$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa File: 578a19af-8138-49ac-8a51-a2bd148210a1.roa (raw, json) Hash identifier: /GFdC87JaMn3TNb7IXG61p2HLKfsafE7ScSi2jxykos= Subject key identifier: 3E:90:94:B6:07:D4:86:4F:38:66:AE:B2:14:B6:93:C1:9D:09:E3:DC Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7BDF1E7C902F5ACAEC5FDCBF483B7872666C0750 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa Signing time: Fri 05 Apr 2024 00:00:00 +0000 ROA not before: Fri 05 Apr 2024 00:00:00 +0000 ROA not after: Fri 10 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:df:1e:7c:90:2f:5a:ca:ec:5f:dc:bf:48:3b:78:72:66:6c:07:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 5 00:00:00 2024 GMT Not After : May 10 23:59:59 2024 GMT Subject: serialNumber=6f1fb7961a25b7eb2916db8aa0a93e85f0ee149cdf15966cff8ba05c8dde87a8, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:3a:55:d6:74:db:c7:f4:f4:20:e9:da:35: da:0d:ee:40:f3:c5:57:52:44:48:2b:92:18:a1:c1: d4:2d:8c:df:dd:dd:79:e1:07:e9:b9:36:75:7a:b2: 35:84:83:b4:f0:ca:22:27:20:b5:d4:95:25:f7:fa: 4f:c8:5d:92:2e:3b:77:86:36:d9:f8:60:8a:a9:d2: 9d:a0:f7:89:a9:f3:14:91:42:62:7a:dc:9f:77:bf: 96:88:1c:ff:32:ee:94:3b:83:10:ab:a9:52:63:ff: bf:e1:af:cc:ae:4f:6c:27:8b:5f:dc:c0:80:a4:e8: a6:3f:06:03:c2:6b:1f:ac:2d:17:b9:be:41:95:e5: ef:83:64:46:ee:0e:31:5d:f4:4f:18:ab:3c:06:2e: 25:75:c3:07:43:f8:a4:46:29:4e:b1:f6:e3:e0:c2: ed:2c:e8:9d:d9:d6:eb:23:b7:a5:ed:c8:02:ee:f1: 7b:a9:10:43:86:29:68:80:bd:39:27:50:4f:56:b8: bc:ef:03:fb:06:8a:94:76:85:66:1f:25:ba:25:09: d6:2b:ee:4c:cc:5c:2b:e2:30:61:63:c9:eb:54:13: 4b:39:90:15:d9:de:55:5a:a5:e0:b6:53:8c:a4:01: 59:9a:03:6c:75:50:ea:73:94:04:ff:c6:1a:26:71: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:90:94:B6:07:D4:86:4F:38:66:AE:B2:14:B6:93:C1:9D:09:E3:DC X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1040::/48 Signature Algorithm: sha256WithRSAEncryption 8d:82:60:bd:d1:91:31:ed:ac:8e:e8:92:08:da:ac:58:79:23: 3c:f5:d6:f9:e0:43:43:ff:6a:f1:9f:3a:8e:50:ff:47:f2:93: 76:e1:89:39:3a:c0:6c:eb:47:d5:59:1b:90:b8:cb:39:1d:63: d1:db:4d:16:65:18:71:0e:8a:c0:41:4f:42:51:69:d6:09:6f: d1:76:64:14:30:9a:3b:cf:36:45:00:81:b7:ea:ea:e6:65:60: 45:da:4e:b5:a3:98:c3:7c:23:97:36:8b:64:79:0f:4f:7c:93: 1d:07:a7:2d:11:b6:97:4e:4e:7d:b7:41:af:1f:17:8d:ca:ec: 03:3f:21:33:cb:9e:d7:bc:08:a5:53:cb:a9:84:21:e4:73:7e: e6:79:c9:e9:3d:f0:8b:87:39:df:74:0b:49:6c:63:19:f3:7b: 7d:d2:c2:34:0e:5f:95:a6:fe:12:6e:2e:b2:57:dd:92:9e:84: fe:46:0c:a9:63:fc:18:5c:cb:eb:f9:30:69:33:fc:b9:76:3b: a1:b6:8f:74:b1:af:3f:70:a6:f8:67:d5:42:96:36:8c:c1:01: f1:d4:14:97:d9:18:da:9e:48:51:72:90:a5:28:06:78:c8:d0: b0:22:56:b3:16:4c:82:36:8f:ec:a6:1d:71:af:3c:c5:56:7c: 7e:b1:b4:2e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUe98efJAvWsrsX9y/SDt4cmZsB1AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MDQwNTAwMDAwMFoX DTI0MDUxMDIzNTk1OVowejFJMEcGA1UEBRNANmYxZmI3OTYxYTI1YjdlYjI5MTZk YjhhYTBhOTNlODVmMGVlMTQ5Y2RmMTU5NjZjZmY4YmEwNWM4ZGRlODdhODEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+M6VdZ028f09CDp2jXaDe5A88VX UkRIK5IYocHULYzf3d154QfpuTZ1erI1hIO08MoiJyC11JUl9/pPyF2SLjt3hjbZ +GCKqdKdoPeJqfMUkUJietyfd7+WiBz/Mu6UO4MQq6lSY/+/4a/Mrk9sJ4tf3MCA pOimPwYDwmsfrC0Xub5BleXvg2RG7g4xXfRPGKs8Bi4ldcMHQ/ikRilOsfbj4MLt LOid2dbrI7el7cgC7vF7qRBDhilogL05J1BPVri87wP7BoqUdoVmHyW6JQnWK+5M zFwr4jBhY8nrVBNLOZAV2d5VWqXgtlOMpAFZmgNsdVDqc5QE/8YaJnFJPwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD6QlLYH1IZPOGaushS2k8GdCePcMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzU3OGExOWFmLTgxMzgtNDlhYy04YTUxLWEyYmQxNDgyMTBhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABBAMA0GCSqGSIb3DQEBCwUAA4IBAQCNgmC90ZEx7ayO6JII 2qxYeSM89db54END/2rxnzqOUP9H8pN24Yk5OsBs60fVWRuQuMs5HWPR200WZRhx DorAQU9CUWnWCW/RdmQUMJo7zzZFAIG36urmZWBF2k61o5jDfCOXNotkeQ9PfJMd B6ctEbaXTk59t0GvHxeNyuwDPyEzy57XvAilU8uphCHkc37mecnpPfCLhznfdAtJ bGMZ83t90sI0Dl+Vpv4Sbi6yV92SnoT+RgypY/wYXMvr+TBpM/y5djuhto90sa8/ cKb4Z9VCljaMwQHx1BSX2RjankhRcpClKAZ4yNCwIlazFkyCNo/sph1xrzzFVnx+ sbQu -----END CERTIFICATE-----Generated at Thu Apr 25 00:31:13 2024 by rpki-client on console-fra.rpki-client.org