$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa File: 1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa (raw, json) Hash identifier: Cjhxlpi5T8ePj4feOjkafGufvV1gJoHH1Sc5OCao8Os= Subject key identifier: 43:1F:29:4F:4D:9B:0F:F8:C9:0F:C4:94:B2:8C:A8:37:7A:99:15:58 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 61460C9FA790A4629365117AA069CE81DEBDADDD Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa Signing time: Sat 16 Sep 2023 00:00:00 +0000 ROA not before: Sat 16 Sep 2023 00:00:00 +0000 ROA not after: Sat 21 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Sep 2023 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:46:0c:9f:a7:90:a4:62:93:65:11:7a:a0:69:ce:81:de:bd:ad:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 16 00:00:00 2023 GMT Not After : Oct 21 23:59:59 2023 GMT Subject: serialNumber=8ea39ee23ff6283c4a68ca396a8e537821d75bce303ab0962de7f4da3e4ced67, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:34:03:8a:d3:61:48:85:18:cd:ae:87:36: 5f:c5:64:65:d3:8d:e6:91:35:78:f3:50:d9:4f:4a: 2c:a4:b5:c1:f8:f4:8b:e5:ba:56:bd:03:e4:6f:bf: 68:93:9e:63:dd:dc:a9:7c:83:cb:f4:ef:dc:23:3a: 79:50:0d:fc:55:b2:2b:70:ce:4e:aa:87:b1:98:94: 1b:68:d0:3e:0b:0e:32:5a:95:80:24:fd:d7:56:7e: 58:dd:e8:0e:61:f5:2c:43:4c:88:25:f1:2d:39:ec: 4a:e8:ab:e6:dd:8b:3c:35:e2:70:af:28:ed:21:87: b3:f3:07:e0:08:23:a1:98:a0:18:8b:e6:b2:a6:10: 11:41:6a:af:b8:56:a7:0a:cb:4b:a6:6a:ae:4b:20: 78:77:ef:8a:52:33:c0:4a:ee:f1:f0:d8:78:a1:86: f1:46:97:08:bf:61:f6:87:57:e5:4c:0a:a6:37:71: ff:e2:a6:45:be:be:76:6a:ff:a5:db:65:af:80:63: 27:78:09:67:b6:e9:62:46:99:09:30:13:df:e1:62: b8:a1:94:b4:ab:3a:0d:b2:09:5d:bd:8f:12:76:b6: 74:0d:24:7c:ad:d9:2b:92:5c:ba:5b:cb:ef:0a:ec: a3:7d:01:02:2d:c2:aa:f0:c7:b2:40:39:03:c0:1e: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1F:29:4F:4D:9B:0F:F8:C9:0F:C4:94:B2:8C:A8:37:7A:99:15:58 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1090::/48 Signature Algorithm: sha256WithRSAEncryption 08:69:d5:13:eb:91:93:57:33:51:14:3a:d8:0a:6e:dd:31:e3: 73:2a:f1:3e:2b:4e:f5:a3:b9:ba:2a:65:a7:48:4a:47:8b:eb: 94:65:60:f5:21:b2:1d:93:62:96:2e:ab:c5:92:d4:0c:57:53: 79:1d:fb:8e:3c:00:a6:94:54:ba:9b:7f:4a:a2:77:3c:22:ea: 34:12:d0:51:80:6f:ed:28:55:ed:cf:49:e6:d0:45:b9:01:d3: 07:e7:ca:8d:ae:8a:13:ab:86:66:8c:ec:79:2b:5b:33:24:04: bc:e2:d1:f6:cb:97:3e:3c:de:73:c0:c2:bf:f0:15:89:f1:b1: ac:fe:8e:13:9f:bc:84:43:a1:98:8f:bb:1b:bc:f1:3e:fd:b1: aa:28:ac:01:9f:00:c2:08:2b:cb:49:16:82:70:18:e9:25:d7: 62:05:30:8b:fd:e9:ea:16:f1:78:e1:89:ce:88:59:0b:3a:36: 9b:6a:e3:39:47:20:b7:c3:b6:74:79:47:d4:09:d0:ae:e0:a0: 30:31:4c:18:97:45:12:00:b5:81:23:2e:a5:86:34:cf:37:68: d9:b8:ab:29:f1:eb:d6:57:8f:f8:3e:17:c2:fa:9d:0c:cd:de: 3d:28:29:30:84:3d:05:54:6b:04:82:30:a3:9c:44:b0:bb:b3: ec:88:da:3d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYUYMn6eQpGKTZRF6oGnOgd69rd0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTIzMDkxNjAwMDAwMFoX DTIzMTAyMTIzNTk1OVowejFJMEcGA1UEBRNAOGVhMzllZTIzZmY2MjgzYzRhNjhj YTM5NmE4ZTUzNzgyMWQ3NWJjZTMwM2FiMDk2MmRlN2Y0ZGEzZTRjZWQ2NzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2c0A4rTYUiFGM2uhzZfxWRl043m kTV481DZT0ospLXB+PSL5bpWvQPkb79ok55j3dypfIPL9O/cIzp5UA38VbIrcM5O qoexmJQbaNA+Cw4yWpWAJP3XVn5Y3egOYfUsQ0yIJfEtOexK6Kvm3Ys8NeJwryjt IYez8wfgCCOhmKAYi+ayphARQWqvuFanCstLpmquSyB4d++KUjPASu7x8Nh4oYbx RpcIv2H2h1flTAqmN3H/4qZFvr52av+l22WvgGMneAlntuliRpkJMBPf4WK4oZS0 qzoNsgldvY8SdrZ0DSR8rdkrkly6W8vvCuyjfQECLcKq8MeyQDkDwB430QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEMfKU9Nmw/4yQ/ElLKMqDd6mRVYMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzE3MzhlMWNhLWU3MjUtNGY3NS04ZGZiLTA0Yjg5ZWUzNDlkOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABCQMA0GCSqGSIb3DQEBCwUAA4IBAQAIadUT65GTVzNRFDrY Cm7dMeNzKvE+K071o7m6KmWnSEpHi+uUZWD1IbIdk2KWLqvFktQMV1N5HfuOPACm lFS6m39Konc8Iuo0EtBRgG/tKFXtz0nm0EW5AdMH58qNrooTq4ZmjOx5K1szJAS8 4tH2y5c+PN5zwMK/8BWJ8bGs/o4Tn7yEQ6GYj7sbvPE+/bGqKKwBnwDCCCvLSRaC cBjpJddiBTCL/enqFvF44YnOiFkLOjabauM5RyC3w7Z0eUfUCdCu4KAwMUwYl0US ALWBIy6lhjTPN2jZuKsp8evWV4/4PhfC+p0Mzd49KCkwhD0FVGsEgjCjnESwu7Ps iNo9 -----END CERTIFICATE-----Generated at Sat Sep 16 00:30:27 2023 by rpki-client on console-ams.rpki-client.org