$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/719ca283-3642-49b6-998d-44526d9a59a7.roa File: 719ca283-3642-49b6-998d-44526d9a59a7.roa (raw, json) Hash identifier: Bjst3dQpumodbLugA6CGWa95msdSIrzQ/GK4WqHyBcA= Subject key identifier: 7B:33:DB:13:07:26:7A:56:E0:1B:6C:28:D6:6C:E1:C0:1F:24:97:98 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 04B99334FF633E588AFF9B0280994C6DD2382299 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/719ca283-3642-49b6-998d-44526d9a59a7.roa Signing time: Fri 19 Apr 2024 00:00:00 +0000 ROA not before: Fri 19 Apr 2024 00:00:00 +0000 ROA not after: Fri 24 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 103.21.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b9:93:34:ff:63:3e:58:8a:ff:9b:02:80:99:4c:6d:d2:38:22:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Apr 19 00:00:00 2024 GMT Not After : May 24 23:59:59 2024 GMT Subject: serialNumber=b96aadb7cb2adf0f46a8d0b23c25039f8fdc52d9e0133dd1b38e551c31e5cdb3, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:44:45:46:19:2e:c9:2a:be:ef:08:70:4b: 67:8f:5d:21:a2:ac:c9:94:88:13:01:9d:e4:e7:49: 23:b1:12:ee:41:df:e0:ca:c8:1f:40:3c:bc:ca:94: c2:e0:bc:ee:0b:57:cb:f0:9a:97:06:31:6d:30:51: 7f:77:82:68:b0:0c:5d:4e:bc:0e:8a:32:27:21:2f: 06:f7:85:b8:ba:91:91:21:65:84:c9:bd:ba:4f:ef: d4:36:91:c3:67:3b:af:e1:a3:d5:55:20:d8:cf:b7: 7e:e1:dc:d9:81:cf:15:d1:79:ba:57:92:8c:a3:44: 5a:bd:3c:10:07:13:66:34:12:ad:89:09:f9:ea:3a: 9d:2f:c3:60:d1:a8:64:32:a7:7d:79:ce:85:ed:b0: 69:29:c3:72:92:9e:63:f7:00:34:62:b3:10:6c:7f: c9:96:a4:5b:6f:5b:ee:57:94:31:f4:87:6c:f1:b3: 1a:3c:12:c6:43:f0:6b:d7:54:a5:8f:3c:64:df:03: 1c:85:e8:cf:09:9d:5b:14:04:f0:8f:30:53:ad:7c: 2e:19:d3:6b:04:64:2e:5b:bd:94:72:11:04:eb:68: 87:11:4a:81:3c:b4:01:01:a9:c9:fe:d9:0f:cf:ed: ad:c8:86:d7:fc:52:4b:b5:63:32:fb:27:b7:d1:4e: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:DB:13:07:26:7A:56:E0:1B:6C:28:D6:6C:E1:C0:1F:24:97:98 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/719ca283-3642-49b6-998d-44526d9a59a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.240.0/22 Signature Algorithm: sha256WithRSAEncryption 64:16:1e:c9:88:0f:13:a8:b6:7c:0f:e4:df:c3:26:f0:64:27: 52:8b:3c:21:1a:60:e5:57:73:d7:7f:25:f1:bb:fe:c8:ec:0b: 36:22:bb:32:23:6b:8b:61:8c:0a:b8:20:91:4b:70:be:96:a2: 91:d5:c4:19:c3:6b:08:18:60:5c:8a:bc:5f:7d:b6:2b:c1:22: c8:22:5a:00:38:e5:5a:e2:63:b4:f1:a3:00:9d:85:f4:62:4f: 42:42:d0:29:56:01:20:ea:00:5d:75:7d:18:3c:53:2c:03:a0: 23:b5:f4:bd:2c:11:42:ce:a0:23:33:0d:83:98:13:1f:4d:02: 61:29:9d:fe:94:79:ae:2b:d9:9d:ea:14:23:1e:8f:6b:73:43: 20:4f:ba:c5:51:4e:d3:ed:c4:50:de:df:60:9d:82:3e:e4:fe: 2f:6a:d2:68:5d:49:85:77:55:5d:11:a0:52:93:4e:ca:4e:2b: 85:8c:6e:14:0d:63:56:a8:44:0a:bb:80:4d:bf:7b:36:05:36: 66:a0:11:eb:08:29:2a:9e:8c:af:d2:aa:58:13:9a:d5:78:86: 64:21:6b:76:d0:98:b0:02:9f:ee:06:d2:c3:d9:ec:cb:4e:8f: ec:b8:55:d0:59:90:2e:08:5c:5e:fb:7c:68:2e:ac:d9:15:ab: aa:f7:5d:be -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUBLmTNP9jPliK/5sCgJlMbdI4IpkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI0MDQxOTAwMDAwMFoX DTI0MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAYjk2YWFkYjdjYjJhZGYwZjQ2YThk MGIyM2MyNTAzOWY4ZmRjNTJkOWUwMTMzZGQxYjM4ZTU1MWMzMWU1Y2RiMzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn9ERUYZLskqvu8IcEtnj10hoqzJ lIgTAZ3k50kjsRLuQd/gysgfQDy8ypTC4LzuC1fL8JqXBjFtMFF/d4JosAxdTrwO ijInIS8G94W4upGRIWWEyb26T+/UNpHDZzuv4aPVVSDYz7d+4dzZgc8V0Xm6V5KM o0RavTwQBxNmNBKtiQn56jqdL8Ng0ahkMqd9ec6F7bBpKcNykp5j9wA0YrMQbH/J lqRbb1vuV5Qx9Ids8bMaPBLGQ/Br11Sljzxk3wMchejPCZ1bFATwjzBTrXwuGdNr BGQuW72UchEE62iHEUqBPLQBAanJ/tkPz+2tyIbX/FJLtWMy+ye30U6RswIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHsz2xMHJnpW4BtsKNZs4cAfJJeYMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzcxOWNhMjgzLTM2NDItNDliNi05OThkLTQ0NTI2ZDlhNTlhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxXwMA0GCSqGSIb3DQEBCwUAA4IBAQBkFh7JiA8TqLZ8D+Tfwybw ZCdSizwhGmDlV3PXfyXxu/7I7As2IrsyI2uLYYwKuCCRS3C+lqKR1cQZw2sIGGBc irxffbYrwSLIIloAOOVa4mO08aMAnYX0Yk9CQtApVgEg6gBddX0YPFMsA6AjtfS9 LBFCzqAjMw2DmBMfTQJhKZ3+lHmuK9md6hQjHo9rc0MgT7rFUU7T7cRQ3t9gnYI+ 5P4vatJoXUmFd1VdEaBSk07KTiuFjG4UDWNWqEQKu4BNv3s2BTZmoBHrCCkqnoyv 0qpYE5rVeIZkIWt20JiwAp/uBtLD2ezLTo/suFXQWZAuCFxe+3xoLqzZFauq912+ -----END CERTIFICATE-----Generated at Wed May 1 16:09:46 2024 by rpki-client on console-fra.rpki-client.org