$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa File: 192876e6-f42e-4593-9c92-6d3b76ebdac4.roa (raw, json) Hash identifier: 87W6BZSImxKeVsiO8o1ofA4ZKfzc8drDhThG4Bmpwf0= Subject key identifier: D4:4C:39:07:6D:80:F7:23:8E:2B:20:28:31:FA:87:11:F6:CB:E6:21 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 4C68F9594085D99C99F769C42788EEC1D65B0331 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 103.4.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:68:f9:59:40:85:d9:9c:99:f7:69:c4:27:88:ee:c1:d6:5b:03:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=70049ff60336c18e15cca5387932cccc89a1b00d6e47ec88ed8ae997f18b1191, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:de:4e:7c:5b:6c:39:bd:3f:0e:d9:22:30: 00:9a:63:ce:5b:9b:bf:c0:6c:30:48:be:99:e8:e4: ea:cc:1e:70:0f:12:9d:ef:9a:a0:da:be:f6:6d:1a: 98:1e:69:ad:ec:0a:3c:97:ed:50:45:b9:25:71:15: 7a:ca:7d:ef:a4:f5:54:85:bd:b1:43:99:96:94:4c: ba:5d:fd:30:9f:1b:e8:af:fa:56:ca:90:6a:f5:cb: ea:4c:6d:51:34:96:a0:d9:a4:cf:e8:55:25:be:3c: ef:1c:47:63:ea:9b:4a:59:ff:b3:b9:0c:a7:b9:e2: d6:a7:d3:68:b1:77:5e:7f:43:8c:b0:a3:22:9a:69: c4:72:9c:84:0e:5c:28:30:cd:6a:66:5c:0c:46:95: dd:c2:a7:7a:91:3c:af:82:f4:83:97:42:c6:67:5b: b7:a7:41:d2:47:9d:6a:28:52:b1:ec:8e:4e:3d:7e: 41:c9:97:9d:65:38:44:03:54:3b:9d:fc:65:fd:91: 8a:a4:10:59:28:16:f9:99:c3:4f:d3:c0:42:f5:8d: 51:09:6a:58:fd:59:0b:4b:97:e2:df:3a:61:f2:ad: 84:0a:07:dd:b6:8f:6e:84:c0:80:a6:70:5d:cf:87: 3f:88:5f:5e:10:5c:26:ee:ac:34:98:fc:d1:db:b6: d6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4C:39:07:6D:80:F7:23:8E:2B:20:28:31:FA:87:11:F6:CB:E6:21 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.8.0/21 Signature Algorithm: sha256WithRSAEncryption 45:53:9d:69:1b:eb:b7:9f:59:0a:ec:0b:24:22:52:80:cf:77: e1:e4:b1:90:ac:e8:7a:b1:73:29:0d:1f:d1:5a:bc:23:7e:91: d8:35:6e:eb:61:85:1f:37:ff:c3:13:18:71:ea:64:ef:06:4b: 48:2d:3d:49:dc:49:f1:1f:b0:b7:0b:36:93:ad:55:8d:6e:11: ce:7a:61:a6:be:45:9d:ad:42:21:74:7d:0d:cc:67:c7:aa:b7: 21:a3:b6:af:14:36:d4:7c:bf:8b:c5:46:3a:df:33:24:5d:9a: bd:8e:93:13:ea:f9:c9:a4:52:eb:e0:aa:a5:23:92:89:4e:50: 2d:e9:a1:5c:c5:40:3c:13:91:91:20:d2:19:fa:4d:e4:29:cf: d5:2b:4c:b2:48:e4:d2:d6:77:bb:ab:3d:82:c1:a5:a6:c8:b8: 8e:02:d4:34:8b:fc:92:f3:1f:ed:e8:f2:64:0b:1b:fc:6e:27: 36:1a:a6:c3:03:6a:74:f9:fe:d9:3b:bc:ec:92:97:fa:68:52: 57:47:9a:02:30:79:49:90:94:09:b2:46:2b:36:10:2c:3f:13: ca:cd:01:cd:eb:07:0b:da:10:8e:5f:fc:49:be:77:f8:2e:24: d8:31:09:a7:95:93:e5:a7:31:3b:92:25:c4:19:7e:e4:2d:35: ce:2e:dd:4e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTGj5WUCF2ZyZ92nEJ4juwdZbAzEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI0MTEwNTAwMDAwMFoX DTI0MTIxMDIzNTk1OVowejFJMEcGA1UEBRNANzAwNDlmZjYwMzM2YzE4ZTE1Y2Nh NTM4NzkzMmNjY2M4OWExYjAwZDZlNDdlYzg4ZWQ4YWU5OTdmMThiMTE5MTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyHeTnxbbDm9Pw7ZIjAAmmPOW5u/ wGwwSL6Z6OTqzB5wDxKd75qg2r72bRqYHmmt7Ao8l+1QRbklcRV6yn3vpPVUhb2x Q5mWlEy6Xf0wnxvor/pWypBq9cvqTG1RNJag2aTP6FUlvjzvHEdj6ptKWf+zuQyn ueLWp9NosXdef0OMsKMimmnEcpyEDlwoMM1qZlwMRpXdwqd6kTyvgvSDl0LGZ1u3 p0HSR51qKFKx7I5OPX5ByZedZThEA1Q7nfxl/ZGKpBBZKBb5mcNP08BC9Y1RCWpY /VkLS5fi3zph8q2ECgfdto9uhMCApnBdz4c/iF9eEFwm7qw0mPzR27bWcwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNRMOQdtgPcjjisgKDH6hxH2y+YhMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzE5Mjg3NmU2LWY0MmUtNDU5My05YzkyLTZkM2I3NmViZGFjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDZwQIMA0GCSqGSIb3DQEBCwUAA4IBAQBFU51pG+u3n1kK7AskIlKA z3fh5LGQrOh6sXMpDR/RWrwjfpHYNW7rYYUfN//DExhx6mTvBktILT1J3EnxH7C3 CzaTrVWNbhHOemGmvkWdrUIhdH0NzGfHqrcho7avFDbUfL+LxUY63zMkXZq9jpMT 6vnJpFLr4KqlI5KJTlAt6aFcxUA8E5GRINIZ+k3kKc/VK0yySOTS1ne7qz2CwaWm yLiOAtQ0i/yS8x/t6PJkCxv8bic2GqbDA2p0+f7ZO7zskpf6aFJXR5oCMHlJkJQJ skYrNhAsPxPKzQHN6wcL2hCOX/xJvnf4LiTYMQmnlZPlpzE7kiXEGX7kLTXOLt1O -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:50 2024 by rpki-client on console-ams.rpki-client.org