$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa File: fbe634bd-91d9-4786-a244-0783a5787526.roa (raw, json) Hash identifier: dNJD+ccMdWPjvB1NYUQBQloIvqAtCZDeFFLsjvdq+XM= Subject key identifier: 70:C5:14:8C:A0:2B:55:3A:C1:C5:04:1F:31:2D:98:A9:50:ED:62:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 795E7C2F436E94717AE3C795BF46E11115D7B966 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa Signing time: Sat 16 Mar 2024 00:00:00 +0000 ROA not before: Sat 16 Mar 2024 00:00:00 +0000 ROA not after: Sat 20 Apr 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Mar 2024 12:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5e:7c:2f:43:6e:94:71:7a:e3:c7:95:bf:46:e1:11:15:d7:b9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 16 00:00:00 2024 GMT Not After : Apr 20 23:59:59 2024 GMT Subject: serialNumber=acb42209706bd1d1504ffd1d732ffe0fb3aa3311e58cc1e6a042fb1b36016b39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f8:5d:16:d1:7f:e5:ff:ab:b8:cf:17:62:88: 9c:f6:b9:48:9f:2e:a9:5c:0b:12:15:51:a0:6b:f1: 7d:60:c0:fb:78:9d:07:5e:ef:d7:13:1c:b7:27:f6: 5f:66:24:ee:73:3c:81:79:f8:93:31:46:2e:cf:53: 86:09:01:f9:d3:c2:29:66:fa:64:fa:72:26:a5:f6: 61:e2:9c:e2:a8:3b:f9:68:ef:30:a4:c4:6f:ce:b0: a7:dc:5d:05:f2:65:4c:97:97:d9:53:9d:12:0e:c3: e4:f9:3c:17:70:17:01:b7:70:b2:ff:f2:fd:72:9f: 49:2c:35:68:26:d1:b6:d8:7a:85:db:45:ba:11:a0: 1a:bf:86:bd:b2:63:3a:47:2c:28:42:65:1f:75:d1: c6:1c:f4:fd:b5:a8:20:46:96:1d:f2:fd:75:a2:0c: d6:85:11:81:e3:06:b9:5b:db:62:2a:66:1e:7f:6a: 76:d2:d4:63:55:e8:e5:ff:60:14:f3:0f:52:09:d4: a3:ed:79:d7:1b:d0:95:7c:22:d5:81:2b:f6:d0:cb: 10:27:f2:cd:0d:bf:b1:7f:c4:8b:db:fa:b2:31:bc: 10:cb:6e:40:d8:33:ca:a9:9e:fc:ea:06:0e:76:b3: f3:57:89:15:37:e7:e8:a9:b9:e5:43:5d:b3:ab:be: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:14:8C:A0:2B:55:3A:C1:C5:04:1F:31:2D:98:A9:50:ED:62:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbe634bd-91d9-4786-a244-0783a5787526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:6000::/40 Signature Algorithm: sha256WithRSAEncryption 4e:74:38:84:5a:58:7d:c6:e4:27:08:7c:09:df:22:ae:fe:fd: 45:97:33:b5:ef:a0:4a:98:bb:26:ec:8e:b2:19:42:30:59:37: 70:79:0b:99:07:e4:65:15:f1:53:a1:89:b3:fc:97:98:c0:3b: 25:c0:31:13:6b:cf:ab:84:1f:1c:c8:c4:63:8d:0e:1d:c4:3c: 3b:16:04:48:e9:53:42:15:ee:08:07:4f:fa:63:1f:8b:82:01: f4:17:f9:4b:92:c5:2b:6d:92:12:fc:be:a0:33:63:74:9a:9b: a7:26:ff:c2:7a:99:1e:cd:d4:3f:0b:f1:71:c2:1e:45:98:2a: 96:fa:c6:56:36:d9:a7:4d:76:12:74:f1:f3:7b:55:db:a8:94: b0:0e:12:81:2d:80:b0:26:b3:bb:97:e3:ee:69:12:2b:5d:12: 6c:66:c3:71:0c:13:13:a3:5b:e0:f5:d9:a2:d0:d9:1c:ad:0b: d3:11:71:26:34:7b:f5:15:b8:17:91:dc:68:6f:c4:b9:65:d6: b8:df:72:9d:2e:f7:9b:2e:dd:e3:3c:a6:35:92:c3:de:66:80: af:6f:1d:2e:34:05:63:4a:b7:83:a0:3e:bc:d5:b1:95:64:f4: 02:45:d1:7c:b5:22:70:cf:65:98:1c:8b:46:1c:37:77:48:d8: 99:65:e0:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeV58L0NulHF648eVv0bhERXXuWYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDMxNjAwMDAwMFoX DTI0MDQyMDIzNTk1OVowejFJMEcGA1UEBRNAYWNiNDIyMDk3MDZiZDFkMTUwNGZm ZDFkNzMyZmZlMGZiM2FhMzMxMWU1OGNjMWU2YTA0MmZiMWIzNjAxNmIzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vhdFtF/5f+ruM8XYoic9rlIny6p XAsSFVGga/F9YMD7eJ0HXu/XExy3J/ZfZiTuczyBefiTMUYuz1OGCQH508IpZvpk +nImpfZh4pziqDv5aO8wpMRvzrCn3F0F8mVMl5fZU50SDsPk+TwXcBcBt3Cy//L9 cp9JLDVoJtG22HqF20W6EaAav4a9smM6RywoQmUfddHGHPT9taggRpYd8v11ogzW hRGB4wa5W9tiKmYef2p20tRjVejl/2AU8w9SCdSj7XnXG9CVfCLVgSv20MsQJ/LN Db+xf8SL2/qyMbwQy25A2DPKqZ786gYOdrPzV4kVN+foqbnlQ12zq74bywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHDFFIygK1U6wcUEHzEtmKlQ7WIuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiZTYzNGJkLTkxZDktNDc4Ni1hMjQ0LTA3ODNhNTc4NzUyNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba92AwDQYJKoZIhvcNAQELBQADggEBAE50OIRaWH3G5CcIfAnf Iq7+/UWXM7XvoEqYuybsjrIZQjBZN3B5C5kH5GUV8VOhibP8l5jAOyXAMRNrz6uE HxzIxGONDh3EPDsWBEjpU0IV7ggHT/pjH4uCAfQX+UuSxSttkhL8vqAzY3Sam6cm /8J6mR7N1D8L8XHCHkWYKpb6xlY22adNdhJ08fN7VduolLAOEoEtgLAms7uX4+5p EitdEmxmw3EMExOjW+D12aLQ2RytC9MRcSY0e/UVuBeR3GhvxLll1rjfcp0u95su 3eM8pjWSw95mgK9vHS40BWNKt4OgPrzVsZVk9AJF0Xy1InDPZZgci0YcN3dI2Jll 4FQ= -----END CERTIFICATE-----Generated at Thu Mar 28 00:59:37 2024 by rpki-client on console-fra.rpki-client.org