$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa File: 92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa (raw, json) Hash identifier: t2irQi84cvj9ZYZJ0hWCga7wXGZd02VGkSliGOKcXjk= Subject key identifier: 3C:2E:E2:FF:61:9C:B6:52:AE:20:9D:33:37:3F:C1:AD:C9:42:DA:97 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5DC875D672DC63E50295341F23DF81AF7F99B7FA Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1044::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c8:75:d6:72:dc:63:e5:02:95:34:1f:23:df:81:af:7f:99:b7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=18f2cb190852b7a1e056a6a088901fbb6bc82e069761106c6c40b09bba6cd141, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:02:09:f4:00:fe:0c:92:c0:35:38:07:2c: e7:69:a2:95:2f:5a:62:7a:25:97:c5:74:e9:84:28: 2c:f1:1b:88:c1:eb:15:e8:ad:06:8b:22:da:c7:b8: 5f:e9:31:c7:a5:2c:b9:7e:65:75:2f:a6:ff:99:ad: 4e:6c:c5:79:00:a0:43:50:af:92:e8:15:10:84:f4: 73:dc:d2:18:dd:dd:f9:6c:a3:6f:59:ef:9d:89:87: b1:23:c6:4f:05:b8:ca:49:a4:20:d6:8f:87:51:5e: 64:aa:94:21:03:b1:18:23:39:f4:86:e7:8d:de:01: 2c:3a:24:df:40:3f:c2:54:cc:e3:bc:23:e4:20:15: 28:45:89:fe:b7:68:07:e5:32:53:7a:87:f8:ee:c9: bd:6d:ac:2c:59:05:ff:8b:6f:15:45:5d:d0:75:e8: aa:d3:d3:f0:8f:34:62:e8:25:0f:b4:3f:60:f6:9b: 4e:ce:d8:22:54:48:5e:e8:a1:4d:19:1b:55:95:a4: fe:8b:18:bc:d0:e3:5a:d6:91:d1:f1:4e:eb:d4:d6: e9:61:ea:60:05:fc:28:b1:cb:76:fa:8c:32:cb:e5: 90:e9:82:55:ba:e8:b8:17:ba:1f:3b:90:d6:08:86: ff:b2:65:3a:ce:3a:74:0f:b3:a0:0f:66:c2:d1:62: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:E2:FF:61:9C:B6:52:AE:20:9D:33:37:3F:C1:AD:C9:42:DA:97 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1044::/48 Signature Algorithm: sha256WithRSAEncryption 8d:86:85:6d:13:c6:b5:99:2b:13:3c:59:b0:14:b5:8e:34:30: 6a:9f:c4:3a:6c:b9:e9:7d:7a:1a:97:62:b0:16:59:bd:c8:e4: f3:2c:1f:cd:1e:9e:96:47:99:1b:00:c6:14:24:01:aa:f8:20: 98:0d:01:2d:6e:2f:f5:4f:bc:8c:78:01:37:fa:63:42:82:89: b9:f0:7c:72:22:48:af:c6:35:fe:8e:ce:b1:7f:6d:36:83:b6: 24:ff:20:35:60:08:4e:57:98:33:24:39:be:ed:9c:1c:c4:dd: 4c:30:1e:9a:1b:99:4a:3e:ad:a0:3f:78:e8:a2:e1:66:5d:26: 88:23:e2:f8:ed:26:f2:cd:6a:7b:7c:c2:7c:e4:69:58:b7:20: b4:c5:37:b0:64:84:5b:ac:20:6b:54:33:21:63:86:ea:8c:66: 74:c4:69:57:59:d0:b5:6f:2e:1f:ee:cb:ea:1e:85:48:de:72: 7c:df:ac:23:12:8c:52:ed:dd:e2:77:f1:96:18:5f:51:94:9e: e9:69:aa:eb:21:26:5b:47:4d:8a:83:c2:a7:b4:a2:21:a6:0c: 61:23:c3:0e:36:a3:69:9f:ac:25:48:17:14:2b:db:d5:83:ea: a6:11:be:01:1f:c1:1c:ed:81:a0:c0:87:ea:7e:d6:5b:b0:f3: eb:fe:4f:7b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXch11nLcY+UClTQfI9+Br3+Zt/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MTExODAwMDAwMFoX DTI0MTIyMzIzNTk1OVowejFJMEcGA1UEBRNAMThmMmNiMTkwODUyYjdhMWUwNTZh NmEwODg5MDFmYmI2YmM4MmUwNjk3NjExMDZjNmM0MGIwOWJiYTZjZDE0MTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraACCfQA/gySwDU4ByznaaKVL1pi eiWXxXTphCgs8RuIwesV6K0GiyLax7hf6THHpSy5fmV1L6b/ma1ObMV5AKBDUK+S 6BUQhPRz3NIY3d35bKNvWe+diYexI8ZPBbjKSaQg1o+HUV5kqpQhA7EYIzn0hueN 3gEsOiTfQD/CVMzjvCPkIBUoRYn+t2gH5TJTeof47sm9bawsWQX/i28VRV3Qdeiq 09PwjzRi6CUPtD9g9ptOztgiVEhe6KFNGRtVlaT+ixi80ONa1pHR8U7r1NbpYepg Bfwosct2+owyy+WQ6YJVuui4F7ofO5DWCIb/smU6zjp0D7OgD2bC0WLuyQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDwu4v9hnLZSriCdMzc/wa3JQtqXMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzkyYWNiNjVkLThlZDYtNDdiOC04Yjg3LThjZWMzZjE0ZGY0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABBEMA0GCSqGSIb3DQEBCwUAA4IBAQCNhoVtE8a1mSsTPFmw FLWONDBqn8Q6bLnpfXoal2KwFlm9yOTzLB/NHp6WR5kbAMYUJAGq+CCYDQEtbi/1 T7yMeAE3+mNCgom58HxyIkivxjX+js6xf202g7Yk/yA1YAhOV5gzJDm+7ZwcxN1M MB6aG5lKPq2gP3joouFmXSaII+L47SbyzWp7fMJ85GlYtyC0xTewZIRbrCBrVDMh Y4bqjGZ0xGlXWdC1by4f7svqHoVI3nJ836wjEoxS7d3id/GWGF9RlJ7paarrISZb R02Kg8KntKIhpgxhI8MONqNpn6wlSBcUK9vVg+qmEb4BH8Ec7YGgwIfqftZbsPPr /k97 -----END CERTIFICATE-----Generated at Thu Nov 21 18:50:37 2024 by rpki-client on console-ams.rpki-client.org