$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa File: 1aaf6328-08de-4735-8d71-2cf6b53109d4.roa (raw, json) Hash identifier: qSP7Hdf07TX5VZn5Ihn7aAnC/9LZ7/ihHKkp6MDeAEg= Subject key identifier: B2:E0:D2:FD:AB:87:2B:2B:AE:4B:C9:98:63:C4:98:09:4E:35:D9:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2192FF2A3027D42A68A2B34C166A081454744FB0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:92:ff:2a:30:27:d4:2a:68:a2:b3:4c:16:6a:08:14:54:74:4f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:b3:68:33:0c:c4:3b:15:f2:59:f8:92:3c: 1a:82:6e:2a:5b:0b:b4:32:12:85:da:c1:14:e7:3b: ee:6b:cb:be:b4:2c:9a:29:1c:a2:27:7d:38:25:7c: 7f:5d:90:b7:95:c8:2f:91:05:19:e9:a4:4b:4d:34: d0:8b:2e:12:24:0c:08:b9:f1:b4:1c:5d:5d:e1:3c: 71:fd:46:ab:12:c2:2a:88:dd:cb:dd:fa:b5:34:f9: 0d:1d:9f:5e:d1:69:8c:09:1a:f5:82:04:03:19:cb: 9f:e2:2e:a0:42:4b:b8:c1:a1:19:6f:34:d4:9d:e1: 79:d7:4c:77:0f:74:6e:95:b3:0c:79:b4:57:dd:25: 2a:26:9d:5a:0b:08:a4:d2:e8:f7:43:9d:d0:14:c6: f7:d1:3a:85:e3:63:49:65:f0:b5:98:df:5b:23:f1: d0:b7:8c:ef:24:07:3f:f5:dc:32:19:93:fb:0b:b7: 52:02:a9:f1:11:03:1a:65:5f:78:86:73:ce:1e:89: 8d:50:81:e0:37:45:0d:a0:9b:4c:16:6e:a1:13:db: 25:97:b7:4f:f2:7b:6c:a2:73:85:d9:ab:7f:f6:ec: 8e:b0:79:84:19:e6:72:cf:94:04:0e:26:d2:9a:67: 1a:51:2d:1f:c0:44:49:af:09:09:a3:7d:9d:bd:a9: e5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E0:D2:FD:AB:87:2B:2B:AE:4B:C9:98:63:C4:98:09:4E:35:D9:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1aaf6328-08de-4735-8d71-2cf6b53109d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2080::/48 Signature Algorithm: sha256WithRSAEncryption b9:30:5b:94:a6:93:0c:01:9e:9f:6b:38:68:72:85:a2:d9:69: 63:80:51:65:eb:a1:2b:ee:d1:44:3f:71:88:55:6d:ec:54:d8: 67:a6:e8:34:c6:6c:3e:3f:50:1f:e5:80:84:d4:17:5d:2b:ac: 77:5b:63:a4:c3:bb:dd:db:62:0b:66:7f:fb:ee:22:ee:86:24: da:b0:da:0d:3f:63:d2:3b:a6:30:b7:a8:3f:8a:40:5c:16:07: f0:a6:d4:27:cd:32:95:f2:47:49:19:a2:ae:80:c0:12:54:e7: 4e:b3:d0:4f:06:dd:84:94:a6:96:4c:07:2c:80:ac:10:a9:9e: dc:e7:7f:ba:d8:f1:06:35:62:45:f0:ed:34:cd:d8:17:5c:fd: c9:6f:b5:70:53:8c:77:2b:de:b6:36:90:94:62:41:4a:df:d1: 2a:37:eb:9c:f4:d3:f0:2e:c7:de:66:cd:b9:05:02:10:02:18: 1f:32:eb:6b:c6:72:ed:65:e7:95:7f:18:e7:47:0d:ce:d6:df: c3:6c:9c:dc:70:db:d3:22:88:2c:7d:89:34:02:2a:d2:40:d0: 10:2f:47:92:1b:d9:d2:11:1d:0a:2c:08:e5:4b:07:39:3a:aa: 86:1e:e1:6f:24:ea:9f:04:ba:76:d7:58:09:22:05:0d:7a:2c: 36:4f:61:47 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIZL/KjAn1CpoorNMFmoIFFR0T7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMmE0MDU1NjJkM2MwYzU0Mzc2NDc2 OTg4YjM0ZjYzZjBmNTkxMTk2OGRkN2FkYmI1OGY0NmUyOGFhZDdkZjgxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+CzaDMMxDsV8ln4kjwagm4qWwu0 MhKF2sEU5zvua8u+tCyaKRyiJ304JXx/XZC3lcgvkQUZ6aRLTTTQiy4SJAwIufG0 HF1d4Txx/UarEsIqiN3L3fq1NPkNHZ9e0WmMCRr1ggQDGcuf4i6gQku4waEZbzTU neF510x3D3RulbMMebRX3SUqJp1aCwik0uj3Q53QFMb30TqF42NJZfC1mN9bI/HQ t4zvJAc/9dwyGZP7C7dSAqnxEQMaZV94hnPOHomNUIHgN0UNoJtMFm6hE9sll7dP 8ntsonOF2at/9uyOsHmEGeZyz5QEDibSmmcaUS0fwERJrwkJo32dvanlQQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLLg0v2rhysrrkvJmGPEmAlONdlUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFhYWY2MzI4LTA4ZGUtNDczNS04ZDcxLTJjZjZiNTMxMDlkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACCAMA0GCSqGSIb3DQEBCwUAA4IBAQC5MFuUppMMAZ6fazho coWi2WljgFFl66Er7tFEP3GIVW3sVNhnpug0xmw+P1Af5YCE1BddK6x3W2Okw7vd 22ILZn/77iLuhiTasNoNP2PSO6Ywt6g/ikBcFgfwptQnzTKV8kdJGaKugMASVOdO s9BPBt2ElKaWTAcsgKwQqZ7c53+62PEGNWJF8O00zdgXXP3Jb7VwU4x3K962NpCU YkFK39EqN+uc9NPwLsfeZs25BQIQAhgfMutrxnLtZeeVfxjnRw3O1t/DbJzccNvT IogsfYk0AirSQNAQL0eSG9nSER0KLAjlSwc5OqqGHuFvJOqfBLp211gJIgUNeiw2 T2FH -----END CERTIFICATE-----Generated at Wed Feb 5 04:00:42 2025 by rpki-client