8X3KfvSRbJZ bbwbZQIsgx2Aq8TlpukzpgF5g13xkTc1iM5O4bIL4xUa4iZ3PdFh/u3Zx0+dVVCo PcbT4LRPxwuDHIspw50BAQLgdn88mdlQg7zMcWZ6wFt3c/Zy1zT349LlQRLuXQgj I8X/JK2rpZM4b3NRC45YChhC8vcp/sJvJs362zsw1VCkauB7yvpDLQnYF8eGY5el 6bs1XYzT6T+hG2/PqxkmvuxYWittA6tfsI4IxTPglGEyiNPgJ/+9CKoJ+s368vkP -----END CERTIFICATE-----Generated at Fri Apr 26 11:00:09 2024 by rpki-client on console-ams.rpki-client.org