$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa File: f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa (raw, json) Hash identifier: fFvHwtzXVsJ73oNQrXcHEYVoxW9/GVVX6i6FQD5QauU= Subject key identifier: 4C:19:3B:41:5F:66:C7:91:3A:DD:56:77:17:02:B1:90:2A:74:31:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 57B68F4F6F41C6C9EEE7AE99E16934D440D0F925 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b6:8f:4f:6f:41:c6:c9:ee:e7:ae:99:e1:69:34:d4:40:d0:f9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=11b9a93a6a1e2e767049dd9d8cc8ae26c35c2bc90e6bb88874f004982b0e8a39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:1e:cd:7d:42:f0:d3:eb:d1:2a:0f:ef:68: 0b:14:93:2c:b3:d1:1d:ac:5a:f4:47:eb:9c:f2:20: 3d:97:7e:c2:90:7a:96:eb:c5:fd:c4:fc:c2:d6:69: 28:e5:ee:2a:3d:05:1c:d8:11:54:73:5b:07:f1:a2: 72:7e:7c:ca:93:cb:e2:b0:b5:b5:be:fc:04:88:88: e4:54:8c:7b:e9:d9:6a:65:e1:a0:c9:ed:5e:19:32: 14:4f:1b:4f:25:44:ce:14:92:7c:73:7c:f9:d9:97: 1c:66:32:71:81:a6:80:ea:cc:2d:6c:d2:04:dd:db: d7:ca:91:f8:f8:2c:4c:aa:1f:2b:e9:d3:69:37:9d: 9c:a7:f1:17:80:68:62:c3:62:66:2e:a8:32:06:39: 65:f0:70:d8:f3:6c:77:80:8e:6c:de:16:41:9f:2b: 25:de:1c:48:2c:49:35:3a:d2:a0:63:1e:6d:1d:04: ae:1a:ae:98:89:3b:c6:22:8f:c6:34:5d:68:42:44: b8:a1:38:d1:18:2b:87:fb:92:cf:17:20:6e:58:76: 84:e3:34:2a:1f:11:bf:2c:b0:2b:2b:5f:78:f3:8a: 91:68:3e:98:10:79:b7:da:e5:c0:c5:2b:15:53:fa: 51:9f:0f:7d:64:bb:65:d5:bb:5e:86:bf:59:b1:0d: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:19:3B:41:5F:66:C7:91:3A:DD:56:77:17:02:B1:90:2A:74:31:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:8000::/40 Signature Algorithm: sha256WithRSAEncryption 8f:6a:0a:2d:aa:e9:15:fc:f9:d2:0a:c0:06:98:2a:44:89:b7: ea:9b:0e:b5:40:ec:54:3b:0a:f9:24:47:bf:ca:23:6f:e0:c6: c0:76:19:5e:8a:7c:8c:ec:f0:c6:d0:88:4b:5b:77:6d:2d:5a: e1:26:44:0c:1e:cd:32:05:96:f0:51:26:d4:e0:6a:d1:63:97: e9:73:42:b3:df:d0:d3:1b:74:93:2a:6d:ec:22:8d:1f:59:50: dd:e0:65:e3:fb:83:6f:15:c7:d3:f7:ea:87:29:fb:31:c0:d0: 0d:a6:55:38:6b:0a:2f:8a:e8:87:48:cd:20:e9:50:8f:e0:73: 8a:96:1e:ee:1a:4f:79:a5:d4:a0:27:b7:e5:48:9c:f0:5a:e3: 91:c3:eb:5c:fe:27:a7:70:09:00:d4:01:60:d8:96:4e:c0:ce: 0c:87:76:09:16:17:00:08:61:35:31:ba:32:87:ad:3a:8c:45: eb:0f:bc:98:c4:b6:b5:cb:0d:f7:9d:65:08:f8:2e:77:82:86: bb:b2:98:8d:7f:db:6c:59:3b:91:fe:ae:a2:2a:b4:ce:b6:99: 3e:f4:a4:b7:1b:5c:15:fa:24:94:ed:f8:8a:ee:26:a3:04:80: 6b:83:ff:29:ea:6c:6f:e2:54:4c:ef:f0:d9:68:16:bc:22:c7: 14:bf:0f:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUV7aPT29Bxsnu566Z4Wk01EDQ+SUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyOTAwMDAwMFoX DTI0MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAMTFiOWE5M2E2YTFlMmU3NjcwNDlk ZDlkOGNjOGFlMjZjMzVjMmJjOTBlNmJiODg4NzRmMDA0OTgyYjBlOGEzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEsezX1C8NPr0SoP72gLFJMss9Ed rFr0R+uc8iA9l37CkHqW68X9xPzC1mko5e4qPQUc2BFUc1sH8aJyfnzKk8visLW1 vvwEiIjkVIx76dlqZeGgye1eGTIUTxtPJUTOFJJ8c3z52ZccZjJxgaaA6swtbNIE 3dvXypH4+CxMqh8r6dNpN52cp/EXgGhiw2JmLqgyBjll8HDY82x3gI5s3hZBnysl 3hxILEk1OtKgYx5tHQSuGq6YiTvGIo/GNF1oQkS4oTjRGCuH+5LPFyBuWHaE4zQq HxG/LLArK19484qRaD6YEHm32uXAxSsVU/pRnw99ZLtl1btehr9ZsQ0VUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEwZO0FfZseROt1WdxcCsZAqdDFRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1YjU3YmViLTAzZGQtNDNhOC05YTA2LTA3ZjNmMTZhM2Y0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+oAwDQYJKoZIhvcNAQELBQADggEBAI9qCi2q6RX8+dIKwAaY KkSJt+qbDrVA7FQ7CvkkR7/KI2/gxsB2GV6KfIzs8MbQiEtbd20tWuEmRAwezTIF lvBRJtTgatFjl+lzQrPf0NMbdJMqbewijR9ZUN3gZeP7g28Vx9P36ocp+zHA0A2m VThrCi+K6IdIzSDpUI/gc4qWHu4aT3ml1KAnt+VInPBa45HD61z+J6dwCQDUAWDY lk7AzgyHdgkWFwAIYTUxujKHrTqMResPvJjEtrXLDfedZQj4LneChruymI1/22xZ O5H+rqIqtM62mT70pLcbXBX6JJTt+IruJqMEgGuD/ynqbG/iVEzv8NloFrwixxS/ D5s= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:37 2024 by rpki-client on console-fra.rpki-client.org