$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/009449c3-730c-4a07-a324-20245f18db93.roa File: 009449c3-730c-4a07-a324-20245f18db93.roa (raw, json) Hash identifier: n/dBl42nF7QESVcuJz1J12kmehdEEYnTV4u+cc72rVk= Subject key identifier: 35:43:5D:10:DD:76:66:1D:32:5B:10:2D:B6:33:66:6E:CA:8D:E5:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4001ECD0787A8DC9350E7CE1CD33D954DACAF4CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/009449c3-730c-4a07-a324-20245f18db93.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:9040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:01:ec:d0:78:7a:8d:c9:35:0e:7c:e1:cd:33:d9:54:da:ca:f4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:37:7c:59:20:56:11:f9:e5:de:88:4c:6e: 4f:ea:82:da:89:d3:ae:61:92:1e:45:d0:3c:71:9a: 00:eb:a0:b4:aa:1e:ae:72:31:e1:fc:d0:03:ff:a4: 34:1a:9c:b9:74:0d:5b:77:df:97:47:81:2d:d4:d4: 29:64:75:77:3b:50:ba:62:af:02:a2:18:ed:7a:9e: 47:fc:5a:8a:19:06:9c:20:ae:f5:ae:8d:0e:0d:67: 77:2c:16:dc:48:d9:14:d8:d2:cf:8c:f7:40:59:1f: 28:c1:2f:02:3f:d7:e6:16:81:fc:ad:a8:1f:b6:2b: e7:73:71:c2:08:3c:36:c7:6f:e2:85:89:19:d7:c4: e5:5f:a3:2a:b4:01:75:74:f4:af:7d:6a:c3:8b:94: a6:93:dc:72:b9:d1:44:90:d0:32:2e:92:40:21:a7: b2:b5:18:95:38:f4:48:bc:e9:2e:1c:25:30:1e:c8: 6c:35:6b:0d:0e:c6:b5:32:b3:29:06:53:88:4f:a9: 6f:41:14:70:d5:70:03:4a:8e:e3:f3:83:d7:a3:75: 4a:0b:af:31:75:8e:13:53:54:ef:07:dc:68:34:c7: 5c:0c:a7:34:21:b2:e8:6e:43:82:0e:8f:7d:9e:1f: 75:8a:a4:be:41:aa:c3:15:b7:fa:13:07:88:9c:aa: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:43:5D:10:DD:76:66:1D:32:5B:10:2D:B6:33:66:6E:CA:8D:E5:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/009449c3-730c-4a07-a324-20245f18db93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:9040::/46 Signature Algorithm: sha256WithRSAEncryption 2c:85:38:b7:1c:67:7d:f5:d5:69:58:f6:b4:ca:dc:69:16:9d: cb:8f:85:18:8a:c3:ac:8d:c2:28:a7:37:ae:5a:35:7b:14:ec: 5f:2c:9c:73:57:ef:44:79:e0:72:d0:c0:1f:24:06:fd:1f:de: d2:7f:4b:e0:e7:8b:6b:1d:d7:28:ac:d0:21:16:34:34:a7:cc: c8:60:55:d5:9d:76:3f:17:13:32:d6:4f:47:82:f4:30:e5:2b: cd:45:aa:7e:ff:a1:14:15:51:05:2c:1c:4f:a5:14:23:de:08: a1:ee:50:36:a9:d0:23:55:06:ec:72:b1:c6:52:55:f9:a8:33: 9a:9f:7d:a4:ad:8a:8e:89:7d:8b:fd:05:01:45:12:1c:2f:09: 47:bd:eb:be:da:d7:ca:a2:e3:5a:67:e5:f9:44:0c:04:a8:f4: eb:cd:3a:6e:3a:5c:d0:86:a1:81:14:58:91:4b:15:c7:fb:7c: c9:7e:28:9a:59:96:f5:7d:a8:61:87:fe:b1:3d:8c:f5:fb:38: 70:9a:76:98:01:3a:d1:9b:24:64:7b:5c:e8:4b:b5:da:a6:55: fc:d6:db:cb:57:14:52:5a:2b:be:88:e2:5a:da:f3:1e:83:2f: 50:fe:62:77:47:b4:6f:3e:69:56:0f:9b:3c:50:35:f2:3a:3e: c5:bc:e8:59 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQAHs0Hh6jck1DnzhzTPZVNrK9MswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYmNhM2Y3YzNlYjAwOTZjYTQ0ODc2 NzMwMDlkMTE2NjkwYzNjNjcxZjAxMTNjN2EwZTU4YzA0N2ZlNjAxYjk1MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwA3fFkgVhH55d6ITG5P6oLaidOu YZIeRdA8cZoA66C0qh6ucjHh/NAD/6Q0Gpy5dA1bd9+XR4Et1NQpZHV3O1C6Yq8C ohjtep5H/FqKGQacIK71ro0ODWd3LBbcSNkU2NLPjPdAWR8owS8CP9fmFoH8ragf tivnc3HCCDw2x2/ihYkZ18TlX6MqtAF1dPSvfWrDi5Smk9xyudFEkNAyLpJAIaey tRiVOPRIvOkuHCUwHshsNWsNDsa1MrMpBlOIT6lvQRRw1XADSo7j84PXo3VKC68x dY4TU1TvB9xoNMdcDKc0IbLobkOCDo99nh91iqS+QarDFbf6EweInKqe2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDVDXRDddmYdMlsQLbYzZm7KjeWVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwOTQ0OWMzLTczMGMtNGEwNy1hMzI0LTIwMjQ1ZjE4ZGI5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+5BAMA0GCSqGSIb3DQEBCwUAA4IBAQAshTi3HGd99dVpWPa0 ytxpFp3Lj4UYisOsjcIopzeuWjV7FOxfLJxzV+9EeeBy0MAfJAb9H97Sf0vg54tr HdcorNAhFjQ0p8zIYFXVnXY/FxMy1k9HgvQw5SvNRap+/6EUFVEFLBxPpRQj3gih 7lA2qdAjVQbscrHGUlX5qDOan32krYqOiX2L/QUBRRIcLwlHveu+2tfKouNaZ+X5 RAwEqPTrzTpuOlzQhqGBFFiRSxXH+3zJfiiaWZb1fahhh/6xPYz1+zhwmnaYATrR myRke1zoS7XaplX81tvLVxRSWiu+iOJa2vMegy9Q/mJ3R7RvPmlWD5s8UDXyOj7F vOhZ -----END CERTIFICATE-----Generated at Wed Feb 5 04:03:20 2025 by rpki-client