$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff7841c4-1ada-4347-bba8-314c574d398d.roa File: ff7841c4-1ada-4347-bba8-314c574d398d.roa (raw, json) Hash identifier: /GOmGot8HxoO0yb1ZNmDlPDJBg8KstR7pfjS9V74rmk= Subject key identifier: 66:3A:BA:4B:FB:DE:FF:E7:80:24:93:26:45:E3:DE:19:B2:E4:43:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6AA26963EBFD9616DF9E2833C7F14921214316A4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff7841c4-1ada-4347-bba8-314c574d398d.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a2:69:63:eb:fd:96:16:df:9e:28:33:c7:f1:49:21:21:43:16:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=865017fe383ff53ef0541b2f2574e5aed70ae10fae6b1cbf46204c221afd19e4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:3f:1b:cd:0c:2c:3c:cd:3f:dc:26:c2:dd: 0f:98:a5:2b:6d:c4:b7:9e:79:d5:85:33:9b:b7:6b: 54:cb:79:19:5b:2f:d0:a7:05:7b:a7:68:b8:17:cf: 37:f9:43:64:31:a9:0d:99:08:4b:f3:da:16:4b:0c: 04:ab:d3:38:6f:2f:86:68:42:ce:73:06:02:0f:b3: 23:51:31:30:22:b0:6a:02:ef:80:1a:5d:c3:12:a4: 11:47:97:93:af:b3:f3:cf:13:f6:98:f2:bc:e5:79: d5:84:9d:0c:b8:8e:73:ab:c5:ea:14:6e:60:d0:cf: 34:21:bc:c0:82:d5:0f:44:79:3d:bb:6a:51:60:75: 7f:15:b4:0d:2f:2d:78:cd:3d:e9:21:17:5e:72:05: 21:d4:8c:08:51:e6:04:1f:cc:f6:ea:62:1f:d7:a1: 78:6e:8c:00:81:1f:ae:14:68:01:66:88:57:fe:0a: 2c:76:a1:11:02:27:79:89:cd:62:f0:f1:66:56:31: 62:ea:b3:a9:d8:13:9c:11:06:23:8e:69:2e:94:ed: c4:95:35:df:d0:6b:ce:74:6d:76:81:9c:69:a9:d6: 3d:d1:b0:72:91:77:d9:98:71:4b:96:92:64:80:00: a8:7b:19:bf:be:4f:b3:05:98:e5:51:8a:b4:71:54: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3A:BA:4B:FB:DE:FF:E7:80:24:93:26:45:E3:DE:19:B2:E4:43:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff7841c4-1ada-4347-bba8-314c574d398d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:4800::/40 Signature Algorithm: sha256WithRSAEncryption 7f:e7:c8:c8:db:41:18:84:f5:59:74:f0:e7:22:f7:51:89:bb: e3:91:6f:6b:47:e3:89:a1:3d:bb:96:ab:c3:60:97:57:ff:03: 92:22:14:e0:d0:8f:e1:f8:98:da:79:3f:fd:36:12:72:64:ff: 20:d1:f8:15:2c:74:b5:4d:2d:e9:4d:61:25:e7:65:e9:ab:8f: 52:9f:af:bd:f3:67:3a:c0:7d:98:e4:e3:3a:63:7b:6f:e2:d5: f2:22:29:84:1b:66:03:4c:c4:0a:af:bd:29:99:10:fe:e8:60: ba:4e:d1:42:05:bf:12:72:7a:82:17:7b:a0:dd:00:f0:de:86: 16:c9:90:bc:67:b4:ca:cb:57:ac:6e:85:59:2c:f7:7d:a7:37: 4c:71:65:a0:98:a3:8e:74:89:13:a9:d8:d2:11:44:11:23:53: 5b:65:7d:11:db:8a:99:1c:c4:be:b4:7c:63:bd:be:a6:01:19: f3:bd:4a:47:d1:46:80:a6:62:9f:26:63:eb:d9:df:f7:08:c6: b0:58:80:88:44:12:7a:02:a3:00:7a:b4:0b:4a:3d:4f:a7:3b: 77:92:c8:24:96:7c:68:9b:95:dc:b7:74:58:f1:d3:19:64:df: 9f:cd:e5:70:94:e2:da:2f:7f:f1:b2:44:28:97:2c:12:7e:59: ba:92:1e:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaqJpY+v9lhbfnigzx/FJISFDFqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNAODY1MDE3ZmUzODNmZjUzZWYwNTQx YjJmMjU3NGU1YWVkNzBhZTEwZmFlNmIxY2JmNDYyMDRjMjIxYWZkMTllNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoo/G80MLDzNP9wmwt0PmKUrbcS3 nnnVhTObt2tUy3kZWy/QpwV7p2i4F883+UNkMakNmQhL89oWSwwEq9M4by+GaELO cwYCD7MjUTEwIrBqAu+AGl3DEqQRR5eTr7PzzxP2mPK85XnVhJ0MuI5zq8XqFG5g 0M80IbzAgtUPRHk9u2pRYHV/FbQNLy14zT3pIRdecgUh1IwIUeYEH8z26mIf16F4 bowAgR+uFGgBZohX/gosdqERAid5ic1i8PFmVjFi6rOp2BOcEQYjjmkulO3ElTXf 0GvOdG12gZxpqdY90bBykXfZmHFLlpJkgACoexm/vk+zBZjlUYq0cVTrSwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGY6ukv73v/ngCSTJkXj3hmy5EMeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmNzg0MWM0LTFhZGEtNDM0Ny1iYmE4LTMxNGM1NzRkMzk4ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauEgwDQYJKoZIhvcNAQELBQADggEBAH/nyMjbQRiE9Vl08Oci 91GJu+ORb2tH44mhPbuWq8Ngl1f/A5IiFODQj+H4mNp5P/02EnJk/yDR+BUsdLVN LelNYSXnZemrj1Kfr73zZzrAfZjk4zpje2/i1fIiKYQbZgNMxAqvvSmZEP7oYLpO 0UIFvxJyeoIXe6DdAPDehhbJkLxntMrLV6xuhVks932nN0xxZaCYo450iROp2NIR RBEjU1tlfRHbipkcxL60fGO9vqYBGfO9SkfRRoCmYp8mY+vZ3/cIxrBYgIhEEnoC owB6tAtKPU+nO3eSyCSWfGibldy3dFjx0xlk35/N5XCU4tovf/GyRCiXLBJ+WbqS Ht4= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:16 2024 by rpki-client on console-ams.rpki-client.org