$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa File: fa2f00a1-5565-44e6-8f22-91f65926beed.roa (raw, json) Hash identifier: QbqvLu9/496muVt7wFK0XmTpx3bKdBr5F028PIXzc6M= Subject key identifier: 80:80:3B:C7:07:CE:FF:89:A3:37:6E:6A:B9:7E:AA:04:24:D1:5A:89 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 4DFB6A5DE56FE486405A99232BD552D438B937DD Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 159.248.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fb:6a:5d:e5:6f:e4:86:40:5a:99:23:2b:d5:52:d4:38:b9:37:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=6e82a9ea89a3f20f13a28e498a9259594fab1490ff0bb6f0328919a43b15a696, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:e0:cd:40:7d:e1:02:1d:11:96:c5:9e:02: 06:a2:38:83:15:e1:5a:b0:21:25:df:98:4c:15:ce: 3b:c6:45:2c:49:02:4c:42:af:a9:28:d0:ea:96:6c: 35:6c:a9:e9:74:cc:2a:a3:14:0e:92:fb:d3:17:12: ef:74:a6:88:18:2f:a7:41:b6:26:90:22:39:42:cf: 08:9d:db:29:55:63:cd:9b:1c:57:ec:13:af:dc:0a: 85:8a:7f:14:26:4d:d8:e6:86:86:9e:b8:89:42:4e: 6e:49:2f:0e:d0:b9:2c:7d:db:b7:b9:34:de:25:9e: 33:e7:57:50:46:4a:ec:82:e7:d2:01:c0:3d:8e:91: be:87:7d:47:7f:c8:23:1d:35:5e:2d:41:37:c2:e2: a6:01:89:53:b0:10:66:cc:25:87:9f:90:34:ff:2d: fb:82:4f:53:67:39:17:6d:4b:ab:9c:42:04:5a:ca: c5:22:d1:fa:47:7f:ee:a7:f8:ec:32:2b:41:07:7b: dd:7e:af:00:11:a8:f1:1a:2e:c7:30:a2:7b:88:a6: 17:62:f9:0c:99:05:59:1d:56:1a:e7:39:22:8a:3c: 3c:e4:d9:12:a1:ac:83:76:4d:6b:9a:3e:04:4c:53: d6:7f:28:4b:4d:0b:70:be:a5:72:a1:c4:94:21:05: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:80:3B:C7:07:CE:FF:89:A3:37:6E:6A:B9:7E:AA:04:24:D1:5A:89 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:1c:09:b5:2f:0e:2d:41:68:08:c1:ec:95:ba:3a:52:00:a1: 64:44:dc:b9:ea:2f:9b:d2:65:c7:bf:17:3a:27:8d:42:23:03: 14:74:43:74:e3:7e:ed:53:47:0a:95:94:d4:54:35:39:49:60: 54:f7:69:f6:b2:bd:9c:c6:f5:cb:fc:48:fe:da:0a:e9:c8:4f: 4d:49:42:f3:fb:35:49:3d:22:00:d4:4e:86:7b:c1:68:a9:2a: 95:af:94:c9:03:1b:1f:06:5e:23:4e:2c:af:57:a1:b8:64:71: 69:25:e3:e3:32:38:c5:30:b2:52:4b:0e:50:b6:dc:c9:39:fa: f4:38:25:72:31:85:ce:39:0f:45:33:08:7c:c5:33:4c:0c:16: 18:04:17:8b:59:c6:ff:85:62:f9:f0:21:15:ff:53:18:f4:cd: 26:5b:92:23:24:de:87:fb:81:d9:bf:73:92:07:4f:06:43:81: 3a:8e:aa:fe:4a:03:6b:c4:7b:96:dd:d1:f5:f3:5e:ba:18:76: fb:e0:72:53:1f:71:94:91:31:66:1c:6e:27:57:10:47:88:74: 53:ff:08:d5:b3:50:95:6c:f2:5d:89:26:f2:5d:eb:69:78:09: 63:7e:90:9e:f9:70:e6:31:9e:ba:52:12:dc:d9:2a:af:bd:76: 8f:13:d3:f8 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUTftqXeVv5IZAWpkjK9VS1Di5N90wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI0MTExODAwMDAwMFoX DTI0MTIyMzIzNTk1OVowejFJMEcGA1UEBRNANmU4MmE5ZWE4OWEzZjIwZjEzYTI4 ZTQ5OGE5MjU5NTk0ZmFiMTQ5MGZmMGJiNmYwMzI4OTE5YTQzYjE1YTY5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4HgzUB94QIdEZbFngIGojiDFeFa sCEl35hMFc47xkUsSQJMQq+pKNDqlmw1bKnpdMwqoxQOkvvTFxLvdKaIGC+nQbYm kCI5Qs8IndspVWPNmxxX7BOv3AqFin8UJk3Y5oaGnriJQk5uSS8O0Lksfdu3uTTe JZ4z51dQRkrsgufSAcA9jpG+h31Hf8gjHTVeLUE3wuKmAYlTsBBmzCWHn5A0/y37 gk9TZzkXbUurnEIEWsrFItH6R3/up/jsMitBB3vdfq8AEajxGi7HMKJ7iKYXYvkM mQVZHVYa5zkiijw85NkSoayDdk1rmj4ETFPWfyhLTQtwvqVyocSUIQV2fQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFICAO8cHzv+Jozduarl+qgQk0VqJMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZhMmYwMGExLTU1NjUtNDRlNi04ZjIyLTkxZjY1OTI2YmVlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAn/gwDQYJKoZIhvcNAQELBQADggEBACgcCbUvDi1BaAjB7JW6OlIA oWRE3LnqL5vSZce/FzonjUIjAxR0Q3Tjfu1TRwqVlNRUNTlJYFT3afayvZzG9cv8 SP7aCunIT01JQvP7NUk9IgDUToZ7wWipKpWvlMkDGx8GXiNOLK9XobhkcWkl4+My OMUwslJLDlC23Mk5+vQ4JXIxhc45D0UzCHzFM0wMFhgEF4tZxv+FYvnwIRX/Uxj0 zSZbkiMk3of7gdm/c5IHTwZDgTqOqv5KA2vEe5bd0fXzXroYdvvgclMfcZSRMWYc bidXEEeIdFP/CNWzUJVs8l2JJvJd62l4CWN+kJ75cOYxnrpSEtzZKq+9do8T0/g= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:37 2024 by rpki-client on console-fra.rpki-client.org