$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa File: 68fe3037-b87b-4379-a014-213012da3a11.roa (raw, json) Hash identifier: cNiAqZCp5nmgDLXFU/m3q6seJYe4hiQHlzBVS6a+9Uw= Subject key identifier: AA:15:3D:CD:4D:98:73:BA:40:8C:B4:36:10:CD:F1:2B:07:9E:9C:B2 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 04C4055A626FAD85A76D465A8602AD84967DD9E2 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 103.8.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c4:05:5a:62:6f:ad:85:a7:6d:46:5a:86:02:ad:84:96:7d:d9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=e6babc33b1d52dbbaf91d33f17d6dba626509b1d66c91f1ad1f759261d27a0a5, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:c3:4e:23:48:7f:d9:f5:78:6f:9c:04:59: 52:09:08:aa:6c:d9:5f:7e:15:03:eb:7b:6f:a8:9d: 77:56:b8:5f:6d:df:ba:47:02:32:92:94:94:42:c5: 41:c3:08:0e:8c:06:ac:c6:de:91:bf:3d:7d:c6:c0: 6c:45:66:73:26:cc:19:a6:b2:c1:a3:dd:42:49:62: a2:e3:68:8c:94:66:d2:ef:c5:60:3f:0d:3c:5e:a1: f5:49:65:8a:8d:46:b2:da:24:2d:56:95:01:8e:ad: ed:ed:58:ae:87:53:53:cf:6f:eb:54:17:6f:b5:78: 4e:fb:9a:f5:f8:b7:52:a5:60:ef:69:24:95:d2:bc: 0c:3a:b0:d7:c3:7a:f2:59:97:c0:11:ce:39:8c:54: 76:d7:5a:5e:80:52:ad:4d:42:5e:f3:8b:0a:84:8c: 4c:79:4d:19:df:51:66:17:be:2b:81:eb:ae:31:f6: df:58:db:2c:bd:16:ad:85:30:47:17:70:c7:79:21: 24:65:da:07:a4:a6:72:c2:29:6c:e8:13:53:2d:71: a6:91:e3:ee:cc:e4:c4:87:82:9e:25:4d:8b:80:26: a2:56:80:d9:19:ab:8f:84:5f:5e:20:fa:51:95:9b: 8a:fb:68:61:58:d5:73:3a:7c:cf:25:07:4a:93:c7: bb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:15:3D:CD:4D:98:73:BA:40:8C:B4:36:10:CD:F1:2B:07:9E:9C:B2 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.172.0/22 Signature Algorithm: sha256WithRSAEncryption 53:09:e6:84:58:b2:53:9e:db:b3:b5:ac:07:e0:7e:3c:fb:2e: a2:58:fa:09:bf:ba:42:03:ae:26:43:62:51:26:b1:5d:57:03: e1:34:fa:ed:f4:e7:7e:0a:42:12:c8:02:c1:c2:76:5a:d0:9c: 52:aa:74:88:c6:21:c5:73:e6:6e:47:08:c1:78:45:a2:54:5d: 9a:a6:b5:47:17:0c:b5:79:65:64:66:83:08:eb:ae:17:a6:3e: 2f:76:c1:d3:f2:cf:e3:75:86:86:d9:0b:b1:84:51:d1:12:5e: f0:d6:35:94:40:9e:81:bf:c8:eb:af:e1:78:61:87:6d:ec:e6: 2c:1b:e7:88:dd:af:36:a2:cc:4f:94:58:20:28:30:bc:bf:4c: 0b:9c:31:1c:0d:e2:9c:04:95:47:72:9d:74:73:bd:e3:c3:d6: 41:ed:99:8d:d4:66:87:41:68:3a:ae:4c:c6:da:27:71:f2:45: 86:97:b1:cc:9b:6c:b2:39:58:e0:c0:8a:f8:03:7f:8f:db:32: 53:84:9a:81:ae:4c:60:50:a1:13:46:ef:e6:bf:6e:31:4d:48: be:44:7f:77:81:df:ed:45:98:b1:ab:4a:b7:49:fc:22:61:04: e8:2e:ed:b1:f3:c2:3e:68:e5:5e:bb:20:17:27:ef:b2:e4:e1: 18:79:7a:a1 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUBMQFWmJvrYWnbUZahgKthJZ92eIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MTEwNTAwMDAwMFoX DTI0MTIxMDIzNTk1OVowejFJMEcGA1UEBRNAZTZiYWJjMzNiMWQ1MmRiYmFmOTFk MzNmMTdkNmRiYTYyNjUwOWIxZDY2YzkxZjFhZDFmNzU5MjYxZDI3YTBhNTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgrDTiNIf9n1eG+cBFlSCQiqbNlf fhUD63tvqJ13Vrhfbd+6RwIykpSUQsVBwwgOjAasxt6Rvz19xsBsRWZzJswZprLB o91CSWKi42iMlGbS78VgPw08XqH1SWWKjUay2iQtVpUBjq3t7Viuh1NTz2/rVBdv tXhO+5r1+LdSpWDvaSSV0rwMOrDXw3ryWZfAEc45jFR211pegFKtTUJe84sKhIxM eU0Z31FmF74rgeuuMfbfWNssvRathTBHF3DHeSEkZdoHpKZywils6BNTLXGmkePu zOTEh4KeJU2LgCaiVoDZGauPhF9eIPpRlZuK+2hhWNVzOnzPJQdKk8e7HQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKoVPc1NmHO6QIy0NhDN8SsHnpyyMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzY4ZmUzMDM3LWI4N2ItNDM3OS1hMDE0LTIxMzAxMmRhM2ExMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZwisMA0GCSqGSIb3DQEBCwUAA4IBAQBTCeaEWLJTntuztawH4H48 +y6iWPoJv7pCA64mQ2JRJrFdVwPhNPrt9Od+CkISyALBwnZa0JxSqnSIxiHFc+Zu RwjBeEWiVF2aprVHFwy1eWVkZoMI664Xpj4vdsHT8s/jdYaG2QuxhFHREl7w1jWU QJ6Bv8jrr+F4YYdt7OYsG+eI3a82osxPlFggKDC8v0wLnDEcDeKcBJVHcp10c73j w9ZB7ZmN1GaHQWg6rkzG2idx8kWGl7HMm2yyOVjgwIr4A3+P2zJThJqBrkxgUKET Ru/mv24xTUi+RH93gd/tRZixq0q3SfwiYQToLu2x88I+aOVeuyAXJ++y5OEYeXqh -----END CERTIFICATE-----Generated at Thu Nov 21 18:50:37 2024 by rpki-client on console-ams.rpki-client.org