$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa File: 92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa (raw, json) Hash identifier: ZAGBr97ggpRBRx4Fwsy0Sb5kxQp66ebk4Tw+fCTkj4E= Subject key identifier: D5:5F:AC:8C:AD:69:2A:BE:3B:14:9F:75:B7:9A:E9:05:2E:B1:E6:32 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 6D4BD32BEDBFAC6F604A7D0CE0CB48B843250B15 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa Signing time: Sat 16 Sep 2023 00:00:00 +0000 ROA not before: Sat 16 Sep 2023 00:00:00 +0000 ROA not after: Sat 21 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1044::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Sep 2023 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4b:d3:2b:ed:bf:ac:6f:60:4a:7d:0c:e0:cb:48:b8:43:25:0b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 16 00:00:00 2023 GMT Not After : Oct 21 23:59:59 2023 GMT Subject: serialNumber=e437fc7ddf7e36d1f44a96861e3fe40a12e4ff0ca599bf3f2ba882e3994e7101, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:4d:e1:b8:ee:26:6b:ae:e4:9a:e5:02:69: a3:d2:fc:40:0f:89:cd:0f:c1:9c:88:97:2b:84:75: 0a:5a:ca:4d:2d:a6:47:2b:76:1e:3c:60:e1:26:ae: fa:43:90:a9:37:2b:e7:7a:48:ce:a1:50:ac:6d:71: 18:2c:1e:78:df:a2:39:d2:b9:c8:fe:1d:1f:56:bf: 11:50:c3:a1:0d:75:35:bd:45:e8:a6:b0:51:12:c1: fd:00:55:ed:d2:c8:7c:d4:01:19:3c:7d:4c:a3:4c: b1:ed:e8:f6:2e:0d:0a:76:dc:b7:4f:d8:41:5e:97: 71:eb:a5:4c:3b:e4:de:0d:36:70:2b:78:5a:0b:d7: 2b:ef:41:45:1f:99:aa:4c:b1:be:f2:91:bc:73:06: cd:d7:d3:fe:9e:65:19:f1:10:97:de:86:ed:37:30: a3:90:74:da:1b:0c:96:ce:97:1b:93:3b:73:95:b6: 08:e7:43:a7:c0:5f:e2:52:1c:3e:b1:93:8f:09:83: a0:a5:0c:63:8d:b3:11:e9:9d:23:1b:e0:0c:db:a5: ab:96:dc:3b:12:7a:90:08:31:e0:fe:cd:a4:e0:46: a2:02:8e:78:9b:b6:ef:c5:db:db:88:81:4a:d0:7a: 79:94:15:bc:f7:37:ee:41:48:52:9a:8b:f8:e1:3c: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5F:AC:8C:AD:69:2A:BE:3B:14:9F:75:B7:9A:E9:05:2E:B1:E6:32 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1044::/48 Signature Algorithm: sha256WithRSAEncryption 00:ad:e4:7d:cb:f0:b1:44:27:ef:61:8f:88:1f:3e:e5:a3:c3: 92:97:19:4d:14:ad:ea:d5:1e:de:81:8b:9d:b6:a3:91:08:c0: 76:5b:a7:52:e4:f3:a9:12:14:07:72:43:18:f8:36:c8:a2:71: c9:71:ec:b0:0f:f5:e4:23:e9:3f:a9:4a:11:a8:cf:29:13:b5: cc:e5:44:b8:42:48:5a:0d:f3:fa:36:2c:00:55:77:25:5c:37: 3c:98:e8:64:cf:f0:81:0d:52:1e:b9:96:0e:8b:bb:05:88:07: 3b:98:9c:56:46:85:f9:81:a1:d3:7f:35:76:99:b8:f7:43:af: bd:66:67:c5:13:4b:8f:9e:ad:97:51:c9:01:86:94:7f:80:f9: 02:d2:a1:5e:b9:d4:7f:ed:11:4a:75:3d:09:db:5d:ae:0a:73: 0f:21:e7:6b:eb:ee:8c:ef:af:95:b4:41:bc:98:44:79:2f:87: 90:46:f9:8d:10:68:7e:83:22:e8:98:8f:24:ab:18:75:45:8e: d9:13:95:e8:e6:8d:ad:f4:d5:91:6e:7c:7c:b5:b3:e2:29:ad: 59:35:5b:fd:95:1f:6a:8e:7f:0e:7d:97:82:4d:07:9e:5f:3a: 54:95:2c:31:be:c3:cc:6d:29:f4:7d:08:76:23:91:75:5e:10: 6f:67:bb:5a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbUvTK+2/rG9gSn0M4MtIuEMlCxUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTIzMDkxNjAwMDAwMFoX DTIzMTAyMTIzNTk1OVowejFJMEcGA1UEBRNAZTQzN2ZjN2RkZjdlMzZkMWY0NGE5 Njg2MWUzZmU0MGExMmU0ZmYwY2E1OTliZjNmMmJhODgyZTM5OTRlNzEwMTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW9N4bjuJmuu5JrlAmmj0vxAD4nN D8GciJcrhHUKWspNLaZHK3YePGDhJq76Q5CpNyvnekjOoVCsbXEYLB5436I50rnI /h0fVr8RUMOhDXU1vUXoprBREsH9AFXt0sh81AEZPH1Mo0yx7ej2Lg0Kdty3T9hB Xpdx66VMO+TeDTZwK3haC9cr70FFH5mqTLG+8pG8cwbN19P+nmUZ8RCX3obtNzCj kHTaGwyWzpcbkztzlbYI50OnwF/iUhw+sZOPCYOgpQxjjbMR6Z0jG+AM26Wrltw7 EnqQCDHg/s2k4EaiAo54m7bvxdvbiIFK0Hp5lBW89zfuQUhSmov44Tz7fQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNVfrIytaSq+OxSfdbea6QUuseYyMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzkyYWNiNjVkLThlZDYtNDdiOC04Yjg3LThjZWMzZjE0ZGY0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABBEMA0GCSqGSIb3DQEBCwUAA4IBAQAAreR9y/CxRCfvYY+I Hz7lo8OSlxlNFK3q1R7egYudtqORCMB2W6dS5POpEhQHckMY+DbIonHJceywD/Xk I+k/qUoRqM8pE7XM5US4QkhaDfP6NiwAVXclXDc8mOhkz/CBDVIeuZYOi7sFiAc7 mJxWRoX5gaHTfzV2mbj3Q6+9ZmfFE0uPnq2XUckBhpR/gPkC0qFeudR/7RFKdT0J 212uCnMPIedr6+6M76+VtEG8mER5L4eQRvmNEGh+gyLomI8kqxh1RY7ZE5Xo5o2t 9NWRbnx8tbPiKa1ZNVv9lR9qjn8OfZeCTQeeXzpUlSwxvsPMbSn0fQh2I5F1XhBv Z7ta -----END CERTIFICATE-----Generated at Sat Sep 16 00:30:27 2023 by rpki-client on console-ams.rpki-client.org