$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa File: 22fa329b-ec37-40dd-997f-24f4559e0eff.roa (raw, json) Hash identifier: 8t4qmNtc/XarQthr8Ma+7tRa9nsktnj1ZzIWIN3AdFg= Subject key identifier: EB:B2:34:CF:F5:EF:75:23:6A:14:B9:D7:2D:F2:81:0C:0B:4A:46:E7 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 0E328F872B62C0A4E0375274E29074AB3D763194 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 103.8.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:32:8f:87:2b:62:c0:a4:e0:37:52:74:e2:90:74:ab:3d:76:31:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=5f3561fe09c0f7335a98c8aac610fe914c020f2702b16cddc6484bb55e9cf5c1, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:2f:9c:17:95:4a:4a:24:a2:1e:9b:d8:06: f5:93:6c:9c:45:72:5d:e0:05:98:26:dd:14:47:0d: d4:d0:a5:4d:a8:58:4d:fa:a6:e1:ca:c9:00:21:55: 62:6c:f0:2c:81:7b:3b:43:fd:8d:ad:b8:ab:5d:a2: 46:bd:ed:eb:4c:91:30:c1:3b:0a:b8:f9:f6:9c:e7: 3e:60:bf:73:4e:ef:58:af:ad:89:93:b4:62:7f:fc: 4d:db:b8:75:f9:40:e1:cc:f6:46:e7:c7:a9:88:11: 4e:f7:b8:1f:df:1a:60:ee:bd:3f:8a:07:03:53:b7: d2:cc:2c:1a:4c:c4:86:f8:21:56:da:8f:d8:62:ae: 48:49:38:59:80:59:98:ad:5b:b0:cb:48:80:d2:dc: 9e:fd:97:45:21:6d:6a:67:93:bf:5c:73:b7:bf:dd: a6:91:8b:f7:f5:58:fd:8b:7b:59:b5:78:80:ba:3f: 8e:d7:86:a5:5e:f4:10:6e:62:65:ff:c9:a1:80:b6: 92:47:bb:22:6e:87:54:e6:7c:0b:c0:dc:ff:89:1f: 42:54:c3:6d:07:ff:e1:3c:68:06:f8:d3:4a:d7:11: 4a:81:f6:65:b8:4e:be:51:3c:fd:3c:a0:95:fc:4c: 22:e9:f0:f2:fd:b7:bc:56:d8:90:0e:d3:01:33:8e: 6d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B2:34:CF:F5:EF:75:23:6A:14:B9:D7:2D:F2:81:0C:0B:4A:46:E7 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.172.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:1a:9b:be:94:fc:e2:6e:a3:95:81:98:e2:a7:58:11:ef:a7: d9:65:66:4a:e1:32:fb:0b:53:45:be:8b:c2:c5:4c:12:bd:5c: 40:8b:be:20:15:53:0e:4a:32:8f:4a:8c:68:76:2a:ec:2a:eb: c8:e5:bf:91:b5:e5:78:44:7c:a2:52:8c:2f:a1:bc:92:47:e5: db:44:ee:35:e5:dd:a8:ee:3c:22:c9:95:17:fe:5c:97:e0:b3: 33:b6:f5:3c:b6:13:eb:d4:da:03:56:a8:08:b6:4b:53:7a:e5: 64:2c:0d:b4:f9:4b:0d:97:3b:f2:36:c9:44:51:7c:51:cb:13: ec:cc:24:45:07:90:68:64:7a:1c:d2:01:a2:4e:88:0b:08:c3: bc:e7:48:2e:84:66:54:93:a8:0b:32:bd:48:51:21:6a:59:41: 34:07:fd:b2:61:9a:1e:4c:3e:72:2d:e3:f8:1f:18:09:ac:56: 8c:59:20:a5:88:e1:9f:e8:69:6f:d2:69:be:33:7f:0c:f9:ef: 88:2f:af:12:69:c5:86:8a:67:53:14:12:fe:62:c2:dc:46:45: 65:b4:49:3e:02:d4:45:61:a2:a5:dc:ff:e4:8c:3b:ca:25:05: 58:3a:9f:f8:c5:4c:a6:50:91:80:6b:6b:fe:36:87:a1:97:09: ae:51:1b:a9 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUDjKPhytiwKTgN1J04pB0qz12MZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MTEwNTAwMDAwMFoX DTI0MTIxMDIzNTk1OVowejFJMEcGA1UEBRNANWYzNTYxZmUwOWMwZjczMzVhOThj OGFhYzYxMGZlOTE0YzAyMGYyNzAyYjE2Y2RkYzY0ODRiYjU1ZTljZjVjMTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs10vnBeVSkokoh6b2Ab1k2ycRXJd 4AWYJt0URw3U0KVNqFhN+qbhyskAIVVibPAsgXs7Q/2NrbirXaJGve3rTJEwwTsK uPn2nOc+YL9zTu9Yr62Jk7Rif/xN27h1+UDhzPZG58epiBFO97gf3xpg7r0/igcD U7fSzCwaTMSG+CFW2o/YYq5ISThZgFmYrVuwy0iA0tye/ZdFIW1qZ5O/XHO3v92m kYv39Vj9i3tZtXiAuj+O14alXvQQbmJl/8mhgLaSR7sibodU5nwLwNz/iR9CVMNt B//hPGgG+NNK1xFKgfZluE6+UTz9PKCV/Ewi6fDy/be8VtiQDtMBM45tmQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOuyNM/173UjahS51y3ygQwLSkbnMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzIyZmEzMjliLWVjMzctNDBkZC05OTdmLTI0ZjQ1NTllMGVmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZwisMA0GCSqGSIb3DQEBCwUAA4IBAQCLGpu+lPzibqOVgZjip1gR 76fZZWZK4TL7C1NFvovCxUwSvVxAi74gFVMOSjKPSoxodirsKuvI5b+RteV4RHyi UowvobySR+XbRO415d2o7jwiyZUX/lyX4LMztvU8thPr1NoDVqgItktTeuVkLA20 +UsNlzvyNslEUXxRyxPszCRFB5BoZHoc0gGiTogLCMO850guhGZUk6gLMr1IUSFq WUE0B/2yYZoeTD5yLeP4HxgJrFaMWSCliOGf6Glv0mm+M38M+e+IL68SacWGimdT FBL+YsLcRkVltEk+AtRFYaKl3P/kjDvKJQVYOp/4xUymUJGAa2v+NoehlwmuURup -----END CERTIFICATE-----Generated at Thu Nov 21 17:28:40 2024 by rpki-client on console-fra.rpki-client.org