$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa File: 2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa (raw, json) Hash identifier: FgR+BoGQww7S6Yltx6FZ3sbyinG6h2ZiHgZzemE/oMg= Subject key identifier: D6:A9:54:99:EF:0F:13:FB:B1:A2:DC:3B:FD:C6:5D:B0:FE:BE:49:50 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 376CE4447B7598BCB169DEE466D169746D00A698 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 43.224.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6c:e4:44:7b:75:98:bc:b1:69:de:e4:66:d1:69:74:6d:00:a6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=9d598338f7feb083d0bc9f6f2fffde6aca59560da09347408d1d8f919b7aafd4, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:b2:48:f0:62:d6:9a:26:56:2c:1e:43:ee: 8b:48:c8:13:c7:ef:83:56:c8:79:ca:f3:5c:fb:d6: 1d:d9:0c:69:ca:bf:62:5b:fd:96:6a:e5:0e:a8:89: 5b:5a:b9:db:ae:0e:2b:2f:83:85:23:73:1d:55:03: 03:66:26:c7:ef:69:2d:b9:d9:c6:d7:cd:6c:a5:b0: 98:4c:70:fc:58:dc:3e:7b:8e:fa:02:e3:34:5d:76: 8a:ac:b4:9e:98:37:60:6e:f9:e5:3c:fd:c1:ac:62: 39:ab:91:fa:c0:d1:15:fa:90:48:c1:f1:12:88:37: f6:1a:56:c4:52:4e:6d:27:f2:d7:fc:e4:82:ee:4f: ea:fe:6a:e8:0e:38:de:ab:36:f4:41:85:9d:14:92: ba:fa:53:3f:bf:fb:d0:cf:ad:e6:3b:12:1a:45:a3: d3:1d:0b:fb:30:e5:6b:b6:91:98:c6:40:b4:e0:3d: c0:43:fa:fe:14:2f:cf:f0:fb:d4:dd:97:9f:bd:84: 12:c4:52:2f:e5:5e:f2:96:9b:9c:8c:32:76:10:47: 18:85:51:27:67:11:1d:2a:39:98:09:8e:75:a3:28: 8b:a6:9a:75:52:87:64:6b:7e:53:f6:fe:e8:9f:a0: 17:0f:d1:fe:1b:14:5e:8d:51:7f:6f:22:e4:b7:b0: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A9:54:99:EF:0F:13:FB:B1:A2:DC:3B:FD:C6:5D:B0:FE:BE:49:50 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.76.0/22 Signature Algorithm: sha256WithRSAEncryption 27:52:96:00:2b:2a:26:ad:e6:fd:40:88:1d:72:fa:ca:e1:6e: dd:6e:25:1b:d8:70:7d:46:11:a8:29:5c:a2:a2:30:1c:e9:bc: 9b:96:1d:9d:71:75:28:15:8a:d4:5e:ce:f3:9f:0c:07:dd:47: 45:6a:3b:cf:c7:f6:b2:b4:ba:d1:7d:f2:ed:7d:20:97:76:df: fd:24:40:e0:dd:4e:a9:af:01:b8:09:14:60:22:bf:95:cd:9a: 5c:15:f5:4f:42:98:ac:58:e5:40:5c:ef:87:d8:92:22:0b:6b: fe:04:20:ca:d3:32:99:ae:58:b0:2e:fb:ca:f6:28:d9:15:e5: 24:14:81:fe:5d:34:bf:69:89:cb:3b:09:34:14:72:81:97:02: 20:91:5e:36:95:81:0d:11:16:02:db:a0:08:70:e3:38:a8:8d: 3c:87:8c:e8:13:c1:6a:44:92:bf:bc:07:16:72:39:08:00:f4: 93:76:3c:5f:96:e8:b1:3e:07:d0:e2:34:0a:4f:a6:ba:1a:8e: 9d:81:d7:13:e9:4a:9a:10:9f:fc:9b:93:3f:7c:27:e1:0f:ba: 75:16:bf:35:7a:2d:07:dd:c0:c8:aa:29:84:6e:3c:d2:d0:38: 64:e6:e5:0f:90:97:8f:07:f2:88:3c:b9:ab:10:e4:b8:47:dc: 2a:9d:07:73 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUN2zkRHt1mLyxad7kZtFpdG0AppgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAOWQ1OTgzMzhmN2ZlYjA4M2QwYmM5 ZjZmMmZmZmRlNmFjYTU5NTYwZGEwOTM0NzQwOGQxZDhmOTE5YjdhYWZkNDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kaySPBi1pomViweQ+6LSMgTx++D Vsh5yvNc+9Yd2Qxpyr9iW/2WauUOqIlbWrnbrg4rL4OFI3MdVQMDZibH72ktudnG 181spbCYTHD8WNw+e476AuM0XXaKrLSemDdgbvnlPP3BrGI5q5H6wNEV+pBIwfES iDf2GlbEUk5tJ/LX/OSC7k/q/mroDjjeqzb0QYWdFJK6+lM/v/vQz63mOxIaRaPT HQv7MOVrtpGYxkC04D3AQ/r+FC/P8PvU3ZefvYQSxFIv5V7ylpucjDJ2EEcYhVEn ZxEdKjmYCY51oyiLppp1Uodka35T9v7on6AXD9H+GxRejVF/byLkt7BbjQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNapVJnvDxP7saLcO/3GXbD+vklQMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzI0MzBlYjY3LThkMmItNGQ1ZC05NzllLWI3NDI3ZGRmYTM0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK+BMMA0GCSqGSIb3DQEBCwUAA4IBAQAnUpYAKyomreb9QIgdcvrK 4W7dbiUb2HB9RhGoKVyiojAc6byblh2dcXUoFYrUXs7znwwH3UdFajvPx/aytLrR ffLtfSCXdt/9JEDg3U6prwG4CRRgIr+VzZpcFfVPQpisWOVAXO+H2JIiC2v+BCDK 0zKZrliwLvvK9ijZFeUkFIH+XTS/aYnLOwk0FHKBlwIgkV42lYENERYC26AIcOM4 qI08h4zoE8FqRJK/vAcWcjkIAPSTdjxfluixPgfQ4jQKT6a6Go6dgdcT6UqaEJ/8 m5M/fCfhD7p1Fr81ei0H3cDIqimEbjzS0Dhk5uUPkJePB/KIPLmrEOS4R9wqnQdz -----END CERTIFICATE-----Generated at Sat May 4 01:52:12 2024 by rpki-client on console-ams.rpki-client.org