$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa File: 68fe3037-b87b-4379-a014-213012da3a11.roa (raw, json) Hash identifier: vwdRO+PcEwcAS7wiuoT7WxmcgL+0wP/I8DkUWe2FQqU= Subject key identifier: 3F:48:86:4A:33:02:06:BB:2B:1E:DA:65:01:AB:01:2B:FE:50:F5:9C Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 325AE16578BC9D122EBD5FD763B90A3A2C7A1D6E Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 103.8.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5a:e1:65:78:bc:9d:12:2e:bd:5f:d7:63:b9:0a:3a:2c:7a:1d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=d6a946f51a225aef89876adf07d09da29ee5a6aefea89b97bf2da5c5d989eac3, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:c7:ef:21:f5:41:49:d4:b9:0c:88:3a:56: 60:57:85:99:d9:bd:f0:69:d2:40:7b:19:a9:f8:41: 7b:35:28:b5:12:47:82:15:e0:f1:c8:37:f6:c2:8e: c5:79:7c:ab:46:c5:ea:ef:d2:02:a4:67:4f:ac:0a: 87:6a:d4:75:af:c6:05:74:c5:57:e4:00:ef:f2:8a: c7:75:82:66:cf:ea:99:fd:cb:ec:b4:2c:03:e5:97: 17:20:35:a2:73:c1:61:83:6a:fc:cb:65:b9:cf:cb: 5f:78:1e:9e:1f:60:08:81:c3:b0:dc:ca:50:9a:2d: 9a:18:f2:ce:c6:dd:be:d3:87:f2:50:f4:40:14:53: e0:f7:b6:ce:b3:31:ec:f9:84:41:9f:f1:73:6a:b3: ac:fe:39:7f:f0:ee:be:a8:85:ea:8c:8b:c3:70:b4: 3b:5d:4f:93:d6:eb:10:ed:30:c4:1d:e7:4c:6a:78: 92:b6:a2:4d:00:30:bd:5f:d6:4f:88:ba:9e:68:d4: 15:c3:f3:27:62:26:1a:58:e8:f3:67:56:3c:32:20: 2b:95:53:0e:da:41:de:7e:70:dd:d2:7d:68:bd:7e: 6a:3e:d5:c8:ce:1f:27:c1:97:b7:67:c5:f6:d3:77: 55:11:45:84:90:69:64:3a:55:4c:7a:75:eb:77:da: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:48:86:4A:33:02:06:BB:2B:1E:DA:65:01:AB:01:2B:FE:50:F5:9C X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/68fe3037-b87b-4379-a014-213012da3a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.172.0/22 Signature Algorithm: sha256WithRSAEncryption 69:bc:4b:a6:2f:46:fc:a8:2f:00:6b:7f:82:c9:55:54:38:f6: 48:c4:1f:12:b0:4a:ca:85:b5:31:6c:76:62:14:62:d6:3c:70: a8:39:4f:8d:4d:72:c5:58:f9:0e:ac:f8:e8:29:14:40:c0:e9: ab:0c:e4:31:74:da:78:23:ef:9e:83:0c:1a:a2:db:4e:3a:c2: 4c:65:78:92:94:43:0d:8c:13:b1:bb:79:34:9f:f3:d2:b2:ba: 40:0f:20:a8:84:d2:9e:79:57:cc:eb:f7:f6:7c:97:29:6e:23: 2b:5f:1a:45:22:93:f8:22:8b:ee:fc:14:8c:7e:7a:da:05:96: ec:5d:18:a5:eb:58:67:1d:a1:cb:3d:da:49:c8:3e:e2:4d:74: 76:f1:c9:65:49:06:87:a5:15:e0:13:cd:63:e7:3c:14:18:39: 4d:aa:5e:d1:00:2d:6a:d4:cd:91:b3:6d:ae:90:01:f7:c7:76: 87:00:c9:fc:3c:ae:99:99:f7:f7:a0:d7:23:88:d0:00:2e:8a: 5c:d3:80:c3:a5:9d:95:dc:50:f5:9a:c3:d2:af:9a:bf:d3:93: 9d:80:ce:a6:d1:93:6a:4d:36:30:15:50:1d:91:7b:bd:17:17: 53:5a:f8:59:52:9d:d0:cb:bd:99:95:8f:88:0a:76:0c:cc:a1: 24:80:ad:8e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUMlrhZXi8nRIuvV/XY7kKOix6HW4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZDZhOTQ2ZjUxYTIyNWFlZjg5ODc2 YWRmMDdkMDlkYTI5ZWU1YTZhZWZlYTg5Yjk3YmYyZGE1YzVkOTg5ZWFjMzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CXH7yH1QUnUuQyIOlZgV4WZ2b3w adJAexmp+EF7NSi1EkeCFeDxyDf2wo7FeXyrRsXq79ICpGdPrAqHatR1r8YFdMVX 5ADv8orHdYJmz+qZ/cvstCwD5ZcXIDWic8Fhg2r8y2W5z8tfeB6eH2AIgcOw3MpQ mi2aGPLOxt2+04fyUPRAFFPg97bOszHs+YRBn/FzarOs/jl/8O6+qIXqjIvDcLQ7 XU+T1usQ7TDEHedManiStqJNADC9X9ZPiLqeaNQVw/MnYiYaWOjzZ1Y8MiArlVMO 2kHefnDd0n1ovX5qPtXIzh8nwZe3Z8X203dVEUWEkGlkOlVMenXrd9pykwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFD9IhkozAga7Kx7aZQGrASv+UPWcMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzY4ZmUzMDM3LWI4N2ItNDM3OS1hMDE0LTIxMzAxMmRhM2ExMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZwisMA0GCSqGSIb3DQEBCwUAA4IBAQBpvEumL0b8qC8Aa3+CyVVU OPZIxB8SsErKhbUxbHZiFGLWPHCoOU+NTXLFWPkOrPjoKRRAwOmrDOQxdNp4I++e gwwaottOOsJMZXiSlEMNjBOxu3k0n/PSsrpADyCohNKeeVfM6/f2fJcpbiMrXxpF IpP4Iovu/BSMfnraBZbsXRil61hnHaHLPdpJyD7iTXR28cllSQaHpRXgE81j5zwU GDlNql7RAC1q1M2Rs22ukAH3x3aHAMn8PK6Zmff3oNcjiNAALopc04DDpZ2V3FD1 msPSr5q/05OdgM6m0ZNqTTYwFVAdkXu9FxdTWvhZUp3Qy72ZlY+ICnYMzKEkgK2O -----END CERTIFICATE-----Generated at Fri Apr 19 00:32:18 2024 by rpki-client on console-fra.rpki-client.org