$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f765e530-e98d-41fa-bf03-86cd7f9eee5d.roa File: f765e530-e98d-41fa-bf03-86cd7f9eee5d.roa (raw, json) Hash identifier: kXPucOwnZ4COZg27mvc+RFg6TOoPBVlizd+6CnzS64w= Subject key identifier: E7:60:12:5D:E6:5C:90:9B:ED:3A:25:4D:81:6D:A2:04:3A:66:85:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 475A9C3D9D93087539622D7C1132C9A85E6D5EEC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f765e530-e98d-41fa-bf03-86cd7f9eee5d.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5a:9c:3d:9d:93:08:75:39:62:2d:7c:11:32:c9:a8:5e:6d:5e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=8dcafcb69fa87a97f69c890b30f46bbdc9ff99ff7dd560e3dac0a6d0211e9833, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1c:38:d2:18:8d:82:2d:2e:69:d1:7d:15:38: ca:ac:1d:3e:a0:34:d5:a3:30:f2:10:d6:49:a3:55: 1f:60:37:ac:bc:07:38:93:e7:db:81:0b:9b:30:96: 58:c9:91:41:7b:0e:45:a7:6b:f5:0a:78:a7:1b:ab: c1:7a:92:c6:0a:fb:8a:9b:77:00:4f:20:4c:68:6c: 5c:0c:05:ab:46:6f:50:b9:bc:8b:1d:52:ab:f4:2d: c0:33:b3:3f:fe:18:85:28:57:08:50:c9:5a:12:65: f1:58:19:34:b6:1c:33:16:fc:9a:9a:7d:95:22:54: 20:af:99:1c:52:68:5d:be:fc:45:15:60:4c:b3:2b: a2:74:2f:cd:39:8c:0a:4f:7d:08:a0:9f:93:d7:31: b4:8c:5b:56:f2:b0:41:f1:29:2e:c9:d1:ff:35:96: cd:2b:ff:9b:77:d8:bb:df:f7:93:c8:19:48:fe:d0: f0:71:7e:03:96:10:18:b1:72:fa:aa:a0:61:61:5d: 53:af:a4:c5:41:45:58:17:a3:42:91:64:57:70:68: 9d:1f:97:62:32:50:d9:f6:46:42:56:33:21:74:ed: a5:c3:38:43:96:40:4b:b9:9b:ea:e6:a1:c8:47:77: f9:8e:d4:06:27:92:41:37:da:ee:de:95:23:8f:95: 0f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:12:5D:E6:5C:90:9B:ED:3A:25:4D:81:6D:A2:04:3A:66:85:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f765e530-e98d-41fa-bf03-86cd7f9eee5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:8000::/40 Signature Algorithm: sha256WithRSAEncryption 6b:e9:ad:d0:83:72:42:2a:23:1c:f3:e3:3d:95:b2:93:4c:67: 80:af:ba:39:61:60:40:3a:e4:ef:19:47:8b:6f:ba:21:e6:dd: c7:c2:c0:fc:53:1a:a4:93:35:4b:d7:80:a8:2b:e9:77:16:32: 3b:d9:82:aa:78:ce:96:f3:40:09:00:5f:8d:0c:d1:da:12:e8: f7:d6:73:ae:8b:8a:52:b8:06:60:f4:8c:54:ff:28:20:fa:f9: c9:aa:10:39:18:d4:d6:76:35:86:f3:b3:a2:bd:6d:ab:18:43: ba:f9:41:05:d0:de:a3:41:c3:c7:81:16:4c:bd:b7:b5:84:93: 20:be:dc:b5:09:1b:c7:1a:02:40:f3:0c:66:d7:8f:cc:f8:a1: 3c:5a:cc:37:20:83:d6:27:a0:97:db:59:4b:5b:e9:ce:19:c4: ce:90:4e:b3:d1:f5:1e:cb:a1:69:36:d5:e1:58:c1:dd:f8:ee: 3d:11:2d:e4:f3:1d:3e:c2:48:1d:61:1e:b5:a6:cc:c3:2f:31: 87:41:95:f6:9b:a2:fd:ea:d0:33:11:b3:07:c3:8a:62:a1:24: 31:85:0a:2d:97:d4:91:91:06:b5:8c:46:c3:e3:b3:55:92:94: 8c:78:3c:c3:fe:e0:be:7a:e3:b1:40:71:db:16:70:5f:b5:78: f9:5e:fc:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR1qcPZ2TCHU5Yi18ETLJqF5tXuwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQyMzAwMDAwMFoX DTI0MDUyODIzNTk1OVowejFJMEcGA1UEBRNAOGRjYWZjYjY5ZmE4N2E5N2Y2OWM4 OTBiMzBmNDZiYmRjOWZmOTlmZjdkZDU2MGUzZGFjMGE2ZDAyMTFlOTgzMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Bw40hiNgi0uadF9FTjKrB0+oDTV ozDyENZJo1UfYDesvAc4k+fbgQubMJZYyZFBew5Fp2v1CninG6vBepLGCvuKm3cA TyBMaGxcDAWrRm9QubyLHVKr9C3AM7M//hiFKFcIUMlaEmXxWBk0thwzFvyamn2V IlQgr5kcUmhdvvxFFWBMsyuidC/NOYwKT30IoJ+T1zG0jFtW8rBB8SkuydH/NZbN K/+bd9i73/eTyBlI/tDwcX4DlhAYsXL6qqBhYV1Tr6TFQUVYF6NCkWRXcGidH5di MlDZ9kZCVjMhdO2lwzhDlkBLuZvq5qHIR3f5jtQGJ5JBN9ru3pUjj5UPGwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOdgEl3mXJCb7TolTYFtogQ6ZoXNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3NjVlNTMwLWU5OGQtNDFmYS1iZjAzLTg2Y2Q3ZjllZWU1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauIAwDQYJKoZIhvcNAQELBQADggEBAGvprdCDckIqIxzz4z2V spNMZ4CvujlhYEA65O8ZR4tvuiHm3cfCwPxTGqSTNUvXgKgr6XcWMjvZgqp4zpbz QAkAX40M0doS6PfWc66LilK4BmD0jFT/KCD6+cmqEDkY1NZ2NYbzs6K9basYQ7r5 QQXQ3qNBw8eBFky9t7WEkyC+3LUJG8caAkDzDGbXj8z4oTxazDcgg9YnoJfbWUtb 6c4ZxM6QTrPR9R7LoWk21eFYwd347j0RLeTzHT7CSB1hHrWmzMMvMYdBlfabov3q 0DMRswfDimKhJDGFCi2X1JGRBrWMRsPjs1WSlIx4PMP+4L5647FAcdsWcF+1ePle /AM= -----END CERTIFICATE-----Generated at Thu May 2 23:18:30 2024 by rpki-client on console-ams.rpki-client.org