$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4cc854d-e1b5-4a72-a4e1-0c7288d181cc.roa File: f4cc854d-e1b5-4a72-a4e1-0c7288d181cc.roa (raw, json) Hash identifier: DMJqOqNX5qUJiEGueKu6t3atn7mMsBNF0Vy3TLKL9FY= Subject key identifier: 62:85:56:65:2A:B2:E0:EE:CA:F2:09:A3:C5:3F:7D:01:C9:AA:9B:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 53AF50597B21DCA7B017ACACDF97FB8193D124D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4cc854d-e1b5-4a72-a4e1-0c7288d181cc.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafc:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:af:50:59:7b:21:dc:a7:b0:17:ac:ac:df:97:fb:81:93:d1:24:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=efbce7fdaac9a6b914a16827737fed1fa8feddc7fd9b94a05b6b12b9efb583b1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:d5:81:cf:f0:91:a0:f9:6a:7e:15:53:cf: fa:e7:42:6f:e0:21:d1:76:2a:45:f2:c4:28:b2:2b: 7c:04:aa:f4:99:3b:b4:da:5d:0c:54:fd:3b:88:6a: 2f:84:5c:74:a4:34:f9:d5:f6:e3:88:6a:40:23:61: be:bc:96:09:47:75:24:a9:6a:72:2d:5e:69:b6:b4: 59:79:98:46:0d:cb:49:d3:45:e3:61:fc:c7:12:ba: fb:71:19:8a:d8:c0:c1:f3:b9:54:1c:43:26:9d:eb: d9:13:e1:67:e7:e1:85:8b:85:33:88:f7:82:c5:dd: 68:f4:c1:86:8d:e9:6f:9a:21:37:d7:5f:90:1e:36: 29:77:88:0e:1e:7a:88:de:c0:f8:0e:a6:0d:11:b0: 75:71:81:96:5e:65:ae:08:23:59:e3:2f:80:9c:39: 20:fd:e0:57:31:95:29:02:1a:4c:16:0c:dd:b1:04: a4:77:99:9b:a2:7d:99:0d:c9:1d:aa:48:8a:d9:3e: d9:8a:fa:3d:7a:ba:ae:13:be:bd:72:46:1c:c7:b3: ba:ec:54:ff:48:7a:ef:83:b3:d3:a4:c7:1d:c1:c3: 90:a2:9e:bf:77:73:4e:59:d1:4a:cc:39:83:79:aa: cc:05:8a:4b:dc:68:da:4f:68:a6:2d:6e:da:26:cb: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:85:56:65:2A:B2:E0:EE:CA:F2:09:A3:C5:3F:7D:01:C9:AA:9B:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4cc854d-e1b5-4a72-a4e1-0c7288d181cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafc:c000::/40 Signature Algorithm: sha256WithRSAEncryption 03:e5:b2:69:66:9a:fa:d4:a7:a1:ba:82:d8:87:8b:5c:7e:66: 45:e9:52:56:e0:00:01:12:19:46:57:4d:76:42:ad:32:6f:0d: 56:92:cb:ef:0a:c4:24:b2:86:25:a2:d5:5a:00:4f:8c:0e:f4: 08:82:7a:53:fa:ca:4f:8e:d8:d4:8c:26:82:6c:90:66:fe:05: e5:27:b9:2f:ec:d1:68:35:42:14:a2:43:e6:5a:e1:2f:89:c3: 29:29:ea:31:42:41:56:bf:b4:b8:fc:7a:01:57:72:5b:44:2b: 1e:c2:c5:5c:28:ce:3f:06:2a:38:58:a0:ae:5c:a0:b7:60:0f: 8d:97:67:a6:a1:25:05:5b:8b:23:be:37:f9:7f:b4:b8:8b:d7: 35:0b:80:b2:9d:5b:ae:dc:31:21:ce:7f:23:fc:94:dc:a1:79: 44:60:d9:3e:fd:fc:13:eb:c0:d3:c7:6c:a5:4c:28:f0:b0:bc: 1d:88:0b:fd:60:a3:72:a8:67:3b:c0:d8:39:9b:f0:ee:dc:f7: d1:d2:19:bc:5d:9c:44:31:57:b3:84:9e:73:91:82:73:78:f3: 25:54:9d:70:e0:fd:14:5a:89:3b:fc:cb:ab:da:9f:01:96:03: 03:95:29:84:f8:b0:e6:db:7f:5a:8e:79:18:ca:4f:0c:1a:64: 4c:6f:b3:45 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUU69QWXsh3KewF6ys35f7gZPRJNUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAZWZiY2U3ZmRhYWM5YTZiOTE0YTE2 ODI3NzM3ZmVkMWZhOGZlZGRjN2ZkOWI5NGEwNWI2YjEyYjllZmI1ODNiMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunXVgc/wkaD5an4VU8/650Jv4CHR dipF8sQosit8BKr0mTu02l0MVP07iGovhFx0pDT51fbjiGpAI2G+vJYJR3UkqWpy LV5ptrRZeZhGDctJ00XjYfzHErr7cRmK2MDB87lUHEMmnevZE+Fn5+GFi4UziPeC xd1o9MGGjelvmiE311+QHjYpd4gOHnqI3sD4DqYNEbB1cYGWXmWuCCNZ4y+AnDkg /eBXMZUpAhpMFgzdsQSkd5mbon2ZDckdqkiK2T7Zivo9erquE769ckYcx7O67FT/ SHrvg7PTpMcdwcOQop6/d3NOWdFKzDmDearMBYpL3GjaT2imLW7aJssUfQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGKFVmUqsuDuyvIJo8U/fQHJqpu+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y0Y2M4NTRkLWUxYjUtNGE3Mi1hNGUxLTBjNzI4OGQxODFjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/MAwDQYJKoZIhvcNAQELBQADggEBAAPlsmlmmvrUp6G6gtiH i1x+ZkXpUlbgAAESGUZXTXZCrTJvDVaSy+8KxCSyhiWi1VoAT4wO9AiCelP6yk+O 2NSMJoJskGb+BeUnuS/s0Wg1QhSiQ+Za4S+Jwykp6jFCQVa/tLj8egFXcltEKx7C xVwozj8GKjhYoK5coLdgD42XZ6ahJQVbiyO+N/l/tLiL1zULgLKdW67cMSHOfyP8 lNyheURg2T79/BPrwNPHbKVMKPCwvB2IC/1go3KoZzvA2Dmb8O7c99HSGbxdnEQx V7OEnnORgnN48yVUnXDg/RRaiTv8y6vanwGWAwOVKYT4sObbf1qOeRjKTwwaZExv s0U= -----END CERTIFICATE-----Generated at Fri Apr 26 11:00:09 2024 by rpki-client on console-ams.rpki-client.org