$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa File: 578a19af-8138-49ac-8a51-a2bd148210a1.roa (raw, json) Hash identifier: DXIzhitHr4EV254Ak2A8FROUazOnLu7/Vr1hh5vvgFw= Subject key identifier: 77:14:A1:0B:C0:C6:C4:08:D3:47:8C:E4:B3:49:98:91:01:4F:2D:2C Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 06E7BF463FEDA57A4DC46B9203DF79C0A4AF317A Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa Signing time: Sat 16 Sep 2023 00:00:00 +0000 ROA not before: Sat 16 Sep 2023 00:00:00 +0000 ROA not after: Sat 21 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Sep 2023 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e7:bf:46:3f:ed:a5:7a:4d:c4:6b:92:03:df:79:c0:a4:af:31:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 16 00:00:00 2023 GMT Not After : Oct 21 23:59:59 2023 GMT Subject: serialNumber=a469a2b4d84bfafc531a5d89b18249c97a22237ba1fba10f19db32cb025cac69, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:e3:23:70:f0:86:f9:98:f8:a3:09:42:4a: bd:46:3e:56:f2:ea:97:39:5b:df:7a:14:a5:83:ff: 95:7a:bc:bc:24:f2:d8:5c:f4:05:91:4a:08:e0:34: ca:39:51:c6:16:a1:ef:45:7f:e3:db:64:9f:42:94: 06:d4:ab:e0:93:15:a7:c2:75:e0:2c:68:af:b5:81: 06:4c:f9:65:42:77:23:a9:55:a8:17:7e:7c:03:a2: d3:33:7e:d8:bf:51:d9:74:82:57:c4:e7:27:71:97: cd:66:ad:f9:98:fb:28:31:cc:e4:95:67:e0:57:29: d7:58:1d:06:31:60:e6:2a:85:8b:d7:12:30:5d:6b: 86:6f:9e:61:09:3f:42:e1:46:9c:33:b6:b6:45:15: af:75:33:07:2d:91:75:b9:8a:57:b8:76:92:b3:42: 5c:4e:21:ab:ce:df:8d:f2:64:a8:e5:bf:9d:60:f0: 33:88:51:b1:59:ff:e1:e1:79:0f:76:85:30:e6:75: d2:a8:b3:38:fc:00:6f:9d:cd:d6:d7:a8:5e:f9:b4: 43:56:4e:f7:59:0f:a8:fa:69:f6:65:82:68:19:00: c1:c6:29:b3:5c:dc:cf:91:51:66:7a:74:c1:99:e5: 13:69:73:f8:f5:31:13:6f:f3:9c:45:f3:0c:80:7e: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:14:A1:0B:C0:C6:C4:08:D3:47:8C:E4:B3:49:98:91:01:4F:2D:2C X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1040::/48 Signature Algorithm: sha256WithRSAEncryption 62:e7:2d:fe:f4:44:19:07:bc:1b:98:d6:4a:f0:30:c7:8a:55: 4f:c7:c1:84:0b:9e:16:04:c5:db:9d:97:3f:ac:26:fb:f1:c7: 5c:e7:a4:28:1b:ae:0d:6e:aa:fb:c4:d1:38:9c:b9:62:ea:b8: 46:84:fa:c7:4e:be:05:a9:00:52:34:41:a9:7f:79:51:d8:3e: 5f:75:88:96:48:da:e9:b7:71:c9:a5:49:54:e2:94:75:32:fb: 83:08:bd:2b:53:38:ee:fa:66:a9:bf:60:50:52:cd:ad:bd:75: a6:db:77:44:ff:3a:1d:2f:bd:5c:0f:77:b8:6d:52:d1:f4:0a: f6:a0:34:5f:e6:7d:95:d1:08:f7:7f:f8:71:ae:bb:93:39:c0: e1:b8:62:4f:7f:c0:93:b7:7d:a2:c6:ec:1f:d7:27:ed:45:32: 31:24:20:5f:9d:32:f3:c7:e1:e3:47:f2:82:9d:7b:bc:dc:47: 66:55:2d:98:0d:04:62:aa:e5:55:f5:d6:fd:4c:5c:1d:6d:bf: 42:b3:35:7d:a5:37:6c:1a:24:32:cd:7f:e9:09:65:fa:c4:f8: b7:74:7a:52:70:82:8c:6d:de:ce:6a:9f:cf:a4:11:81:53:1a: da:f2:84:78:bc:8f:08:86:96:94:b9:05:c7:52:3b:ad:fe:b0: a0:0e:29:63 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBue/Rj/tpXpNxGuSA995wKSvMXowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTIzMDkxNjAwMDAwMFoX DTIzMTAyMTIzNTk1OVowejFJMEcGA1UEBRNAYTQ2OWEyYjRkODRiZmFmYzUzMWE1 ZDg5YjE4MjQ5Yzk3YTIyMjM3YmExZmJhMTBmMTlkYjMyY2IwMjVjYWM2OTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh/jI3DwhvmY+KMJQkq9Rj5W8uqX OVvfehSlg/+Very8JPLYXPQFkUoI4DTKOVHGFqHvRX/j22SfQpQG1KvgkxWnwnXg LGivtYEGTPllQncjqVWoF358A6LTM37Yv1HZdIJXxOcncZfNZq35mPsoMczklWfg VynXWB0GMWDmKoWL1xIwXWuGb55hCT9C4UacM7a2RRWvdTMHLZF1uYpXuHaSs0Jc TiGrzt+N8mSo5b+dYPAziFGxWf/h4XkPdoUw5nXSqLM4/ABvnc3W16he+bRDVk73 WQ+o+mn2ZYJoGQDBximzXNzPkVFmenTBmeUTaXP49TETb/OcRfMMgH5XLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHcUoQvAxsQI00eM5LNJmJEBTy0sMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzU3OGExOWFmLTgxMzgtNDlhYy04YTUxLWEyYmQxNDgyMTBhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABBAMA0GCSqGSIb3DQEBCwUAA4IBAQBi5y3+9EQZB7wbmNZK 8DDHilVPx8GEC54WBMXbnZc/rCb78cdc56QoG64Nbqr7xNE4nLli6rhGhPrHTr4F qQBSNEGpf3lR2D5fdYiWSNrpt3HJpUlU4pR1MvuDCL0rUzju+mapv2BQUs2tvXWm 23dE/zodL71cD3e4bVLR9Ar2oDRf5n2V0Qj3f/hxrruTOcDhuGJPf8CTt32ixuwf 1yftRTIxJCBfnTLzx+HjR/KCnXu83EdmVS2YDQRiquVV9db9TFwdbb9CszV9pTds GiQyzX/pCWX6xPi3dHpScIKMbd7Oap/PpBGBUxra8oR4vI8IhpaUuQXHUjut/rCg Dilj -----END CERTIFICATE-----Generated at Sat Sep 16 00:16:47 2023 by rpki-client on console-fra.rpki-client.org