$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff64520d-2dc2-4ae8-ae24-d6e0356ea67e.roa File: ff64520d-2dc2-4ae8-ae24-d6e0356ea67e.roa (raw, json) Hash identifier: dZHmtrUNvEtIyTqmGLZ2Gy1UB6COVIvgc6V0cO0YgG0= Subject key identifier: C0:F0:BF:6F:31:88:23:58:C2:96:C6:D2:B0:5D:A4:71:04:59:8D:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23E14D2678CD6DD05D66EC4456DD2CE41E74D5A3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff64520d-2dc2-4ae8-ae24-d6e0356ea67e.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Apr 2024 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e1:4d:26:78:cd:6d:d0:5d:66:ec:44:56:dd:2c:e4:1e:74:d5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=ca4b4785479843940d8247dcdd63ebc8309d697b3bf0d9b72c4bd3d07cdffb5c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:2e:96:74:c3:04:6e:a1:62:11:e3:a8:cd: e9:ac:eb:da:8e:47:58:5a:fd:f8:39:b3:20:55:30: 02:c7:b4:69:e5:a5:11:72:59:26:c0:2a:0e:0a:e9: 13:78:a7:52:35:03:ac:45:44:98:50:06:39:7a:67: cf:fe:12:3e:b2:50:36:c5:63:73:24:13:b2:66:12: 8e:c5:ba:f0:e1:a7:dc:91:43:32:61:54:54:0f:af: c8:3f:b2:cc:87:4d:4e:82:3b:ba:d6:e4:86:4d:d7: b8:9f:4b:48:56:78:be:f4:73:c9:d2:47:e5:7a:0b: 57:9a:4d:77:d0:66:24:46:9b:1e:6c:83:e2:13:f6: 7e:fa:52:e9:8d:6d:f5:03:32:df:54:6c:95:35:e3: f7:07:5e:20:7f:04:49:2a:ce:e8:b3:99:14:4e:88: d3:75:c1:9a:97:8d:6e:10:c5:c9:f9:e8:d1:55:20: 9f:43:ec:f2:5e:31:78:6f:ab:14:55:a3:0e:13:67: 30:ea:65:2a:bd:20:6b:53:11:a5:ed:e3:07:e8:f4: af:0f:47:8d:39:6c:25:e4:48:64:d2:e6:5f:df:64: 66:fa:99:4f:03:a3:ce:c7:ae:a2:57:77:f7:90:dc: 9b:78:51:3a:f5:6d:70:74:2f:4a:31:b3:83:db:14: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F0:BF:6F:31:88:23:58:C2:96:C6:D2:B0:5D:A4:71:04:59:8D:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff64520d-2dc2-4ae8-ae24-d6e0356ea67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4000::/40 Signature Algorithm: sha256WithRSAEncryption 39:76:cc:9b:40:76:16:a7:43:58:dd:c4:9c:2a:c1:10:69:4b: fa:ee:1e:ca:55:f4:04:ad:09:6c:e5:88:26:76:0b:16:aa:0a: cf:45:ac:9f:1c:1c:eb:8b:4f:6c:06:13:21:2e:ff:46:2d:14: 6d:4a:14:b2:d4:3d:e6:23:77:f6:19:95:1a:ca:d6:49:db:54: c4:6e:19:65:dd:c0:0a:72:d1:68:1d:c9:35:0b:cf:0f:82:29: ae:28:7c:ad:0d:be:c5:8e:b3:dd:fd:94:58:af:58:75:b8:d0: aa:1f:f8:ba:1b:fc:fd:2b:11:22:50:87:5f:fa:41:9b:fe:af: 7c:43:d1:d8:77:df:35:c9:10:fd:db:eb:7f:a4:49:28:d4:6f: bb:6b:3f:df:72:e3:2d:96:d6:45:6b:66:89:c5:4d:29:56:a8: 43:ac:16:79:ca:46:e4:57:e1:b3:25:40:2e:87:f1:95:84:28: e0:5a:b4:b0:b7:c5:f9:c8:1b:5e:fe:59:d0:ab:f3:6e:e9:3b: 33:97:3c:dd:cc:52:c4:c8:82:52:6c:d0:a5:d6:4e:13:6d:a0: 36:d4:98:99:d9:3b:08:35:de:20:ab:f8:56:c7:ca:93:01:6d: 6d:3b:45:5d:78:da:27:15:1d:7e:52:98:1c:b6:49:8d:af:eb: 0f:18:31:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUI+FNJnjNbdBdZuxEVt0s5B501aMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAY2E0YjQ3ODU0Nzk4NDM5NDBkODI0 N2RjZGQ2M2ViYzgzMDlkNjk3YjNiZjBkOWI3MmM0YmQzZDA3Y2RmZmI1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvAulnTDBG6hYhHjqM3prOvajkdY Wv34ObMgVTACx7Rp5aURclkmwCoOCukTeKdSNQOsRUSYUAY5emfP/hI+slA2xWNz JBOyZhKOxbrw4afckUMyYVRUD6/IP7LMh01Ogju61uSGTde4n0tIVni+9HPJ0kfl egtXmk130GYkRpsebIPiE/Z++lLpjW31AzLfVGyVNeP3B14gfwRJKs7os5kUTojT dcGal41uEMXJ+ejRVSCfQ+zyXjF4b6sUVaMOE2cw6mUqvSBrUxGl7eMH6PSvD0eN OWwl5Ehk0uZf32Rm+plPA6POx66iV3f3kNybeFE69W1wdC9KMbOD2xS2wwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMDwv28xiCNYwpbG0rBdpHEEWY18MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmNjQ1MjBkLTJkYzItNGFlOC1hZTI0LWQ2ZTAzNTZlYTY3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8kAwDQYJKoZIhvcNAQELBQADggEBADl2zJtAdhanQ1jdxJwq wRBpS/ruHspV9AStCWzliCZ2CxaqCs9FrJ8cHOuLT2wGEyEu/0YtFG1KFLLUPeYj d/YZlRrK1knbVMRuGWXdwApy0WgdyTULzw+CKa4ofK0NvsWOs939lFivWHW40Kof +Lob/P0rESJQh1/6QZv+r3xD0dh33zXJEP3b63+kSSjUb7trP99y4y2W1kVrZonF TSlWqEOsFnnKRuRX4bMlQC6H8ZWEKOBatLC3xfnIG17+WdCr827pOzOXPN3MUsTI glJs0KXWThNtoDbUmJnZOwg13iCr+FbHypMBbW07RV142icVHX5SmBy2SY2v6w8Y MYM= -----END CERTIFICATE-----Generated at Sat Apr 20 01:01:16 2024 by rpki-client on console-fra.rpki-client.org