$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/9ecc0bd6-104c-43e2-9db8-92afcb871843.roa File: 9ecc0bd6-104c-43e2-9db8-92afcb871843.roa (raw, json) Hash identifier: nMrK8KxEzbLR7YAa0jIjQ8J9vL5IvG0+h+Uq8/DdIXI= Subject key identifier: 82:B7:DD:A3:70:B3:59:DB:DC:D7:B0:AA:44:78:4E:3F:04:96:AD:9F Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 29645E51E11F9029ACE3CC19CFC0809979A172F4 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/9ecc0bd6-104c-43e2-9db8-92afcb871843.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2403:b300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:64:5e:51:e1:1f:90:29:ac:e3:cc:19:cf:c0:80:99:79:a1:72:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=6ee72447f51e3ce4d0308036044e284029fee28e9f98014df4668c0db0eadf00, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:04:15:f8:f2:77:40:84:e2:50:b1:6f:a0: fa:2b:67:3e:4e:15:fd:1d:3b:1c:99:fc:1a:fc:99: 28:97:4a:be:a7:cc:e2:b8:40:b2:59:c5:fc:53:77: 0e:11:71:08:98:e4:10:85:c6:91:97:38:f3:35:eb: 4c:7a:af:02:6b:31:b7:1a:14:1d:0a:d4:78:3b:88: cc:d8:aa:26:e6:49:05:d7:7d:c1:57:fb:7a:24:69: 24:bb:f9:06:10:52:f7:b4:93:d3:88:97:f3:d8:2d: d7:46:75:00:aa:e4:78:05:cf:46:19:9f:51:f3:78: 0b:1a:82:40:eb:d5:3f:1f:00:b1:05:f6:f6:68:10: 3c:fc:e3:b8:f6:4a:6a:ed:8a:b6:9a:d1:0a:ca:a8: 37:cd:0b:0a:1c:f5:d5:4a:e8:95:28:ec:f0:2b:d0: 58:75:c0:74:6c:a4:52:c0:40:78:a6:58:87:22:d1: 5c:ca:e8:a8:d3:a2:1d:ce:15:ed:e9:0f:b7:68:6f: 5a:58:e4:14:ea:a2:6a:d0:af:f6:62:40:a1:3b:a5: 5d:1f:86:4f:bb:24:5c:0c:cd:3a:f3:1d:ed:cc:c9: 4e:6c:0f:bf:a4:f0:52:49:ab:ec:49:ca:49:a2:eb: 6c:f3:e9:12:ef:5a:45:07:69:18:6c:55:3a:32:40: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B7:DD:A3:70:B3:59:DB:DC:D7:B0:AA:44:78:4E:3F:04:96:AD:9F X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/9ecc0bd6-104c-43e2-9db8-92afcb871843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/32 Signature Algorithm: sha256WithRSAEncryption 1b:f4:52:c8:e4:68:91:71:4f:2b:f6:e1:cf:4d:5b:3a:2a:11: 93:7d:6a:b3:bb:b5:c9:bb:b0:f5:7f:ee:29:90:a2:e6:7d:a3: c7:2f:f2:a4:5e:a4:ee:00:7c:56:e9:d1:e9:64:bb:e6:38:96: 19:da:b0:d1:b8:43:e3:a1:23:31:0f:8e:23:0b:78:1c:a6:13: c1:61:e4:b6:03:dd:51:57:a8:fc:fc:c7:63:55:eb:eb:89:b3: 20:33:6b:73:da:33:59:80:38:93:62:73:c2:1b:40:dc:53:7a: 47:61:be:e2:96:55:ef:13:ce:bc:5d:13:78:d2:64:88:ab:d2: 0c:86:40:0b:91:92:c6:c5:09:54:70:69:d3:65:07:2d:45:13: 90:cf:9e:c8:98:5e:2e:d3:fe:85:9e:be:7c:40:0a:dc:87:4e: b6:04:19:39:35:b0:8a:4b:e9:05:3e:57:8f:34:6c:e2:89:ed: c7:d4:b5:ef:08:e2:5d:2e:ac:9a:b4:7a:e6:10:bf:6f:d0:c2: 5f:48:ec:c6:24:55:d3:fe:30:bd:3b:f8:07:f4:c6:65:39:8f: 9f:4f:8b:a9:7d:15:67:72:e8:66:0b:24:82:b4:e5:b9:16:2a: 59:c7:ff:92:40:5c:92:a7:cc:f7:f1:1a:08:8a:01:3a:b8:7d: 11:8c:79:9b -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUKWReUeEfkCms48wZz8CAmXmhcvQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNANmVlNzI0NDdmNTFlM2NlNGQwMzA4 MDM2MDQ0ZTI4NDAyOWZlZTI4ZTlmOTgwMTRkZjQ2NjhjMGRiMGVhZGYwMDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt60EFfjyd0CE4lCxb6D6K2c+ThX9 HTscmfwa/Jkol0q+p8ziuECyWcX8U3cOEXEImOQQhcaRlzjzNetMeq8CazG3GhQd CtR4O4jM2Kom5kkF133BV/t6JGkku/kGEFL3tJPTiJfz2C3XRnUAquR4Bc9GGZ9R 83gLGoJA69U/HwCxBfb2aBA8/OO49kpq7Yq2mtEKyqg3zQsKHPXVSuiVKOzwK9BY dcB0bKRSwEB4pliHItFcyuio06IdzhXt6Q+3aG9aWOQU6qJq0K/2YkChO6VdH4ZP uyRcDM068x3tzMlObA+/pPBSSavsScpJouts8+kS71pFB2kYbFU6MkAaRwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFIK33aNws1nb3NewqkR4Tj8Elq2fMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzllY2MwYmQ2LTEwNGMtNDNlMi05ZGI4LTkyYWZjYjg3MTg0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAOzADANBgkqhkiG9w0BAQsFAAOCAQEAG/RSyORokXFPK/bhz01b OioRk31qs7u1ybuw9X/uKZCi5n2jxy/ypF6k7gB8VunR6WS75jiWGdqw0bhD46Ej MQ+OIwt4HKYTwWHktgPdUVeo/PzHY1Xr64mzIDNrc9ozWYA4k2JzwhtA3FN6R2G+ 4pZV7xPOvF0TeNJkiKvSDIZAC5GSxsUJVHBp02UHLUUTkM+eyJheLtP+hZ6+fEAK 3IdOtgQZOTWwikvpBT5XjzRs4ontx9S17wjiXS6smrR65hC/b9DCX0jsxiRV0/4w vTv4B/TGZTmPn0+LqX0VZ3LoZgskgrTluRYqWcf/kkBckqfM9/EaCIoBOrh9EYx5 mw== -----END CERTIFICATE-----Generated at Thu Apr 25 00:31:13 2024 by rpki-client on console-fra.rpki-client.org