$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa File: fbe634bd-91d9-4786-a244-0783a5787526.roa (raw, json) Hash identifier: 4pP/s7IJsR8T6Q916pvsh2zGemnwChm+AYDUnAAUWwk= Subject key identifier: 25:16:97:56:E2:C3:DE:A3:D0:C9:B1:95:6B:D1:DF:93:2E:0B:91:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7723BCC093CA8C49D23F795369CF1C93F3171873 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Sep 2023 12:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:23:bc:c0:93:ca:8c:49:d2:3f:79:53:69:cf:1c:93:f3:17:18:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=489189b9affb2c27597e04ec52b33b13ae98bda64e7c941e380a8658a0361a21, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:bc:b3:7e:ec:df:f6:14:68:59:3f:78:3f: b3:10:28:ad:e8:b2:75:a0:3b:60:c6:54:e8:84:2a: 28:e7:b0:12:00:1c:bd:01:2c:8c:e4:30:78:0a:06: d3:07:58:32:9d:6b:05:03:6a:21:f9:6e:17:00:fc: 47:53:cc:a7:19:6f:de:24:55:0c:a1:a4:7a:64:3d: 0b:07:70:44:e3:8b:18:3a:1b:cb:44:78:76:e0:fc: 9d:87:24:c8:aa:16:11:c5:cb:25:ad:60:6b:62:9c: 47:7a:93:99:65:65:40:9d:1d:dc:8b:e5:c3:cf:25: de:12:4b:4b:29:1f:6a:16:2a:05:a4:d1:5a:51:93: 9d:36:49:ed:d9:23:56:8d:01:15:71:fb:84:9b:07: 5b:02:31:c0:0a:5c:33:98:4f:26:b7:e9:47:68:1e: d6:f5:be:68:f1:ed:c1:f1:c2:20:5f:c0:74:9e:c7: 2a:23:37:85:fe:9c:85:4d:85:7d:29:f9:af:a2:e8: e4:06:61:71:eb:72:45:0a:08:f1:88:8b:67:e5:b4: b7:95:9b:db:d4:b5:8f:ce:3a:59:3a:23:0a:c5:a7: 90:00:62:9e:83:07:ce:38:ad:23:5f:53:fb:e2:d1: 22:3c:8b:13:bd:c0:3a:e1:80:fc:61:06:da:be:43: 65:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:16:97:56:E2:C3:DE:A3:D0:C9:B1:95:6B:D1:DF:93:2E:0B:91:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:6000::/40 Signature Algorithm: sha256WithRSAEncryption 2c:f6:03:b4:cb:47:3f:7d:42:e8:0e:98:c1:34:ca:79:44:48: 7e:6c:35:4b:13:e1:70:98:21:8f:0f:05:ab:d9:6a:6a:1b:dc: 8d:1d:8d:18:7f:7b:ab:60:a8:31:de:1c:dd:c3:f2:13:7c:08: 6d:53:5c:4e:10:a8:7d:30:e8:2f:c0:27:a2:3a:be:1b:4f:c4: fa:39:84:4f:1e:83:73:14:18:3e:7d:13:76:2c:03:7b:04:69: 98:60:2b:a6:49:93:cd:44:13:39:76:a4:69:bb:fb:c5:aa:c1: e8:3e:1a:03:a6:67:16:fb:03:3b:86:e4:5a:bb:42:96:63:01: b2:a3:a6:7a:d0:ec:89:4c:4d:86:87:16:4b:da:f8:93:e0:be: 65:b8:a6:75:3b:aa:87:a1:df:51:07:48:fc:0a:cc:d7:fd:f8: ee:8e:72:e0:b6:92:c3:10:f4:e7:6c:5d:39:4d:dd:83:21:3b: d4:db:38:d3:bb:ac:7e:04:5c:a6:60:0e:cc:f2:3b:56:85:69: cc:3f:66:ca:80:81:12:6b:48:eb:77:20:a8:97:20:7e:2a:5e: ee:c8:68:ec:b6:ed:9c:9b:a3:1a:80:54:e5:13:df:cc:9e:9f: b5:be:60:8a:97:12:9d:1d:a0:8c:ba:ba:ec:70:d7:84:24:6f: b8:59:6a:b3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdyO8wJPKjEnSP3lTac8ck/MXGHMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkyMjAwMDAwMFoX DTIzMTAyNzIzNTk1OVowejFJMEcGA1UEBRNANDg5MTg5YjlhZmZiMmMyNzU5N2Uw NGVjNTJiMzNiMTNhZTk4YmRhNjRlN2M5NDFlMzgwYTg2NThhMDM2MWEyMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+8s37s3/YUaFk/eD+zECit6LJ1 oDtgxlTohCoo57ASABy9ASyM5DB4CgbTB1gynWsFA2oh+W4XAPxHU8ynGW/eJFUM oaR6ZD0LB3BE44sYOhvLRHh24PydhyTIqhYRxcslrWBrYpxHepOZZWVAnR3ci+XD zyXeEktLKR9qFioFpNFaUZOdNknt2SNWjQEVcfuEmwdbAjHAClwzmE8mt+lHaB7W 9b5o8e3B8cIgX8B0nscqIzeF/pyFTYV9KfmvoujkBmFx63JFCgjxiItn5bS3lZvb 1LWPzjpZOiMKxaeQAGKegwfOOK0jX1P74tEiPIsTvcA64YD8YQbavkNlYQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCUWl1biw96j0MmxlWvR35MuC5FMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiZTYzNGJkLTkxZDktNDc4Ni1hMjQ0LTA3ODNhNTc4NzUyNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba92AwDQYJKoZIhvcNAQELBQADggEBACz2A7TLRz99QugOmME0 ynlESH5sNUsT4XCYIY8PBavZamob3I0djRh/e6tgqDHeHN3D8hN8CG1TXE4QqH0w 6C/AJ6I6vhtPxPo5hE8eg3MUGD59E3YsA3sEaZhgK6ZJk81EEzl2pGm7+8Wqweg+ GgOmZxb7AzuG5Fq7QpZjAbKjpnrQ7IlMTYaHFkva+JPgvmW4pnU7qoeh31EHSPwK zNf9+O6OcuC2ksMQ9OdsXTlN3YMhO9TbONO7rH4EXKZgDszyO1aFacw/ZsqAgRJr SOt3IKiXIH4qXu7IaOy27ZyboxqAVOUT38yen7W+YIqXEp0doIy6uuxw14Qkb7hZ arM= -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org