$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa File: 1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa (raw, json) Hash identifier: /jID3PYldmVri5oGgKbNRMx62ykuzZhoueGP0utjel4= Subject key identifier: 8F:0D:E1:54:87:B5:12:9F:A3:A6:9D:15:7D:73:F7:E0:FE:2D:4A:71 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 747F523A833938C79E57A32E94FDC79A857496ED Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa Signing time: Fri 05 Apr 2024 00:00:00 +0000 ROA not before: Fri 05 Apr 2024 00:00:00 +0000 ROA not after: Fri 10 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7f:52:3a:83:39:38:c7:9e:57:a3:2e:94:fd:c7:9a:85:74:96:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 5 00:00:00 2024 GMT Not After : May 10 23:59:59 2024 GMT Subject: serialNumber=8f5a47253426fa9d83f8f3ff332caba328ca8fa53545ed37344dc9d5ecc00cd5, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:d0:16:37:86:dd:05:b8:da:16:66:eb:ab: a6:2a:d8:26:34:0c:c6:3d:f1:d4:e7:45:32:04:f5: 0f:bf:0b:6f:17:fd:aa:d2:79:e7:cf:17:a3:85:89: e6:ac:86:83:53:9a:1c:b3:8a:62:a4:d2:a9:0f:7d: f9:b0:b4:cd:79:52:03:2b:ba:5c:08:e5:22:ec:6d: d5:66:ef:61:5a:f0:32:e6:18:10:ac:4a:41:26:e3: 24:5a:df:aa:cb:ee:d1:d4:b5:a6:19:83:e4:d7:2f: 45:05:f7:cf:d0:84:54:c2:0d:d4:8f:9b:53:a0:5b: cd:db:c9:37:4e:4c:d1:02:96:be:b0:8d:38:83:5d: 06:76:50:17:b1:9b:d7:0d:4d:02:d6:8a:00:79:63: 4d:17:2b:66:fa:4c:b3:35:94:d8:08:57:9c:d7:17: 83:28:39:cf:57:3f:bb:8c:bb:88:7a:9e:42:54:3a: 3b:e5:50:15:2b:7c:42:98:92:89:1b:8c:ad:6d:97: 02:f7:4a:66:a1:d6:d0:41:ef:06:da:54:cb:84:9a: b6:40:a6:3e:6d:d0:d0:3a:0a:f5:b8:90:1e:29:ad: 2e:86:2e:d2:0b:d5:3e:db:4b:e4:1c:e9:c0:da:78: f6:52:bb:da:47:e0:52:90:bf:fe:ba:22:9c:8b:7e: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:E1:54:87:B5:12:9F:A3:A6:9D:15:7D:73:F7:E0:FE:2D:4A:71 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1090::/48 Signature Algorithm: sha256WithRSAEncryption 09:be:a1:2a:70:20:9b:32:64:c7:10:90:04:f8:d4:53:33:d4: 38:28:4c:cf:a2:49:54:89:92:2d:2b:0b:9a:28:87:3e:2d:15: 01:23:59:e1:01:48:04:2d:95:4a:0b:4c:b5:36:5c:5c:8a:bd: e7:41:68:c1:cc:55:70:0e:fe:c2:f9:e9:27:2b:a8:6b:5b:6c: 1e:1f:77:24:c0:62:1c:96:3f:26:68:d3:24:23:7b:c2:65:bc: 8e:a8:40:70:34:46:00:51:ed:cb:dc:62:81:ac:24:7b:36:ba: 63:72:16:64:4e:43:f1:e8:67:ca:b9:00:8b:8d:f6:14:44:18: 2c:c9:3f:63:a4:14:cc:39:9c:2c:d3:5a:a7:a5:62:69:a3:e4: 6c:67:67:c6:54:76:b8:fd:2a:c1:fc:95:5b:c8:21:0f:96:d5: f3:cc:73:9b:78:95:98:0d:db:1e:77:b1:9a:7c:95:95:e9:1f: f1:0b:81:02:fd:9d:5a:67:cf:3a:72:51:30:6b:4e:81:ec:47: 7f:0f:dd:cd:15:16:ba:61:25:a2:82:2d:72:9f:40:07:d3:c6: 46:36:ed:0a:67:a3:f0:c5:91:74:5e:a2:ad:d3:09:ea:dd:a8: 9f:01:76:66:ea:39:ba:67:d2:63:62:97:36:df:41:cd:b3:3a: 60:84:eb:67 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdH9SOoM5OMeeV6MulP3HmoV0lu0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MDQwNTAwMDAwMFoX DTI0MDUxMDIzNTk1OVowejFJMEcGA1UEBRNAOGY1YTQ3MjUzNDI2ZmE5ZDgzZjhm M2ZmMzMyY2FiYTMyOGNhOGZhNTM1NDVlZDM3MzQ0ZGM5ZDVlY2MwMGNkNTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfPQFjeG3QW42hZm66umKtgmNAzG PfHU50UyBPUPvwtvF/2q0nnnzxejhYnmrIaDU5ocs4pipNKpD335sLTNeVIDK7pc COUi7G3VZu9hWvAy5hgQrEpBJuMkWt+qy+7R1LWmGYPk1y9FBffP0IRUwg3Uj5tT oFvN28k3TkzRApa+sI04g10GdlAXsZvXDU0C1ooAeWNNFytm+kyzNZTYCFec1xeD KDnPVz+7jLuIep5CVDo75VAVK3xCmJKJG4ytbZcC90pmodbQQe8G2lTLhJq2QKY+ bdDQOgr1uJAeKa0uhi7SC9U+20vkHOnA2nj2UrvaR+BSkL/+uiKci36QuQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI8N4VSHtRKfo6adFX1z9+D+LUpxMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzE3MzhlMWNhLWU3MjUtNGY3NS04ZGZiLTA0Yjg5ZWUzNDlkOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABCQMA0GCSqGSIb3DQEBCwUAA4IBAQAJvqEqcCCbMmTHEJAE +NRTM9Q4KEzPoklUiZItKwuaKIc+LRUBI1nhAUgELZVKC0y1Nlxcir3nQWjBzFVw Dv7C+eknK6hrW2weH3ckwGIclj8maNMkI3vCZbyOqEBwNEYAUe3L3GKBrCR7Nrpj chZkTkPx6GfKuQCLjfYURBgsyT9jpBTMOZws01qnpWJpo+RsZ2fGVHa4/SrB/JVb yCEPltXzzHObeJWYDdsed7GafJWV6R/xC4EC/Z1aZ886clEwa06B7Ed/D93NFRa6 YSWigi1yn0AH08ZGNu0KZ6PwxZF0XqKt0wnq3aifAXZm6jm6Z9JjYpc230HNszpg hOtn -----END CERTIFICATE-----Generated at Fri Apr 26 00:36:11 2024 by rpki-client on console-ams.rpki-client.org