$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/abbc8be4-07db-4e6d-8e79-d43813f48041.roa File: abbc8be4-07db-4e6d-8e79-d43813f48041.roa (raw, json) Hash identifier: oygcbTHf5ADQTJXgreoLGo8ZG0qtvEmQde1QQmSfZu0= Subject key identifier: 17:74:7B:0D:4C:C2:C1:12:C5:10:D8:B7:70:90:84:48:61:48:18:6F Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 34CC6B25916D53238765484E8B14775DE0B3BE92 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/abbc8be4-07db-4e6d-8e79-d43813f48041.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 103.4.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cc:6b:25:91:6d:53:23:87:65:48:4e:8b:14:77:5d:e0:b3:be:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=3dcbb1d4ca9d465678827ebb517db130abcedabf99c98de34f449fc9e21e69b0, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:f8:1d:34:44:49:83:b9:fa:99:1c:70:38: fa:80:1f:36:28:22:d2:53:68:cd:3e:e1:66:88:b0: 81:54:d0:b7:07:f4:5d:c3:40:9b:3a:af:a2:18:da: e9:8f:ca:27:99:9e:4a:b9:1a:9f:a1:0c:3f:87:ad: 7e:46:7c:ed:4a:0e:95:28:11:7b:4f:84:5f:71:1d: 91:02:b2:4a:90:ca:c7:8f:97:ea:f2:d1:98:8f:a7: ac:f5:75:6b:86:20:6e:7c:82:de:cc:79:db:7d:98: a3:93:b1:0c:da:70:40:cb:07:a9:a8:14:2a:c7:53: c5:75:9a:aa:6c:ef:cf:12:75:50:0e:d2:65:a8:f3: 00:60:29:cf:60:28:c2:d8:a5:ef:fd:6c:c2:74:d8: 60:2d:1d:b5:5f:2e:03:e9:21:63:84:58:f3:81:cc: 12:c8:ab:2b:09:40:be:71:f1:2f:29:ae:01:43:9a: 04:e8:79:6a:36:c6:b4:9f:d9:b9:48:ec:48:54:ce: 47:5f:b9:d0:1a:c0:c5:6e:6e:d0:ab:1b:3f:52:e3: 39:1e:4f:20:9a:83:da:b2:c6:7a:bb:11:28:22:e3: 5c:3d:58:08:1a:58:c4:b8:e8:86:0d:69:27:55:be: 74:33:76:0b:6d:33:b7:20:15:96:2e:e7:21:f1:88: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:74:7B:0D:4C:C2:C1:12:C5:10:D8:B7:70:90:84:48:61:48:18:6F X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/abbc8be4-07db-4e6d-8e79-d43813f48041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.8.0/21 Signature Algorithm: sha256WithRSAEncryption a9:2d:13:2e:fb:3d:13:78:4b:12:1d:9f:f9:0d:7c:e6:d4:55: 73:0d:ec:3c:4b:66:bb:ac:4e:18:de:b8:ec:7e:fa:0c:c0:06: 60:51:30:78:05:1d:fe:30:ff:7e:fe:63:a4:0f:29:fd:d7:f9: 44:75:3b:9f:7d:4f:99:91:0c:09:25:bd:1b:99:cd:4b:d8:b9: c6:c3:d2:18:d1:81:77:af:d5:b9:20:65:c8:06:b2:6f:d7:84: eb:72:40:a3:c9:de:c7:29:99:5d:98:9c:a4:a8:b6:81:f8:42: ad:e0:e5:dc:3b:d1:a6:7e:14:7f:52:be:04:0c:b4:e4:70:2a: db:ac:90:55:4b:bd:ab:ab:e8:6c:34:92:a4:a1:23:87:0f:71: 7f:87:c2:17:f6:4a:f4:40:9e:33:5a:e3:22:05:a6:f0:da:39: 13:f6:a0:57:80:70:f9:3c:53:73:0c:0d:76:80:2f:0f:41:d2: cc:8c:c4:de:3e:66:09:50:d8:a3:f1:92:25:3b:eb:64:d6:46: b4:38:e9:af:b0:3d:42:2e:df:6b:08:0c:64:83:d2:2e:cd:ca: 81:e7:f9:f4:80:41:ff:27:41:48:19:72:b5:4c:a0:06:c5:49: c3:3a:aa:8d:30:5f:0a:87:c5:48:e0:9c:44:ed:ae:64:74:71: 9c:1a:2b:9a -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUNMxrJZFtUyOHZUhOixR3XeCzvpIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAM2RjYmIxZDRjYTlkNDY1Njc4ODI3 ZWJiNTE3ZGIxMzBhYmNlZGFiZjk5Yzk4ZGUzNGY0NDlmYzllMjFlNjliMDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iL4HTRESYO5+pkccDj6gB82KCLS U2jNPuFmiLCBVNC3B/Rdw0CbOq+iGNrpj8onmZ5KuRqfoQw/h61+RnztSg6VKBF7 T4RfcR2RArJKkMrHj5fq8tGYj6es9XVrhiBufILezHnbfZijk7EM2nBAywepqBQq x1PFdZqqbO/PEnVQDtJlqPMAYCnPYCjC2KXv/WzCdNhgLR21Xy4D6SFjhFjzgcwS yKsrCUC+cfEvKa4BQ5oE6HlqNsa0n9m5SOxIVM5HX7nQGsDFbm7Qqxs/UuM5Hk8g moPassZ6uxEoIuNcPVgIGljEuOiGDWknVb50M3YLbTO3IBWWLuch8Yiw/wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBd0ew1MwsESxRDYt3CQhEhhSBhvMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2FiYmM4YmU0LTA3ZGItNGU2ZC04ZTc5LWQ0MzgxM2Y0ODA0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDZwQIMA0GCSqGSIb3DQEBCwUAA4IBAQCpLRMu+z0TeEsSHZ/5DXzm 1FVzDew8S2a7rE4Y3rjsfvoMwAZgUTB4BR3+MP9+/mOkDyn91/lEdTuffU+ZkQwJ Jb0bmc1L2LnGw9IY0YF3r9W5IGXIBrJv14TrckCjyd7HKZldmJykqLaB+EKt4OXc O9GmfhR/Ur4EDLTkcCrbrJBVS72rq+hsNJKkoSOHD3F/h8IX9kr0QJ4zWuMiBabw 2jkT9qBXgHD5PFNzDA12gC8PQdLMjMTePmYJUNij8ZIlO+tk1ka0OOmvsD1CLt9r CAxkg9IuzcqB5/n0gEH/J0FIGXK1TKAGxUnDOqqNMF8Kh8VI4JxE7a5kdHGcGiua -----END CERTIFICATE-----Generated at Fri Apr 26 00:36:12 2024 by rpki-client on console-ams.rpki-client.org