$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa File: 1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa (raw, json) Hash identifier: UtCH1zAgf4LJWnkqvfCcsmS6ISZ+J2ToCA38QhDZCps= Subject key identifier: C7:F3:6C:BA:AA:A1:89:74:29:68:4F:A1:C7:E0:D3:5D:12:02:7D:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A9A374AF9F4BA60155C7B067C8D244721C9156F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9a:37:4a:f9:f4:ba:60:15:5c:7b:06:7c:8d:24:47:21:c9:15:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:26:95:69:6e:42:6d:05:b2:b4:de:2b:58: c7:d5:18:55:89:13:5b:98:bb:6d:e8:e8:6d:4f:75: 56:3d:55:0b:d4:d9:e6:7f:84:05:3c:0e:45:54:15: 27:b8:40:61:1a:94:89:cf:6c:99:40:2f:a2:fd:66: af:d6:97:99:9a:3c:a9:b7:87:a8:70:1a:54:0c:ef: 30:c0:83:99:35:7d:7a:c7:48:67:76:4b:26:d7:a5: f0:b7:ee:42:76:e9:fe:ee:e6:40:f4:38:fb:0c:71: c7:91:4c:0e:42:ff:34:5a:de:c0:6a:40:c4:bd:02: 82:75:d0:21:d2:07:8f:dc:e5:39:cc:96:e0:7c:60: 74:e3:e7:ee:00:ad:e2:45:1c:85:c5:61:90:a2:91: 98:1a:14:23:69:bb:81:a8:f3:ee:5d:65:0a:64:87: 1f:90:af:cb:40:fd:59:cd:3e:6b:93:46:ac:9e:e7: 18:31:f2:7e:c5:c8:40:d1:33:45:33:ac:b7:67:32: 89:3b:ab:8d:01:ea:4f:5a:fd:a5:4e:65:0e:3c:ba: b1:16:b2:01:87:97:82:d7:bb:e6:a0:2b:27:dd:cb: 03:96:db:46:d5:2c:cc:ea:7d:4f:3f:45:0c:aa:25: 97:f0:8c:70:d8:15:e1:e4:92:1c:55:1d:93:c0:b2: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F3:6C:BA:AA:A1:89:74:29:68:4F:A1:C7:E0:D3:5D:12:02:7D:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c880::/48 Signature Algorithm: sha256WithRSAEncryption 0f:8f:9a:da:88:a2:01:d7:92:65:99:0f:c8:1a:ce:7f:79:34: 5a:f4:b8:15:6e:5c:7c:d2:da:25:8f:91:4a:ad:2c:ad:21:0f: ef:da:a9:19:69:e3:b2:c3:b9:6a:bb:c6:9c:c1:f0:15:2b:4a: 1d:1f:11:55:9c:e8:b2:4e:35:e8:11:d3:67:2f:dc:9b:ef:43: 7c:36:9a:bc:cc:d3:55:18:84:d1:ca:2b:15:57:0a:ba:2c:c6: db:13:38:ec:49:c5:25:3b:15:bc:25:b3:c9:ab:b8:1c:62:d9: d4:aa:1d:d1:5d:bf:ab:e6:51:38:45:64:d6:75:b1:25:b4:3b: 47:d9:4b:57:45:26:f0:7f:95:58:27:a9:e2:3b:a7:8e:e5:3d: 39:05:85:e0:8b:80:e6:48:48:43:f0:14:3c:51:37:78:a2:e2: 7e:42:ee:53:7f:f8:47:af:a3:45:de:c3:57:5d:03:86:b9:bf: 89:53:e4:51:26:09:35:26:b2:13:f1:8a:a5:9b:34:a9:b4:6f: 4a:66:80:ad:d4:39:28:21:be:93:82:4b:94:c0:01:ee:c8:eb: 04:b6:92:2f:4f:4c:02:bd:e1:55:34:45:7f:4b:bd:34:96:c9: 6f:62:10:c4:87:27:d6:a4:f9:ff:8e:db:27:eb:8e:4c:b4:40: 3a:43:2e:6b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUepo3Svn0umAVXHsGfI0kRyHJFW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYjBlZmZmNjNlYjcxM2EzNThlMzI0 YjQyNDllMGJiYTEzOWIyYTcyY2Q2ODkzNjNkMjM4ODI0M2RmYTc1NDA1NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfYmlWluQm0FsrTeK1jH1RhViRNb mLtt6OhtT3VWPVUL1Nnmf4QFPA5FVBUnuEBhGpSJz2yZQC+i/Wav1peZmjypt4eo cBpUDO8wwIOZNX16x0hndksm16Xwt+5Cdun+7uZA9Dj7DHHHkUwOQv80Wt7AakDE vQKCddAh0geP3OU5zJbgfGB04+fuAK3iRRyFxWGQopGYGhQjabuBqPPuXWUKZIcf kK/LQP1ZzT5rk0asnucYMfJ+xchA0TNFM6y3ZzKJO6uNAepPWv2lTmUOPLqxFrIB h5eC17vmoCsn3csDlttG1SzM6n1PP0UMqiWX8Ixw2BXh5JIcVR2TwLKrXQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMfzbLqqoYl0KWhPocfg010SAn1oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjYTUyZDJmLTFhNzMtNGVhMS05YmI1LTZkOTgzMzE5MzA1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMiAMA0GCSqGSIb3DQEBCwUAA4IBAQAPj5raiKIB15JlmQ/I Gs5/eTRa9LgVblx80tolj5FKrSytIQ/v2qkZaeOyw7lqu8acwfAVK0odHxFVnOiy TjXoEdNnL9yb70N8Npq8zNNVGITRyisVVwq6LMbbEzjsScUlOxW8JbPJq7gcYtnU qh3RXb+r5lE4RWTWdbEltDtH2UtXRSbwf5VYJ6niO6eO5T05BYXgi4DmSEhD8BQ8 UTd4ouJ+Qu5Tf/hHr6NF3sNXXQOGub+JU+RRJgk1JrIT8YqlmzSptG9KZoCt1Dko Ib6TgkuUwAHuyOsEtpIvT0wCveFVNEV/S700lslvYhDEhyfWpPn/jtsn645MtEA6 Qy5r -----END CERTIFICATE-----Generated at Wed Feb 5 04:04:11 2025 by rpki-client