$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa File: 22fa329b-ec37-40dd-997f-24f4559e0eff.roa (raw, json) Hash identifier: Lq7ydRI9IJrRXE/37azdK38DXTX/gfMB3Gx2VH8sono= Subject key identifier: E1:B5:A6:65:C0:D0:DF:CE:F8:86:A3:96:7F:2E:94:E4:52:32:67:AD Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 3AA581277D25B7131B6CC04FFAE99CECF9BC4216 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 103.8.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a5:81:27:7d:25:b7:13:1b:6c:c0:4f:fa:e9:9c:ec:f9:bc:42:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=182c1462d5fa061954508193509deae51651036155737a2de6474dd41c22531a, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:18:9e:22:f8:ae:c7:04:48:4e:f2:8f:8f: 18:a8:84:47:48:fa:44:35:94:c9:ec:ae:3f:b6:ab: 04:ed:98:50:d0:57:3b:fa:12:f4:5f:0e:72:b6:c6: 9f:13:3e:b4:27:a9:85:fd:88:22:77:d5:a6:b7:e0: 21:87:40:8e:8c:48:e6:4c:9e:0e:db:81:2c:bc:a0: 68:60:e5:c9:36:32:99:61:5b:0c:89:34:f0:a1:da: 67:f3:e1:b5:0d:1d:f6:58:2f:01:3a:06:37:9a:aa: 6d:b5:b6:4d:7b:75:f1:62:61:dc:4f:b2:20:69:56: f0:04:47:ad:e7:10:2f:dc:9f:74:d9:b0:f4:3f:f7: b3:d0:8f:bb:e6:88:36:95:2c:fc:1a:f6:be:14:a7: 10:88:e0:6c:97:f8:d4:3f:03:fa:0f:c8:af:8d:e4: ab:40:83:7b:58:6b:cc:78:5b:34:ad:d9:a4:4e:0b: 66:60:ca:a6:6f:85:b1:31:02:54:7f:32:6b:6f:0f: fd:60:01:07:6a:62:9a:a2:0a:10:41:f3:51:04:09: 1d:aa:1b:57:2a:cc:c5:e4:50:f8:27:f0:08:10:a4: bf:26:66:51:af:61:71:5b:d1:30:71:10:5b:52:71: 2a:31:4b:4e:9f:05:97:66:8c:e7:62:03:44:42:2e: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B5:A6:65:C0:D0:DF:CE:F8:86:A3:96:7F:2E:94:E4:52:32:67:AD X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.172.0/22 Signature Algorithm: sha256WithRSAEncryption 06:92:ee:ca:e6:18:af:a7:41:f0:79:a0:5c:a5:00:49:70:0c: a8:d7:42:28:28:ea:70:ae:0f:5f:27:56:94:e7:2d:4b:15:5a: cb:9d:5e:82:04:b8:5c:6e:22:55:a8:22:28:e3:0f:00:c9:dc: 41:d5:e1:b1:ae:d4:2c:31:11:56:ef:3b:d3:ab:67:d1:9d:95: 20:cc:6d:38:ac:d2:49:00:aa:0f:26:12:d1:b9:61:50:fa:58: d3:2c:fd:4a:d1:3a:06:f7:a9:66:b8:6d:c8:c3:d8:c4:01:97: b8:e1:98:30:ee:26:e1:78:83:2a:ad:d2:ef:7c:0c:6f:b4:62: a2:64:38:6a:2c:3c:54:26:7d:0b:64:d9:15:52:db:be:dc:73: 2a:dc:35:db:ee:fc:b6:b2:59:34:f2:af:9a:29:81:8f:fa:77: 5f:ae:d9:3f:95:01:11:c2:51:fb:70:da:b2:31:79:73:4b:3c: fb:95:20:db:a3:2a:57:24:62:80:00:4c:5b:10:fc:8f:6b:81: c5:41:f3:f4:1d:f6:30:cd:51:bb:6a:aa:8b:f4:8d:8a:a4:a8: bf:8c:33:c0:f3:78:94:1f:ba:c8:2e:0d:8a:9e:e6:52:91:56: 41:df:f8:4a:89:32:ae:a4:b9:46:bd:72:c8:4f:06:f3:25:83: bf:f0:28:72 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUOqWBJ30ltxMbbMBP+umc7Pm8QhYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAMTgyYzE0NjJkNWZhMDYxOTU0NTA4 MTkzNTA5ZGVhZTUxNjUxMDM2MTU1NzM3YTJkZTY0NzRkZDQxYzIyNTMxYTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzUYniL4rscESE7yj48YqIRHSPpE NZTJ7K4/tqsE7ZhQ0Fc7+hL0Xw5ytsafEz60J6mF/Ygid9Wmt+Ahh0COjEjmTJ4O 24EsvKBoYOXJNjKZYVsMiTTwodpn8+G1DR32WC8BOgY3mqpttbZNe3XxYmHcT7Ig aVbwBEet5xAv3J902bD0P/ez0I+75og2lSz8Gva+FKcQiOBsl/jUPwP6D8ivjeSr QIN7WGvMeFs0rdmkTgtmYMqmb4WxMQJUfzJrbw/9YAEHamKaogoQQfNRBAkdqhtX KszF5FD4J/AIEKS/JmZRr2FxW9EwcRBbUnEqMUtOnwWXZoznYgNEQi6IQQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOG1pmXA0N/O+Iajln8ulORSMmetMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzIyZmEzMjliLWVjMzctNDBkZC05OTdmLTI0ZjQ1NTllMGVmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZwisMA0GCSqGSIb3DQEBCwUAA4IBAQAGku7K5hivp0HweaBcpQBJ cAyo10IoKOpwrg9fJ1aU5y1LFVrLnV6CBLhcbiJVqCIo4w8AydxB1eGxrtQsMRFW 7zvTq2fRnZUgzG04rNJJAKoPJhLRuWFQ+ljTLP1K0ToG96lmuG3Iw9jEAZe44Zgw 7ibheIMqrdLvfAxvtGKiZDhqLDxUJn0LZNkVUtu+3HMq3DXb7vy2slk08q+aKYGP +ndfrtk/lQERwlH7cNqyMXlzSzz7lSDboypXJGKAAExbEPyPa4HFQfP0HfYwzVG7 aqqL9I2KpKi/jDPA83iUH7rILg2KnuZSkVZB3/hKiTKupLlGvXLITwbzJYO/8Chy -----END CERTIFICATE-----Generated at Sat May 4 02:36:26 2024 by rpki-client on console-fra.rpki-client.org