$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fcb9721f-f99b-433d-b53b-0ee3387fb1f7.roa File: fcb9721f-f99b-433d-b53b-0ee3387fb1f7.roa (raw, json) Hash identifier: dB5NgdHbbZpA2bPqEXkCR++WU5XhFrh6duHFLYjNWLY= Subject key identifier: 96:F1:26:1A:6F:55:F4:12:18:E3:61:05:8B:0B:16:97:FB:62:E5:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A813B8854C775B2CCDA74DF98B1B79D3FF74B34 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fcb9721f-f99b-433d-b53b-0ee3387fb1f7.roa Signing time: Sat 23 Nov 2024 00:00:00 +0000 ROA not before: Sat 23 Nov 2024 00:00:00 +0000 ROA not after: Sat 28 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:81:3b:88:54:c7:75:b2:cc:da:74:df:98:b1:b7:9d:3f:f7:4b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:00 2024 GMT Not After : Dec 28 23:59:59 2024 GMT Subject: serialNumber=eeb4275570f824f61d6ce67ee29d2f60009efe5c63fbcddf581e6f91c6fd426e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:76:df:1f:b3:40:ca:8b:a3:44:dd:d9:b1:69: f6:b6:d2:24:93:25:65:a1:ee:78:24:f1:e4:74:2a: 44:fc:ef:1c:ab:00:b6:63:58:89:bc:e4:b2:b1:52: a4:bf:f9:28:6a:d0:c7:9a:e9:db:91:4b:e5:63:20: 69:93:33:58:e1:45:4a:25:be:11:e5:ca:af:ed:56: 3a:20:ab:a9:7f:24:0d:35:25:a2:20:10:dd:04:8d: d2:b0:10:40:74:36:e2:9b:de:26:71:e6:8d:4b:e1: e6:13:a8:b4:62:4e:e5:cc:cf:9d:79:ab:ab:21:eb: 48:68:b7:26:79:5f:3c:72:2a:2f:71:eb:f3:8f:70: 60:49:fb:70:e5:4b:8f:9d:bf:40:72:99:7c:6b:d5: b2:c0:0a:65:90:23:91:79:b5:d5:78:4c:3f:84:9c: 77:6a:d0:e2:19:32:2a:a3:21:a8:97:77:db:b5:08: d5:fc:d3:0f:21:a1:6d:f8:ce:91:3f:55:ba:73:f1: ae:46:f1:cd:d7:ba:6f:23:02:ec:ae:36:e6:1e:cb: 7a:b5:ff:36:3e:c5:56:a4:f2:16:b1:fd:f4:e0:b6: 1d:03:26:d5:7e:92:28:59:59:5e:8e:ae:14:c2:5f: a4:c5:32:bc:d3:57:d0:d9:ab:ad:c0:c4:73:e0:7b: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F1:26:1A:6F:55:F4:12:18:E3:61:05:8B:0B:16:97:FB:62:E5:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fcb9721f-f99b-433d-b53b-0ee3387fb1f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 4c:b5:43:93:b0:d1:a3:da:86:36:d7:cd:10:fb:78:df:75:c3: 5e:4a:40:06:a7:b0:1f:ae:47:77:c5:d7:ff:23:8f:c3:1c:c2: 8e:06:68:78:6f:a4:ca:1f:13:d4:56:db:fb:bc:da:b1:4f:ff: 29:33:37:fb:bc:93:7b:bb:8e:9b:b1:b9:57:a6:a1:52:dd:18: d0:7e:57:20:cb:98:f4:98:04:aa:30:30:64:4f:0f:84:03:8b: 33:a2:f1:a5:e1:d7:52:00:48:9e:84:7a:b4:5b:2f:c3:53:3e: 5e:8a:8a:c3:99:6b:2f:f1:2f:a1:9c:22:8e:3a:a3:f0:4e:41: 29:40:65:76:a7:15:04:55:fd:7c:dc:1b:7f:c7:66:67:b1:f6: 48:7b:13:2c:b1:c4:df:35:05:cd:97:69:56:7e:5a:fe:b5:74: 8e:9f:7c:17:dc:d4:35:b8:55:d9:be:90:5b:e0:4f:7d:dd:93: f9:e1:29:27:a0:10:35:5d:23:35:3a:dd:65:2f:bc:3e:f4:0f: 62:38:9a:a8:48:5b:a9:bd:07:67:b8:f2:f2:c2:9b:bf:6b:4d: b8:24:b0:19:b9:7c:32:ee:80:bb:af:21:26:85:dc:29:ee:3d: fa:79:b5:c9:b5:11:bc:a8:38:ae:df:ba:42:0b:df:f9:87:f1: 59:9e:f8:7a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCoE7iFTHdbLM2nTfmLG3nT/3SzQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMzAwMDAwMFoX DTI0MTIyODIzNTk1OVowejFJMEcGA1UEBRNAZWViNDI3NTU3MGY4MjRmNjFkNmNl NjdlZTI5ZDJmNjAwMDllZmU1YzYzZmJjZGRmNTgxZTZmOTFjNmZkNDI2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinbfH7NAyoujRN3ZsWn2ttIkkyVl oe54JPHkdCpE/O8cqwC2Y1iJvOSysVKkv/koatDHmunbkUvlYyBpkzNY4UVKJb4R 5cqv7VY6IKupfyQNNSWiIBDdBI3SsBBAdDbim94mceaNS+HmE6i0Yk7lzM+deaur IetIaLcmeV88ciovcevzj3BgSftw5UuPnb9Acpl8a9WywAplkCORebXVeEw/hJx3 atDiGTIqoyGol3fbtQjV/NMPIaFt+M6RP1W6c/GuRvHN17pvIwLsrjbmHst6tf82 PsVWpPIWsf304LYdAybVfpIoWVlejq4Uwl+kxTK801fQ2autwMRz4Hsv7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJbxJhpvVfQSGONhBYsLFpf7YuWeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZjYjk3MjFmLWY5OWItNDMzZC1iNTNiLTBlZTMzODdmYjFmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8IAwDQYJKoZIhvcNAQELBQADggEBAEy1Q5Ow0aPahjbXzRD7 eN91w15KQAansB+uR3fF1/8jj8Mcwo4GaHhvpMofE9RW2/u82rFP/ykzN/u8k3u7 jpuxuVemoVLdGNB+VyDLmPSYBKowMGRPD4QDizOi8aXh11IASJ6EerRbL8NTPl6K isOZay/xL6GcIo46o/BOQSlAZXanFQRV/XzcG3/HZmex9kh7EyyxxN81Bc2XaVZ+ Wv61dI6ffBfc1DW4Vdm+kFvgT33dk/nhKSegEDVdIzU63WUvvD70D2I4mqhIW6m9 B2e48vLCm79rTbgksBm5fDLugLuvISaF3CnuPfp5tcm1EbyoOK7fukIL3/mH8Vme +Ho= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:16 2024 by rpki-client on console-ams.rpki-client.org