$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa File: 192876e6-f42e-4593-9c92-6d3b76ebdac4.roa (raw, json) Hash identifier: rmntBLR4izHGXwFXnGLytgRDwzufy4BRZXY6wUHMtg4= Subject key identifier: 6E:EC:57:E7:10:2E:11:06:7B:AD:3B:B2:77:57:31:9B:7E:80:C1:F2 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 39E9A0DF58ACEB681E69ED075455805BB6DC0CB1 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 103.4.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 00:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e9:a0:df:58:ac:eb:68:1e:69:ed:07:54:55:80:5b:b6:dc:0c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=7fd41b51aafcc24ee26357698b344f6742dfe84578ab3fa7e5eb70a69171b2ff, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:e4:fb:79:5a:68:20:40:52:29:c6:ea:fa: 6a:f5:02:6a:59:25:e2:b0:40:15:f0:ef:a2:cc:53: 5b:9a:c5:57:94:7d:25:23:fb:9c:9e:c2:9f:73:0c: eb:9d:89:20:e3:20:63:dd:e0:64:9d:14:f8:2a:b4: a4:60:d6:36:c5:ce:59:d7:84:33:51:f9:0c:9c:05: fe:d3:6f:ac:82:26:69:cc:4f:22:b5:6c:1a:2f:f2: 00:e9:d3:19:43:2c:82:3f:38:04:0d:7a:80:99:a4: af:2d:d0:fd:1f:cc:4d:81:db:e6:a8:d2:b8:e6:78: 3e:60:76:2b:ff:88:94:3b:c6:6d:b7:a2:b1:c5:94: 33:f7:5a:9b:36:6e:73:55:3e:a2:44:a0:f7:6f:42: cc:aa:f5:82:e2:14:ff:e1:31:d2:08:07:b8:fc:06: 31:74:18:ac:bc:c7:43:7f:76:19:98:11:d0:ee:0b: 6f:6c:2c:97:e2:ad:69:02:11:f6:a9:68:2e:c3:ab: 56:19:ba:74:59:2a:c8:27:07:85:16:12:3d:46:29: 94:f4:bc:d4:f7:e4:9a:02:66:20:01:d5:8f:a5:26: 04:cc:95:fb:6b:82:e6:4c:c8:4c:b2:5e:52:63:71: bc:18:f6:d3:88:06:6e:36:45:5b:22:38:07:a8:5e: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EC:57:E7:10:2E:11:06:7B:AD:3B:B2:77:57:31:9B:7E:80:C1:F2 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/192876e6-f42e-4593-9c92-6d3b76ebdac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.8.0/21 Signature Algorithm: sha256WithRSAEncryption aa:e4:4d:ac:21:ed:5c:33:4a:71:65:61:22:1b:6c:68:8e:9e: 4d:54:01:dc:83:41:ed:f9:24:9a:ac:d5:ac:17:d5:7e:d2:1b: 16:99:65:e2:06:30:3f:97:8f:3f:1d:ad:33:cf:e1:e1:aa:bf: 08:9a:bd:d5:e7:7d:b4:7f:a6:84:b2:62:ba:76:00:f6:81:9b: c1:36:ea:2a:aa:6c:b2:62:69:a4:98:aa:0a:55:6f:76:ca:d7: 19:88:0b:ae:6c:58:06:9c:1c:4d:37:e3:80:d9:60:f6:2b:f0: 5e:a8:89:9b:95:74:b2:80:89:6f:46:d4:da:7e:74:ee:b2:c3: 37:04:7c:ef:5d:6b:c1:05:1f:18:6a:48:2f:51:58:74:6e:8d: ec:73:b6:fd:54:96:9b:25:be:e9:83:73:bb:c2:e7:6d:37:f6: 5c:48:e3:dc:27:a7:c7:80:29:11:51:d1:16:ab:df:b0:5e:ce: 5d:80:87:82:1b:b9:ae:d9:1e:d1:c8:28:4d:81:c4:23:53:30: d7:e9:ae:38:33:88:af:50:47:02:6f:53:a3:7a:ac:32:d7:3f: f5:0d:91:97:75:0d:86:b0:6a:8b:0f:67:f5:c5:e0:19:63:68: c7:a5:31:cb:44:e8:10:96:2e:3c:56:e2:b3:e2:84:a2:2e:d1: 47:16:34:62 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUOemg31is62geae0HVFWAW7bcDLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAN2ZkNDFiNTFhYWZjYzI0ZWUyNjM1 NzY5OGIzNDRmNjc0MmRmZTg0NTc4YWIzZmE3ZTVlYjcwYTY5MTcxYjJmZjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFPk+3laaCBAUinG6vpq9QJqWSXi sEAV8O+izFNbmsVXlH0lI/ucnsKfcwzrnYkg4yBj3eBknRT4KrSkYNY2xc5Z14Qz UfkMnAX+02+sgiZpzE8itWwaL/IA6dMZQyyCPzgEDXqAmaSvLdD9H8xNgdvmqNK4 5ng+YHYr/4iUO8Ztt6KxxZQz91qbNm5zVT6iRKD3b0LMqvWC4hT/4THSCAe4/AYx dBisvMdDf3YZmBHQ7gtvbCyX4q1pAhH2qWguw6tWGbp0WSrIJweFFhI9RimU9LzU 9+SaAmYgAdWPpSYEzJX7a4LmTMhMsl5SY3G8GPbTiAZuNkVbIjgHqF5PnwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFG7sV+cQLhEGe607sndXMZt+gMHyMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzE5Mjg3NmU2LWY0MmUtNDU5My05YzkyLTZkM2I3NmViZGFjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDZwQIMA0GCSqGSIb3DQEBCwUAA4IBAQCq5E2sIe1cM0pxZWEiG2xo jp5NVAHcg0Ht+SSarNWsF9V+0hsWmWXiBjA/l48/Ha0zz+Hhqr8Imr3V5320f6aE smK6dgD2gZvBNuoqqmyyYmmkmKoKVW92ytcZiAuubFgGnBxNN+OA2WD2K/BeqImb lXSygIlvRtTafnTussM3BHzvXWvBBR8YakgvUVh0bo3sc7b9VJabJb7pg3O7wudt N/ZcSOPcJ6fHgCkRUdEWq9+wXs5dgIeCG7mu2R7RyChNgcQjUzDX6a44M4ivUEcC b1Ojeqwy1z/1DZGXdQ2GsGqLD2f1xeAZY2jHpTHLROgQli48VuKz4oSiLtFHFjRi -----END CERTIFICATE-----Generated at Thu May 9 00:30:03 2024 by rpki-client on console-ams.rpki-client.org