$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2d2af952-35e6-43e7-b07a-74956b69b4a0.roa File: 2d2af952-35e6-43e7-b07a-74956b69b4a0.roa (raw, json) Hash identifier: GYfKlO7oldOFQDV2FblooGjg/xWD3pYR/GUAC5k2Ttk= Subject key identifier: 2B:7D:BB:C8:FE:DF:13:C3:B7:6C:65:51:12:64:B4:FB:EA:35:B7:35 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 13BD101FEAFDAF0A5DD92023C93DBFB69FE83B00 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2d2af952-35e6-43e7-b07a-74956b69b4a0.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2403:b300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bd:10:1f:ea:fd:af:0a:5d:d9:20:23:c9:3d:bf:b6:9f:e8:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=f00c3dfea122471aa9dbf62034d26f525aa7286481b5a52f89cd9f8f21af4490, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:40:4b:ee:ec:20:96:28:9d:66:93:86:90: 4c:e3:47:4c:c8:76:7b:97:4c:21:c9:e2:e8:09:52: ca:5f:6d:1b:5e:c9:13:67:73:65:ae:b6:d6:17:07: 06:d0:69:3e:41:d8:0c:9a:bb:58:83:be:30:53:9e: 11:f4:e2:10:d8:e8:13:8c:c9:2e:b6:87:bf:a0:91: 5c:1c:83:9f:d2:2e:9c:27:44:2a:59:9c:62:e5:de: ba:65:e2:00:bc:dd:e7:99:87:84:06:ac:fd:67:55: 0e:f1:40:ce:90:d2:7e:0c:a1:b3:a0:5c:d1:c7:31: 2c:e4:40:67:d1:28:5c:54:8b:ba:9e:97:8f:2c:a1: d0:63:b5:79:ab:60:6a:45:8e:74:1b:91:5b:57:34: c4:cf:56:db:6b:bd:3f:c6:b6:03:5e:9f:5b:83:73: 76:db:ff:a0:68:20:4a:95:14:d4:ca:ac:24:47:a2: 17:a4:8f:0d:05:4f:f3:ac:83:d9:49:79:21:1d:9e: f8:d9:c4:90:6b:5f:18:1e:c3:e1:6d:3f:7a:d1:78: 31:b4:3b:92:6f:87:68:94:a9:d6:fa:9a:2e:8e:a1: 57:b3:3b:93:01:7d:81:34:df:40:01:10:3a:1f:13: 4c:7a:bd:63:bd:61:8d:ca:0a:1a:40:cc:7a:b5:6e: 8e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7D:BB:C8:FE:DF:13:C3:B7:6C:65:51:12:64:B4:FB:EA:35:B7:35 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2d2af952-35e6-43e7-b07a-74956b69b4a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/32 Signature Algorithm: sha256WithRSAEncryption 2b:fb:7f:07:51:e5:94:34:98:00:8c:ca:72:04:30:06:15:93: 07:cd:0f:56:f6:82:40:1d:77:ec:b3:07:12:dc:cd:5b:d1:98: e0:d1:c0:22:9c:c7:3f:7c:8a:2f:46:0a:43:f8:ab:b3:29:ca: 80:30:c3:b5:87:6b:05:99:4b:b3:c9:06:41:76:94:59:72:1b: 19:ba:56:29:00:15:45:e1:1a:0f:bc:fa:53:7b:eb:f7:54:54: eb:7f:eb:c8:71:e6:3d:eb:b6:b5:70:b0:c1:dd:f7:80:cd:0d: f4:30:b9:0b:7a:38:23:4a:fb:69:49:75:45:a5:a0:ed:67:5c: 90:b5:ec:17:59:aa:53:a1:38:75:79:e8:ff:31:a8:99:76:ca: 9c:5e:1c:3f:80:5d:c6:64:22:48:84:e2:36:e8:39:a8:db:33: 9a:ed:d6:d2:0c:a5:f2:13:5c:f7:08:db:78:24:f9:38:0b:5b: 16:50:7f:12:a5:ba:48:b2:eb:2a:52:0e:27:68:c1:4b:90:06: 19:16:fc:b3:2d:99:38:22:26:64:aa:2e:c0:f3:9d:9d:03:ff: 37:08:49:c7:52:17:89:97:e1:5e:1a:37:70:d2:8b:dd:4e:e5: 6f:b6:cd:96:d1:3f:f5:ef:f0:1a:35:cd:63:f5:d5:96:1a:38: 68:f5:ec:2c -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUE70QH+r9rwpd2SAjyT2/tp/oOwAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZjAwYzNkZmVhMTIyNDcxYWE5ZGJm NjIwMzRkMjZmNTI1YWE3Mjg2NDgxYjVhNTJmODljZDlmOGYyMWFmNDQ5MDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00RAS+7sIJYonWaThpBM40dMyHZ7 l0whyeLoCVLKX20bXskTZ3NlrrbWFwcG0Gk+QdgMmrtYg74wU54R9OIQ2OgTjMku toe/oJFcHIOf0i6cJ0QqWZxi5d66ZeIAvN3nmYeEBqz9Z1UO8UDOkNJ+DKGzoFzR xzEs5EBn0ShcVIu6npePLKHQY7V5q2BqRY50G5FbVzTEz1bba70/xrYDXp9bg3N2 2/+gaCBKlRTUyqwkR6IXpI8NBU/zrIPZSXkhHZ742cSQa18YHsPhbT960XgxtDuS b4dolKnW+poujqFXszuTAX2BNN9AARA6HxNMer1jvWGNygoaQMx6tW6OXQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFCt9u8j+3xPDt2xlURJktPvqNbc1MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzJkMmFmOTUyLTM1ZTYtNDNlNy1iMDdhLTc0OTU2YjY5YjRhMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAOzADANBgkqhkiG9w0BAQsFAAOCAQEAK/t/B1HllDSYAIzKcgQw BhWTB80PVvaCQB137LMHEtzNW9GY4NHAIpzHP3yKL0YKQ/irsynKgDDDtYdrBZlL s8kGQXaUWXIbGbpWKQAVReEaD7z6U3vr91RU63/ryHHmPeu2tXCwwd33gM0N9DC5 C3o4I0r7aUl1RaWg7WdckLXsF1mqU6E4dXno/zGomXbKnF4cP4BdxmQiSITiNug5 qNszmu3W0gyl8hNc9wjbeCT5OAtbFlB/EqW6SLLrKlIOJ2jBS5AGGRb8sy2ZOCIm ZKouwPOdnQP/NwhJx1IXiZfhXho3cNKL3U7lb7bNltE/9e/wGjXNY/XVlho4aPXs LA== -----END CERTIFICATE-----Generated at Sat May 4 01:52:12 2024 by rpki-client on console-ams.rpki-client.org