$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/719ca283-3642-49b6-998d-44526d9a59a7.roa File: 719ca283-3642-49b6-998d-44526d9a59a7.roa (raw, json) Hash identifier: iyjMUxyP91ruQ3m0cyQMYqrWqcMlbH9dl9OfjFRDfVc= Subject key identifier: 27:2D:6A:97:86:E0:C2:C2:B8:4E:30:23:1F:2F:C3:04:7D:6B:45:C6 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 1CA9ED69AEAF2C90C0A16419304EE902DD13171F Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/719ca283-3642-49b6-998d-44526d9a59a7.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 103.21.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a9:ed:69:ae:af:2c:90:c0:a1:64:19:30:4e:e9:02:dd:13:17:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=ba5b02fc41423f332f2dd1a17f54126ee53d6fd8f0afcdedf4c5cfb7626bf0c6, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:05:20:bf:e9:c4:d4:8a:63:e4:80:6e:44: 5f:cc:02:5f:a5:72:70:e8:80:fe:14:e4:b7:fc:ab: e2:e1:b6:2b:f8:f1:7b:36:ef:2c:55:f3:1e:4c:d8: 43:8f:81:de:d1:d8:7e:95:ba:07:8b:a1:45:03:be: 1a:3c:8a:97:e6:ba:30:32:cc:55:e6:d7:87:8c:94: c6:0c:92:74:15:fc:68:9a:e8:d0:91:bd:a8:cf:ef: 23:c2:60:c0:b2:99:a9:07:42:0d:b7:03:e9:78:c8: a2:d0:ec:04:e6:86:b1:6f:d3:a1:f7:e3:b2:83:f9: 6a:51:20:64:d0:9c:4e:9f:fd:4b:82:59:07:33:62: cd:63:75:aa:3b:34:68:44:36:8a:26:e1:15:e5:95: 22:ea:3a:49:47:0a:45:79:97:9f:6f:74:6c:ce:1d: 1e:7f:9a:15:1f:44:44:ff:5a:7c:25:4b:b9:82:48: 99:a9:11:7d:b9:33:03:a6:c4:87:9a:42:9f:f8:3f: d0:29:23:bd:ac:ec:7f:dd:b5:0f:92:ca:e4:0a:49: 1f:18:ed:d0:cc:52:c9:0a:82:54:57:35:bd:b3:71: b1:60:a9:4c:71:94:ba:ab:d5:e1:ab:8b:9e:ae:26: 07:62:4c:aa:7e:f8:a4:e5:5a:7d:47:90:a5:a9:88: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2D:6A:97:86:E0:C2:C2:B8:4E:30:23:1F:2F:C3:04:7D:6B:45:C6 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/719ca283-3642-49b6-998d-44526d9a59a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.240.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:24:89:9f:ad:b6:38:b1:c6:75:d9:8a:f5:32:59:8f:c5:d9: 02:ec:d1:38:e2:db:33:ed:75:d9:55:9d:82:f2:e5:7e:95:cf: aa:14:04:b4:72:88:cb:62:7f:ba:51:a4:5e:50:7c:22:ae:e0: b4:43:36:da:b2:cd:03:be:27:60:5f:e4:fc:20:97:2c:7c:4a: 13:5e:ce:13:e4:0e:3f:7b:25:bf:b6:e9:53:87:71:be:d1:29: 8f:20:73:8a:c5:58:a4:de:01:a8:97:ae:07:65:fd:16:e4:ff: 84:d3:12:91:7e:8c:f9:06:ba:ef:26:a9:85:01:ee:e8:0f:9f: b4:ec:2c:6d:59:b8:3f:a5:be:83:86:17:96:da:96:ba:4a:97: c4:5e:30:aa:68:80:cc:ec:1e:8f:91:35:b2:99:6a:91:dc:b4: ec:50:33:27:14:90:b2:e8:94:fa:1d:45:f4:2f:16:40:13:0d: a2:8e:f7:1c:e4:b2:6a:bd:a3:3b:e1:8e:85:50:f7:ae:15:3b: 4f:88:5b:35:46:28:ea:30:4a:ad:81:55:5b:a7:cf:0b:6b:32: 2a:c4:d2:dd:3a:85:af:b7:84:92:4d:e5:73:cd:89:49:06:3a: 65:53:85:23:77:e1:dc:1d:97:72:11:14:11:e1:1d:29:ad:e4: 75:4e:a1:39 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUHKntaa6vLJDAoWQZME7pAt0TFx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI0MTEyMjAwMDAwMFoX DTI0MTIyNzIzNTk1OVowejFJMEcGA1UEBRNAYmE1YjAyZmM0MTQyM2YzMzJmMmRk MWExN2Y1NDEyNmVlNTNkNmZkOGYwYWZjZGVkZjRjNWNmYjc2MjZiZjBjNjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6wFIL/pxNSKY+SAbkRfzAJfpXJw 6ID+FOS3/Kvi4bYr+PF7Nu8sVfMeTNhDj4He0dh+lboHi6FFA74aPIqX5rowMsxV 5teHjJTGDJJ0FfxomujQkb2oz+8jwmDAspmpB0INtwPpeMii0OwE5oaxb9Oh9+Oy g/lqUSBk0JxOn/1LglkHM2LNY3WqOzRoRDaKJuEV5ZUi6jpJRwpFeZefb3Rszh0e f5oVH0RE/1p8JUu5gkiZqRF9uTMDpsSHmkKf+D/QKSO9rOx/3bUPksrkCkkfGO3Q zFLJCoJUVzW9s3GxYKlMcZS6q9Xhq4ueriYHYkyqfvik5Vp9R5ClqYgc+wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCctapeG4MLCuE4wIx8vwwR9a0XGMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzcxOWNhMjgzLTM2NDItNDliNi05OThkLTQ0NTI2ZDlhNTlhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxXwMA0GCSqGSIb3DQEBCwUAA4IBAQBdJImfrbY4scZ12Yr1MlmP xdkC7NE44tsz7XXZVZ2C8uV+lc+qFAS0cojLYn+6UaReUHwiruC0Qzbass0Dvidg X+T8IJcsfEoTXs4T5A4/eyW/tulTh3G+0SmPIHOKxVik3gGol64HZf0W5P+E0xKR foz5BrrvJqmFAe7oD5+07CxtWbg/pb6DhheW2pa6SpfEXjCqaIDM7B6PkTWymWqR 3LTsUDMnFJCy6JT6HUX0LxZAEw2ijvcc5LJqvaM74Y6FUPeuFTtPiFs1RijqMEqt gVVbp88LazIqxNLdOoWvt4SSTeVzzYlJBjplU4Ujd+HcHZdyERQR4R0preR1TqE5 -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:50 2024 by rpki-client on console-ams.rpki-client.org