$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa File: fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa (raw, json) Hash identifier: Naz5E3tzmWrS8+uNY/+nQUfWwm5Qc8hcHttR5hmW7F4= Subject key identifier: 33:4B:19:69:E3:53:D3:1D:93:E3:58:3F:16:AD:46:33:42:05:0E:A9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BD56D93FB4519D7DEDDC40A76CA42C89E1878BA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa Signing time: Wed 01 May 2024 00:00:00 +0000 ROA not before: Wed 01 May 2024 00:00:00 +0000 ROA not after: Wed 05 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d5:6d:93:fb:45:19:d7:de:dd:c4:0a:76:ca:42:c8:9e:18:78:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 1 00:00:00 2024 GMT Not After : Jun 5 23:59:59 2024 GMT Subject: serialNumber=0c51f6dfc1016ccd6f679331daa8ec7dabbe6ea85881f0db9f1ba241f7c2afdf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:52:32:28:6e:8b:a1:e0:96:f2:c0:01:c7: ed:34:1c:c2:de:55:23:7f:e1:36:1c:b1:00:84:ee: 81:a5:e4:5b:15:21:d7:70:6b:ee:3f:0a:72:6d:3d: 83:73:a8:26:bc:36:39:e5:61:9f:6f:6e:aa:41:7a: c8:88:ea:cb:fb:5b:4b:15:da:ee:2e:58:06:57:68: 0c:b5:fb:df:06:57:ab:e5:65:25:45:f5:ec:e3:b3: 70:7e:bb:57:38:39:b8:1b:ed:33:f3:1d:ff:83:ff: 7e:a6:de:7a:94:af:c3:ae:15:4c:ff:bd:66:2d:40: bf:64:78:2c:23:d3:f7:f2:b1:a8:78:b3:0d:57:eb: 4d:04:4c:30:08:42:64:d1:3f:65:fd:b1:1c:37:fe: 01:63:be:a8:ef:e3:e6:15:96:62:5b:7c:19:64:35: c2:ac:69:6f:1b:1a:ea:6a:4e:15:86:d6:7b:4e:d1: 1b:e1:83:ce:a4:53:09:bd:48:14:9c:c8:4d:ea:ea: 28:32:0b:2b:90:6b:79:aa:fa:68:2e:ec:5b:76:16: 45:16:39:b1:a3:7a:b7:22:08:7f:31:2f:08:99:83: f7:fe:16:6e:66:39:79:f8:ce:ad:fb:84:78:b3:52: b1:3f:31:2d:de:ec:5e:ef:e0:f4:7d:e0:88:52:98: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4B:19:69:E3:53:D3:1D:93:E3:58:3F:16:AD:46:33:42:05:0E:A9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cce03-c2bd-4309-9698-9b9cadaf0b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4800::/40 Signature Algorithm: sha256WithRSAEncryption 9b:f0:7f:a4:2b:e2:39:e8:6e:9b:c4:c0:85:c5:4d:c9:b1:89: e7:3b:ce:63:0f:0c:80:63:b2:cd:b3:7f:c7:e9:79:f5:bf:7d: 0d:85:39:7b:4c:c4:b5:27:16:a3:fa:0a:e3:62:f2:b5:1d:fc: 5d:88:c7:39:96:25:bf:9f:81:54:73:7a:1c:1c:8a:f2:15:93: b6:b4:d2:d8:b7:3d:0a:a9:b8:7a:56:54:cc:6b:8a:ca:d8:65: 7d:32:68:db:5f:ad:1d:8c:92:ef:06:22:be:dd:57:7c:3f:aa: 4f:0e:64:5d:6b:a6:05:a6:17:79:76:26:71:a6:8d:01:14:08: 91:f4:c6:80:c5:88:42:65:ea:95:f9:80:71:2d:34:15:56:da: e7:31:0b:b9:31:56:df:21:db:be:66:34:8f:97:cb:41:19:0d: 14:2a:b3:c2:a6:cb:4f:a6:b0:02:15:42:b2:c9:e2:93:19:bc: 95:ac:13:ba:57:96:85:1b:db:73:9d:eb:ac:d1:9a:93:a4:dc: 01:cb:69:61:64:97:ac:35:d5:51:a8:a3:60:cf:57:ef:ac:86: 81:ef:e4:6c:c9:77:fc:07:5f:8d:ec:dd:99:c1:04:e6:8b:3d: e9:a5:9e:2c:a6:50:74:e0:47:30:a4:d7:af:49:12:1a:bf:a5: 86:98:15:08 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUC9Vtk/tFGdfe3cQKdspCyJ4YeLowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMTAwMDAwMFoX DTI0MDYwNTIzNTk1OVowejFJMEcGA1UEBRNAMGM1MWY2ZGZjMTAxNmNjZDZmNjc5 MzMxZGFhOGVjN2RhYmJlNmVhODU4ODFmMGRiOWYxYmEyNDFmN2MyYWZkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjxSMihui6HglvLAAcftNBzC3lUj f+E2HLEAhO6BpeRbFSHXcGvuPwpybT2Dc6gmvDY55WGfb26qQXrIiOrL+1tLFdru LlgGV2gMtfvfBler5WUlRfXs47NwfrtXODm4G+0z8x3/g/9+pt56lK/DrhVM/71m LUC/ZHgsI9P38rGoeLMNV+tNBEwwCEJk0T9l/bEcN/4BY76o7+PmFZZiW3wZZDXC rGlvGxrqak4VhtZ7TtEb4YPOpFMJvUgUnMhN6uooMgsrkGt5qvpoLuxbdhZFFjmx o3q3Igh/MS8ImYP3/hZuZjl5+M6t+4R4s1KxPzEt3uxe7+D0feCIUpiPaQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDNLGWnjU9Mdk+NYPxatRjNCBQ6pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZkMWNjZTAzLWMyYmQtNDMwOS05Njk4LTliOWNhZGFmMGI2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/0gwDQYJKoZIhvcNAQELBQADggEBAJvwf6Qr4jnobpvEwIXF Tcmxiec7zmMPDIBjss2zf8fpefW/fQ2FOXtMxLUnFqP6CuNi8rUd/F2IxzmWJb+f gVRzehwcivIVk7a00ti3PQqpuHpWVMxrisrYZX0yaNtfrR2Mku8GIr7dV3w/qk8O ZF1rpgWmF3l2JnGmjQEUCJH0xoDFiEJl6pX5gHEtNBVW2ucxC7kxVt8h275mNI+X y0EZDRQqs8Kmy0+msAIVQrLJ4pMZvJWsE7pXloUb23Od66zRmpOk3AHLaWFkl6w1 1VGoo2DPV++shoHv5GzJd/wHX43s3ZnBBOaLPemlniymUHTgRzCk169JEhq/pYaY FQg= -----END CERTIFICATE-----Generated at Thu May 2 17:41:00 2024 by rpki-client on console-fra.rpki-client.org