$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa File: 2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa (raw, json) Hash identifier: n8S58Rfxz8rVeqlJmucJ3NTNkYtgMU9l5SigFC5M8sY= Subject key identifier: 46:B8:91:D1:30:37:7B:E1:1A:90:F4:7D:95:46:08:7C:C5:AE:DA:DD Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 0F7D44B774AC67E03B32F1C947067B5937AACBD1 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 43.224.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7d:44:b7:74:ac:67:e0:3b:32:f1:c9:47:06:7b:59:37:aa:cb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=47df9987eaaa698e9999fdabf61f21a74fff1308fc1882f5144f61f1111f6a2e, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:4d:a6:c3:73:a9:71:17:c9:3b:5b:ba:33: 14:33:30:a1:68:e2:83:03:28:08:14:63:2b:7a:71: 4d:cb:62:01:73:37:a8:31:2e:1c:e4:6d:9b:34:97: fd:f0:b3:3a:2f:d4:d6:de:da:bc:ff:a7:98:b8:64: 70:1c:aa:0f:c2:b9:b9:06:6e:a7:b4:f4:f2:43:21: 19:93:9f:e0:7e:fc:4f:fe:05:ad:36:1f:65:d2:98: 83:08:1b:f1:b3:b3:fa:e1:d0:95:2a:36:96:17:0f: 16:40:fe:07:3d:6e:8d:6d:f5:a6:b4:9b:81:fc:42: 1a:c5:e9:63:12:c6:47:71:af:95:02:6c:22:18:99: 0d:f4:f3:a1:d2:a8:e0:bc:81:53:48:2c:2b:df:02: 0d:ed:88:35:ff:68:5f:be:da:a7:3b:34:f9:52:e2: af:76:10:67:85:a7:19:ee:5b:f4:27:4d:9c:9d:0d: f9:63:62:3b:e7:98:4b:dc:89:8a:71:b0:53:d4:b3: 28:c1:d9:54:a3:44:d4:38:2c:86:30:d2:47:42:da: d7:38:2f:13:28:d9:e0:6d:38:49:08:b8:74:5f:d0: 4f:a2:8a:0b:0b:60:8e:31:04:40:d6:77:6b:76:b9: 80:60:04:39:6f:62:72:13:70:c9:3f:45:b0:4a:08: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B8:91:D1:30:37:7B:E1:1A:90:F4:7D:95:46:08:7C:C5:AE:DA:DD X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.76.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:7f:47:45:62:21:9c:49:41:73:9e:ae:4e:43:c9:ab:44:aa: 4e:41:62:22:b8:49:05:85:2d:64:d3:24:83:d0:d1:e0:ac:a7: 04:5e:2d:ba:f7:14:a6:43:28:47:19:bd:8d:6f:d4:aa:f9:70: 04:53:19:e6:00:bb:62:ea:7c:02:11:8f:54:83:e9:41:83:e9: 84:3e:33:c3:c5:be:04:61:df:2b:23:eb:6e:2c:51:21:64:39: a0:99:49:9e:48:a1:0a:cb:84:92:6c:81:f0:d9:ef:35:99:c1: a2:32:ef:73:d0:02:82:05:c3:9c:57:d5:d9:0a:7c:2b:36:42: 10:a8:1c:fd:8a:01:7c:6c:3f:6f:45:f9:a7:ee:1d:29:94:e6: a2:cc:45:e6:f7:37:e9:2e:2a:2a:03:1a:a7:a0:52:84:f0:85: 23:50:30:1d:b6:7a:3d:25:52:5b:c1:86:b2:aa:09:94:18:c4: 92:a3:b0:81:79:75:bd:89:5b:1c:a9:53:c6:6a:71:6e:0c:b5: f2:4a:d0:b9:83:a9:13:01:05:97:27:9b:94:52:ee:c0:ac:6a: 9d:4a:b4:4b:fb:53:ad:b7:46:2c:b7:57:3f:1b:d8:83:b7:59: 0a:54:f6:9e:90:38:94:47:16:2c:17:b4:25:bc:b7:e9:14:15: 64:ac:04:25 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUD31Et3SsZ+A7MvHJRwZ7WTeqy9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MTEwNTAwMDAwMFoX DTI0MTIxMDIzNTk1OVowejFJMEcGA1UEBRNANDdkZjk5ODdlYWFhNjk4ZTk5OTlm ZGFiZjYxZjIxYTc0ZmZmMTMwOGZjMTg4MmY1MTQ0ZjYxZjExMTFmNmEyZTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRdNpsNzqXEXyTtbujMUMzChaOKD AygIFGMrenFNy2IBczeoMS4c5G2bNJf98LM6L9TW3tq8/6eYuGRwHKoPwrm5Bm6n tPTyQyEZk5/gfvxP/gWtNh9l0piDCBvxs7P64dCVKjaWFw8WQP4HPW6NbfWmtJuB /EIaxeljEsZHca+VAmwiGJkN9POh0qjgvIFTSCwr3wIN7Yg1/2hfvtqnOzT5UuKv dhBnhacZ7lv0J02cnQ35Y2I755hL3ImKcbBT1LMowdlUo0TUOCyGMNJHQtrXOC8T KNngbThJCLh0X9BPoooLC2COMQRA1ndrdrmAYAQ5b2JyE3DJP0WwSghjOwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFEa4kdEwN3vhGpD0fZVGCHzFrtrdMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzI0MzBlYjY3LThkMmItNGQ1ZC05NzllLWI3NDI3ZGRmYTM0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK+BMMA0GCSqGSIb3DQEBCwUAA4IBAQCKf0dFYiGcSUFznq5OQ8mr RKpOQWIiuEkFhS1k0ySD0NHgrKcEXi269xSmQyhHGb2Nb9Sq+XAEUxnmALti6nwC EY9Ug+lBg+mEPjPDxb4EYd8rI+tuLFEhZDmgmUmeSKEKy4SSbIHw2e81mcGiMu9z 0AKCBcOcV9XZCnwrNkIQqBz9igF8bD9vRfmn7h0plOaizEXm9zfpLioqAxqnoFKE 8IUjUDAdtno9JVJbwYayqgmUGMSSo7CBeXW9iVscqVPGanFuDLXyStC5g6kTAQWX J5uUUu7ArGqdSrRL+1Ott0Yst1c/G9iDt1kKVPaekDiURxYsF7QlvLfpFBVkrAQl -----END CERTIFICATE-----Generated at Thu Nov 21 18:50:37 2024 by rpki-client on console-ams.rpki-client.org